4929 matches found
CVE-2019-0732
CVE-2019-0732 affects Windows by bypassing Device Guard due to improper handling of calls to the LUAFV driver (luafv.sys). The issue enables local, low-privilege attackers to achieve partial confidentiality, integrity, and availability impacts as described in the CVE context. Exploitation is docu...
CVE-2020-17140
CVE-2020-17140 corresponds to a Windows SMB information-disclosure vulnerability. Public documents (NVD entry and OpenVAS feeds) describe network-exposed impact with confidentiality and, in some sources, availability concerns, while the vulnerability’s root cause is not detailed beyond “SMB infor...
CVE-2021-1645
CVE-2021-1645 is a Windows DP API cryptography flaw affecting Windows Containers that can lead to information disclosure. Affected component: Windows Containers use of DP API; root cause described as a cryptographic flaw in the Windows DP API within container contexts. Impact is confidentiality b...
CVE-2021-31182
CVE-2021-31182 concerns Microsoft Bluetooth Driver Spoofing vulnerability. CVSS‑3.1 score 7.1 (AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N). Affected component: Microsoft Bluetooth Driver. Root cause/impact: spoofing could compromise confidentiality (low) and integrity (high) with no availability impact ...
CVE-2021-34516
Technical details about CVE-2021-34516 are not publicly available in the provided documents. Monitor for official disclosures or advisories for affected products, impact, and remediation.
CVE-2022-21888
Technical details about CVE-2022-21888 are not publicly provided in the supplied documents. No affected products, versions, or fixes are specified. Monitor for updates from official sources.
CVE-2022-21963
CVE-2022-21963 is described as a Windows Resilient File System (ReFS) Remote Code Execution vulnerability. The available data shows a high-impact, local/physical-attack scenario with no user interaction, but no concrete remediation details or version-specific affected products are provided beyond...
CVE-2022-21992
Technical details about CVE-2022-21992 are not provided in the supplied documents. Connected records reference KEV listings and related Windows KB updates, but this set does not specify affected products, root cause, impact, or remediation for this CVE. Monitor for official disclosures or vendor ...
CVE-2022-30205
Technical details (affected product/version, root cause, exploitability, and remediation) for CVE-2022-30205 are not provided in the connected documents. Only high-level references to the Windows Group Policy elevation vulnerability are present. Monitor for updates.
CVE-2022-35744
Technical details (affected product, root cause, impact, or fixes) are not provided in the supplied documents. Monitor for updates from official CVE sources; no specifics about exploitation, vectors, or mitigations are included here.
CVE-2022-35803
CVE-2022-35803 affects the Windows Common Log File System Driver. The vulnerability is a local elevation-of-privilege in CLFS that could allow an attacker with low privileges to gain SYSTEM-level access, with impact to confidentiality, integrity, and availability rated high. The entry notes a CVS...
CVE-2023-28228
CVE-2023-28228 is documented as a Windows spoofing vulnerability. Based on the CVE entry, its CVSS v3.1 base score is 5.5 (Medium) with a Local attack vector, Low attack complexity, No privileges required, User interaction required, and Impact mainly on integrity (High) with no confidentiality/av...
CVE-2024-26227
CVE-2024-26227 is a Windows DNS Server remote code execution vulnerability. The vulnerability affects Microsoft Windows DNS Server and is described in multiple sources as a remote code execution risk with network attack vector and high impact. Connected documents indicate that public exploits exi...
CVE-2025-21310
Technical details for CVE-2025-21310 are not publicly available in the provided documents. Monitor for updates from Microsoft and NVD.
CVE-2026-65789
CVE-2026-65789 corresponds to a Windows DNS Server use-after-free vulnerability that enables remote code execution over a network. Based on the connected documents, the vulnerability is described as a use-after-free in Windows DNS which can allow an unauthorized attacker to execute code remotely....
CVE-2020-16940
The CVE-2020-16940 issue is an elevation of privilege in Windows computing environments caused by the Windows User Profile Service (ProfSvc) mishandling junction points. The vulnerability allows an attacker who can log on to exploit a specially crafted application to delete files or folders with ...
