CVE-2026-25177

CVE-2026-25177 is an elevation-of-privilege vulnerability in Active Directory Domain Services. The CVE affects AD DS and permits an authorized attacker to elevate privileges over the network (CVSS v3.1: 8.8, Network, Privileges Required: Low, User Interaction: None, Confidentiality/Integrity/Avai...

CVE-2018-8454

CVE-2018-8454 is a Windows information-disclosure vulnerability in the Windows Audio Service where memory objects may be mishandled. Affected products listed in the CVE entry include Windows 10, Windows 10 Servers, and Windows Server 2019. In the Nessus/OpenVAS content, this vulnerability is incl...

CVE-2021-33765

Technical details about CVE-2021-33765 are not publicly provided in the supplied documents. Monitor for updates.

CVE-2021-34493

CVE-2021-34493 is a Windows Partition Management Driver Elevation of Privilege vulnerability. The connected documents describe a local, privilege-escalation flaw in the Partition Management Driver that can affect Windows client/server platforms. CVSS data included with the NVD entry shows CVSS‑3....

CVE-2021-38634

CVE-2021-38634 is a Microsoft Windows Update Client Elevation of Privilege vulnerability. Public data (NVD) lists it as a local, low-privilege, no-user-interaction EoP affecting the Windows Update Client, with CVSS v3.1 base score 7.8 (HIGH) and CVSSv2 base score 7.2. The CNA entry also shows a r...

CVE-2021-41366

CVE-2021-41366 : Credential Security Support Provider Protocol (CredSSP) Elevation of Privilege. The NVD entry reports a high-severity (CVSS 3.1 base 7.8) vulnerability with a LOCAL attack vector, requiring LOW privileges and NO user interaction, leading to HIGH impact on confidentiality, integri...

CVE-2022-24504

Technical details for CVE-2022-24504 are not publicly provided in the supplied documents. Monitor for updates in the connected sources for affected products, impact specifics, and remediation information.

CVE-2022-29131

CVE-2022-29131 is a Windows LDAP remote-code-execution vulnerability. The connected OpenVAS/Microsoft KB entries identify this CVE among patched issues in KB5013943 (OS Build 22000.675 for Windows 11) and related updates, indicating a network-vector, LDAP-service issue that could allow RCE. The v...

CVE-2022-30196

CVE-2022-30196 affects Windows Secure Channel (Schannel) and is categorized as a network-exploitable vulnerability with no user interaction. The base CVSSv3.1 score is 8.2 (High) with impact limited to confidentiality (Low) and availability (High); integrity is not affected. The issue is addresse...

CVE-2022-34690

Technical details about CVE-2022-34690 are not publicly provided in the supplied documents; no explicit affected products, exploit information, or fixes are described. Monitor for updates.

CVE-2022-35761

Technical details about CVE-2022-35761 (affected products, root cause, impact, and fixes) are not provided in the connected and initial documents. Monitor for updates and additional disclosures.

CVE-2022-41098

Technical details for CVE-2022-41098 (affected product/component/versions/root cause/impact/remediation) are not provided in the connected or initial documents. Monitor for updates from official sources; no public details are included here.

CVE-2023-21525

Technical details for CVE-2023-21525 are not publicly provided in the supplied documents; no affected product/version/exploit information is available here. Monitor for updates from official advisories to obtain specifics and remediation guidance.

CVE-2023-21688

Technical details about CVE-2023-21688 are not publicly provided in the supplied documents. No concrete information on affected products, root cause, or remediation is available here. Monitor for updates from official sources.

CVE-2023-24931

Technical details for CVE-2023-24931 are not provided in the connected documents. Public information about affected products, root cause, impact, and fixes is not present here; monitor for official advisories and updates from vendors and CERTs.

CVE-2023-28236

CVE-2023-28236 is a Windows kernel elevation-of-privilege vulnerability. The description indicates a local-privilege escalation affecting the Windows kernel with a high impact on confidentiality, integrity, and availability (CVSS 3.1: AV:L, AC:L, PR:L, UI:N, S:U, C:H, I:H, A:H). The available con...

