CVE-2023-28270

Technical details about CVE-2023-28270 are not publicly available in the provided documents. Monitor for updates from Microsoft and vulnerability feeds.

CVE-2024-29998

CVE-2024-29998 is a Windows Mobile Broadband Driver Remote Code Execution vulnerability. The available documents confirm the affected product area (Windows Mobile Broadband Driver) and that exploitation could lead to code execution with high impact on confidentiality, integrity, and availability,...

CVE-2024-30015

CVE-2024-30015 affects Windows Routing and Remote Access Service (RRAS). The connected NCSC advisory lists CVE-2024-30015 under RRAS with impact described as Execution of random code (CVSS v3.1: 7.5, Network attack vector, high complexity, no privileges required, user interaction required, impact...

CVE-2024-30019

CVE-2024-30019 is a Windows DHCP Server Denial-of-Service vulnerability. The OpenVAS/NCSC references confirm affected product Windows DHCP Server and impact Denial-of-Service (CVSS around 6.5). Exploitation or exploit status is not detailed in the provided docs. Remediation is to apply the Micros...

CVE-2024-37972

Technical details for CVE-2024-37972 are not publicly provided in the supplied documents. No affected products, root cause, impact, or remediation are disclosed here. Monitor for updates from authoritative sources.

CVE-2024-43561

Technical details about CVE-2024-43561 (affected products/versions, root cause, impact, and fix) are not provided in the connected documents. Monitor for updates from Microsoft and CVE records.

CVE-2024-43592

CVE-2024-43592 is a Windows RRAS remote code execution vulnerability. The connected sources indicate it affects Windows RRAS with an attack vector over the network, requiring low privileges and no user interaction, yielding a high impact on confidentiality, integrity, and availability (C/H/I/A). ...

CVE-2025-21213

Technical details about CVE-2025-21213 are not provided in the supplied documents. No affected products, root cause, or remediation specifics are disclosed here. Monitor for updates from official advisories.

CVE-2025-21332

CVE-2025-21332 corresponds to a MapUrlToZone Security Feature Bypass in Windows. The connected data shows a CVSS v3.1 base score of 4.3 (vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N) indicating a network-accessible issue with low integrity/availability impacts and user interaction require...

CVE-2026-62790

CVE-2026-62790 is a Windows SMB Server heap-based buffer overflow that allows an authorized network attacker to execute code remotely. The vulnerability is associated with Windows SMBv3 Server, enabling remote code execution over the network with low privileges and no user interaction (CVSSv3.1: ...

CVE-2019-0572

CVE-2019-0572 concerns a Windows Data Sharing Service elevation of privileges vulnerability. Connected sources indicate the issue affects Microsoft Windows Data Sharing Service components in Windows 10 and related OS families, enabling a local attacker to obtain elevated privileges by abusing imp...

CVE-2019-0598

Technical details for CVE-2019-0598 are not publicly available in the provided documents; monitor for updates.

CVE-2019-0615

Technical details (affected products/versions, root cause specifics, impact scope) for CVE-2019-0615 are not publicly available in the provided documents. Monitor for updates in connected advisories (CPAI series) and official disclosures.

CVE-2019-0616

Microsoft Windows GDI (Graphics Device Interface) contains an information disclosure vulnerability. The Graphics Device Interface component is affected due to improper handling of objects in memory, enabling a remote attacker to obtain sensitive information. The linked advisories corroborate the ...

CVE-2019-0617

CVE-2019-0617 is a remote code execution vulnerability in the Windows Jet Database Engine caused by improper handling of objects in memory. The issue is characterized by a high-severity impact (CVSS v3.0: 7.8) with a local attack vector, requiring user interaction, and resulting in high confident...

CVE-2019-0759

Technical details about CVE-2019-0759 are not publicly available in the provided documents. Monitor for updates and additional authoritative disclosures.

CVE-2019-0840

The connected documents identify CVE-2019-0840 as a Windows kernel information disclosure vulnerability. The disclosed details describe an issue in the Microsoft Windows kernel where information can be exposed due to improper handling of objects in memory, leading to unauthorized access to sensit...

