CVE-2020-0810

CVE-2020-0810 affects the Diagnostics Hub Standard Collector and the Visual Studio Standard Collector on Windows. The root cause is an elevation of privilege vulnerability allowing file creation in arbitrary locations, exploitable by a logged-on attacker who runs a crafted application; this could...

CVE-2020-1489

CVE-2020-1489 is a Windows elevation-of-privilege vulnerability in the CSC Service that arises from improper memory handling. An attacker who can execute code on the victim system could run a crafted application to elevate privileges. The root cause is memory handling in the Windows CSC Service, ...

CVE-2020-1490

Technical details for CVE-2020-1490 are not provided in the connected documents. Public information about affected products, root cause, impact, or fixes is not included here; monitor for updates from official sources.

CVE-2020-1540

CVE-2020-1540 is an elevation-of-privilege issue in Windows Backup Engine caused by improper memory handling. The CNVD entry explicitly notes a memory-handling root cause and that exploitation would require prior execution on the target. Both the NVD entry and Microsoft advisories indicate that a...

CVE-2020-1549

CVE-2020-1549 is the Windows CDP User Components Elevation of Privilege vulnerability. It stems from improper memory handling in Windows CDP User Components, enabling an attacker who already has code execution on the system to run a crafted application to elevate privileges. The issue is addresse...

CVE-2020-1557

CVE-2020-1557: A remote code execution vulnerability in the Windows Jet Database Engine occurs due to improper handling of objects in memory. An attacker could trigger code execution by persuading a user to open a specially crafted file. The update fixes the issue by correcting how the Jet Engine...

CVE-2020-16963

CVE-2020-16963 is a Windows Backup Engine elevation-of-privilege vulnerability with a CVSSv3 base score of 7.8 (LOCAL, LOW attack complexity, Privileges Required: LOW, NONE user interaction). The provided documents do not include explicit technical details on the root cause or affected components...

CVE-2020-16972

CVE-2020-16972 describes an elevation of privilege in the Windows Backup Service caused by improper handling of file operations. An attacker who already has execution on the victim system could run a crafted application to elevate privileges. The fixed behavior is implemented via a security updat...

CVE-2020-17134

CVE-2020-17134 concerns the Windows Cloud Files Mini Filter Driver (cldflt) and was discussed in Project Zero material describing file-system filter drivers. The connected sources confirm this as a Windows mini-filter elevation of privilege issue affecting cloud/file-system filter drivers and not...

CVE-2021-1701

Technical details for CVE-2021-1701 are not publicly provided in the supplied documents. Monitor for updates from official advisories; no specifics on affected products, root cause, exploit, or fixes are included here.

CVE-2021-1709

Technical details (affected component, root cause, impact, or fixes) for CVE-2021-1709 are not provided in the supplied documents. Monitor for further updates from official advisories and vendors.

CVE-2021-27092

CVE-2021-27092: Azure AD Web Sign-in Security Feature Bypass Vulnerability. The connected data confirms a concrete vulnerability in Azure Active Directory web sign-in, enabling arbitrary browsing via federated endpoints. CVSS metrics show a high to critical impact (CVSSv3.1: 9.8, NETWORK, LOW exp...

CVE-2021-33758

CVE-2021-33758 is a Windows Hyper-V Denial of Service vulnerability affecting Hyper-V on Windows Server/Windows systems. The CVSS3 base metrics indicate a NETWORK attack vector, LOW attack complexity, with privileges required: LOW and no user interaction, leading to a high availability impact. Pu...

CVE-2021-33774

CVE-2021-33774 is a Windows Event Tracing elevation-of-privilege vulnerability in Microsoft Windows/Windows Server. Connected sources confirm the flaw resides in Event Tracing and can yield increased privileges, with local attack prerequisites (no user interaction) per CVSS vectors cited in publi...

CVE-2021-34513

CVE-2021-34513 corresponds to a Microsoft Windows Storage Spaces Controller elevation of privilege vulnerability. Connected sources confirm the issue resides in the Storage Spaces Controller component and can yield total/confidentiality/privilege impact as described by CVSS metrics (LOCAL, LOW at...

CVE-2021-36972

CVE-2021-36972 corresponds to a Windows SMB Information Disclosure Vulnerability. The connected records provide a local attack vector (LOCAL) with LOW to MEDIUM overall severity depending on scoring scheme: CVSS v2 base score 2.1 (LOW) and CVSS v3.1 base score 5.5 (MEDIUM) with confidentiality im...

