CVE-2022-26783

CVE-2022-26783 corresponds to a Windows Hyper-V Shared Virtual Hard Disks information disclosure vulnerability. Connected sources confirm the issue affects Hyper-V and involves disclosure of sensitive data, with public advisories and vulnerability lists referencing this CVE family. The CNVD/ENISA...

CVE-2022-35756

Technical details about CVE-2022-35756 (affected products, root cause, impact, fix) are not provided in the connected documents. Monitor for official disclosures and updates from Microsoft and CVE listings.

CVE-2022-37985

CVE-2022-37985 affects the Microsoft Windows Graphics Component and is classified as an information disclosure vulnerability. The NT its entry indicates the affected component is the Windows Graphics Component, with CVSS v3.1 base score 5.5 (Attack Vector: Local, Attack Complexity: Low, Privilege...

CVE-2022-41057

Technical details about CVE-2022-41057 are not provided in the connected documents. Public information here does not specify affected products, root cause, impact, or fixes. Monitor official advisories for updates.

CVE-2023-21680

Technical details about CVE-2023-21680 (Windows Win32k elevation) are not publicly available in the connected documents. Monitor for updates from Microsoft and other sources; wait for confirmed affected products/versions and remediation when disclosed.

CVE-2023-21728

Technical details about CVE-2023-21728 are not publicly provided in the supplied documents. Please monitor for updates from official sources.

CVE-2023-24913

CNVD-2023-30861 describes CVE-2023-24913 as a remote code execution vulnerability in Microsoft PostScript and PCL6 Class Printer Driver. Affected components are Microsoft PostScript Printer Driver and Microsoft PCL6 Class Printer Driver, with exploitation described as remote code execution by an ...

CVE-2023-28225

CVE-2023-28225 is described as a Windows NTLM Elevation of Privilege vulnerability. The provided data indicate a local attack vector with low privileges required, no user interaction, and a high impact on confidentiality, integrity, and availability (CVSS 3.1: AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)...

CVE-2023-28249

CVE-2023-28249 is a Windows Boot Manager security feature bypass vulnerability. The connected sources confirm the affected component as Windows Boot Manager and classify the issue as a bypass of security features with high potential impact on confidentiality, integrity, and availability; specific...

CVE-2023-29355

Technical details about CVE-2023-29355 are not provided in the supplied documents; no confirmed affected products, versions, or fixes are listed. Monitor for updates.

CVE-2024-26222

CVE-2024-26222 is a Windows DNS Server Remote Code Execution Vulnerability. Public docs identify affected software as Windows DNS Server and describe an RCE risk exploitable over the network with no user interaction. The NVD/Microsoft entries list a base score around 6.6–7.2 (MEDIUM–HIGH) and not...

CVE-2024-38041

CVE-2024-38041 is a Windows Kernel information disclosure vulnerability. The connected sources confirm the affected component as Windows Kernel with impact on confidentiality (C:H) and local attack vector (AV:L) with low attack complexity (AC:L) and no user interaction (UI:N). Privileges required...

CVE-2026-65679

Summary: CVE-2026-65679 is a heap-based buffer overflow in the Windows iSCSI Target Service that allows remote code execution over a network. The vulnerability arises from an out-of-bounds write handling, enabling an unauthenticated attacker to execute code on affected systems. The CVSSv3.1 vecto...

CVE-2018-8584

CVE-2018-8584 is an elevation-of-privilege vulnerability in Windows where ALPC calls are not handled correctly, enabling a local attacker to run code with the system security context. Affected: Windows Server 2016, Windows 10, Windows Server 2019, Windows 10 Server family. Root cause: improper ha...

CVE-2019-0597

Technical details about CVE-2019-0597 are not publicly provided in the supplied documents. Monitor for updates from official advisories.

CVE-2019-0713

Technical details about CVE-2019-0713 are not publicly provided in the connected documents. The initial description summarizes a Hyper-V denial-of-service vulnerability. Monitor for updates from official sources.

CVE-2019-0793

Technical details about CVE-2019-0793 are not publicly available in the provided connected documents; monitor for updates.