CVE-2021-24078
CVE-2021-24078 is a Windows DNS Server remote code execution vulnerability affecting Windows Server DNS components. Public sources describe an unauthenticated, network-based RCE when a DNS server processes crafted queries, with CVSS v3.1 score of 9.8 (CRITICAL). Public patches exist as part of Mi...
CVE-2021-33751
CVE-2021-33751 is a Storage Spaces Controller Elevation of Privilege vulnerability affecting Windows Storage Spaces Controller. The CVSS indicates local, low attack complexity, with high impact to confidentiality, integrity, and availability. Affected component is Storage Spaces Controller; root ...
CVE-2021-33754
CNVD-2021-76463 (Microsoft Windows DNS Server RCE vulnerability) ties CVE-2021-33754 to Windows Server DNS Server. The connected CNVD entry confirms a remote code execution issue in the DNS Server component of Windows Server, but provides no vendor/product version specifics, root-cause details, o...
CVE-2021-36932
CVE-2021-36932 affects Windows Services for NFS ONCRPC XDR Driver. The available information indicates an information-disclosure vulnerability with network access (CVSSv3.1: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N; base 7.5). The description confirms the issue but does not provide detailed root-cause...
CVE-2022-21897
Technical details about CVE-2022-21897 are not publicly provided in the supplied documents. No specific affected products/versions or fixes are listed here. Monitor for updates.
CVE-2022-22710
CVE-2022-22710 corresponds to a denial-of-service in the Windows Common Log File System Driver. The provided documents confirm the affected component (CLFS Driver) and give CVSS details (AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) with local access required and high availability impact, but do not speci...
CVE-2022-34719
Technical details about CVE-2022-34719 are not publicly available in the provided connected documents. Monitor for updates from official sources to learn affected products, root cause, and fixes.
CVE-2022-41047
CVE-2022-41047 relates to a Microsoft ODBC Driver issue affecting the Microsoft ODBC SQL Server Driver (sqlsrv32.dll) used for ODBC connections. OpenVAS-derived entries reference post-update behavior where apps using the ODBC driver may fail to connect or encounter protocol errors in TDS streams,...
CVE-2023-23409
CVE-2023-23409 corresponds to a CSRSS Information Disclosure vulnerability. The available data indicate a local attack vector with low attack complexity and low privileges required, yielding a high confidentiality impact (CVSS 3.1: AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N). The description notes CSRSS...
CVE-2023-24872
CVE-2023-24872 affects the Microsoft PostScript and PCL6 Class Printer Driver. The entry documents a Remote Code Execution vulnerability with high severity (CVSS 3.1: AV=N/AC=L/PR=L/UI=N/S=U/C=H/I=H/A=H). Concrete technical details (affected product/version, root cause, exploit status, or fixes) ...
CVE-2023-24911
The CNVD-2023-30862 entry aligns with CVE-2023-24911, describing an information-disclosure vulnerability in Microsoft PostScript and PCL6 Class Printer Driver. It notes an information disclosure exists and involves these Microsoft printer drivers, but provides no version/impact details or remedia...
CVE-2023-28224
CVE-2023-28224 is described as a Windows PPPoE Remote Code Execution vulnerability. The entry provides a CVSS 3.1 score of 7.1 (HIGH) with attack vector Adjacent, high complexity, no privileges required, user interaction required, and impacts to confidentiality, integrity, and availability. Explo...
CVE-2023-28273
CVE-2023-28273 is a Windows Clip Service Elevation of Privilege vulnerability. The initial data lists a local attack vector with high impact and exploitation conditions: local access, high attack complexity, low privileges required, no user interaction, and impact to confidentiality, integrity, a...
CVE-2023-29359
Technical details about CVE-2023-29359 are not provided in the connected documents. The entries identify a GDI Elevation of Privilege vulnerability but do not specify affected products/versions, root cause, impact specifics, or remediation.
CVE-2025-21329
CVE-2025-21329 is a MapUrlToZone Security Feature Bypass in Windows. Public docs identify it as a bypass of a security feature (CVE-2025-21329) with CVSS v3.1 base metrics indicating NETWORK attack vector, low attack complexity, no privileges required, user interaction required, and a MEDIUM seve...
CVE-2025-21340
Technical details about CVE-2025-21340 are not provided in the supplied Connected documents. The entry concerns Windows VBS security feature bypass; no affected products/versions or patch specifics are disclosed here. Monitor for updates from Microsoft.