CVE-2022-21918

Technical details about CVE-2022-21918 are not publicly provided in the connected documents. Monitor for updates and rely on official advisories for affected products, versions, and remediation.

CVE-2022-21921

CVE-2022-21921 is a Windows Defender Credential Guard security feature bypass. Connected documents identify Windows Defender as affected, with the issue categorized as a security-measure bypass (CVSS/Impact cited in sources such as Microsoft KBs and security advisories). The root cause and exact ...

CVE-2022-26794

Technical details for CVE-2022-26794 are not publicly provided in the supplied documents. No specifics on affected components, root cause, impact, or fixes are present here. Monitor for updates in connected sources.

CVE-2022-26826

Technical details for CVE-2022-26826 are not publicly provided in the supplied documents. Monitor for updates from vendors and security advisories to obtain affected products, impact, and remediation information.

CVE-2022-30198

CVE-2022-30198 is mapped to Windows Point-to-Point Tunneling Protocol with an 8.10 CVSS equivalent and is described as enabling remote code execution (Executing Random Code) on affected Windows PPTP components. Connected data confirms this CVE is listed among Windows vulnerabilites fixed/monitore...

CVE-2022-34730

Technical details about CVE-2022-34730 are not publicly provided in the supplied connected documents. No product/version/impact/fix details are present here; monitor for updates from official advisories.

CVE-2022-35841

Technical details about CVE-2022-35841 (Windows Enterprise App Management Service RCE) are not publicly provided in the connected documents. No explicit root cause, affected versions, or fixes are disclosed here; monitor Microsoft/NVD updates for technical specifics.

CVE-2022-37975

Technical details about CVE-2022-37975 (root cause, affected products/versions, exploit info, or explicit fix) are not provided in the connected documents. Monitor for official updates from Microsoft and CVE advisories for concrete remediation guidance.

CVE-2016-0169

CVE-2016-0169 is a Windows Graphics Component Information Disclosure vulnerability in GDI across Windows Vista through Windows 10 (various editions). The issue arises from improper disclosure of memory contents via a crafted document, enabling remote information leakage. Public evidence includes ...

CVE-2016-0176

CVE-2016-0176 is a Windows privilege-escalation flaw in the DirectX Graphics Kernel Subsystem (dxgkrnl.sys). It affects multiple Windows versions (7 SP1, Server 2008 R2 SP1, 8.1, Server 2012 R2/Gold, RT 8.1, 10 variants). Root cause: improper handling of memory objects in the DirectX kernel subsy...

CVE-2018-0827

CVE-2018-0827 affects Windows Scripting Host (WSH) on Windows 10 versions 1703/1709 and Windows Server 1709. The vulnerability is a Device Guard/UMCI security feature bypass caused by how objects are handled in memory, enabling a local attacker who has access to run a malicious program to bypass ...

CVE-2018-0972

CVE-2018-0972 is a Windows kernel information-disclosure vulnerability that could enable an ASLR bypass. The entry covers multiple Windows versions (desktop, server, and RT). Public details in the initial record include CVSS metrics from NVD (2.1/5.5, LOW to MEDIUM overall, LOCAL access with low ...

CVE-2018-8129

Technical details about CVE-2018-8129 are not publicly available in the provided documents; no affected products, impact, or remediation are described beyond the general description. Monitor for updates.

CVE-2018-8307

CVE-2018-8307 is a WordPad security feature bypass affecting multiple Windows versions (e.g., Windows 7, 8.1, 10, and corresponding Server editions) where embedded OLE objects are improperly handled. The vulnerability is described as a bypass of security features when WordPad processes OLE object...

CVE-2018-8438

CVE-2018-8438 is a denial-of-service vulnerability in Microsoft Hyper-V Network Switch. The issue occurs when the host fails to properly validate input from a privileged user on a guest OS, potentially impacting availability. Affected products include Windows Server 2012 R2, Windows RT 8.1, Windo...

CVE-2019-0696

CVE-2019-0696 is a Windows kernel local elevation-of-privilege vulnerability. Affected: Windows kernel; root cause described as improper handling of objects in memory. Impact: attacker gains kernel-level privileges locally (no user interaction required per CVSS). Exploitation status and exact pat...

CVE-2019-0898

Affected software: Windows Jet Database Engine (in Microsoft Windows and Windows Server). Vulnerability type & cause: Multiple connected CNVD entries describe a buffer overflow in the Jet Database Engine, occurring when memory operations do not properly validate data boundaries, leading to incorr...

