CVE-2020-16887

CVE-2020-16887 is an elevation-of-privilege vulnerability in the Windows Network Connections Service where improper in-memory handling of objects could allow a locally authenticated attacker to execute code with elevated permissions. The vulnerability can be exploited by running a specially craft...

CVE-2020-17001

CVE-2020-17001 is a Windows Print Spooler Elevation of Privilege vulnerability. Affected software is Windows Print Spooler. The CVSS context from NVD (base CVSSv3.1 score 7.8, HIGH) indicates local, low complexity, no user interaction required, with HIGH impacts on confidentiality, integrity, and...

CVE-2021-28479

CVE-2021-28479 maps to a Windows CSC Service Information Disclosure vulnerability. Affected software is Windows operating systems with the CSC service; the root cause relates to information disclosure in the CSC service. The NVD metrics show CVSS base scores of 2.1 (2.0/6.0) depending on version,...

CVE-2021-33746

CVE-2021-33746 is a Windows DNS Server Remote Code Execution vulnerability described in the provided documents as a network-exploitable issue with high impact. The sources indicate an affected component (Windows DNS Server) and classify the vulnerability as CVE-2021-33746, but they do not give co...

CVE-2021-34504

Technical details about CVE-2021-34504 are not provided in the connected documents; the Initial Description lists a Windows Address Book RCE vulnerability but lacks affected product/version specifics. Monitor for updates.

CVE-2021-36957

CVE-2021-36957 is a Windows Desktop Bridge elevation of privilege vulnerability. Public details in the initial document are limited to the CVE title and scoring; concrete technical specifics (affected product versions, root cause, exploitability) are not elaborated there. Connected Microsoft advi...

CVE-2021-36974

Technical details for CVE-2021-36974 are not publicly provided in the supplied documents. No affected product, root cause, or remediation is specified here. Monitor official advisories for updates.

CVE-2022-41121

CVE-2022-41121 is a Windows Graphics Component Elevation of Privilege vulnerability with a CVSS v3.1 base score of 7.8 (HIGH), requiring LOCAL access with LOW privileges and no user interaction. The available descriptions identify the affected component as Windows Graphics Component but provide n...

CVE-2023-32021

Technical details about CVE-2023-32021 are not publicly provided in the connected documents. The provided sources reference the CVE and related Windows updates, but do not disclose affected components, root cause, or impact in this dataset. Monitor for updates.

CVE-2023-35381

Technical details about CVE-2023-35381 (Windows Fax Service Remote Code Execution) are not publicly provided in the supplied documents; no affected product/version/root-cause/exploit information is available here. Monitor for updates and refer to official advisories for specifics.

CVE-2025-21338

CVE-2025-21338 is a GDI+ Remote Code Execution vulnerability. The CVE affects Windows components that use GDI+ and has a CVSSv3.1 base score of 7.8 (HIGH) with LOCAL attack vector, LOW privileges required, no user interaction, and impacts to confidentiality, integrity, and availability as describ...

CVE-2025-47160

The CVE-2025-47160 entry applies to Windows Shell and describes a Protection mechanism failure that allows a remote attacker to bypass a security feature over the network. The NVD entry lists a CVSS v3.1 base score of 5.4 (AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L), indicating a network-exposed issue w...

CVE-2019-0636

CVE-2019-0636 is described as an information disclosure vulnerability where Windows improperly discloses file information. The provided documents do not supply concrete technical details (affected products/versions, root cause, exploit info, or remediation). No further technical specifics are ava...

CVE-2019-0765

CVE-2019-0765: remote code execution in comctl32.dll due to how the library handles objects in memory, termed the Comctl32 Remote Code Execution Vulnerability. Affected software is Windows’ comctl32.dll component; exact versions and vulnerable configurations are not specified in the provided docu...

CVE-2019-1150

CVE-2019-1150 affects the Windows font library’s handling of embedded fonts, leading to remote code execution. The vulnerability arises from how font data is processed, enabling an attacker to run arbitrary code on the targeted system. Documented impact includes potential full system compromise, ...

CVE-2019-1152

CVE-2019-1152 is a remote code execution affecting the Windows font library when handling specially crafted embedded fonts. The vulnerability allows an attacker to take control of the affected system, install programs, and access/modify data or create accounts with full rights. Exploitation detai...

