CVE-2019-0889

CVE-2019-0889 : Connected CNVD entries describe a buffer/heap overflow vulnerability in the Windows Jet Database Engine. The issue arises when memory operations do not properly validate data boundaries, enabling overflow conditions. The CNVDs indicate a network-origin misuse could trigger in-memo...

CVE-2020-0746

Technical details about CVE-2020-0746 are not provided in the supplied documents. Monitor for updates from official advisories.

CVE-2019-0900

Summary: The connected CNVD entries describe a set of buffer overflow vulnerabilities in Microsoft Windows Jet Database Engine. They state that the Jet Database Engine can experience in-memory boundary violations leading to incorrect reads/writes and potential heap/buffer overflows when processin...

CVE-2020-1477

CVE-2020-1477 is a memory corruption vulnerability in Windows Media Foundation caused by improper handling of objects in memory. An attacker could exploit this by convincing a user to open a specially crafted document or visit a malicious webpage, potentially allowing the attacker to install prog...

CVE-2021-28337

Technical details for CVE-2021-28337 are not publicly available in the provided documents. Monitor for updates from vendor advisories and vulnerability databases.

CVE-2021-38632

CVE-2021-38632 is reported as a BitLocker Security Feature Bypass Vulnerability. The primary document shows a Microsoft/software–level vulnerability entry with a CVSS v3.1 base score of 4.6 (MEDIUM) from NVD, and a local/physical-attack profile (PHYSICAL access, no user interaction required per C...

CVE-2022-21900

Technical details for CVE-2022-21900 are not provided in the connected documents. The initial description is general; monitor for updates from official advisories (no exploit specifics or affected products confirmed here).

CVE-2022-21912

CVE-2022-21912 is a DirectX Graphics Kernel vulnerability affecting Windows DirectX components. The entry notes DirectX Graphics Kernel Remote Code Execution Vulnerability with patch guidance from Microsoft (KB5009543, KB5009545, KB5009557, KB5009543 family). Vulnerable component: DirectX Graphic...

CVE-2022-21985

CVE-2022-21985 is a Windows vulnerability described as an Information Disclosure vulnerability in the Windows Remote Access Connection Manager. The CVSS details show a local attack vector with low complexity (CVSSv3.1 base score 5.5, MEDIUM severity), where confidentiality is impacted. The descri...

CVE-2022-34720

CVE-2022-34720 is a Windows IKE Extension Denial of Service vulnerability. The provided data notes a network-based attack vector with low complexity, no privileges required, and a HIGH availability impact (CVSS v3.1 base score 7.5). No exploit details or remediation/patch information is provided ...

CVE-2022-34724

Technical details about CVE-2022-34724 are not publicly provided in the connected documents. No affected products, root cause, or remediation are disclosed here. Monitor for updates from official advisories and vendors.

CVE-2022-41086

Technical details about CVE-2022-41086 (affected product/component/versions/root cause/impact/fix) are not publicly provided in the connected documents. Monitor for updates from official advisories or vendor advisories to obtain concrete exploitability, affected software, and remediation steps.

CVE-2023-21818

Technical details for CVE-2023-21818 are not publicly provided in the supplied documents. The available sources reference the CVE within larger Windows vulnerability lists but do not disclose affected products, root cause, impact, or fixes.

CVE-2023-24883

Technical details about CVE-2023-24883 are not provided in the supplied documents. Public information on affected product/versions, root cause, impact, and fixes is not available here. Monitor for updates.

CVE-2023-29364

Technical details for CVE-2023-29364 are not provided in the supplied documents. Monitor for updates from Microsoft and CVE records.

CVE-2023-32017

CVE-2023-32017 concerns the Microsoft PostScript Printer Driver and allows Remote Code Execution tied to a driver component. The IOCs/impact in the provided materials indicate a LOCAL attack vector with no user interaction, and confidentiality, integrity, and availability impacts rated HIGH. No e...

CVE-2023-36704

Converging details from connected documents indicate CVE-2023-36704, named Windows Setup Files Cleanup, is a remote code execution vulnerability in the Windows Setup Files Cleanup component. The KLA61358 entry explicitly notes a remote code execution vulnerability for Windows Setup Files Cleanup ...

