CVE-2019-1093

Technical details about CVE-2019-1093 are not provided in the connected documents. Monitor for updates from Microsoft/MSRC and ENISA entries for affected components and remediation.

CVE-2019-1164

CVE-2019-1164 is a Windows kernel elevation-of-privilege vulnerability. The security flaw arises when the Windows kernel mishandles objects in memory, allowing a logged-on attacker to run arbitrary code in kernel mode and potentially install programs, view/change/delete data, or create privileged...

CVE-2020-0769

CVE-2020-0769 is an Elevation of Privilege vulnerability affecting the Windows CSC Service, arising from memory handling issues in the service. The CVE entry notes that exploitation requires initial code execution on the victim system, allowing an attacker to elevate privileges within the system....

CVE-2020-16921

CVE-2020-16921 is an information-disclosure vulnerability in the Windows Text Services Framework caused by improper handling of objects in memory. An attacker who can log on to an affected system and open a specially crafted file could read data not intended to be disclosed. The issue does not en...

CVE-2020-17139

CVE-2020-17139 affects Windows file-system mini-filter drivers (notably the Windows Overlay Filter, WOF). The vulnerability arose from OS-added IO control/FSCTL handling changes (FSCTL_SET_REPARSE_POINT_EX) that WOF did not handle, enabling an application to attach or remove WOF IO tags and there...

CVE-2021-1637

Technical details for CVE-2021-1637 are not publicly provided in the connected documents. Monitor official advisories for updates.

CVE-2021-1683

CVE-2021-1683 concerns an impersonation issue in the Bluetooth Passkey Entry Protocol. The NVD description references a Bluetooth SIG statement, indicating mitigations via a Microsoft software update. The update changes pairing behavior to fail when the remote device exchanges a public key with t...

CVE-2021-27092

CVE-2021-27092: Azure AD Web Sign-in Security Feature Bypass Vulnerability. The connected data confirms a concrete vulnerability in Azure Active Directory web sign-in, enabling arbitrary browsing via federated endpoints. CVSS metrics show a high to critical impact (CVSSv3.1: 9.8, NETWORK, LOW exp...

CVE-2021-33760

Technical details for CVE-2021-33760 are not publicly provided in the supplied connected documents. The materials mention a Media Foundation information disclosure vulnerability but contain no product/version/exploit specifics. Monitor for updates.

CVE-2021-40463

CVE-2021-40463 is a Windows NAT Denial of Service vulnerability. The connected OpenVAS entries map this CVE to multiple Microsoft KBs (KB5006667, KB5006669, KB5006670, KB5006674, KB5006675, etc.), indicating it is considered in Windows security update contexts, but the provided documents do not d...

CVE-2021-41347

Technical details about CVE-2021-41347 are not publicly provided in the connected documents. The affected software/impact specifics are not disclosed here. Monitor for official advisories from Microsoft and CVE listings for updated exploit information and remediation.

CVE-2021-43222

CVE-2021-43222 documents a Microsoft Message Queuing information disclosure vulnerability. The issue affects MSMQ when handling messages over the network, enabling an attacker with network access and no authentication to potentially access confidential information. According to the CVE entry, the...

CVE-2022-21872

Technical details about CVE-2022-21872 are not provided in connected documents. Public input only labels it as Windows Event Tracing Elevation of Privilege Vulnerability; monitor for updates.

CVE-2022-21876

Technical details for CVE-2022-21876 are not publicly available in the provided documents. Monitor for updates from the sources listed in the NVD entry and associated advisories.

CVE-2022-35832

CVE-2022-35832 is documented as a Windows Event Tracing Denial of Service vulnerability. The connected sources provide no explicit product/version information or fix details; the NVD entry lists a CVSSv3.1 base score of 5.5 (Medium) with LOCAL attack vector, LOW privileges required, no user inter...

CVE-2022-35837

Technical details about CVE-2022-35837 are not publicly provided in the supplied documents. Monitor for updates from official sources; current materials only confirm the vulnerability name and CVE ID without specifics.

CVE-2022-38022

CVE-2022-38022 is listed in the ENISA/NCSC (Windows Kernel) catalog as a Windows Kernel elevation-of-privilege vulnerability. The NCSc table places CVE-2022-38022 under Windows Kernel with the impact category “Obtaining Increased Entitlements.” No explicit root-cause, affected versions, or remedi...

