CVE-2021-43233

CVE-2021-43233 is a Windows Remote Desktop Client remote code execution vulnerability. Public data (NVD) rates it as CVSS v3.1 7.5 (HIGH) with NETWORK access, high attack complexity, and no privileges required, but user interaction is required. A connected document notes an additional assessment:...

CVE-2022-26797

Technical details about CVE-2022-26797 are not publicly available in the provided connected documents. Monitor for updates from official sources to obtain affected products, root cause, impact, and remediation.

CVE-2022-35795

Technical details for CVE-2022-35795 are not provided in the connected documents; the materials here do not reveal affected products, root cause, or remediation. Monitor for updates from official sources.

CVE-2023-32039

Technical details about CVE-2023-32039 are not provided in the connected documents. Please monitor for updates.

CVE-2023-33166

No public technical details for CVE-2023-33166 are provided in the connected documents. The initial description offers a generic RPC DoS label; monitor for updates for any affected products, versions, or fixes.

CVE-2023-35318

Technical details about CVE-2023-35318 are not provided in the supplied documents; no affected products, root cause, or remediation are disclosed here. Monitor for updates.

CVE-2023-35357

CVE-2023-35357 is a Windows Kernel local privilege escalation stemming from registry hive memory corruption. The material shows how an attacker can leverage an out-of-bounds hive cell index to manipulate the CMHIVE/HHIVE, potentially reading/writing kernel memory via hacks like the registry value...

CVE-2023-36871

Technical details for CVE-2023-36871 are not publicly available in the provided connected documents. No vendor/product/version specifics, exploit information, or remediation are included here. Monitor for updates from official sources.

CVE-2024-30062

CVE-2024-30062 affects Windows Standards-Based Storage Management Service. The connected data documents confirm a local, user-interaction–required remote code execution vulnerability in Windows Storage components, with CVSSv3.1: AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H (base 7.8). The issue is tied to...

CVE-2024-38053

Technical details for CVE-2024-38053 are not provided in the supplied documents; no affected products, root cause, impact, or remediation are specified here. Monitor for updates.

CVE-2024-49104

The connected NCSC advisory (EUVD/NCSC) lists CVE-2024-49104 under Windows Routing and Remote Access Service (RRAS) with a high impact: Execution of arbitrary code (CVSS 8.80). The RRAS entry is described as vulnerable to arbitrary code execution, but the document does not provide root cause spec...

CVE-2025-21247

CVE-2025-21247 is a MapUrlToZone security bypass in Windows. Description: Improper resolution of path equivalence allows a network attacker to bypass a security feature. CVSS: 3.1, Network attack, Low complexity, No privileges required, User interaction required, Confidentiality impact Low; Integ...

CVE-2025-21269

CVE-2025-21269 is described as a Windows HTML Platforms Security Feature Bypass vulnerability. Connected CNVD/NCSC/KB entries reference a Windows HTML Platforms security feature bypass without detailed exploit steps; the Initial metrics show CVSS 3.1 (4.3, Network, UI: Required). Exploitation spe...

CVE-2025-21280

CVE-2025-21280 is a Windows Virtual Trusted Platform Module Denial of Service vulnerability. Connected documents identify the affected component as the Windows Virtual TPM and note an impact on availability. The NCSC advisory lists a CVSS v3.1 base score of 5.5 (LOCAL attack, LOW privileges requi...

CVE-2025-26670

CVE-2025-26670 is a Windows LDAP use-after-free vulnerability that enables remote code execution over the network. The available connected sources confirm the issue affects Windows LDAP and describe the underlying cause as a use-after-free condition, with the impact explicitly stated as remote co...

CVE-2025-26674

CVE-2025-26674 is a Windows Media heap-based buffer overflow vulnerability that could allow an authorized, locally present attacker to execute code on the system. The CVE has a base score of 7.8 ( HIGH ) and is addressed by Microsoft security updates (e.g., KBs from the April 2025 cycle). See Mic...