CVE-2023-29370

Technical details about CVE-2023-29370 are not publicly provided in the supplied documents. No affected products, root cause, impact, or remediation specifics are disclosed here. Monitor for updates in connected sources.

CVE-2023-35313

CVE-2023-35313 is a Windows OCSP SnapIn Remote Code Execution vulnerability. Multiple sources confirm a local-execution flaw in the Windows OCSP SnapIn component that could allow an attacker to remotely execute code on a vulnerable system, with impact listed as high (CVSS 7.8). Affected platforms...

CVE-2024-29997

CVE-2024-29997 concerns the Windows Mobile Broadband Driver and is characterized as a Remote Code Execution vulnerability. The primary details indicate an attacker with physical access can exploit the vulnerability with low exploit complexity and without user interaction to execute code, achievin...

CVE-2024-43559

In the connected documents, CVE-2024-43559 is listed under Windows Mobile Broadband with CVSS 6.50 Denial-of-Service, indicating a DoS impact in that subsystem. The sources do not provide the root cause, affected specific versions, exploit details, or remediation for this CVE within the documents...

CVE-2019-0776

CVE-2019-0776 is a Windows win32k information disclosure vulnerability: the win32k component improperly provides kernel information, enabling local attackers with low privileges and no user interaction to potentially access confidential data. Affected software is Windows OS via the win32k subsyst...

CVE-2019-1122

Technical details for CVE-2019-1122 are not present in the provided connected documents. Public details about affected components/versions are not provided here; monitor for updates.

CVE-2019-1128

Technical details about CVE-2019-1128 (affected component, root cause, impact, or fix) are not provided in the connected documents. Monitor for updates from official advisories.

CVE-2019-1146

CVE-2019-1146 concerns a remote code execution that arises when the Windows Jet Database Engine mismanages in‑memory objects. An attacker could exploit this by convincing a user to open a specially crafted file, enabling arbitrary code on the system. The vulnerability is addressed by Microsoft in...

CVE-2019-1419

CVE-2019-1419 is a remote code execution vulnerability in Microsoft Windows affecting the Windows Adobe Type Manager Library, caused by improper handling of specially crafted OpenType fonts. The issue is described consistently across the NVD entry and Red Hat CVE records (RH:CVE-2019-1419/CVE-201...

CVE-2019-1467

CVE-2019-1467 corresponds to a Windows GDI Information Disclosure vulnerability. The connected CNVD entries describe an information leakage in the Windows GDI component, where memory contents may be disclosed by an attacker who tricks a user into opening content or visiting a page. These sources ...

CVE-2020-0623

Technical details (affected products, versions, root cause, impact or fixes) for CVE-2020-0623 are not publicly provided in the connected documents. Monitor for updates from official advisories.

CVE-2020-0644

Technical details for CVE-2020-0644 are not publicly available in the provided documents; no affected products, root cause, or remediation are specified here. Monitor for updates.

CVE-2020-0657

CVE-2020-0657 is a Windows elevation-of-privilege vulnerability in the Common Log File System (CLFS) driver. The underlying issue is improper handling of memory objects by the CLFS driver, enabling a local attacker to elevate privileges. Connected documents reference this CVE within Microsoft upd...

CVE-2020-1376

CVE-2020-1376 describes an elevation-of-privilege in Windows components, specifically fdSSDP.dll handling of memory and the fix addressing memory object handling in ssdpsrv.dll. The exploit requires a locally authenticated attacker to run a crafted application to achieve code execution with eleva...

CVE-2020-1587

CVE-2020-1587 : Elevation of privilege in the Windows Ancillary Function Driver for WinSock caused by improper memory handling. Exploitation requires an initial execution on the victim, followed by running a crafted app to elevate privileges. Microsoft’s security update fixes the memory handling ...

CVE-2021-26891

CVE-2021-26891 is a Windows Container Execution Agent Elevation of Privilege vulnerability affecting Windows Server Containers. Project Zero analysis details multiple silo/registry/object-manager weaknesses that can be chained to escape a container from a non‑administrator. Core issues include: (...

