CVE-2021-1682

CVE-2021-1682 is a Windows Kernel Elevation of Privilege Vulnerability. Multiple sources (OSV, NVD) describe it as a local, high-severity flaw in the Windows kernel that can grant elevated privileges. CVSSv3.1 vectors indicate LOCAL access, LOW privileges required, no user interaction, with Confi...

CVE-2021-34462

Technical details about CVE-2021-34462 are not provided in the connected documents. The supplied items only state a Windows AppX Deployment Extensions elevation of privilege; no affected products/versions or fixes are disclosed here. Monitor for updates.

CVE-2021-40465

CVE-2021-40465, Windows Text Shaping Remote Code Execution Vulnerability, is documented with CVSS 3.1 base score 7.8 (HIGH) and CVSS2 base 6.8 (MEDIUM) by NVD/Microsoft, indicating LOCAL exploitability with LOW attack complexity and user interaction required. The available sources in the provided...

CVE-2022-34702

Technical details about CVE-2022-34702 are not publicly provided in the connected documents. No affected products, vectors, or remediation are stated beyond the initial description. Monitor for updates and additional authoritative disclosures.

CVE-2022-38031

CVE-2022-38031 concerns Microsoft WDAC OLE DB provider for SQL Server and is described as a Remote Code Execution vulnerability. The connected documents confirm the affected component as the WDAC OLE DB provider for SQL and show that Microsoft issued updates (e.g., KB5018419 and related security ...

CVE-2023-21802

Technical details (affected product/component/versions/root cause and fixes) for CVE-2023-21802 are not publicly available in the provided documents. Monitor for updates from official CVE/NVD/KB sources.

CVE-2023-24858

CVE-2023-24858 concerns an information-disclosure vulnerability in Microsoft’s PostScript and PCL6 Class Printer Driver. The issue, affecting the printer driver component, exposes confidential data via the affected driver surfaces. CVSS metrics from NVD indicate network vector, high confidentiali...

CVE-2023-36882

CVE-2023-36882 concerns Microsoft WDAC OLE DB provider for SQL Server, enabling Remote Code Execution. The NVD details show a network-based exploitable flaw with CVSS v3.1: AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, score 8.8 (HIGH). Root cause and affected versions are not fully enumerated in the prov...

CVE-2023-38184

CVE-2023-38184 is a Windows LDAP Remote Code Execution vulnerability. The NVD entry lists a CVSS v3.1 base score of 7.5 (High) with Network attack vector, high attack complexity, low privileges required, no user interaction, and impacts to confidentiality, integrity, and availability. The provide...

CVE-2025-21211

Technical details about CVE-2025-21211 are not publicly provided in the supplied connected documents. Monitor for updates from official advisories; no confirmed affected products, vectors, or fixes are described here.

CVE-2025-24068

CVE-2025-24068 describes a buffer over-read in the Windows Storage Management Provider that can lead to local information disclosure for an authenticated user. The issue affects Windows Storage Management Provider components and is rated with a local attack vector and a confidentiality impact. Co...

CVE-2025-27482

CVE-2025-27482 is a remote code execution vulnerability in Windows Remote Desktop Gateway Service caused by sensitive data being stored in memory that is not properly locked. The issue enables code execution over the network and is rated high-severity (CVSS 3.1: 8.1). Microsoft’s Patch Tuesday up...

CVE-2026-57089

Summary : CVE-2026-57089 affects the Windows SMB Server Network Transport Driver (srvnet.sys). The issue is a use-after-free memory corruption bug that can be triggered by an unauthenticated attacker over the network to achieve remote code execution. The vulnerability is listed with high to criti...

CVE-2026-62795

CVE-2026-62795 is a Windows LDAP (Lightweight Directory Access Protocol) use-after-free vulnerability that allows a remote attacker to execute code over the network. The issue is described as a remote code execution in Windows LDAP due to a use-after-free condition, enabling an unauthenticated, n...

CVE-2018-8477

CVE-2018-8477 is a Windows kernel information disclosure vulnerability caused by improper handling of objects in memory. Affected products include multiple Windows client and server editions (e.g., Windows 7, Windows 8.1, Windows 10, Windows Server 2008/2008 R2, 2012/2012 R2, 2016, 2019). The vul...

