CVE-2022-24504

Technical details for CVE-2022-24504 are not publicly provided in the supplied documents. Monitor for updates in the connected sources for affected products, impact specifics, and remediation information.

CVE-2022-34690

Technical details about CVE-2022-34690 are not publicly provided in the supplied documents; no explicit affected products, exploit information, or fixes are described. Monitor for updates.

CVE-2022-41098

Technical details for CVE-2022-41098 (affected product/component/versions/root cause/impact/remediation) are not provided in the connected or initial documents. Monitor for updates from official sources; no public details are included here.

CVE-2023-21525

Technical details for CVE-2023-21525 are not publicly provided in the supplied documents; no affected product/version/exploit information is available here. Monitor for updates from official advisories to obtain specifics and remediation guidance.

CVE-2023-21688

Technical details about CVE-2023-21688 are not publicly provided in the supplied documents. No concrete information on affected products, root cause, or remediation is available here. Monitor for updates from official sources.

CVE-2023-24931

Technical details for CVE-2023-24931 are not provided in the connected documents. Public information about affected products, root cause, impact, and fixes is not present here; monitor for official advisories and updates from vendors and CERTs.

CVE-2023-28236

CVE-2023-28236 is a Windows kernel elevation-of-privilege vulnerability. The description indicates a local-privilege escalation affecting the Windows kernel with a high impact on confidentiality, integrity, and availability (CVSS 3.1: AV:L, AC:L, PR:L, UI:N, S:U, C:H, I:H, A:H). The available con...

CVE-2023-29370

Technical details about CVE-2023-29370 are not publicly provided in the supplied documents. No affected products, root cause, impact, or remediation specifics are disclosed here. Monitor for updates in connected sources.

CVE-2023-35313

CVE-2023-35313 is a Windows OCSP SnapIn Remote Code Execution vulnerability. Multiple sources confirm a local-execution flaw in the Windows OCSP SnapIn component that could allow an attacker to remotely execute code on a vulnerable system, with impact listed as high (CVSS 7.8). Affected platforms...

CVE-2024-29997

CVE-2024-29997 concerns the Windows Mobile Broadband Driver and is characterized as a Remote Code Execution vulnerability. The primary details indicate an attacker with physical access can exploit the vulnerability with low exploit complexity and without user interaction to execute code, achievin...

CVE-2024-38074

CVE-2024-38074 is described as a Remote Code Execution vulnerability in the Windows Remote Desktop Licensing Service. The provided CVSS 3.1 metrics indicate a network-accessible, no-authored-exploitation vector with HIGH impact to confidentiality, integrity, and availability (CVSS: 3.1: AV:N/AC:L...

CVE-2024-43559

In the connected documents, CVE-2024-43559 is listed under Windows Mobile Broadband with CVSS 6.50 Denial-of-Service, indicating a DoS impact in that subsystem. The sources do not provide the root cause, affected specific versions, exploit details, or remediation for this CVE within the documents...

CVE-2025-21297

CVE-2025-21297 is a Windows Remote Desktop Services remote code execution vulnerability with CVSS v3.1 base score 8.1 (HIGH). The initial document indicates a network attack vector with no user interaction and high impact on confidentiality, integrity, and availability. Connected sources confirm ...

CVE-2026-25177

CVE-2026-25177 is an elevation-of-privilege vulnerability in Active Directory Domain Services. The CVE affects AD DS and permits an authorized attacker to elevate privileges over the network (CVSS v3.1: 8.8, Network, Privileges Required: Low, User Interaction: None, Confidentiality/Integrity/Avai...

CVE-2018-8454

CVE-2018-8454 is a Windows information-disclosure vulnerability in the Windows Audio Service where memory objects may be mishandled. Affected products listed in the CVE entry include Windows 10, Windows 10 Servers, and Windows Server 2019. In the Nessus/OpenVAS content, this vulnerability is incl...

CVE-2019-1122

Technical details for CVE-2019-1122 are not present in the provided connected documents. Public details about affected components/versions are not provided here; monitor for updates.

CVE-2019-1419

CVE-2019-1419 is a remote code execution vulnerability in Microsoft Windows affecting the Windows Adobe Type Manager Library, caused by improper handling of specially crafted OpenType fonts. The issue is described consistently across the NVD entry and Red Hat CVE records (RH:CVE-2019-1419/CVE-201...

