CVE-2021-1668

CVE-2021-1668 : Technical details are not publicly available in the provided documents. Monitor for updates.

CVE-2022-44680

CVE-2022-44680 is a Windows Graphics Component Elevation of Privilege vulnerability. The CVSSv3.1 vector (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) indicates a local, low-complexity exploit requiring low privileges with no user interaction, capable of compromising confidentiality, integrity, and avail...

CVE-2025-24988

The CVE-2025-24988 entry affects the Windows USB Video Driver, with an out-of-bounds read vulnerability that enables an authorized attacker with physical access to elevate privileges. Connected sources confirm this CVE name and context and indicate Microsoft has released updates to fix Windows US...

CVE-2025-33059

CVE-2025-33059 is an information-disclosure vulnerability in Windows Storage Management Provider caused by an out-of-bounds read. An authorized, low-privilege attacker can disclose information locally (CONFIDENTIALITY: HIGH; VECT: LOCAL; IMPACT: NONE on integrity/availability). Affected Microsoft...

CVE-2019-0909

CVE-2019-0909 is a remote code execution flaw in the Windows Jet Database Engine caused by improper handling of in-memory objects. An attacker could lure a user to open a specially crafted file to execute arbitrary code with the user’s privileges. Impact is reported as high (C/H/I/A). Remediation...

CVE-2020-1557

CVE-2020-1557: A remote code execution vulnerability in the Windows Jet Database Engine occurs due to improper handling of objects in memory. An attacker could trigger code execution by persuading a user to open a specially crafted file. The update fixes the issue by correcting how the Jet Engine...

CVE-2021-27095

Technical details about CVE-2021-27095 are not publicly provided in the connected documents. The materials reference the vulnerability only as Windows Media Video Decoder Remote Code Execution without specific affected products, versions, or fixes.

CVE-2021-28357

CVE-2021-28357 is a Windows RPC Runtime Remote Code Execution vulnerability. The CVSSv3.1 base score is 8.8 (network, low privileges required, no user interaction) with HIGH impact to confidentiality, integrity, and availability. The vulnerability affects the Windows RPC Runtime and is addressed ...

CVE-2021-31970

CVE-2021-31970 is a Windows TCP/IP Driver Security Feature Bypass vulnerability. Affected software is Windows, with the issue residing in the TCP/IP driver as described by the NVD entry. Exploitation would be local, requiring low privileges, with no user interaction, and could impact availability...

CVE-2021-40443

Technical details for CVE-2021-40443 are not publicly provided in the supplied documents. No affected products, exploit info, or remediation are specified here. Monitor for updates in the connected feeds.

CVE-2022-21847

CVE-2022-21847 is a Windows Hyper-V Denial of Service vulnerability. Public records confirm this CVE exists and is associated with local attack requirements and a medium overall risk (NVD: CVSS v3.1 base 6.5, CVSS v2: 4.9). Affected context is Hyper-V on Windows, but the exact root cause, vulnera...

CVE-2022-21981

Technical details for CVE-2022-21981 are not publicly available in the provided documents. Monitoring for future updates or disclosures is advised.

CVE-2022-30140

Technical details for CVE-2022-30140 are not publicly available in the provided documents; no affected products, root cause, or fixes are specified here. Monitor for updates from official sources.

CVE-2022-35749

Technical details about CVE-2022-35749 are not provided in the supplied documents. Available references confirm the CVE title and severity, but no affected product/version or root cause are detailed here. Monitor for official disclosures and updates.

CVE-2022-37992

Technical details for CVE-2022-37992 (Windows Group Policy Elevation of Privilege) are not publicly provided in the supplied Connected documents. Monitor for updates from Microsoft/MSRC and NVD; no product/version/impact specifics are available here.

CVE-2023-21749

CVE-2023-21749: Windows Kernel local privilege escalation stemming from registry SID table poisoning, described in CIRCL as “Windows Kernel registry SID table poisoning leading to bad locking and other issues.” The connected docs do not provide detailed root-cause analysis beyond that label, nor ...

CVE-2023-24926

CVE-2023-24926: Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability. Affects the PostScript and PCL6 class printer driver; underlying impact is remote code execution over the network. The CVSS 3.1 base score is 8.8 (High) with high confidentiality, integrity, an...