CVE-2025-32725

CVE-2025-32725 is a Windows DHCP Server vulnerability described as a protection‑mechanism failure that allows an attacker to cause a network DoS. Connected sources confirm this CVE is associated with the DHCP Server and note that remediation involves applying June 2025 Windows security updates (e...

CVE-2019-0734

CVE-2019-0734 is a Windows elevation-of-privilege issue where a man-in-the-middle can decode and replace Kerberos authentication requests, enabling an attacker to be validated as Administrator. Affected: Microsoft Windows Kerberos authentication flow. Impact as documented: high severity with pote...

CVE-2019-0811

Technical details about CVE-2019-0811 (affected products, root cause, impact, fixes) are not provided in the connected documents. Please monitor for updates.

CVE-2019-1074

CVE-2019-1074 is a Windows elevation-of-privilege vulnerability involving symbolic link handling in folders with local service privileges. The available description states that exploitation could grant access to unauthorized information, and that the fix is to prevent symbolic links in these scen...

CVE-2019-1206

CVE-2019-1206 describes a memory corruption vulnerability in the Windows Server DHCP service triggered by processing specially crafted DHCP failover packets. The underlying issue is improper handling of failover packets, which can allow a remote attacker to cause the DHCP service to become nonres...

CVE-2019-1267

CVE-2019-1267 describes an elevation of privilege in Microsoft Compatibility Appraiser. A local attacker can exploit a vulnerable configuration file through symbolic/link attacks to gain higher privileges. Documented impact is elevation of privilege with local access required; CVSS scores indicat...

CVE-2019-1411

CVE-2019-1411 is a DirectWrite information disclosure vulnerability. The issue arises when DirectWrite improperly discloses memory contents. The CVSS v3.1 vector indicates NETWORK attack, LOW complexity, no privileges required, UI interaction is REQUIRED, with a HIGH impact on confidentiality and...

CVE-2020-0637

The connected records describe CVE-2020-0637 as an information-disclosure vulnerability in Microsoft Remote Desktop Web Access caused by improper handling of credential information. Affected component: Remote Desktop Web Access (Microsoft). Root cause: incorrect credential handling leading to dis...

CVE-2020-0779

CVE-2020-0779 is described as an elevation of privilege vulnerability in Windows Installer, arising when MSI packages process symbolic links. The affected component is Windows Installer (MSI) handling of symbolic links, enabling a local attacker to escalate privileges by bypassing access restrict...

CVE-2020-0803

Technical details for CVE-2020-0803 are not publicly provided in the connected documents; monitor for updates.

CVE-2020-0838

CVE-2020-0838 describes an elevation-of-privilege vulnerability in Windows NTFS where access checks are insufficiently performed. An attacker who can log on locally and run a specially crafted application could execute code in an elevated context, potentially gaining full control of the affected ...

CVE-2020-0994

The CVE-2020-0994 entry describes a Remote Code Execution in the Windows Jet Database Engine caused by improper handling of in-memory objects. Connected documents corroborate a Jet Database Engine memory-corruption vulnerability that could allow arbitrary code execution when a user opens a crafte...

CVE-2020-1162

CVE-2020-1162 and CVE-2020-1324 are elevation-of-privilege flaws in Windows Security Health Service. They arise from how memory objects are handled, enabling local attackers who can log on to execute code with elevated privileges and potentially compromise memory, depending on the specific CVE. T...

CVE-2020-1185

Technical details about CVE-2020-1185 are not publicly available in the provided EUVD documents; monitor for updates.

CVE-2020-1196

CVE-2020-1196 is described as an elevation of privilege vulnerability in Windows Print Configuration, caused by how printconfig.dll handles objects in memory. The CVE entry notes local access is required with low attack complexity, and the impact is high on confidentiality, integrity, and availab...

CVE-2020-1253

Technical details about CVE-2020-1253 are not provided in the connected documents. The initial entry notes an elevation of privileges in the Windows kernel-mode driver, but no specifics (versions, impact, or fixes) are included here.

CVE-2020-1256

Technical details, affected components, and fixes for CVE-2020-1256 are not provided in the connected documents. Public details unavailable here; monitor the Security Update Guide and KB notes for updates.