CVE-2019-1148

CVE-2019-1148 affects the Microsoft Windows Graphics Component, where memory handling flaws can disclose information. The vulnerability requires the attacker to log on and run a crafted application, with potential information disclosure as the impact. Microsoft addresses it via a patch that fixes...

CVE-2019-1224

The CVE-2019-1224 entry describes an information disclosure in the Windows RDP server where memory contents could be exposed to an attacker. The vulnerability requires remote authentication-free access: an attacker must connect to an affected system and run a specially crafted application to expl...

CVE-2019-1333

Technical details about CVE-2019-1333 (affected components, root cause, impact, or fixes) are not provided in the connected documents. The initial description references a Windows Remote Desktop Client RCE, but no public details are included here; monitor for updates.

CVE-2020-0632

Technical details about CVE-2020-0632 are not publicly provided in the connected records; no affected products, root cause, impact, or fix information is disclosed here. Monitor for updates from vendors/security advisories.

CVE-2020-1083

The CVE-2020-1083 vulnerability is a local information-disclosure issue in the Windows Graphics Component caused by improper handling of objects in memory. An attacker must log on to the affected system and run a crafted application to exploit it. The update fixes the issue by correcting how the ...

CVE-2020-1286

CVE-2020-1286 is a Windows Shell remote code execution vulnerability caused by improper validation of file paths. Exploitation could allow code execution in the context of the current user. The connected documents corroborate the CVE and list it among multiple Windows vulnerabilities addressed in...

CVE-2020-1312

Technical details (affected versions, root cause, exploit/mitigation specifics) for CVE-2020-1312 are not publicly provided in the connected documents. Monitor for updates from official advisories and vulnerability feeds.

CVE-2020-1339

CVE-2020-1339 is a remote code execution flaw described for Windows Media codecs. The Initial document states that it occurs when Windows Media Audio Codec improperly handles objects, enabling an attacker to take control of an affected system. Exploitation vectors include convincing a user to ope...

CVE-2020-1414

CVE-2020-1414 affects Windows Runtime by an elevation of privilege due to improper handling of objects in memory. The description identifies Windows Runtime Elevation of Privilege Vulnerability but provides no public details on affected versions, specific vulnerable components, exploit availabili...

CVE-2021-1657

Technical details for CVE-2021-1657 are not publicly available in the provided documents; monitor for updates.

CVE-2021-28338

Technical details for CVE-2021-28338 are not provided in the supplied documents. Monitor for official disclosures and remediation guidance as more information becomes available.

CVE-2021-28355

Technical details for CVE-2021-28355 are not publicly available in the provided documents; monitor for updates.

CVE-2021-31170

CVE-2021-31170 affects the Windows Graphics Component (graphics driver) and is described as an elevation of privilege vulnerability. Multiple connected sources identify a local threat requiring no user interaction, with root cause framed as a resource management error in the Microsoft Graphics Co...

CVE-2021-31952

CVE-2021-31952 is a Windows Kernel-Mode Driver elevation-of-privilege vulnerability. Affected product area is the Windows kernel-mode driver; the root cause is an elevation of privilege in the kernel-mode driver that could allow an attacker with local access to gain higher privileges. The CVSS me...

CVE-2021-33786

Technical details about CVE-2021-33786 are not public in the provided documents; no concrete affected products, root cause, impact, or remediation are present. Monitor for updates as new disclosures may appear.

CVE-2021-38636

The CVE-2021-38636 entry refers to a Windows Redirected Drive Buffering SubSystem Driver Information Disclosure vulnerability. Affected software is Windows; the vulnerability affects the Redirected Drive Buffering SubSystem Driver (component/driver) and enables partial confidentiality impact via ...

CVE-2021-40477

Technical details for CVE-2021-40477 are not publicly provided in the connected documents. Monitor for updates; none of the supplied sources describe affected products, root cause, impact, or remediation for this CVE.

CVE-2021-40489

Technical details for CVE-2021-40489 (Storage Spaces Controller Elevation of Privilege) are not provided in the supplied connected documents; no affected product/version/root-cause/impact or remediation details are stated here.