CVE-2019-1044

CVE-2019-1044 is a Windows security feature bypass in Windows Secure Kernel Mode where improper handling of memory objects can allow a locally-authenticated attacker to violate virtual trust levels (VTL). Affects Windows client/server releases referenced in the advisory (e.g., Windows 10/Server 2...

CVE-2019-1102

CVE-2019-1102 affects the Windows Graphics Device Interface (GDI+) and arises from how GDI+ handles memory objects, enabling remote code execution. The Red Hat advisory reiterates the same description. The CVE is rated high risk (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) with network attack vector and...

CVE-2019-1243

CVE-2019-1243 describes a remote code execution vulnerability in the Windows Jet Database Engine caused by improper handling of objects in memory. An attacker could exploit this by convincing a user to open a specially crafted file, potentially allowing arbitrary code execution with the user’s pr...

CVE-2020-1285

Technical details about CVE-2020-1285 are not provided in the connected documents. The sources reference other CVEs and Windows updates; monitor for updates on CVE-2020-1285.

CVE-2020-1516

The CVE-2020-1516 entry describes an Elevation of Privilege in the Windows Work Folders Service caused by improper handling of memory. Exploitation would require the attacker to first gain execution on the target, then run a crafted application to raise privileges. Microsoft’s security update fix...

CVE-2021-28334

CVE-2021-28334 is associated with a Remote Procedure Call Runtime remote code execution vulnerability in Microsoft Windows/Windows Server. The CNVD-2021-74287 entry describes a RPC Runtime RCE vulnerability affecting Windows/Windows Server, implying a remote attacker could execute code over the n...

CVE-2021-28353

Technical details for CVE-2021-28353 are not provided in the connected documents. Monitor for updates; no public details (impact, affected products, or remediation) are included in the supplied material.

CVE-2021-33780

Technical details for CVE-2021-33780 are not publicly available in the provided connected documents. No explicit affected product versions, root cause, or remediation are included. Monitor for updates from official advisories.

CVE-2021-41345

Technical details for CVE-2021-41345 are not publicly available in the provided connected documents. Monitor for updates from official advisories.

CVE-2022-21877

CVE-2022-21877 is a Windows storage space controller information-disclosure vulnerability. The connected OpenVAS exploit entry describes an out-of-bounds read in the spaceport.sys driver that can leak data past the system buffer, indicating a local information-leak impact. A GitHub repository pro...

CVE-2022-21908

CVE-2022-21908 is a Windows Installer Elevation of Privilege vulnerability. The NVD entry lists a CVSS v3.1 base score of 7.8 (HIGH) with LOCAL attack vector, LOW attack complexity, PRIVILEGES REQUIRED: LOW, UI: NONE, and scope UNCHANGED; impact to Confidentiality, Integrity, and Availability is ...

CVE-2022-21960

CVE-2022-21960 affects Windows Resilient File System (ReFS) and is described as a remote code execution vulnerability. The provided documents only state the vulnerability title and CVSS metrics from NVD (CVSSv3.1 base score 6.8, vector CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) and MSRC refere...

CVE-2022-26920

The CVE-2022-26920 entry refers to a Windows Graphics Components information-disclosure vulnerability. Connected sources confirm the flaw resides in Microsoft Windows Graphics Components (a graphics driver component) and arises from configuration errors during operation, enabling information disc...

CVE-2022-30142

CVE-2022-30142 is a Windows File History Remote Code Execution vulnerability reported with CVSS v3.1 base score 7.5 (HIGH) and network attack vector, requiring user interaction. The vulnerability affects Windows File History and involves a high-impact compromise of confidentiality, integrity, and...

CVE-2022-34689

CVE-2022-34689 is a Windows CryptoAPI spoofing vulnerability in which the certificate cache index key (MD5-based) can be exploited to masquerade as a legitimate entity. A PoC was released (HIVEPRO PoC report) detailing the attack, underscoring public proof-of-concept availability. The advisory co...

CVE-2022-35764

CVE-2022-35764 refers to a Storage Spaces Direct Elevation of Privilege vulnerability. The CVSS v3.1 metrics indicate a LOCAL, low-attack-complexity vector with Privileges Required: LOW and UI: NONE, Confidentiality/Integrity/Availability impacts: HIGH, base score 7.8 (HIGH). Exploitation status ...