CVE-2021-28336

The provided documents reference CVE-2021-28336 as a Windows RPC Runtime Remote Code Execution vulnerability. The CNVD entry describes a remote code execution flaw in the RPC Runtime affecting Microsoft Windows/Windows Server. Nessus/OpenVAS plugins in the connected set list CVE-2021-28336 among ...

CVE-2021-28356

Public technical details for CVE-2021-28356 are not provided in the connected documents; sources reference the vulnerability name but do not specify affected products, root cause, impact, or fixes.

CVE-2021-34503

CVE-2021-34503 is a Windows Media Foundation remote code execution vulnerability described in multiple sources as an issue in the Media Foundation component of Microsoft Windows that can lead to remote code execution. Connected documents corroborate that the vulnerability affects Windows Media Fo...

CVE-2021-34507

Technical details, affected products, vulnerable components, and remediation are not provided in the connected documents. Monitor for updates from official sources to obtain concrete technical information about CVE-2021-34507.

CVE-2021-38663

CVE-2021-38663 concerns a Windows exFAT File System Information Disclosure vulnerability. The entry lists impact as PARTIAL confidentiality loss (CVSS2) with LOCAL access and no authentication, and HIGH confidentiality impact (CVSS3) with LOCAL access, no exploitation details provided. The connec...

CVE-2021-40455

Public technical details for CVE-2021-40455 are not present in the provided documents; monitor for updates from official advisories.

CVE-2021-41331

CVE-2021-41331 corresponds to a Windows Media Audio Decoder Remote Code Execution Vulnerability. Public documents (NVD/NVD-derived entries) describe impact as remote code execution with high-severity ratings: CVSS 3.1 base score 7.8 (LOCAL ATTACK VECTOR, PRIVILEGES NONE, UI REQUIRED; CONF/I/H = H...

CVE-2021-41332

Technical details for CVE-2021-41332 are not publicly provided in the connected documents; no specifics on affected products, root cause, impact, or remediation are present. Monitor for updates.

CVE-2021-41377

Technical details about CVE-2021-41377 are not publicly provided in the supplied documents. No affected products/versions, root cause, or fixes are disclosed here. Monitor for updates from official advisories.

CVE-2022-21852

Technical details for CVE-2022-21852 are not publicly available in the provided documents; monitor for updates.

CVE-2022-21875

CVE-2022-21875 is documented as a Windows Storage Elevation of Privilege vulnerability. The NVD entry lists LOCAL attack vector, LOW attack complexity, and no user interaction required, with high impact on confidentiality, integrity, and availability. The CVE is also included in multiple OpenVAS/...

CVE-2022-26798

Technical details about CVE-2022-26798 are not publicly available in the provided connected documents. The initial description notes a Windows Print Spooler Elevation of Privilege vulnerability, but there are no specific vendor/product/version/root-cause/fix details in the supplied materials. Mon...

CVE-2022-30213

Technical details about CVE-2022-30213, including affected product/version, root cause, and exploit information, are not publicly provided in the connected documents. Monitor for updates as new information becomes available.

CVE-2022-41095

Technical details about CVE-2022-41095 are not present in the provided connected documents. The OpenVAS entries reference the CVE as part of Windows updates (KB5019966/KB5019980/KB5020003), but do not expose affected components, exploit vectors, or fixes beyond association.

CVE-2023-28274

Technical details (affected product/version, root cause, exploitability) are not provided in the supplied documents; no CVE-specific technical details are included. Monitor for updates from these sources.

CVE-2023-28306

Technical details about CVE-2023-28306 (Windows DNS Server RCE) are not publicly disclosed in the provided documents. Monitor for updates from official advisories and vendor notices.

CVE-2023-36889

Technical details about CVE-2023-36889 are not publicly available in the provided documents. Monitor for updates from vendors and vulnerability feeds for affected products, impact, and remediation.

CVE-2024-30028

CVE-2024-30028 is a Windows Win32k elevation-of-privilege vulnerability. The NCSC advisory lists it under Windows Win32K with a CVSS v3.1 base score of 7.8 (HIGH) and impact: higher privileges, and notes the vulnerability is exploitable locally with low attack complexity (PR:L, AV:L) and no user ...