CVE-2020-16960

CVE-2020-16960 is a Windows Backup Engine Elevation of Privilege vulnerability. Documents indicate a local attacker could exploit this to gain HIGH-severity privileges (CVSSv3.1 base score 7.8) with no user interaction required. Affected component is the Windows Backup Engine; the vulnerability i...

CVE-2021-1650

Technical details for CVE-2021-1650 are not publicly provided in the connected documents. Monitor for updates from official advisories; no specific affected product/version, root cause, impact, or remediation is included here.

CVE-2021-1695

Technical details for CVE-2021-1695 are not publicly available in the provided documents. Monitor for updates.

CVE-2021-24102

CVE-2021-24102 is a Windows vulnerability described as a local elevation of privilege in Windows Event Tracing. The connected NVD entry lists a CVSS-3.1 base score of 7.8 with local attack vector, low attack complexity, and privileges required as Low, with no user interaction. The impact is high ...

CVE-2021-28437

Technical details for CVE-2021-28437 are not provided in the supplied documents. No concrete information on affected product versions, root cause, or fixes is present; monitor for updates as new disclosures or patches emerge.

CVE-2021-31953

CVE-2021-31953 is a Windows elevation-of-privilege issue affecting the Windows Filter Manager. The NVD entry lists a CVSSv3.1 base score of 7.8 (HIGH) with LOCAL attack vector, LOW attack complexity, and privileges required: LOW; impact on confidentiality, integrity, and availability is high. The...

CVE-2021-33773

CVE-2021-33773 affects the Windows Remote Access Connection Manager in Windows/Windows Server, described as an Elevation of Privilege vulnerability. Connected sources confirm the affected component and privilege/escalation nature, with CVSS indicating high impact (local, with high confidentiality...

CVE-2021-42286

CVE-2021-42286: Windows Core Shell SI Host Extension Framework for Composable Shell Elevation of Privilege Vulnerability. Affected component: Windows Core Shell SI Host Extension Framework. Root cause: elevation of privilege in the Composable Shell path (Core Shell). Impact (per sources): local a...

CVE-2021-43224

CVE-2021-43224 targets the Windows Common Log File System (CLFS) Driver with an information disclosure vulnerability. The connected exploit repository for this CVE indicates a Proof-of-Concept that yields a crash (BSOD) on Windows 20H2 (build 19042.1387) and is labeled as a Windows CLFS Driver Po...

CVE-2021-43230

CVE-2021-43230 is a Windows NTFS Elevation of Privilege vulnerability (local, low attack complexity) with no user interaction required, per the initial CVE entry. The connected documents primarily discuss NTFS-related CVEs in the 2021-4323x family and describe a pool/size calculation overflow in ...

CVE-2022-24498

CVE-2022-24498 is a Windows iSCSI Target Service Information Disclosure vulnerability. The available data show that it affects the Windows iSCSI Target Service and has a CVSS v3.1 base score of 6.5 (Network, Low attack complexity, Low privileges required, No user interaction, Confidentiality impa...

CVE-2022-29105

No technical details about CVE-2022-29105 are present in the provided connected documents; monitor for updates.

CVE-2022-37982

CVE-2022-37982 relates to the Microsoft WDAC OLE DB provider for SQL Server, with a Remote Code Execution vulnerability. Connected documents identify the affected component as the WDAC OLE DB provider for SQL and indicate an impact of executing arbitrary code, consistent with a high-severity netw...

CVE-2015-6111

CVE-2015-6111 describes a Denial of Service affecting Windows IPSec: IPSec in Windows 8/8.1, Windows Server 2012 (Gold/R2), Windows RT (Gold/8.1), and Windows 10 (Gold/1511) mishandles encryption negotiation, allowing an authenticated remote attacker to cause the system to hang via crafted IP tra...

CVE-2016-3338

CVE-2016-3338 concerns the Windows Common Log File System (CLFS) driver elevation of privilege vulnerability. It affects multiple Windows platforms (Vista SP2, Server 2008 SP2/R2, 7 SP1, 8.1, Server 2012, RT 8.1, 10 pre-1709, and Server 2016) and is triggered by a crafted application that allows ...

CVE-2017-11847

CVE-2017-11847 affects the Windows kernel across multiple Windows client/server versions (Windows 7 SP1; Windows 8.1/RT; Windows 10 1511–1709; Windows Server 2008/2012/2016, etc.). The root cause is improper handling of objects in memory, enabling a local attacker to escalate privileges and run a...

