CVE-2024-49123

CVE-2024-49123 is a Windows Remote Desktop Services remote code execution vulnerability. Public records in ENISA list CVE-2024-49123 under Windows Remote Desktop Services with a CVSS v3.1 base score of 8.1 (NETWORK, NONE/CONFLICTING constraints: high impact to confidentiality, integrity, and avai...

CVE-2025-21215

Technical details about CVE-2025-21215 are not provided in the connected documents. Public information here is limited to the vulnerability title and references; monitor for updates from Microsoft/NVD.

CVE-2025-21254

CVE-2025-21254 is associated with Internet Connection Sharing (ICS) in Windows and is described as a Denial-of-Service vulnerability. The primary documented impact is availability disruption (A) with low attack complexity and adjacent-attack vector, no authentication or user interaction required,...

CVE-2025-21349

CVE-2025-21349 is described by the connected NCSC advisory as a Windows vulnerability in Remote Desktop Services: a tampering flaw in the Windows Remote Desktop Configuration Service. The entry lists a CVSS v3.1 base score of 6.8 (Medium), with network access required (AV:N, UI:R, S:U) and high c...

CVE-2025-21373

Technical details for CVE-2025-21373 are not provided in the supplied documents. Monitor for updates from Microsoft and the KB/MSRC references for affected product, impact and fixes.

CVE-2025-27473

CVE-2025-27473 affects Windows HTTP.sys. Description in the connected sources confirms an uncontrolled resource consumption condition that enables a network-based Denial of Service, exploitable by an unauthorized attacker. The vulnerability impact is denial of service over the network; no exploit...

CVE-2026-62784

Microsoft Local Security Authority Server (lsasrv) is affected by CVE-2026-62784 due to a heap-based buffer overflow that allows an authorized attacker to execute code over the network. CVSS v3.1 score: 8.8 (High) with Network access, Low complexity, Privileges Required: Low, User Interaction: No...

CVE-2018-8484

CVE-2018-8484 is an elevation of privilege vulnerability in the DirectX Graphics Kernel (DXGKRNL) driver where objects in memory are improperly handled. Affected products/versions (as per documents): Windows 10 and Windows Server editions listed (Windows 8.1, Windows 10, Windows 10 Servers, Windo...

CVE-2019-1326

CVE-2019-1326 describes a denial of service vulnerability affecting Windows Remote Desktop Protocol (RDP). The Red Hat entry repeats the DoS description (attacker connects via RDP and sends specially crafted requests) but provides no further technical details, affected software versions, root cau...

CVE-2019-1384

Technical details about CVE-2019-1384 are not publicly available in the provided documents. The materials mention a NETLOGON security feature bypass but do not specify affected products, versions, root cause, or fixes. Monitor for updates.

CVE-2019-1474

Technical details for CVE-2019-1474 are not publicly provided in the connected documents. The CVE entry lacks explicit product/version/impact/fix mapping in the supplied materials; monitor for updates.

CVE-2020-0717

Technical details for CVE-2020-0717 are not publicly provided in the supplied documents. No affected products/versions or remediation are specified here. Monitor for updates from official sources.

CVE-2020-0734

CVE-2020-0734 affects the Windows Remote Desktop Client. The connected Nessus entries describe a remote code execution vulnerability when a user connects to a malicious RDP server, enabling arbitrary code on the client. The issue is addressed by February 2020 Windows security updates (KB4537820 /...

CVE-2020-0840

This CVE (CVE-2020-0840) describes an elevation of privilege in Windows arising from improper handling of hard links (Windows Hard Link Elevation of Privilege Vulnerability). The description notes a local attack resulting in a higher-privilege impact, with the CVSS v3.1 vector indicating Local ac...

CVE-2020-0904

CVE-2020-0904 is a denial-of-service vulnerability affecting Microsoft Hyper-V. The issue arises when Hyper-V fails to properly validate specific malicious data originating from a user on a guest OS, potentially allowing an authenticated attacker inside a VM (with privileged guest access) to trig...