CVE-2022-41053

Technical details about CVE-2022-41053 are not publicly provided in the supplied documents. No affected products, exploit information, or mitigations are specified here. Monitor for updates.

CVE-2023-24907

CVE-2023-24907 describes a remote code execution vulnerability in the Microsoft PostScript and PCL6 Class Printer Driver . The CVE entry (as per NVD) has a CVSS 3.1 base score of 8.8 (High) with vectors: AV:N, AC:L, PR:L, UI:N, S:U, C:H, I:H, A:H, indicating network attack with no user interactio...

CVE-2023-28243

CVE-2023-28243 is a remote code execution vulnerability in the Microsoft PostScript and PCL6 Class Printer Driver. The CVE entry notes a high-severity (CVSS 3.1 base 8.8) issue with network attack vector and no user interaction required, applicable to affected printer driver components. Connected...

CVE-2023-28248

CVE-2023-28248 is a Windows kernel EoP vulnerability rooted in hive memory corruption. The linked material details a chain from hive memory corruption to OOB cell indexes that bypass typical bounds checks, enabling arbitrary kernel read/write through crafted regf data and controlled cell indices....

CVE-2023-32011

Technical details about CVE-2023-32011 are not publicly provided in the supplied documents. The available sources confirm the vulnerability name and related MS updates but do not disclose affected products, versions, root cause, or fixes.

CVE-2023-32084

Technical details about CVE-2023-32084 are not publicly provided in the supplied documents. Available entries list the vulnerability title but do not specify affected products, versions, impact, or remediation. Monitor for official disclosures and updates.

CVE-2023-35380

Technical details for CVE-2023-35380 are not publicly available in the provided documents. The initial sources list the vulnerability title but do not specify affected products, versions, root cause, or remediation. Monitor for updates.

CVE-2024-30089

Technical details about CVE-2024-30089 are not publicly provided in the supplied documents; no explicit affected products, root cause, or remediation are present. Monitor for updates.

CVE-2025-24990

CVE-2025-24990 is a local privilege escalation in the Microsoft‑supplied Agere Modem Driver (ltmdm64.sys). The issue is described as an untrusted pointer dereference within the driver, enabling a local attacker to escalate privileges to administrator. Microsoft addressed it by removing the driver...

CVE-2025-26652

CVE-2025-26652 describes a Denial-of-Service vulnerability in Windows Standards-Based Storage Management Service caused by uncontrolled resource consumption, allowing an unauthenticated, network-originating attacker to deny service. Affected are Windows systems where this storage service is prese...

CVE-2018-8423

CVE-2018-8423 : A remote code execution vulnerability exists in the Microsoft JET Database Engine. The issue affects Windows client/server family (Windows 7, 8.1, 10; Windows Server 2008/2012/2016/2019 and R2 variants). The root cause is within the JET Database Engine component; exploitation requ...

CVE-2019-0580

The CVE-2019-0580 entry describes a remote code execution flaw in the Windows Jet Database Engine caused by improper memory-object handling. It affects Windows client/server platforms (Windows 7, 8.1, 10 and various Server editions) and is exploitable when a user opens a specially crafted file th...

CVE-2019-0581

CVE-2019-0581 is a Windows Jet Database Engine remote code execution vulnerability arising from improper handling of objects in memory. Affected products include multiple Windows versions (e.g., Windows 7, Server 2008/2012/R2, 8.1, 10, and server editions). The connected documents corroborate tha...

CVE-2019-0721

Technical details about CVE-2019-0721 are not publicly available in the provided connected documents; none supply affected product/version, root cause, or remediation for this CVE. Monitor for updates.

CVE-2019-0838

Technical details for CVE-2019-0838 are not publicly provided in the supplied documents; monitor for updates from official advisories.

CVE-2019-0851

Technical details on CVE-2019-0851 are not publicly provided in the supplied connected documents. Monitor official advisories for updates on affected products, root cause, and remediation.

CVE-2019-0889

CVE-2019-0889 : Connected CNVD entries describe a buffer/heap overflow vulnerability in the Windows Jet Database Engine. The issue arises when memory operations do not properly validate data boundaries, enabling overflow conditions. The CNVDs indicate a network-origin misuse could trigger in-memo...