CVE-2024-30050

CVE-2024-30050 is a Windows Mark of the Web security feature bypass vulnerability. Public sources label it as a security bypass issue in MOTW, with a CVSS v3.1 base score of 5.4 (Network, Low complexity, User interaction required; I and A impacts: I = Low, A = Low). The condition allows bypass of...

CVE-2024-30081

Technical details for CVE-2024-30081 are not provided in the supplied documents. The connected Microsoft KB updates reference unrelated issues (RADIUS, BitLocker, LNK policy) and do not disclose affected products, root cause, impact, or fixes for this CVE. Monitor for updates.

CVE-2024-38132

Technical details about CVE-2024-38132 are not publicly provided in the supplied connected documents. The NAT DoS entry is listed, but no affected product/version, root cause, or remediation is described. Monitor for updates.

CVE-2024-38138

Technical details (affected products/versions/root cause/impact/remediation) are not present in the provided documents. Monitor for updates from Microsoft and CVE databases for concrete details, fixes, and confirmed impact.

CVE-2024-38152

CVE-2024-38152 is listed under Windows WDAC OLE DB provider for SQL with a CVSS and impact of 7.80 (Execute Random Code). The connected documents confirm the affected component and the vulnerability’s label, but do not provide concrete details on root cause, affected versions, exploit scenarios, ...

CVE-2024-43455

CVE-2024-43455 is a Windows Remote Desktop Licensing Service spoofing vulnerability affecting the Windows Remote Desktop Licensing Service. The connected sources indicate the vulnerability allows pretending to be another user, with high impact in authentication-related scenarios. The Windows ecos...

CVE-2024-43562

CVE-2024-43562 is a Windows NAT Denial-of-Service vulnerability with CVSSv3.1 base score 7.5 (Network vector, no user interaction, no privileges required). Exploitation is possible remotely over the network and can lead to a high impact: denial of service. Connected sources list Windows NAT as af...

CVE-2024-49080

CVE-2024-49080 affects Windows IP Routing Management Snapin and is a remote code execution vulnerability. According to the Initial document, it has CVSS 3.1 base metrics: Network attack vector, low attack complexity, low privileges required, no user interaction, with impacts on confidentiality, i...

CVE-2025-21419

CVE-2025-21419 is a Windows Setup cleanup vulnerability that enables local elevation of privilege. The CVSS 3.1 vector (AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H) indicates an attacker with low privileges and local access can achieve high integrity and availability impact, without user interaction. The...

CVE-2025-27736

Technical details about CVE-2025-27736 (affected product/versions/root cause/fix) are not disclosed in the provided connected documents. Monitor Microsoft advisories and CVE records for updates and remediation information.

CVE-2026-42836

CVE-2026-42836: A race condition due to improper synchronization in the Windows Function Discovery Service (fdwsd.dll) enables a locally authenticated attacker to escalate privileges. The issue is described as a concurrency problem with a shared resource. Affected component: Function Discovery Se...

CVE-2026-62822

CVE-2026-62822 describes an integer overflow/wraparound in Windows GDI+ that allows an unauthenticated attacker to execute code remotely over a network. The CVSSv3.1 vector (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) yields a base score of 8.8 ( HIGH ), indicating high impact for confidentiality, integ...

CVE-2019-0722

The CVE-2019-0722 issue affects Microsoft Windows Hyper-V. A remote code execution vulnerability exists when Hyper-V on a host fails to properly validate input from an authenticated guest OS user, allowing a crafted guest app to cause the host to run arbitrary code. Exploitation could grant the a...

CVE-2019-0853

Technical details about CVE-2019-0853 are not publicly available in the provided documents. No affected products, versions, root cause, or remediation are specified here. Monitor for updates and corroborating risk information from official advisories.

CVE-2019-1126

Technical details (affected product/version, root cause, exploit info, mitigation) are not provided in the connected documents. The CVE-2019-1126 entry describes an ADFS security feature bypass; monitor official advisories for remediation updates.

CVE-2019-1343

Technical details about CVE-2019-1343 are not provided in the connected documents. The supplied MSKB entries cover OS updates but do not describe affected products, root cause, impact, or fixes for this CVE. Monitor for updates.

CVE-2020-0612

CVE-2020-0612 affects Windows Remote Desktop Gateway (RD Gateway). The vulnerability lies in how RD Gateway handles connection requests; when an attacker connects via RDP and sends specially crafted requests, the RD Gateway service may stop responding, causing a denial of service. An exploit requ...

