CVE-2018-8485

CVE-2018-8485 is a DirectX local privilege-escalation vulnerability: DirectX mismanages objects in memory, enabling code execution with kernel privileges on affected Windows versions (Windows 8.1/Server 2012/2012 R2/10/Server 2016-2019 and related). Root cause is memory handling in DirectX; impac...

CVE-2018-8494

CVE-2018-8494 is a remote code execution vulnerability in the Microsoft XML Core Services MSXML parser when processing untrusted input. Affected products include Windows 7; Windows Server 2008, 2012, 2012 R2, 2016, 2019; Windows 8.1; Windows 10 (and Windows RT 8.1); Windows Server 2008 R2; Window...

CVE-2019-0554

Technical details are not publicly available in the provided documents. Monitor for updates.

CVE-2019-0619

The connected advisories corroborate CVE-2019-0619 as a Windows Graphic Device Interface (GDI) information disclosure vulnerability. It arises from improper handling of objects in memory in the Graphics Device Interface component, enabling remote attackers to obtain sensitive information. The adv...

CVE-2019-0637

Technical details about CVE-2019-0637 (Windows Defender Firewall security feature bypass) are not publicly provided in the connected documents; monitor for updates to learn of affected products, impact, and fixes.

CVE-2019-0714

CVE-2019-0714 affects Microsoft Hyper-V Network Switch. A privileged guest OS user can trigger a denial-of-service that crashes the host by running a crafted application; the vulnerability arises from improper validation of input by the Hyper-V Network Switch. The fix involves changes to how virt...

CVE-2019-0772

Technical details for CVE-2019-0772 are not publicly available in the provided documents. Monitor for updates; connected data does not include affected products, versions, impact, or remediation specifics.

CVE-2019-0794

CVE-2019-0794 is described in connected sources as a Windows VBScript Engine remote command execution vulnerability. The Myhack58 article notes exploitation via hosting a crafted website to trigger through a browser, and also via IE rendering engine or Microsoft Office documents to trigger initia...

CVE-2019-0839

Technical details about CVE-2019-0839 are not publicly provided in the connected documents. Monitor for updates and new public disclosures before drawing conclusions on affected components, root cause, or remediation.

CVE-2019-9510

CVE-2019-9510 affects Windows 10 (1803+) and Windows Server 2019+ where, after a temporary network disruption, an RDP client automatically reconnects to a remote session in an unlocked state, bypassing the lock screen and potentially bypassing MFA prompts that rely on the Windows logon screen. Th...

CVE-2020-1247

Technical details about CVE-2020-1247 are not provided in the connected documents. Public details (affected product/versions, root cause, impact, fix) are not disclosed here. Monitor official advisories and CVE databases for updates.

CVE-2020-1383

CVE-2020-1383 is an information disclosure vulnerability in Windows RRAS: when Routing and Remote Access is enabled, an attacker can exploit a flaw in RPC handling to obtain information that could aid compromise. Exploitation requires a crafted application against an RPC server with RRAS enabled ...

CVE-2020-1488

Technical details about CVE-2020-1488 are not publicly available in the provided connected documents. The supplied materials only reiterate a Windows AppX Deployment Extensions privilege-elevation issue with a Microsoft advisory; monitor for updates.

CVE-2020-1564

CVE-2020-1564 : A remote code execution vulnerability exists in the Windows Jet Database Engine due to improper handling of objects in memory. An attacker could persuade a user to open a specially crafted file to execute arbitrary code. Impact is described as high/severe (per NVD metrics), with a...

CVE-2020-16920

CVE-2020-16920 affects Windows via an elevation-of-privilege in the Windows Application Compatibility Client Library, tied to improper handling of registry operations. The vulnerability requires code execution on a victim system before exploitation, enabling a crafted application to gain elevated...

CVE-2021-1722

CVE-2021-1722 is a Windows Fax Service Remote Code Execution vulnerability. Affects Windows Fax Service through a network attack with no authentication; CVSS v3.1 base score up to 9.8 (C:H/I:H/A:H; AV:N; UI:N; PR:N; S:U). OpenVAS/NVD entries corroborate network-based RCE with high impact to confi...

CVE-2021-33755

Technical details about CVE-2021-33755 are not publicly provided in the supplied documents; monitor for updates.