CVE-2019-1043

The CVE-2019-1043 entry concerns a remote code execution in the Windows comctl32.dll memory handling. The issue allows an attacker to execute arbitrary code in the caller’s context, with the attacker gaining the current user’s rights; administrative context could lead to full control of the syste...

CVE-2019-1108

Summary: CVE-2019-1108 is a vulnerability in the Windows Remote Desktop Protocol (RDP) Client that leads to information disclosure through memory contents. The connected exploit document describes an attacker connecting remotely to an affected system and running a specially crafted application to...

CVE-2019-1245

CVE-2019-1245 is a DirectWrite information disclosure vulnerability. The provided documents confirm a memory disclosure issue in DirectWrite, but do not specify affected product versions, root cause details beyond a memory disclosure, or concrete remediation steps. A CIRCL sighting notes exploita...

CVE-2019-1318

CVE-2019-1318 corresponds to a TLS spoofing issue affecting Windows where TLS sessions without Extended Master Secret (EMS) can be exploited via man‑in‑the‑middle scenarios. Connected sources describe the vulnerability as a spoofing vulnerability in TLS when EMS is not used, with impact on confid...

CVE-2020-1175

CVE-2020-1175 is a remote code execution vulnerability in the Windows Jet Database Engine related to improper handling of objects in memory. The connected KB document (KB4556799) references a May 12, 2020 security update for Windows 10 builds 18362.836 and 18363.836 that includes security fixes a...

CVE-2020-1475

CVE-2020-1475 is a Windows Server Resource Management Service Elevation of Privilege vulnerability. The issue arises from how srmsvc.dll handles objects in memory, enabling a locally authenticated attacker to execute code with elevated privileges. The vulnerability is triggered by running a speci...

CVE-2020-1528

CVE-2020-1528 concerns an elevation of privilege in Windows related to the Windows Radio Manager API improperly handling memory. The vulnerability requires an attacker to gain code execution on the victim and then run a crafted application to elevate privileges; Microsoft’s security update fixes ...

CVE-2020-1535

CVE-2020-1535 is an Elevation of Privilege vulnerability in the Windows Backup Engine caused by improper handling of memory. An attacker would need to first gain code execution locally and then run a crafted application to elevate privileges. Microsoft’s security update addresses the issue by cor...

CVE-2020-1538

Technical details about CVE-2020-1538 are not publicly provided in the connected documents; no explicit affected products, root cause, impact, or remediation specifics are documented here. Monitor for updates in the sources above.

CVE-2020-1565

CVE-2020-1565 is a Windows elevation-of-privilege flaw: when the Public Account Pictures folder incorrectly handles junctions, an attacker who already has code execution on the target could exploit a crafted application to gain higher privileges. The core issue, per connected sources, is how Wind...

CVE-2021-1637

Technical details for CVE-2021-1637 are not publicly provided in the connected documents. Monitor official advisories for updates.

CVE-2021-1655

Technical details about CVE-2021-1655 are not publicly available in the provided connected documents. Monitor for updates from vendors/security advisories to obtain affected products, impact, vectors, and fixes.

CVE-2021-24093

Technical details about CVE-2021-24093 are not publicly provided in the supplied documents. Sources mention Windows Graphics Components and remote code execution at a high level but do not disclose affected versions, vectors, or fixes. Monitor for updates.

CVE-2021-26413

CVE-2021-26413 is the Windows Installer Spoofing Vulnerability. Microsoft and CVE records confirm a local-attack surface in the Windows Installer component that can impact integrity (as per CVSS) without user interaction. Public exploit details are not provided in the connected documents; however...

CVE-2021-26867

CVE-2021-26867 is a Windows Hyper-V remote code execution vulnerability. Public sources indicate the issue affects Hyper-V components under Windows Server/Windows client environments and is described with high/critical impact. The NCSC dossier explicitly notes that exploitation is possible for Hy...

CVE-2021-28343

Technical details for CVE-2021-28343 are not provided in the supplied documents. Public information such as affected product/version, root cause, impact, or remediation is not present here; monitor for updates.

CVE-2021-31954

CVE-2021-31954 is a Windows CLFS driver elevation-of-privilege vulnerability. The affected component is the Windows Common Log File System Driver, and the CVSS vectors indicate LOCAL attack vector with LOW attack complexity and privileges required (LOW), no user interaction, and total impact on c...