CVE-2025-21369
CVE-2025-21369 is listed by the NCSC advisory as a vulnerability in Microsoft Windows’ Digest Authentication that enables executing arbitrary code. The advisory attributes an overall high severity (CVSS v3.1 base 8.80) with a network attack vector and impact. The connected document confirms the v...
CVE-2019-0618
CVE-2019-0618 is a remote code execution vulnerability in Windows GDI/ GDI+. The issue arises from how memory objects are handled by the Windows Graphics Device Interface, enabling a remote attacker to execute arbitrary code on affected systems. The CVE is distinct from CVE-2019-0662. Exploitabil...
CVE-2019-0628
Technical details for CVE-2019-0628 are not provided in the connected documents. Public details appear limited to generic references; monitor official advisories for updates.
CVE-2019-0690
The vulnerability CVE-2019-0690 affects the Microsoft Hyper-V Network Switch on a host server. The issue is a denial-of-service in which input from a privileged user on a guest OS is not properly validated, leading to an impact on availability. The description specifies the affected component and...
CVE-2019-0948
CVE-2019-0948 is an information-disclosure vulnerability in Windows Event Viewer (eventvwr.msc) where XML input containing an external entity reference is improperly parsed. An authenticated user can be persuaded to import a crafted XML file, allowing an attacker to read arbitrary files via an XM...
CVE-2019-1039
The CVE-2019-1039 entry describes an information disclosure vulnerability in the Windows kernel where objects are improperly initialized in memory. A locally authenticated attacker could run a crafted application to obtain information that could be used to further compromise the system. Root caus...
CVE-2020-1113
Technical details for CVE-2020-1113 are not publicly provided in the connected documents. Monitor for official advisories to learn affected products, root cause, impact, and fixes.
CVE-2021-31191
CVE-2021-31191 refers to a Windows Projected File System FS Filter Driver information disclosure vulnerability. The available sources identify the affected component as the FS Filter Driver in Windows and indicate a potential confidentiality impact. CVSS metrics from NVD/Microsoft show: CVSS v3.1...
CVE-2021-31968
CVE-2021-31968 is a Windows Remote Desktop Services Denial of Service vulnerability. The vulnerability affects Microsoft Windows systems exposing Remote Desktop Services and can impact availability (per CVSS v3.1: HIGH, AV:N/AC:L/PR:N/UI:N/S:U/A:H). Connected sources confirm it as a remotely trig...
CVE-2021-33784
CVE-2021-33784 affects the Windows Cloud Files Mini Filter Driver, with elevation of privilege as the underlying issue. The vulnerability is described in the CVE as a Windows Mini Filter Driver privilege escalation and has a CVSS3.1 base score of 7.8 (LOCAL, LOW complexity, Privileges Required: L...
CVE-2021-34454
CVE-2021-34454 is described as a Windows Information Disclosure vulnerability in the Remote Access Connection Manager. The included data indicates a local, low-complexity attack with no authentication required, resulting in partial confidentiality loss (per CVSS v3.1: 5.5 MEDIUM). The NVD entry a...
CVE-2021-36926
Technical details about CVE-2021-36926 are not publicly provided in the supplied documents; monitor for updates from Microsoft and NVD.
CVE-2022-24487
CVE-2022-24487 concerns Windows LSASS remote code execution. Connected documents show multiple Microsoft security updates (KB5012599, KB5012592, KB5012604, KB5012591, KB5012647, KB5012592, etc.) and MSRC entries that address Windows security issues and servicing stack updates across Windows Serve...
CVE-2022-26936
Technical details about CVE-2022-26936 are not provided in the Connected documents; only general security update KB articles are present. Monitor Microsoft advisories (KB5013941/3942/3943, etc.) for vulnerability-specific information and fixes.
CVE-2022-30164
Technical details for CVE-2022-30164 (affected software, root cause, impact, or fixes) are not provided in the connected documents. Public info appears limited to general references; monitor official advisories for updates.
CVE-2022-38026
CVE-2022-38026 is a Windows DHCP Client Information Disclosure vulnerability. Affected component: Windows DHCP Client. Root cause: insufficient protection of sensitive information on the network. Impact: data disclosure (CVE entry lists confidentiality impact as High). Exploitability: Local acces...