CVE-2021-34496

Technical details about CVE-2021-34496 are not provided in the connected documents. The initial entry notes a Windows GDI information disclosure vulnerability, but no affected product/version specifics, exploit info, or remediation are included here. Monitor for updates.

CVE-2021-36954

CVE-2021-36954 is a Windows Bind Filter Driver Elevation of Privilege vulnerability. The issue affects Windows where a local attacker can exploit the Bind Filter Driver to elevate privileges with low privileges and no user interaction, potentially affecting confidentiality, integrity, and availab...

CVE-2021-38638

CVE-2021-38638 corresponds to a Windows Elevation of Privilege vulnerability in the Windows Ancillary Function Driver for WinSock. According to the NVD entry, the issue has a CVSS v3.1 base score of 7.8 (High) with LOCAL attack vector, LOW attack complexity, and privileges required set to LOW; co...

CVE-2021-41367

CVE-2021-41367 is described as an NTFS Elevation of Privilege Vulnerability. The Connected NVD entry lists CVSS v3.1 base score 7.8 (HIGH) with LOCAL attack vector, LOW attack complexity, PRIVILEGES REQUIRED: LOW, and UI: NONE. Impact per CVSS3.1 indicates high confidentiality, integrity, and ava...

CVE-2022-21858

Technical details (affected components, root cause, versions, exploitability, or fixes) are not publicly provided in the supplied documents. Monitor official MSRC/NVD entries and OpenVAS feeds for updates.

CVE-2022-21905

CVE-2022-21905 technical details are not publicly available in the provided documents. No affected products, root cause, impact, or fixes are specified here. Monitor for updated disclosures.

CVE-2022-22715

CVE-2022-22715 corresponds to a Windows Named Pipe File System Elevation of Privilege vulnerability. The Electronically published data indicate a local, low‑privilege attack with no user interaction that could yield high impact to confidentiality, integrity, and availability. The connected record...

CVE-2022-23299

Technical details about CVE-2022-23299 (affected product, root cause, impact, fix) are not publicly available in the provided documents. Monitor for updates as new information may be released.

CVE-2023-21804

Technical details about CVE-2023-21804 are not publicly available in the provided documents. Monitor for updates from Microsoft and related CVE references to obtain affected products, impact, and remediation.

CVE-2023-23421

CVE-2023-23421 is part of a family of hive-memory-corruption bugs in the Windows Registry (kernel) that enable local privilege escalation. The connected analysis shows an attacker-controlled hive memory‑corruption primitive (e.g., UAF in a registry key or related hive data) that can be exploited ...

CVE-2023-24870

Technical details about CVE-2023-24870 (affected product, root cause, impact, remediation) are not provided in the supplied documents. Monitor for updates from Microsoft and CVE databases.

CVE-2023-24908

Technical details for CVE-2023-24908 are not publicly available in the provided documents. Monitor for updates to obtain affected products, root cause, impact, and fixes.

CVE-2023-35352

Technical details for CVE-2023-35352 are not publicly available in the provided documents. Monitor for updates from Microsoft and security sources.

CVE-2023-35387

CVE-2023-35387 affects the Windows Bluetooth A2DP driver, described as an Elevation of Privilege vulnerability. The CVSSv3.1 metrics indicate an adjacent attack vector, no privileges required, low attack complexity, user interaction required, and a CHANGED scope with HIGH impacts to confidentiali...

CVE-2023-38154

CVE-2023-38154 is discussed in the material as a Windows kernel/hive-level issue caused by a lack of error handling in HvpPerformLogFileRecovery during log-file-based hive recovery. The description notes this can lead to memory corruption when recovering the log file and is presented as an exampl...

CVE-2024-30018

CVE-2024-30018 is a Windows Kernel Elevation of Privilege vulnerability. The CVSS indicates local access with low privileges required and no user interaction, yielding a high impact on confidentiality, integrity, and availability (base score 7.8). Microsoft has released updates addressing Windows...

CVE-2024-30084

Technical details (affected product/versions/root cause/impact) for CVE-2024-30084 are not publicly available in the provided documents. Monitor for updates.

CVE-2024-43623

CVE-2024-43623 is documented across connected sources as a Windows NT OS Kernel elevation-of-privilege vulnerability. The ENISA/NCSC summary and related Microsoft patch-coverage references confirm it affects the Windows NT OS Kernel and was addressed via the November 2024 update cycle (e.g., KB50...