CVE-2022-30145

The CVE is Windows Encrypting File System (EFS) Remote Code Execution (CVE-2022-30145). Public records in the connected documents confirm this as a Windows OS vulnerability affecting EFS functionality, with multiple Microsoft security updates released in June 2022 (e.g., KB5014699, KB5014678, KB5...

CVE-2022-38033

CVE-2022-38033 is described in connected sources as a Windows Server vulnerability titled “Remotely Accessible Registry Keys Information Disclosure Vulnerability.” The common thread across documents is that this issue allows access to sensitive data via registry keys exposed remotely, with an imp...

CVE-2023-21816

No concrete technical details about CVE-2023-21816 are present in the connected documents. The initial description only notes a Windows AD DS DoS. Monitor official advisories and vendor updates for remediation, affected versions, impact, and patch information.

CVE-2023-24909

CNVD-2023-30863 describes CVE-2023-24909 as a remote code execution vulnerability in Microsoft PostScript and PCL6 Class Printer Driver. The CNVD entry states the vulnerability exists and affects the printer drivers from Microsoft, but it does not provide detailed root cause, affected versions, o...

CVE-2023-28235

CVE-2023-28235 is a Windows Lock Screen Security Feature Bypass vulnerability. The initial record cites CVSS 3.1 (PHYSICAL attack vector, LOW attack complexity, no privileges required, no user interaction) with Impact on confidentiality, integrity, and availability rated High. Connected documents...

CVE-2023-32009

Technical details for CVE-2023-32009 are not publicly available in the provided documents. No affected products, root cause, or remediation are stated here. Monitor for updates.

CVE-2024-30009

CVE-2024-30009 corresponds to a Windows RRAS remote code execution vulnerability. The RRAS service is affected, with the issue enabling execution of arbitrary code on a network-accessible target. The CVSS vector indicates network access, low attack complexity, no privileges required, user interac...

CVE-2024-43520

CVE-2024-43520 is a Windows Kernel Denial-of-Service vulnerability. The initial records classify it as a Windows kernel issue affecting availability, with a CVSS v3.1 base score of 5.0 (LOCAL, LOW privileges, LOW attack complexity, UI: REQUIRED, S: U, C/N/I with A:H). Connected sources indicate t...

CVE-2024-49095

CVE-2024-49095 affects the Windows PrintWorkflowUserSvc with an Elevation of Privilege vulnerability. The entry shows a local attack vector (AV:L), high impact on confidentiality, integrity, and availability (C>I>A), with user interaction not required and a low privilege requirement. The CW...

CVE-2025-21303

Technical details are not publicly provided in the supplied documents for CVE-2025-21303 (Windows Telephony Service RCE). Monitor for updates from Microsoft; no specific vulnerable component/version or remediation is described here.

CVE-2025-26647

CVE-2025-26647 describes an elevation-of-privilege vulnerability in Windows Kerberos caused by improper input validation, allowing network-based privilege escalation. Affected component: Windows Kerberos in Windows client/server environments. Impact is high (CVSS 3.1: 8.8, Network exploit, Privil...

CVE-2025-26648

CVE-2025-26648 affects the Windows Kernel. Description: sensitive data stored in memory that is not properly locked can allow an authorized locally authenticated attacker to elevate privileges. The issue is listed under Windows Kernel vulnerabilities (CVE-2025-26648) with high impact (local Privi...

CVE-2026-42982

CVE-2026-42982 affects Windows Secure Kernel Mode. The issue is improper validation of input consistency within that subsystem, enabling an authorized user to escalate privileges locally. The vulnerability is described as a local, user‑level privilege escalation with high impact (confidentiality,...

CVE-2026-65794

CVE-2026-65794 is a buffer over-read in the Windows SMB Client that allows an unauthenticated attacker to disclose information over the network. The CVSS v3.1 base score is 6.5 (Medium) with a network attack vector, low attack complexity, no privileges required, and user interaction required; imp...

CVE-2018-8411

CVE-2018-8411 is a local NTFS elevation-of-privilege vulnerability in Windows due to NTFS failing to properly check access rights. A local attacker could exploit this to gain elevated privileges on affected Windows editions (Windows 7, Windows 8.1, Windows 10, Windows Server 2008/2012/2016/2019 a...