CVE-2023-36006

The CVE-2023-36006 entry concerns Microsoft WDAC OLE DB provider for SQL Server and is a Remote Code Execution vulnerability. The OpenVAS and NCSC records confirm the affected component as the WDAC OLE DB provider for SQL Server and classify the impact as high, with CVSS3.1 base metrics indicatin...

CVE-2024-30014

CVE-2024-30014 is a Windows RRAS (Routing and Remote Access Service) Remote Code Execution vulnerability. Connected sources confirm the RRAS entry with CVSS v3.1 base score 7.5 (HIGH): Network attack vector, high impact on confidentiality, integrity and availability, with user interaction require...

CVE-2024-30095

Technical details about CVE-2024-30095 (affected products, root cause, exploitability, or fixes) are not provided in the connected documents. Monitor for updates.

CVE-2024-30099

Technical details for CVE-2024-30099 are not present in the provided documents. No affected products, root cause, exploit information, or remediation are stated here. Please monitor for updates from Microsoft and related security advisories to obtain confirmed details.

CVE-2024-38223

Technical details for CVE-2024-38223 are not publicly available in the provided documents. No information on affected products, root cause, or fixes is supplied here. Monitor sources for updates.

CVE-2025-50154

CVE-2025-50154 is a Windows File Explorer spoofing vulnerability where Explorer may disclose NTLMv2-SSP hashes by rendering a remote icon for a .LNK or Library-MS that's hosted on SMB, triggering authentication. Multiple connected documents describe attacker-controlled .LNK/.library-ms payloads a...

CVE-2019-0693

CVE-2019-0693 is an elevation-of-privilege vulnerability in the Windows Subsystem for Linux caused by an integer overflow. It is a local attack with low complexity and no user interaction, potentially leading to partial confidentiality, integrity, and full availability impact as per CVSS metrics....

CVE-2019-0720

The CVE-2019-0720 entry concerns Windows Hyper-V Network Switch on a host server. The vulnerability arises when the Hyper-V switch fails to validate input from an authenticated user on a guest OS, allowing a specially crafted guest app to trigger the host OS to execute arbitrary code. The impact ...

CVE-2019-0894

CVE-2019-0894 concerns the Windows Jet Database Engine remote code execution caused by improper in-memory handling (memory boundaries) in Jet DB. Connected CNVD entries describe a related class of vulnerabilities in the Windows Jet Database Engine: buffer overflow/heap overflow arising when memor...

CVE-2020-1487

CVE-2020-1487 describes an information-disclosure vulnerability in Microsoft Media Foundation where memory objects are mishandled. Exploitation would require an authenticated user to log on and open a specially crafted file; web-based attack requires user to click a link and open the file. The im...

CVE-2020-1549

CVE-2020-1549 is the Windows CDP User Components Elevation of Privilege vulnerability. It stems from improper memory handling in Windows CDP User Components, enabling an attacker who already has code execution on the system to run a crafted application to elevate privileges. The issue is addresse...

CVE-2020-1584

CVE-2020-1584 is a Windows elevation-of-privilege vulnerability in how the dnsrslvr.dll handles in-memory objects. The underlying issue involves heap allocations and object copying in several DNS record copy paths (e.g., SigRecordCopy, NsecRecordCopy, KeyRecordCopy, OptRecordCopy, DhcidRecordCopy...

CVE-2020-16963

CVE-2020-16963 is a Windows Backup Engine elevation-of-privilege vulnerability with a CVSSv3 base score of 7.8 (LOCAL, LOW attack complexity, Privileges Required: LOW, NONE user interaction). The provided documents do not include explicit technical details on the root cause or affected components...

CVE-2021-1655

Technical details about CVE-2021-1655 are not publicly available in the provided connected documents. Monitor for updates from vendors/security advisories to obtain affected products, impact, vectors, and fixes.

CVE-2021-28339

CVE-2021-28339 is a Remote Procedure Call Runtime remote code execution vulnerability affecting Windows components. The connected scans show the CVE referenced across multiple Windows monthly security updates (KB5001330/1335/1337/1340/1342/1347) and in Nessus/OpenVAS feeds, indicating it is being...