CVE-2019-1183

CVE-2019-1183 is described as fully mitigated by security updates for CVE-2019-1194; no separate update is required. Connected documents show CVE-2019-1194 as a remote code execution vulnerability in Internet Explorer’s scripting engine (memory corruption risk via VBScript/IE scripting paths). Th...

CVE-2019-1273

CVE-2019-1273 is an XSS vulnerability in Active Directory Federation Services (ADFS) where error messages are not properly sanitized. The connected documents consistently describe a cross-site scripting issue tied to ADFS error handling, but do not provide specifics on affected product versions, ...

CVE-2019-1453

CVE-2019-1453 is a denial-of-service vulnerability in the Windows Remote Desktop Protocol (RDP). The Red Hat CVE entry and CNVD/OpenVAS references confirm the issue arises when an attacker connects via RDP and sends specially crafted requests to the target, with impact described as DoS. The NVD e...

CVE-2020-1512

CVE-2020-1512 affects the Windows State Repository Service. The information-disclosure vulnerability arises from the service improperly handling objects in memory, allowing a locally-executed, specially crafted application to obtain information to further compromise the system. The provided docum...

CVE-2020-1519

CVE-2020-1519 is a Windows elevation-of-privilege vulnerability in the Windows UPnP Device Host that arises from improper handling of memory. An attacker must first gain execution on the target, then run a crafted application to elevate privileges. Microsoft’s security update fixes how the UPnP D...

CVE-2021-27072

Technical details (affected products/versions/patch information) are not publicly available in the provided documents; monitor for official advisories and updates for CVE-2021-27072.

CVE-2021-34490

CVE-2021-34490 is a Windows TCP/IP Driver Denial of Service vulnerability. Public sources describe the affected component as the TCP/IP driver in Windows/Windows Server, enabling DoS when exploited. The CVE is tracked in NVD and Microsoft advisories reference this issue under July 2021 security u...

CVE-2021-34511

Technical details about CVE-2021-34511 are not publicly available in the provided documents. Monitor for updates from official sources; no concrete exploit, impact, or remediation details are present in the connected content.

CVE-2021-36970

Technical details for CVE-2021-36970 are not provided in the supplied documents. No specifics on affected products, root cause, impact, or remediation are present here; monitor for updates from official sources.

CVE-2021-38639

Technical details about CVE-2021-38639 are not publicly provided in the supplied documents. Monitor for updates from official advisories; the CVE is described as a Win32k elevation of privilege vulnerability, with published CVSS metrics in NVD.

CVE-2021-41371

CVE-2021-41371 is a Windows RDP information-disclosure vulnerability affecting the RDP implementation on Windows client/server versions from Windows 7 through Windows 11 and Windows Server 2008–2019. Public reporting indicates the flaw enables an attacker with local access to view the RDP passwor...

CVE-2022-21850

CVE-2022-21850 is described in the provided materials as a Remote Desktop Client Remote Code Execution vulnerability. The connected documents confirm the vulnerability relates to the Windows Remote Desktop Client but do not provide concrete technical specifics (e.g., root cause, affected versions...

CVE-2022-24466

Technical details for CVE-2022-24466 are not publicly provided in the supplied documents. The connected entries reference this CVE among others but do not describe affected products, root cause, impact, or fixes.

CVE-2022-26793

Technical details (affected component, root cause, vulnerable versions, exploitability) are not provided in the supplied documents. Monitor for updates.

CVE-2022-37979

CVE-2022-37979 is a Windows Hyper-V elevation-of-privilege vulnerability. Public sources describe it as a local privilege escalation stemming from improper privilege assignment within the Hyper-V component. The CVE affects Windows Hyper-V with a CVSS v3.1 vector of Local, High severity (7.8). Rem...

CVE-2023-21799

Technical details about CVE-2023-21799 are not publicly provided in the supplied documents. Monitor for updates.

CVE-2023-24886

CVE-2023-24886 corresponds to a Remote Code Execution vulnerability in Microsoft’s PostScript and PCL6 Class Printer Driver. Connected sources confirm the affected component (PostScript and PCL6 printer driver) and that security updates were released in the April 2023 cycle (KB5025221, KB5025224,...

CVE-2023-24925

CVE-2023-24925 is a Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability. The CVSS v3.1 base score is 8.8 (HIGH) with a network attack vector, low attack complexity, and no user interaction required. The impact is described as high across confidentiality, integri...