CVE-2016-3305

Technical details about CVE-2016-3305 are not publicly available in the provided documents. Monitor for updates to confirm affected components, impact, and fixes.

CVE-2017-0162

Technical details for CVE-2017-0162 are not present in the connected documents. The Initial document provides a high-level vulnerability description only. Monitor for updates from official advisories for affected products and fixes.

CVE-2018-0820

CVE-2018-0820 affects the Windows kernel on Windows 7 SP1, Windows 8.1/RT 8.1, Windows Server 2008 SP2/R2 SP1, 2012/2012 R2, Windows 10 (various builds) and Windows Server (various). The vulnerability arises from how objects are handled in memory, enabling local privilege escalation from a low-pr...

CVE-2018-8214

CVE-2018-8214 is a Windows Desktop Bridge Elevation of Privilege vulnerability where Desktop Bridge fails to properly manage the virtual registry. Exploitation is referenced in CIRCL entries with exploits listed (e.g., exploit-db 44915 for CVE-2018-8214), indicating local privilege escalation on ...

CVE-2019-0696

CVE-2019-0696 is a Windows kernel local elevation-of-privilege vulnerability. Affected: Windows kernel; root cause described as improper handling of objects in memory. Impact: attacker gains kernel-level privileges locally (no user interaction required per CVSS). Exploitation status and exact pat...

CVE-2019-0787

CVE-2019-0787 is described as a remote code execution vulnerability in the Windows Remote Desktop Client when a user connects to a malicious server. Connected documents confirm this CVE refers to the RDP client and note it alongside other remote‑network bugs Microsoft has addressed (e.g., CVE-201...

CVE-2019-1025

CVE-2019-1025 describes a Windows denial-of-service vulnerability caused by improper handling of objects in memory. An attacker who can log on or convince a user to open a crafted file on a network share could make the target stop responding. It does not enable code execution or direct privilege ...

CVE-2019-1043

The CVE-2019-1043 entry concerns a remote code execution in the Windows comctl32.dll memory handling. The issue allows an attacker to execute arbitrary code in the caller’s context, with the attacker gaining the current user’s rights; administrative context could lead to full control of the syste...

CVE-2019-1085

Technical details for CVE-2019-1085 are not provided in the connected documents. The initial description mentions a Windows WLAN Service elevation of privilege vulnerability but includes no vendor/product/version specifics, exploit info, or remediation details. Monitor for updates and refer to of...

CVE-2019-1156

The CVE-2019-1156 entry concerns the Windows Jet Database Engine. It describes a remote code execution vulnerability caused by improper handling of memory objects, permitting an attacker to execute arbitrary code on a victim system. Exploitation involves enticing a user to open a specially crafte...

CVE-2019-1345

Technical details (affected product/version/patch) for CVE-2019-1345 are not publicly provided in the connected documents. The initial text notes a Windows kernel information disclosure but lacks specific vendor/product/version or mitigation details; monitor for updates.

CVE-2019-1395

CVE-2019-1395 denotes a Windows Win32k elevation-of-privilege vulnerability where the Win32k component mishandles objects in memory. Affects Windows with local access and low attack complexity, enabling complete confidentiality, integrity, and availability compromise for the attacker. The entry s...

CVE-2019-1469

CVE-2019-1469 is a Windows win32k information-disclosure vulnerability. The gained CVE details indicate the flaw resides in the win32k component exposing kernel information due to incorrect handling, enabling local attackers with logon rights to disclose information. Connected documents describe ...

CVE-2020-0615

Technical details about CVE-2020-0615 are not publicly provided in the supplied documents. Monitor for updates from official advisories and CNVD/ENISA entries to confirm affected products, impact, and fixes.

CVE-2020-0744

Technical details for CVE-2020-0744 are not publicly provided in the supplied documents. Monitor for updates.

CVE-2020-0992

CVE-2020-0992 corresponds to a remote code execution in the Windows Jet Database Engine caused by improper handling of memory objects. The connected CNVD entries describe a Microsoft Windows Jet Database Engine RCE vulnerability with the same root cause (memory object handling) and the impact bei...