CVE-2020-1282

Technical details for CVE-2020-1282 are not provided in the connected documents. Based on the initial entry, no explicit exploit vectors, impacted products, or remediation are disclosed here; monitor for official updates.

CVE-2020-1334

Technical details about CVE-2020-1334 are not publicly provided in the supplied documents. Monitor for updates from official advisories and connected sources.

CVE-2021-1694

Technical details about CVE-2021-1694 are not publicly provided in the supplied documents. Monitor for updates from vendor advisories or standard CVE databases.

CVE-2021-1696

CVE-2021-1696 is a Windows Graphics Component Information Disclosure Vulnerability. The initial entry provides the vulnerability type but no detailed product/version/affected component beyond that. Connected sources (OpenVAS entries and a Xerox advisory) reference CVE-2021-1696 among broader Wind...

CVE-2021-24081

CVE-2021-24081 is described in the provided documents as a Microsoft Windows Codecs Library Remote Code Execution vulnerability. The OSV entry reiterates the label but does not specify affected versions, root cause details, or a patch. CVSSv3.1 metrics shown indicate a HIGH base score (7.8) with ...

CVE-2021-27086

CVE-2021-27086 concerns a local-elevation-of-privilege in Windows where the Windows Services and Controller App is the affected component. The CVE’s base metrics indicate a local, low-attack-complexity path with high-impact (confidentiality, integrity, and availability) if exploited, with no user...

CVE-2021-27094

Technical details for CVE-2021-27094 are not publicly provided in the supplied documents; the entry only states a Windows Early Launch Antimalware Driver security feature bypass. Monitor for updates; no affected products, impacts, or fixes are specified here.

CVE-2021-36973

Technical details about CVE-2021-36973 (affected components, root cause, impact, vulnerable versions, and fixes) are not provided in the connected documents. Monitor official sources (Microsoft security guidance, NVD) for updates and remediation information.

CVE-2021-43216

Technical details for CVE-2021-43216 are not publicly provided in the supplied documents. Monitor for updates from the referenced sources; no public specifics on affected products, versions, or impacts are included here.

CVE-2022-26820

Technical details about CVE-2022-26820 are not publicly available in the provided documents. Monitor for updates.

CVE-2023-21701

CVE-2023-21701 is described as a Microsoft PEAP Denial of Service vulnerability with a CVSS v3.1 base score of 7.5 (Network attack, no user interaction, high impact to availability). The provided documents do not include concrete exploit details, affected product versions, root cause, or a confir...

CVE-2023-32041

CVE-2023-32041 concerns a Windows Update Orchestrator Service information disclosure vulnerability. The provided documents do not include concrete technical details (affected products/versions, root cause, exploitability, or fixes). Monitor for updates.

CVE-2023-33169

Technical details about CVE-2023-33169 are not publicly provided in the supplied documents. Monitor for updates from official sources; no product/vendor/version/impact information or fixes are included here.

CVE-2023-35306

CVE-2023-35306 is a Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure vulnerability. Available data identifies the affected component as the Microsoft PostScript and PCL6 Class Printer Driver, with impact described as information disclosure and a CVSS v3.1 base score of 5....

CVE-2023-35312

The CVE-2023-35312 entry concerns Microsoft VOLSNAP.SYS with local access privilege escalation. Based on the provided metrics, the vulnerability supports LOCAL attack vector, requiring LOW privileges and no user interaction, with HIGH impact on confidentiality, integrity, and availability (CVSS 3...

CVE-2023-35320

CVE-2023-35320 corresponds to a Windows vulnerability described as an elevation of privilege in Connected User Experiences and Telemetry. Connected documents provide a high‑level reference and list this CVE among Windows vulnerabilities, noting an elevation of privilege with vague, non‑specific d...

CVE-2024-30076

Technical details for CVE-2024-30076 are not publicly available in the provided documents; no affected products, root cause, or remediation are specified here. Monitor for updates from official vulnerability databases.