CVE-2020-0626

Technical details for CVE-2020-0626 are not provided in the connected documents. The Initial Description offers only high-level info. Monitor official advisories for updates on affected products/versions and any remediations or mitigations.

CVE-2020-1292

CVE-2020-1292 – OpenSSH for Windows Elevation of Privilege : The vulnerability exists in OpenSSH for Windows where configuration settings are not properly restricted. An authenticated attacker could modify the OpenSSH for Windows configuration to replace the shell with a malicious binary, enablin...

CVE-2020-1303

CVE-2020-1303 is a Windows Runtime elevation of privilege vulnerability. It arises from improper handling of objects in memory, enabling an attacker who runs a specially crafted application to execute arbitrary code in an elevated context. The vulnerability is tied to Windows Runtime memory handl...

CVE-2020-16935

The CVE-2020-16935 entry describes a Windows elevation-of-privilege flaw caused by improper handling of COM object creation. The vulnerability could allow an attacker who has logged on to run arbitrary code with elevated privileges by executing a specially crafted application, with exploitation e...

CVE-2021-28345

Technical details about CVE-2021-28345 are not provided in the supplied documents. The entries reference multiple Windows vulnerabilities but do not specify affected components, impact, or fixes for this CVE. Monitor for updates.

CVE-2021-28434

Technical details for CVE-2021-28434 are not provided in the supplied documents. No affected products, root cause, or remediation are specified here. Monitor for updates from the connected sources.

CVE-2022-21928

This CVE affects the Windows Resilient File System (ReFS). The entry documents a Remote Code Execution vulnerability in ReFS, with CVSSv3.1 base score 6.4 (MEDIUM) and a physical attack vector, no user interaction, and high impact on confidentiality, integrity, and availability. The Connected doc...

CVE-2022-21958

Technical details about CVE-2022-21958 are not provided in the supplied documents. No specifics on affected builds, root cause, or fixes are available here; monitor official advisories for updates.

CVE-2022-44689

CVE-2022-44689 affects Windows Subsystem for Linux (WSL2) kernel, enabling local elevation of privilege. The NVD entry lists a local attack vector with low complexity and low privileges required, resulting in high impact to confidentiality, integrity, and availability. Connected sources corrobora...

CVE-2023-21550

Technical details for CVE-2023-21550 are not provided in the supplied documents. Monitoring for updates is recommended; no specific affected products, impact, or remediation are disclosed here.

CVE-2023-24862

CVE-2023-24862 is a Windows Schannel (Secure Channel) Denial of Service vulnerability. The available data identifies the flaw as local with low privileges required and a high availability impact (CVSS v3.1: AV=L/AC=L/PR=L/UI=N/S=U/C=N/I=N/A=H). Public documents do not provide granular technical d...

CVE-2023-24924

CVE-2023-24924 is a remote code execution vulnerability in Microsoft PostScript and PCL6 Class Printer Driver. Connected sources corroborate an RCE flaw in the PostScript and PCL6 printer driver stack, enabling an attacker to remotely execute code. The CVE entry lists a high-severity impact (CVSS...

CVE-2024-30020

CVE-2024-30020 corresponds to a Remote Code Execution vulnerability in Windows Cryptographic Services. Affected: Windows Cryptographic Services component; vulnerability type is RCE. From the CVE entry, the CVSS v3.1 base score is 8.1 (High) with Network attack vector, high attack complexity, no p...

CVE-2024-30022

CVE-2024-30022 pertains to the Windows RRAS component and is listed in the ENISA/NCSC compilation with a CVSSv3.1 base score of 7.5 (high). The adverse impact is remote code execution with network access, requiring user interaction and no privileges. Connected sources explicitly associate CVE-202...

CVE-2025-21274

CVE-2025-21274 corresponds to a Windows Event Tracing Denial of Service vulnerability. The NVD entry rates impact as Denial of Service with a CVSSv3.1 base score of 5.5 (Local, Low UI, privileges required: Low, Availability impact: High). Connected sources indicate this vulnerability affects Wind...

CVE-2025-29810

CVE-2025-29810 corresponds to an improper access control in Active Directory Domain Services that can allow an authenticated attacker to elevate privileges over the network. The NCSC advisory groups CVE-2025-29810 under Windows Active Directory Domain Services with an impact described as ‘Obtain ...