CVE-2020-1270

CVE-2020-1270 is documented as a Windows WLAN Service Privilege Elevation Vulnerability. The connected CNVD entry describes a privilege escalation in the way memory objects are handled by the Windows WLAN Service, enabling code execution with elevated privileges via a crafted application. Other c...

CVE-2020-1382

CVE-2020-1382 is a Windows Graphics Component elevation of privilege vulnerability. The affected component is the Windows Graphics Component, and the root cause is improper handling of objects in memory, enabling an attacker to run processes in an elevated context after logging onto a vulnerable ...

CVE-2020-1398

CVE-2020-1398 corresponds to the Windows Lockscreen Elevation of Privilege vulnerability. The connected CNVD entry confirms the issue originates from improper handling of the Lock screen’s Ease of Use dialog, enabling privilege escalation when exploited. The initial description states exploitatio...

CVE-2020-1515

CVE-2020-1515 is an Elevation of Privilege vulnerability in Windows Telephony Server caused by improper memory handling. An attacker who already has code execution on the target could escalate privileges locally by running a crafted application. Microsoft’s security update fixes memory handling i...

CVE-2020-1541

CVE-2020-1541 is a Windows vulnerability in the Windows Backup Engine that enables elevation of privilege by abusing memory handling. Public documentation in the connected CNVD and NVD entries confirms the root cause as improper memory handling within Windows Backup Engine, requiring prior code e...

CVE-2020-16885

Technical details about CVE-2020-16885 are not publicly provided in the supplied documents. Monitor for updates from official advisories and vendor advisories for confirmed impact and remediation.

CVE-2020-16892

CVE-2020-16892 is a Windows kernel image elevation-of-privilege vulnerability. It arises from how the Windows kernel handles objects in memory, enabling a locally authenticated attacker to execute code with elevated permissions. The described exploitation path requires a locally run crafted appli...

CVE-2020-17043

Technical details for CVE-2020-17043 are not provided in the supplied documents. Public information is limited to a general vulnerability description; no product/version/root-cause/exploit details are included. Monitor for updates from official advisories.

CVE-2020-17137

CVE-2020-17137 is a DirectX Graphics Kernel Elevation of Privilege vulnerability. Affects Microsoft Windows systems via the DirectX Graphics Kernel component (DXGK); the root cause is an Elevation of Privilege flaw with local attack vector, requiring low privileges and no user interaction (CVSSv3...

CVE-2021-1656

CVE-2021-1656 is a TPM device driver information disclosure vulnerability affecting Windows TPM drivers. It yields a confidentiality impact (HIGH per CVSS v3.1 and PARTIAL per CVSS v2) with LOCAL attack vector and LOW privileges required; exploitation status is not detailed in the provided docume...

CVE-2021-1671

CVE-2021-1671 corresponds to a Remote Procedure Call (RPC) Runtime Remote Code Execution vulnerability in Microsoft Windows/Windows Server. The connected documents confirm an RPC Runtime RCE with a network attack vector and a high-severity impact profile (CVSSv3.1 base score 8.8; Confidentiality/...

CVE-2021-1695

Technical details for CVE-2021-1695 are not publicly available in the provided documents. Monitor for updates.

CVE-2021-24102

CVE-2021-24102 is a Windows vulnerability described as a local elevation of privilege in Windows Event Tracing. The connected NVD entry lists a CVSS-3.1 base score of 7.8 with local attack vector, low attack complexity, and privileges required as Low, with no user interaction. The impact is high ...

CVE-2021-26876

CVE-2021-26876 is an OpenType Font Parsing Remote Code Execution vulnerability. Connected sources indicate it affects Windows components (notably the Windows Graphics Component) with a high impact (CVSSv3.1 8.8) and network attack vector. The vulnerability enables remote code execution and is add...

CVE-2021-28322

Technical details about CVE-2021-28322 are not publicly provided in the supplied documents. No affected products, exploit information, or fixes are described here. Monitor for updates from the referenced advisories and vulnerability feeds.

CVE-2021-33782

Technical details for CVE-2021-33782 are not publicly available in the provided documents. No confirmed impact or remediation are described here; monitor connected sources for updates.

CVE-2021-34510

CVE-2021-34510 is a Microsoft Windows/Windows Server Elevation of Privilege vulnerability described across multiple sources as affecting the Storage Spaces Controller. Connected documents corroborate that the Storage Spaces Controller component is the affected part and that the vulnerability enab...