CVE-2021-34510

CVE-2021-34510 is a Microsoft Windows/Windows Server Elevation of Privilege vulnerability described across multiple sources as affecting the Storage Spaces Controller. Connected documents corroborate that the Storage Spaces Controller component is the affected part and that the vulnerability enab...

CVE-2021-36969

Technical details for CVE-2021-36969 are not publicly available in the provided documents. Connected sources reference the CVE and vulnerability class but do not specify affected product versions, root cause, exploitability, or fixes. Monitor for updates.

CVE-2021-38662

Technical details for CVE-2021-38662 are not publicly available in the provided documents. Monitor for updates.

CVE-2022-21892

CVE-2022-21892 concerns Windows Resilient File System (ReFS). The initial entry identifies a Remote Code Execution Vulnerability in ReFS, with CVSS metrics showing a base score of 7.2 (AV:L/AC:L/Au:N/C:C/I:C/A:C) per NVD and a Microsoft 3.1 vector (CVSS:3.1) indicating physical access, low attack...

CVE-2022-21915

Technical details for CVE-2022-21915 are not publicly detailed in the provided documents. Monitor for updates; available data include CVSS scores, but no explicit exploit vectors, affected products, or remediation steps are provided here.

CVE-2022-26784

CVE-2022-26784 describes a Denial of Service vulnerability in Windows Cluster Shared Volumes (CSV). The provided documents identify CSV as the affected component and cite a vulnerability with a MEDIUM base severity (CVSS 3.1 base score 6.5) and a network-based, low-effort exploit scenario, with n...

CVE-2022-35750

Technical details about CVE-2022-35750 (affected product/component, versions, root cause, exploitability) are not publicly available in the provided Connected Documents. Monitor for updates and new disclosures in authoritative sources.

CVE-2022-38038

CVE-2022-38038 is a Windows kernel registry vulnerability caused by a 16-bit integer overflow during dynamic buffer length calculations in hive loading, leading to hive-based memory corruption and local privilege escalation. The issue is tied to regf/hive loading paths and is grouped with other r...

CVE-2022-41077

CVE-2022-41077 is Windows Fax Compose Form Elevation of Privilege. Affected component: Windows Fax service (Fax/Compose form). Root cause and impact as per provided data: local attacker with low privileges can exploit the vulnerability with no user interaction to achieve elevation of privilege, w...

CVE-2023-21693

Technical details about CVE-2023-21693 are not publicly provided in the supplied connected documents. No specifics on affected products, root cause, or remediation are included here. Monitor for updates from official sources.

CVE-2023-24944

CVE-2023-24944 is described as a Windows Bluetooth Driver Information Disclosure Vulnerability. The provided documents confirm the CVE ID and its association with Windows Bluetooth, but do not include concrete technical details in the accessible materials (no published affected versions, root cau...

CVE-2023-28217

CVE-2023-28217 is a Windows NAT Denial of Service vulnerability. The NVD entry lists CVSSv3.1 base score 7.5 (HIGH) with vector CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H. It is network-exploitable with no user interaction, no privileges required, and affects availability only. The connected do...

CVE-2023-28272

Technical details for CVE-2023-28272 are not provided in the connected documents. Public exploitability, affected components, and remediation are not disclosed here; monitor official advisories for updates.

CVE-2023-29371

Technical details about CVE-2023-29371 are not publicly available in the provided documents. Monitor for updates from vendors and security bulletins.

CVE-2023-32020

Technical details about CVE-2023-32020 are not publicly available in the provided connected documents. No affected products, root cause, impact, or remediation information is given here. Monitor for updates from official sources.

CVE-2024-30013

Technical details for CVE-2024-30013 are not provided in the supplied documents. No information about affected product/version, root cause, impact, or fixes is available here. Monitor for updates from official advisories to obtain concrete details.

CVE-2024-30036

CVE-2024-30036 – Windows Deployment Services Information Disclosure What is affected: Windows Deployment Services component of Windows. Documented as CVE-2024-30036 with an information disclosure vulnerability. What is vulnerable: The Windows Deployment Services feature exposes data confidentiali...

CVE-2024-38060

CVE-2024-38060 is a Windows Imaging Component remote code execution vulnerability. Public documents indicate it is addressed via the July 9, 2024 security updates (e.g., KBs in the July 2024 cycle). The connected MSKB entries reference security updates that address related components (e.g., RADIU...