CVE-2019-1467

CVE-2019-1467 corresponds to a Windows GDI Information Disclosure vulnerability. The connected CNVD entries describe an information leakage in the Windows GDI component, where memory contents may be disclosed by an attacker who tricks a user into opening content or visiting a page. These sources ...

CVE-2020-0623

Technical details (affected products, versions, root cause, impact or fixes) for CVE-2020-0623 are not publicly provided in the connected documents. Monitor for updates from official advisories.

CVE-2020-0644

Technical details for CVE-2020-0644 are not publicly available in the provided documents; no affected products, root cause, or remediation are specified here. Monitor for updates.

CVE-2020-0657

CVE-2020-0657 is a Windows elevation-of-privilege vulnerability in the Common Log File System (CLFS) driver. The underlying issue is improper handling of memory objects by the CLFS driver, enabling a local attacker to elevate privileges. Connected documents reference this CVE within Microsoft upd...

CVE-2020-0945

CVE-2020-0945 is a Media Foundation information-disclosure vulnerability in Microsoft Windows media handling where memory objects are not properly managed, potentially exposing partial confidentiality. The entry provides a CVSS score (4.3/5.0 base, MEDIUM) and vectors for both CVSS v2 and v3, but...

CVE-2020-1376

CVE-2020-1376 describes an elevation-of-privilege in Windows components, specifically fdSSDP.dll handling of memory and the fix addressing memory object handling in ssdpsrv.dll. The exploit requires a locally authenticated attacker to run a crafted application to achieve code execution with eleva...

CVE-2020-1529

CVE-2020-1529 is a Windows GDI elevation-of-privilege vulnerability where improper handling of in-memory GDI objects could allow a local attacker to run code in kernel mode. The initial description notes kernel-mode code execution and privilege elevation after logging on and running a crafted app...

CVE-2020-1587

CVE-2020-1587 : Elevation of privilege in the Windows Ancillary Function Driver for WinSock caused by improper memory handling. Exploitation requires an initial execution on the victim, followed by running a crafted app to elevate privileges. Microsoft’s security update fixes the memory handling ...

CVE-2021-26891

CVE-2021-26891 is a Windows Container Execution Agent Elevation of Privilege vulnerability affecting Windows Server Containers. Project Zero analysis details multiple silo/registry/object-manager weaknesses that can be chained to escape a container from a non‑administrator. Core issues include: (...

CVE-2021-28336

The provided documents reference CVE-2021-28336 as a Windows RPC Runtime Remote Code Execution vulnerability. The CNVD entry describes a remote code execution flaw in the RPC Runtime affecting Microsoft Windows/Windows Server. Nessus/OpenVAS plugins in the connected set list CVE-2021-28336 among ...

CVE-2021-28356

Public technical details for CVE-2021-28356 are not provided in the connected documents; sources reference the vulnerability name but do not specify affected products, root cause, impact, or fixes.

CVE-2021-34503

CVE-2021-34503 is a Windows Media Foundation remote code execution vulnerability described in multiple sources as an issue in the Media Foundation component of Microsoft Windows that can lead to remote code execution. Connected documents corroborate that the vulnerability affects Windows Media Fo...

CVE-2021-34507

Technical details, affected products, vulnerable components, and remediation are not provided in the connected documents. Monitor for updates from official sources to obtain concrete technical information about CVE-2021-34507.

CVE-2021-38634

CVE-2021-38634 is a Microsoft Windows Update Client Elevation of Privilege vulnerability. Public data (NVD) lists it as a local, low-privilege, no-user-interaction EoP affecting the Windows Update Client, with CVSS v3.1 base score 7.8 (HIGH) and CVSSv2 base score 7.2. The CNA entry also shows a r...

CVE-2021-38663

CVE-2021-38663 concerns a Windows exFAT File System Information Disclosure vulnerability. The entry lists impact as PARTIAL confidentiality loss (CVSS2) with LOCAL access and no authentication, and HIGH confidentiality impact (CVSS3) with LOCAL access, no exploitation details provided. The connec...