CVE-2018-8482

CVE-2018-8482 is an information-disclosure vulnerability in Windows Media Player where file information can be improperly disclosed. Affected products include Windows 7, Windows 8.1, Windows 10 and corresponding server editions listed in the description. The root cause is an information disclosur...

CVE-2018-8561

CVE-2018-8561 is described in connected sources as a local-elevation-of-privilege vulnerability in Microsoft DirectX. The root cause, per the documents, is DirectX (DXGKRNL or related in-memory objects) not handling memory objects correctly, enabling a non-privileged attacker to execute code with...

CVE-2019-0552

CVE-2019-0552 is a Windows privilege-escalation vulnerability in the COM Desktop Broker component. The issue is triggered locally and allows an attacker with limited privileges to run code with elevated privileges within affected Windows versions (including Windows 10/Server 2016/2019, Windows 8....

CVE-2019-0569

CVE-2019-0569 is described in connected sources as a Windows vulnerability tied to RPC-related privilege escalation within the StorSvc/AppX deployment components, with exploitation tied to Windows RPC service interfaces and calls such as SetNamedSecurityInfo. The articles enumerate affected DLLs ...

CVE-2019-0575

CVE-2019-0575 is a remote code execution vulnerability in the Windows Jet Database Engine caused by improper handling of objects in memory. The issue can be triggered when a user opens a specially crafted file, enabling an attacker to run arbitrary code on the victim’s machine. The vulnerability ...

CVE-2019-0577

CVE-2019-0577 is a Jet Database Engine remote code execution vulnerability. The Windows Jet Database Engine improperly handles objects in memory, allowing an attacker who lures a user to open a specially crafted file to execute arbitrary code. Affected Windows versions include Windows 7; Windows ...

CVE-2019-0792

Technical details for CVE-2019-0792 are not publicly available in the provided documents. Monitor for updates from official advisories.

CVE-2020-1417

CVE-2020-1417 is a Windows kernel elevation-of-privilege vulnerability. The issue arises when the Windows kernel fails to handle objects in memory, allowing an attacker who can log on locally to run arbitrary code in kernel mode, potentially installing programs, accessing and altering data, or cr...

CVE-2020-1561

CVE-2020-1561 is a remote code execution in Microsoft Graphics Components caused by how objects are handled in memory. Trigger requires opening a specially crafted file. A security update fixes the memory handling to address the vulnerability. Connected sources note CVE-2020-1561 among Microsoft ...

CVE-2021-26433

Technical details (affected product/version, root cause, impact, or exploit information) are not provided in the connected documents for CVE-2021-26433. Monitor for updates.

CVE-2021-34508

Technical details for CVE-2021-34508 (affected component, root cause, remediation specifics) are not provided in the connected documents. Monitor official advisories (MSRC/NVD) for updates.

CVE-2023-21546

CVE-2023-21546 is a Windows Layer 2 Tunneling Protocol (L2TP) remote code execution vulnerability. The entry provides a network-exposed, high-severity issue (CVSSv3.1: 8.1, AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H). The initial description and connected documents identify the affected vector as networ...

CVE-2023-21678

Technical details about CVE-2023-21678 are not publicly provided in the supplied documents. Please monitor for updates from Microsoft and related advisories.

CVE-2023-21813

Technical details on CVE-2023-21813 are not provided in the furnished documents; no affected products, exploit info, or fixes are described here. Monitor for updates from official advisories.

CVE-2023-23385

Technical details for CVE-2023-23385 are not publicly available in the provided documents. Monitor for updates from official sources.

CVE-2023-23422

CVE-2023-23422 is a Windows kernel elevation-of-privilege vulnerability described in the Registry hive memory‑corruption research. The exposed flaw is a local, kernel‑level issue where memory corruption in a registry hive (notably HKCU) can be triggered to craft an out‑of‑bounds cell index that r...

CVE-2023-24861

Technical details about CVE-2023-24861 (Windows Graphics Component Elevation of Privilege Vulnerability) are not publicly available in the provided documents; no affected versions, root cause, or remediation are specified here. Monitor for official disclosures and updates.

CVE-2023-28227

CVE-2023-28227 concerns the Windows Bluetooth Driver and is described as a Remote Code Execution vulnerability. The NVD entry lists a CVSS v3.1 base score of 7.5 (High) with vector AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H, indicating an adjacent attacker with no user interaction could achieve compromi...