CVE-2017-8577

Technical details for CVE-2017-8577 are not provided in the supplied documents; no explicit affected product/version, root cause, impact, or fix is disclosed here. Monitor for updates.

CVE-2017-8681

Technical details about CVE-2017-8681 are not publicly provided in the connected documents. No specifics on affected versions, root cause, impact, or remediation are present. Monitor for updates.

CVE-2018-0983

CVE-2018-0983 is a Windows Storage Services elevation-of-privilege vulnerability in Windows 10 (versions 1511, 1607, 1703, 1709) and Windows Server 2016/1709, caused by improper handling of objects in memory. Exploitation would allow local attackers to run processes with elevated privileges. The ...

CVE-2018-8434

CVE-2018-8434 is a Windows Hyper-V information disclosure vulnerability. It occurs when a host OS fails to properly validate input from an authenticated user on a guest OS, allowing potential disclosure of memory information. Affected platforms include Windows 7, Windows Server 2008/2012 families...

CVE-2018-8497

CVE-2018-8497 is a Windows kernel elevation-of-privilege issue described as occurring in how the kernel handles objects in memory. Affected products listed in the CVE entry include Windows Server 2016, Windows 10, Windows Server 2019, and Windows 10 Server variants. The connected records confirm ...

CVE-2018-8506

The CVE-2018-8506 entry affects Microsoft Windows Codecs Library. Root cause: improper handling of objects in memory, leading to information disclosure. An attacker could exploit this by persuading a user to open a specially crafted image file, potentially exposing sensitive information. The vuln...

CVE-2019-0710

CVE-2019-0710 is a Windows Hyper-V denial-of-service vulnerability. A privileged guest-OS user can run a crafted application inside a VM that causes the host server to crash, due to Hyper-V failing to validate certain guest requests. The issue affects Hyper-V on the host and is exploitable by a g...

CVE-2019-0715

The CVE-2019-0715 entry affects Microsoft Hyper-V Network Switch and is described as a denial-of-service vulnerability. A privileged attacker on a guest OS can run a crafted application to crash the host server, indicating that input validation in the Hyper-V Network Switch path is inadequate. Th...

CVE-2019-0719

CVE-2019-0719 describes a remote code execution vulnerability in the Windows Hyper-V Network Switch. The issue occurs when a host server fails to properly validate input from an authenticated user on a guest OS, enabling potential arbitrary code execution on the host. Affected component is the Hy...

CVE-2019-0893

The connected CNVD entries describe Microsoft Windows Jet Database Engine Buffer Overflow vulnerabilities in Windows and Windows Server. The flaw arises when the engine performs memory operations without proper data-boundary validation, leading to buffer/heap overflows. Concrete exploit details, ...

CVE-2019-0895

The connected CNVD entries describe a Windows Jet Database Engine vulnerability as a buffer overflow/heap overflow issue arising when memory boundaries are not properly validated. They state an attacker could exploit this condition to cause memory corruption, affecting Windows/Windows Server envi...

CVE-2019-0972

CVE-2019-0972 affects the Local Security Authority Subsystem Service (LSASS) where an authenticated attacker can trigger a denial of service by sending specially crafted authentication requests. Exploitation could cause the LSASS service to reboot the target system. Microsoft’s security update mi...

CVE-2019-1041

CVE-2019-1041 (Windows Kernel Elevation of Privilege) is a Windows kernel vulnerability where improper handling of objects in memory allows an attacker who can log on to run arbitrary code in kernel mode. The attacker could then install programs, view/change/delete data, or create accounts with f...

CVE-2019-1170

CVE-2019-1170 is a Windows NTFS sandbox-elevation-of-privilege vulnerability. It arises when sandboxed processes create reparse points, enabling a sandbox escape and privilege escalation on the affected system. Public exploit activity exists (e.g., exploit-db). The issue is rooted in the NTFS san...

CVE-2019-1247

Technical details about CVE-2019-1247 are not publicly provided in the supplied documents. The materials reference the Jet Database Engine RCE generally but do not specify affected products, versions, impact, or fixes. Monitor for updates.

CVE-2019-1252

CVE-2019-1252 is a Windows GDI information disclosure vulnerability. The Graphical Device Interface component can improperly disclose memory contents due to how objects are handled in memory. A remote attacker could exploit this by enticing a user to open a specially crafted web page or document,...