CVE-2024-49102

CVE-2024-49102 — Windows RRAS Remote Code Execution is a network‑based vulnerability in the Routing and Remote Access Service (RRAS) of Windows. The CVSS score cited in the initial entry is 8.8/10 (High) with AV:N, AC:L, PR:N, UI:R, S:U, C/H/I/A: High, indicating unauthenticated network access re...

CVE-2025-21382

CVE-2025-21382 affects the Microsoft Windows Graphics Component. It is a local elevation-of-privilege vulnerability in the graphics driver component, with a CVSSv3.1 base score of 7.8 (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). Connected sources indicate that public exploits exist. Microsoft has issue...

CVE-2025-26644

CVE-2025-26644 affects Windows Hello by allowing local spoofing due to inadequate handling of adversarial input perturbations. Microsoft documents a Windows Hello security fix path via monthly updates (e.g., KB5055528 for Windows 11 22621/22631; KB5055519 for older Windows builds) that enforces v...

CVE-2019-0602

The connected advisories describe a GDI information disclosure vulnerability in Microsoft Windows (CVE-2019-0602 family). Affected component: Graphics Device Interface (GDI). Root cause stated: improper handling of objects in memory leading to memory disclosure. Impact: information disclosure; (n...

CVE-2019-0635

Technical details (affected components, root cause, versions, and fixes) are not publicly available in the provided documents. Monitor for updates. CVE-2019-0635 concerns information disclosure in Windows Hyper-V where input from a guest OS may not be properly validated.

CVE-2019-0656

Technical details for CVE-2019-0656 are not publicly provided in the supplied connected documents. No explicit affected products, root cause, or remediation are stated here; monitor for updates from official sources.

CVE-2019-0702

Technical details about CVE-2019-0702 are not publicly available in the provided documents. No explicit exploitation, affected products, versions, or remediation are stated here. Monitor for updates from authoritative sources.

CVE-2019-1476

CVE-2019-1476 affects Windows AppX Deployment Service (AppXSVC). It is an elevation-of-privilege vulnerability arising from improper handling of file hard links (and related junctions) by AppXSVC, enabling a low-privileged user to overwrite arbitrary files and escalate privileges. Public exploit ...

CVE-2020-0655

CVE-2020-0655 corresponds to a Remote Desktop Services vulnerability where an authenticated attacker can trigger remote code execution via clipboard redirection. The connected KB entries confirm the CVE is among multiple Microsoft Windows vulnerabilities and highlight the affected component as Re...

CVE-2020-17098

CVE-2020-17098 maps to a Windows GDI+ Information Disclosure vulnerability. Connected documents reference this ID across multiple OpenVAS entries and NVD/NVD-derived records, with CVSS details indicating local access and varying impact on confidentiality (high in CVSS 3.1 vectors, partial in some...

CVE-2021-24096

CVE-2021-24096 is a Windows Kernel Elevation of Privilege vulnerability that was exploited via a registry symbolic-link bypass related to server silos. The accompanying analysis with CVE context (MSRC) notes that Microsoft fixed this issue in 2021 by removing the PsIsCurrentThreadInServerSilo che...

CVE-2021-33785

CVE-2021-33785 is described in connected records as a Windows/Windows Server Denial of Service vulnerability in the AF_UNIX Socket Provider. The documents do not provide detailed affected products/versions, root cause, exploit info, or remediation steps beyond the general DoS context.

CVE-2021-34489

CVE-2021-34489 is a DirectWrite remote code execution vulnerability in Microsoft Windows/Windows Server. The issue affects the DirectWrite component and is described as enabling arbitrary code execution with a HIGH impact, requiring user interaction (UI:R) and a local vector (AV:L/AC:L on CVSS3) ...

CVE-2021-34498

Technical details about CVE-2021-34498 are not publicly provided in the connected documents. The available sources (NVD/NCSC/CNVD, etc.) mention the vulnerability at a high level without specifics on affected products, versions, impact, or fixes. Monitor for updates.

CVE-2021-38665

CVE-2021-38665 is described as a Remote Desktop Protocol Client Information Disclosure Vulnerability. The provided records show CVSSv3.1 base score 6.5 (NETWORK, LOW ATTACK COMPLEXITY, NONE PRIVILEGES, UI: REQUIRED) and a CNA-provided score of 7.4 (HIGH confidentiality impact). Exploitation detai...