CVE-2021-40455

Public technical details for CVE-2021-40455 are not present in the provided documents; monitor for updates from official advisories.

CVE-2021-41377

Technical details about CVE-2021-41377 are not publicly provided in the supplied documents. No affected products/versions, root cause, or fixes are disclosed here. Monitor for updates from official advisories.

CVE-2022-21852

Technical details for CVE-2022-21852 are not publicly available in the provided documents; monitor for updates.

CVE-2022-21875

CVE-2022-21875 is documented as a Windows Storage Elevation of Privilege vulnerability. The NVD entry lists LOCAL attack vector, LOW attack complexity, and no user interaction required, with high impact on confidentiality, integrity, and availability. The CVE is also included in multiple OpenVAS/...

CVE-2022-26798

Technical details about CVE-2022-26798 are not publicly available in the provided connected documents. The initial description notes a Windows Print Spooler Elevation of Privilege vulnerability, but there are no specific vendor/product/version/root-cause/fix details in the supplied materials. Mon...

CVE-2022-30213

Technical details about CVE-2022-30213, including affected product/version, root cause, and exploit information, are not publicly provided in the connected documents. Monitor for updates as new information becomes available.

CVE-2022-35761

Technical details about CVE-2022-35761 (affected products, root cause, impact, and fixes) are not provided in the connected and initial documents. Monitor for updates and additional disclosures.

CVE-2022-41095

Technical details about CVE-2022-41095 are not present in the provided connected documents. The OpenVAS entries reference the CVE as part of Windows updates (KB5019966/KB5019980/KB5020003), but do not expose affected components, exploit vectors, or fixes beyond association.

CVE-2023-28274

Technical details (affected product/version, root cause, exploitability) are not provided in the supplied documents; no CVE-specific technical details are included. Monitor for updates from these sources.

CVE-2023-28306

Technical details about CVE-2023-28306 (Windows DNS Server RCE) are not publicly disclosed in the provided documents. Monitor for updates from official advisories and vendor notices.

CVE-2023-36889

Technical details about CVE-2023-36889 are not publicly available in the provided documents. Monitor for updates from vendors and vulnerability feeds for affected products, impact, and remediation.

CVE-2024-30028

CVE-2024-30028 is a Windows Win32k elevation-of-privilege vulnerability. The NCSC advisory lists it under Windows Win32K with a CVSS v3.1 base score of 7.8 (HIGH) and impact: higher privileges, and notes the vulnerability is exploitable locally with low attack complexity (PR:L, AV:L) and no user ...

CVE-2024-38184

CVE-2024-38184 is a Windows kernel-mode driver elevation of privilege vulnerability. The CVE affects Windows kernel-mode drivers and is exploitable locally with LOW privileges required and no user interaction, with a HIGH impact on confidentiality, integrity, and availability per the CVSS 3.1 met...

CVE-2024-38265

CVE-2024-38265 is a Windows RRAS remote code execution vulnerability. The connected documents confirm RRAS is affected and indicate this CVE can lead to remote code execution over the network, with a highly elevated impact (NCSC lists 8.80, Execute random code). The initial metrics show CVSSv3.1:...

CVE-2025-21205

CVE-2025-21205 is a Windows Telephony Service vulnerability: a heap-based buffer overflow that allows a network-based attacker to achieve remote code execution. The CVSS details show a HIGH base score with NETWORK access, LOW attack complexity, and PR:N, UI:R. Successful exploitation would impact...

CVE-2019-0603

CVE-2019-0603 impacts Windows Deployment Services TFTP Server. The vulnerability stems from improper handling of objects in memory within WDSTFTP, allowing a remote attacker to craft a request that executes arbitrary code with elevated privileges. The available connected documents confirm this re...

CVE-2019-0718

Microsoft Hyper-V Denial of Service vulnerability CVE-2019-0718 arises when the Hyper-V Network Switch fails to validate input from a privileged user inside a guest VM, allowing a crafted application running on the guest to crash the host server. The vulnerability affects the Hyper-V Network Swit...

CVE-2019-0754

Technical details about CVE-2019-0754 are not publicly provided in the connected documents. The available sources reiterate the general Windows DoS description without specifics on affected components, versions, or fixes. Monitor for updates.