CVE-2023-28266

Technical details (affected product/component, root cause, impact, fix) are not provided in the connected documents. Monitor for updates.

CVE-2023-28298

Technical details for CVE-2023-28298 are not provided in the connected documents. OpenVAS entries reference the CVE across KB updates but do not describe affected components, root cause, impact, or remediation. Monitor for updates.

CVE-2023-35377

Technical details for CVE-2023-35377 are not publicly available in the provided documents. Monitor for updates.

CVE-2023-35630

CVE-2023-35630 is a Microsoft Windows Internet Connection Sharing (ICS) remote code execution vulnerability. The NVD entry lists CVSS v3.1 base score 8.8 (HIGH) with AV:A, AC:L, PR:N, UI:N, S:U, C:H, I:H, A:H, indicating adjacent-network exploitation with no user interaction. Multiple OpenVAS ent...

CVE-2024-26223

CVE-2024-26223 affects Windows DNS Server with a remote code execution vulnerability. According to the provided data, it is network‑accessible (AV:N) with high attack complexity (AC:H) and requires high privileges (PR:H); no user interaction is needed (UI:N). The impact is rated high for confiden...

CVE-2026-21513

CVE-2026-21513 is a security feature bypass vulnerability in the MSHTML Framework. Affected component: MSHTML/MSHTML Framework used by Windows’ browsing/rendering stack. Root cause details are described in vendor advisories and security blogs as a protection mechanism bypass that can be triggered...

CVE-2026-62819

CVE-2026-62819 corresponds to a Remote Code Execution vulnerability in Windows Routing and Remote Access Service (RRAS). Available details indicate that the vulnerability resides in RRAS and could allow an attacker to gain unauthorized code execution on a victim’s machine via a network attack. Th...

CVE-2019-0599

CVE-2019-0599 describes a remote code execution vulnerability in the Windows Jet Database Engine caused by improper handling of objects in memory. The issue is shared among multiple CVEs in the same family (CVE-2019-0595, -0596, -0597, -0598, -0625). The available documents identify the affected ...

CVE-2019-1021

CVE-2019-1021 affects Windows Audio Service, causing an elevation of privilege by incorrect handling of process requests. An attacker with local access could run a specially crafted app to obtain elevated code execution; however, the vulnerability alone does not guarantee arbitrary code execution...

CVE-2019-1053

CVE-2019-1053 describes an elevation of privilege in Windows Shell due to failure to validate folder shortcuts. The vulnerability allows an attacker who already has unprivileged code execution on the victim to escalate privileges by escaping a sandbox. The underlying cause is the Shell’s insuffic...

CVE-2020-17092

CVE-2020-17092 corresponds to a Windows vulnerability in the Network Connections Service described as an Elevation of Privilege. The entry lists local access with low attack complexity and no user interaction as prerequisites, and indicates high impact across confidentiality, integrity, and avail...

CVE-2021-31184

Technical details for CVE-2021-31184 (IrDA information disclosure) are not publicly available in the provided documents. Monitor for updates from official advisories and CVE/NVD entries for affected products, versions, and remediation.

CVE-2021-31973

CVE-2021-31973 is a Windows GPSVC Elevation of Privilege vulnerability. Affected component: GPSVC. Root cause not explicitly stated in the provided documents. CVSS v3.1 base score 7.8 (HIGH): Local attack, low privileges required, no user interaction, with high impact to confidentiality, integrit...

CVE-2021-34536

CVE-2021-34536 refers to a Windows Storage Spaces Controller Elevation of Privilege vulnerability. The NVD entry lists a CVSS 3.1 base score of 7.8 with Local attack vector, Low privileges required, and No user interaction, and indicates a High impact on confidentiality, integrity, and availabili...

CVE-2022-21873

Technical details for CVE-2022-21873 are not publicly provided in the supplied documents. No affected products, root cause, impact, or remediation are stated here; monitor for updates.

CVE-2022-26783

CVE-2022-26783 corresponds to a Windows Hyper-V Shared Virtual Hard Disks information disclosure vulnerability. Connected sources confirm the issue affects Hyper-V and involves disclosure of sensitive data, with public advisories and vulnerability lists referencing this CVE family. The CNVD/ENISA...