CVE-2020-1004

Technical details (affected products/versions, root cause, exploit information, fixes) for CVE-2020-1004 are not publicly provided in the supplied documents. Monitor for updates as new details may be published.

CVE-2020-1410

CVE-2020-1410 describes a remote code execution vulnerability in Windows Address Book (WAB) where processing of vcard files is flawed. The CNVD-2021-65603 entry corroborates a WAB-based RCE affecting Windows/Windows Server. Public descriptions state that an attacker could deliver a malicious vCar...

CVE-2020-1436

CVE-2020-1436 concerns Windows font library handling of specially crafted fonts. Root cause: improper input handling in the font subsystem. Impact: remote code execution on affected Windows versions (excluding Windows 10 per the description). Connected sources confirm the vulnerability exists; no...

CVE-2020-16876

CVE-2020-16876 refers to an elevation of privilege in the Windows Application Compatibility Client Library due to improper handling of registry operations. The vulnerability requires code execution on the victim system and the attacker must subsequently run a specially crafted application to gain...

CVE-2020-17040

Technical details for CVE-2020-17040 are not publicly provided in the Connected documents. The NVD entry summarizes a Windows Hyper-V security feature bypass but does not disclose affected products, root cause, exploit vectors, or remediation here. Monitor for updates.

CVE-2020-17097

Technical details (affected products, root cause, exploitability) for CVE-2020-17097 are not provided in the supplied documents. Monitor for updates.

CVE-2021-1702

Technical details for CVE-2021-1702 are not publicly available in the provided documents. Please monitor for updates.

CVE-2021-1731

Technical details about CVE-2021-1731 are not publicly provided in the connected documents. Monitor for updates from NVD/OSV/MSKB mentions to clarify affected product, root cause, and remediation.

CVE-2021-24083

Technical details about CVE-2021-24083 are not provided in the connected documents. Public details are limited to the Windows Address Book RCE label; monitor for updates.

CVE-2021-28315

CVE-2021-28315 is a Windows Media Video Decoder Remote Code Execution Vulnerability. Public entries describe an RCE affecting Windows systems via the Windows Media Video Decoder component; CVSS metrics show a Local, Low-Complexity access with Partial confidentiality, integrity, and availability i...

CVE-2021-28443

Technical details about CVE-2021-28443 (affected Windows Console Driver DoS) are not provided in the connected documents. No product/version/root-cause/exploit or remediation details are disclosed here; monitor for official updates.

CVE-2021-28445

Technical details for CVE-2021-28445 are not publicly provided in the supplied documents. Monitor for updates from vendors and advisories to obtain affected products, impact, and remediation.

CVE-2022-26787

Technical details for CVE-2022-26787 are not provided in the supplied documents. Please monitor for updates from official sources for affected products, impact specifics, and remediations.

CVE-2022-35758

Technical details about CVE-2022-35758 (affected product/component, root cause, impact, or remediation) are not publicly provided in the supplied connected documents. Monitor for updates from official sources.

CVE-2022-37996

CVE-2022-37996 is documented as a Windows kernel memory information disclosure vulnerability with a CVSSv3.1 base score of 5.5 (LOCAL attack vector, LOW attack complexity, LOW privileges required, HIGH confidentiality impact). The linked NCSC advisory lists CVE-2022-37996 under Windows NTFS with ...

CVE-2022-44683

Technical details for CVE-2022-44683 are not provided in the connected documents. No product, version, root cause, impact, or fix details are present. Monitor for updates.

CVE-2023-32042

Technical details about CVE-2023-32042 are not publicly provided in the supplied documents. No affected products, root cause, or remediation are specified here. Monitor for updates as connected sources do not elaborate.

CVE-2023-32053

Technical details about CVE-2023-32053 (affected components, root cause, versions, exploit status) are not publicly provided in the supplied documents. Monitor for updates in connected sources to obtain concrete information.