CVE-2019-1268

CVE-2019-1268 involves a privilege escalation in Microsoft Windows Winlogon. The root cause, as described in CNVD-2019-31856, is that Winlogon does not properly handle file path information, allowing an attacker to log on and run a specially crafted application to execute arbitrary code with elev...

CVE-2019-1344

Technical details about CVE-2019-1344 are not publicly provided in the supplied documents. The Connected documents do not include affected products, root cause, impact, or fixes. Monitor for updates from official sources.

CVE-2019-1346

Technical details for CVE-2019-1346 are not provided in the connected documents. The materials reference a Windows memory-handling DoS but do not specify affected components, versions, impact, or remediation. Monitor for updates.

CVE-2020-0613

Technical details about CVE-2020-0613 are not publicly available in the provided documents; monitor for updates.

CVE-2020-0684

CVE-2020-0684 is a Windows remote code execution vulnerability triggered when a .LNK file is processed. The connected docs confirm that an attacker could execute code with the current user’s privileges, affecting Windows/Windows Server platforms via .LNK handling, and that patches were released i...

CVE-2020-0771

CVE-2020-0771 is a Windows CSC Service privilege-elevation vulnerability caused by improper memory handling. It requires local execution to exploit and could allow an attacker to gain elevated privileges on the system. Connected documents confirm the affected component is Windows CSC Service and ...

CVE-2020-0896

Technical details about CVE-2020-0896 are not provided in the connected documents. Public information in these sources does not specify affected products, root cause, or fixes. Monitor for updates.

CVE-2020-1009

CVE-2020-1009 is an Elevation of Privilege vulnerability in the Microsoft Store Install Service where local file operations in protected locations can be abused to gain elevated access. Root cause as stated: how the service handles file operations in protected locations. Impact is described as HI...

CVE-2020-1382

CVE-2020-1382 is a Windows Graphics Component elevation of privilege vulnerability. The affected component is the Windows Graphics Component, and the root cause is improper handling of objects in memory, enabling an attacker to run processes in an elevated context after logging onto a vulnerable ...

CVE-2020-1511

CVE-2020-1511 : A privilege-elevation vulnerability in the Connected User Experiences and Telemetry Service arises from improper handling of file operations. An attacker could run a specially crafted application on the victim’s system to execute code in an elevated context. The threat is mitigate...

CVE-2020-1542

CVE-2020-1542 is a Windows Backup Engine elevation-of-privilege vulnerability caused by improper memory handling. An attacker must first gain execution on the victim and then run a crafted application to elevate privileges. Windows updates fix the issue by correcting how the Backup Engine handles...

CVE-2020-1550

Technical details for CVE-2020-1550 are not publicly provided in the connected documents; the initial entry notes memory handling in Windows CDP User Components but no vendor/version/root-cause specifics are given here. Monitor for updates.

CVE-2020-1551

CVE-2020-1551 : Elevation of Privilege in Windows Backup Engine due to improper handling of memory. The vulnerability requires prior execution on a vulnerable system and can be exploited by running a specially crafted application to elevate privileges. The Windows security update fixes memory han...

CVE-2020-1578

CVE-2020-1578 is an information disclosure vulnerability in the Windows kernel that could allow an attacker to retrieve kernel object memory addresses, potentially bypassing ASLR. Exploitation requires user login on the affected system and running a crafted app. The mitigation is a Microsoft secu...

CVE-2020-17038

Technical details for CVE-2020-17038 are not publicly available in the provided documents. No affected products, root cause, or remediation information are included. Monitor for updates.

CVE-2021-1654

Technical details for CVE-2021-1654 are not publicly provided in the connected documents. Monitor for updates as new information becomes available; current sources do not specify affected product versions, root cause, impact, or remediation beyond the initial description.

CVE-2021-24103

CVE-2021-24103 corresponds to a Windows Event Tracing Elevation of Privilege vulnerability. Documents provide CVSS 3.1 base score 7.8 (LOCAL, LOW privileges required, NONE user interaction; high impact on confidentiality, integrity, and availability). The vulnerability is active per the CVE entry...

CVE-2021-27096

CVE-2021-27096 refers to an NTFS elevation-of-privilege weakness in Microsoft Windows/Windows Server. The CNVD entry confirms an NTFS vulnerability that could allow privilege escalation, but the provided documents do not disclose the exact root cause, affected builds, or a specific fix. NVD/Secur...