CVE-2023-35365

CVE-2023-35365 affects Windows RRAS with remote code execution potential. Exploitation, per the linked discussion, requires an attacker to send crafted packets to an affected RRAS server. The RRAS feature is not installed or enabled by default on Windows systems, which reduces exposure for users ...

CVE-2023-35367

Technical details for CVE-2023-35367 are not publicly provided in the supplied documents. No specific affected products, versions, root cause, remediation, or exploit information is available here. Monitor official sources for updates.

CVE-2024-26221

Technical details about CVE-2024-26221 are not publicly provided in the supplied documents. Monitor for updates from official advisories; current sources list the vulnerability as Windows DNS Server RCE, but no affected version/patch details are included here.

CVE-2024-26241

CVE-2024-26241 is a Win32k elevation-of-privilege vulnerability in Windows. The OpenVAS entries list Win32K as the affected component with local exploitation, requiring low privileges and no user interaction, and causing high confidentiality, integrity, and availability impact. The CVSSv3.1 base ...

CVE-2025-21273

Technical details are not publicly provided in the supplied documents. The CVE-2025-21273 entry lacks explicit affected product versions, root cause, or remediation specifics in this set; monitor for updates from Microsoft/MSRC.

CVE-2018-8415

CVE-2018-8415 is a PowerShell tampering vulnerability that could let an attacker execute unlogged code locally on affected Windows platforms (Windows 7/10, Windows Server 2012/2016/2019, and PowerShell Core 6.x). Root cause: tampering in PowerShell allowing unlogged code execution. CVSSv3 base sc...

CVE-2019-0536

Technical details for CVE-2019-0536 are not provided in the connected documents. No product/version/impact data is available here. Monitor for updates.

CVE-2019-0579

Technical details for CVE-2019-0579 (affected software, root cause, impact, remediation) are not publicly available in the provided documents. Monitor for updates.

CVE-2019-0791

CVE-2019-0791 is a remote code execution vulnerability in the Microsoft XML Core Services (MSXML) parser when it processes user input. The issue enables network-based exploitation with user interaction required, and is rated HIGH (CVSS v3.0: 8.8). The initial document does not specify a fixed pat...

CVE-2019-0842

Technical details about CVE-2019-0842 are not publicly provided in the connected documents you supplied. No affected products/versions or fixes are specified here. Monitor for updates.

CVE-2019-0848

CVE-2019-0848 is an information disclosure vulnerability in the Windows win32k component where kernel information is improperly provided. The issue is distinct from CVE-2019-0814. Public data indicates local access and potential partial confidentiality impact, with CVSS metrics showing a low to m...

CVE-2019-0904

The CVE-2019-0904 issue is a Windows Jet Database Engine remote code execution vulnerability caused by improper handling of in-memory objects. Attackers could entice users to open a specially crafted file to run arbitrary code on affected systems. Affected software/hardware: Windows Jet Database ...

CVE-2019-1274

CVE-2019-1274 is a Windows kernel information-disclosure vulnerability described as failing to properly initialize a memory address. The connected Red Hat entry mirrors the description; NVD/NIST details also reference this Windows kernel information-disclosure issue. The vulnerability impact is i...

CVE-2019-1282

CVE-2019-1282 affects the Windows Common Log File System (CLFS) Driver. It is a information-disclosure vulnerability caused by improper handling of sandbox checks in CLFS, enabling local attackers to read data outside its intended limits after logging on and running a crafted application. Exploit...

CVE-2020-0608

CVE-2020-0608 is an information disclosure vulnerability affecting the Win32k component where kernel information is improperly disclosed. The root cause is in win32k exposing kernel data, leading to potential information disclosure with local access and no user interaction required. The CVSS metr...

CVE-2020-1518

Technical details about CVE-2020-1518 (affected component, root cause, impact, exploitability or patch specifics) are not publicly provided in the connected documents; monitor for updates from official sources for concrete information.

CVE-2020-17140

CVE-2020-17140 corresponds to a Windows SMB information-disclosure vulnerability. Public documents (NVD entry and OpenVAS feeds) describe network-exposed impact with confidentiality and, in some sources, availability concerns, while the vulnerability’s root cause is not detailed beyond “SMB infor...