CVE-2023-35348

Public technical details about CVE-2023-35348 (Active Directory Federation Service Security Feature Bypass) are not provided in the connected documents. Currently, only high-level descriptions and mappings exist. Monitor for official advisories and published fixes for specifics.

CVE-2024-30008

CVE-2024-30008 is a Windows DWM Core Library information-disclosure vulnerability. Affected component: Windows DWM Core Library. Root cause: information disclosure (no specifics provided). Impact per sources: confidentiality impact high; CVSS 3.1 base 5.5 (LOCAL, low attack complexity and privile...

CVE-2024-30065

Technical details (affected product, root cause, impact, and fix) are not provided in the supplied documents. Monitor for updates from Microsoft/MSRC as more information becomes available.

CVE-2024-38031

Technical details, affected products/versions, and remediation for CVE-2024-38031 are not provided in the connected documents. Public specifics such as exploitability and fixes are not included; monitor for updates from official sources.

CVE-2024-38045

Technical details about CVE-2024-38045 are not publicly provided in the supplied documents. References acknowledge a Windows TCP/IP remote code execution vulnerability but do not specify affected products, root cause, versions, or fixes; monitor for updates.

CVE-2024-38128

Technical details (affected products, root cause, exploit status) are not publicly disclosed in the provided documents; monitor for updates as more information becomes available.

CVE-2024-43450

CVE-2024-43450 is a Windows DNS spoofing vulnerability affecting Windows DNS/NTLM; the CVSS v3.1 base score is 7.5 (Network, High impact, User interaction required). Connected sources place this CVE in Microsoft Windows DNS with impact described as “Pretend to be another user.” Microsoft has rele...

CVE-2025-21261

Technical details about CVE-2025-21261 (affected product, vulnerability vector, impact, or patch) are not publicly provided in the connected documents; no concrete specifics are available here. Monitor official advisories and Microsoft/MSRC guidance for remediation.

CVE-2025-21316

Technical details for CVE-2025-21316 are not publicly available in the provided documents. Monitor for updates from Microsoft and threat intelligence sources.

CVE-2019-0942

CVE-2019-0942 concerns Windows 10 Unified Write Filter (UWF). The connected sources describe an elevation of privilege resulting from improper restriction of access to the registry within UWF. Affected component: UWF on Windows 10; root cause cited as registry access restriction flaw. Documented ...

CVE-2019-1168

CVE-2019-1168 describes a local elevation-of-privilege vulnerability in the Windows p2pimsvc service. According to NVD/NVD-derived descriptions, an attacker who can log on to the system could run a crafted application to execute arbitrary code with elevated privileges, effectively taking control ...

CVE-2019-1186

CVE-2019-1186 affects Windows via wcmsvc.dll, where improper handling of memory objects enables local privilege escalation. A locally authenticated attacker can run a crafted application to execute code with elevated privileges. A security update patches wcmsvc.dll to correctly handle memory obje...

CVE-2019-1341

Technical details about CVE-2019-1341 are not provided in the connected documents. The current set does not reveal affected products, root cause, or fixes beyond the initial description. Monitor for updates.

CVE-2020-0735

Technical details for CVE-2020-0735 are not publicly available in the provided documents. Monitor for updates.

CVE-2020-0783

CVE-2020-0783 is an elevation-of-privilege vulnerability in the Windows Universal Plug and Play (UPnP) service. The root cause, as described in provided documents, is improper handling of objects in memory within the UPnP service, enabling a local attacker to execute code with elevated system pri...

CVE-2020-0793

CVE-2020-0793 is an elevation-of-privilege vulnerability affecting the Diagnostics Hub Standard Collector Service, where improper handling of file operations enables local attacker exploitation. The CVSSv3.1 vector indicates LOCAL access, LOW attack complexity, LOW privileges required, and NONE u...

CVE-2020-0837

CVE-2020-0837 affects Active Directory Federation Services (ADFS) and is an Elevation of Privilege vulnerability arising from improper handling of multi-factor authentication requests. The initial description states that an attacker could bypass some MFA factors by sending a specially crafted aut...