CVE-2020-0771

CVE-2020-0771 is a Windows CSC Service privilege-elevation vulnerability caused by improper memory handling. It requires local execution to exploit and could allow an attacker to gain elevated privileges on the system. Connected documents confirm the affected component is Windows CSC Service and ...

CVE-2020-1009

CVE-2020-1009 is an Elevation of Privilege vulnerability in the Microsoft Store Install Service where local file operations in protected locations can be abused to gain elevated access. Root cause as stated: how the service handles file operations in protected locations. Impact is described as HI...

CVE-2020-1306

Technical details about CVE-2020-1306 are not provided in the connected documents. The entry notes a Windows Runtime elevation of privilege issue but does not specify affected products/versions or fixes. Monitor for updates.

CVE-2020-1524

CVE-2020-1524 is a Windows vulnerability affecting the Windows Speech Shell Components, where memory handling leads to elevation of privilege. The issue requires an attacker who already has code execution on the target to run a crafted application to gain higher privileges. Microsoft’s advisory i...

CVE-2020-1551

CVE-2020-1551 : Elevation of Privilege in Windows Backup Engine due to improper handling of memory. The vulnerability requires prior execution on a vulnerable system and can be exploited by running a specially crafted application to elevate privileges. The Windows security update fixes memory han...

CVE-2020-1578

CVE-2020-1578 is an information disclosure vulnerability in the Windows kernel that could allow an attacker to retrieve kernel object memory addresses, potentially bypassing ASLR. Exploitation requires user login on the affected system and running a crafted app. The mitigation is a Microsoft secu...

CVE-2020-16960

CVE-2020-16960 is a Windows Backup Engine Elevation of Privilege vulnerability. Documents indicate a local attacker could exploit this to gain HIGH-severity privileges (CVSSv3.1 base score 7.8) with no user interaction required. Affected component is the Windows Backup Engine; the vulnerability i...

CVE-2021-1661

Technical details for CVE-2021-1661 are not publicly available in the provided documents. Monitor for updates to confirm affected products, root cause, impact, and remediation.

CVE-2021-24079

CVE-2021-24079 is a Windows security vulnerability described as a Windows Backup Engine Information Disclosure Vulnerability. Connected sources show a CVSSv3.1 base score of 5.5 (LOCAL, LOW attack complexity, LOW privileges required, NONE user interaction) with a Confidentiality impact of HIGH an...

CVE-2021-24103

CVE-2021-24103 corresponds to a Windows Event Tracing Elevation of Privilege vulnerability. Documents provide CVSS 3.1 base score 7.8 (LOCAL, LOW privileges required, NONE user interaction; high impact on confidentiality, integrity, and availability). The vulnerability is active per the CVE entry...

CVE-2021-28318

Technical details about CVE-2021-28318 are not provided in the initial document or any connected items. No affected products, vulnerable components, impact, or remediation are specified. Monitor official advisories for updates.

CVE-2021-28324

A Windows SMB Information Disclosure Vulnerability exists in the Microsoft Server Message Block (SMB) network protocol implementation on Windows operating systems. The root cause is related to errors in object handling in memory , which could allow a remote attacker to gain unauthorized access to...

CVE-2021-28325

Technical details for CVE-2021-28325 are not publicly available in the provided connected documents. The materials reference the SMB information disclosure vulnerability and related entries, but no concrete specifics (affected products/versions/fixes) are provided here. Monitor for updates.

CVE-2021-28437

Technical details for CVE-2021-28437 are not provided in the supplied documents. No concrete information on affected product versions, root cause, or fixes is present; monitor for updates as new disclosures or patches emerge.

CVE-2021-31953

CVE-2021-31953 is a Windows elevation-of-privilege issue affecting the Windows Filter Manager. The NVD entry lists a CVSSv3.1 base score of 7.8 (HIGH) with LOCAL attack vector, LOW attack complexity, and privileges required: LOW; impact on confidentiality, integrity, and availability is high. The...

CVE-2021-33772

CVE-2021-33772 is a Windows TCP/IP Driver Denial of Service vulnerability. Connected KB data indicate the issue is addressed by the July 2021 security update KB5004237 for Windows 10 versions 2004/20H2/21H1, affecting the Windows TCP/IP driver. No further technical specifics (root cause details, ...

CVE-2021-40478

CVE-2021-40478 is described in the connected NVD entry as a Storage Spaces Controller Elevation of Privilege vulnerability. The CVSSv3.1 base score is 7.8 (HIGH), with attack vector LOCAL, attack complexity LOW, privileges required LOW, and no user interaction. The impact is listed as high confid...

CVE-2021-42274

CVE-2021-42274 is a Windows Hyper‑V Discrete Device Assignment (DDA) Denial of Service vulnerability. The connected documents indicate a Hyper‑V DoS issue without detailing exploit vectors or root cause in code. Mitigations are version‑specific Windows updates from November 2021 (e.g., KB5007205,...

CVE-2021-43224

CVE-2021-43224 targets the Windows Common Log File System (CLFS) Driver with an information disclosure vulnerability. The connected exploit repository for this CVE indicates a Proof-of-Concept that yields a crash (BSOD) on Windows 20H2 (build 19042.1387) and is labeled as a Windows CLFS Driver Po...

CVE-2021-43229

CVE-2021-43229 is an NTFS elevation-of-privilege vulnerability affecting Windows systems. The connected exploit walkthrough describes a pool-based overflow caused by an integer overflow during allocation size computation (directory path length + file name length) in several NTFS paths (e.g., Ntfs...

CVE-2022-21861

Technical details about CVE-2022-21861 are not provided in the connected documents; publicly available content in the initial entry is limited to a high-level description and scores. Monitor for updates.

CVE-2022-34726

Technical details (affected component, root cause, impact, and fix) are not provided in the supplied documents; no concrete technical specifics are available. Monitor for official disclosures and updates.

CVE-2022-38004

Technical details about CVE-2022-38004 are not publicly available in the provided documents; the connected records reference Windows Fax Service and a remote code execution vulnerability but do not disclose affected versions, root cause, exploit info, or fixes. Monitor for updates.

CVE-2022-38005

Technical details for CVE-2022-38005 are not publicly provided in the supplied documents. No specifics on affected products, impact, or fixes are present here; please monitor for updates.

CVE-2022-41101

CVE-2022-41101 is a Windows Overlay Filter Elevation of Privilege vulnerability with CVSS 3.1 base score 7.8 (HIGH). It is a LOCAL exploit requiring LOW privileges and no user interaction, with full impact on confidentiality, integrity, and availability as per the score. The provided documents id...

CVE-2015-2554

CVE-2015-2554 is a Windows kernel elevation-of-privilege vulnerability (Windows 8/8.1, Windows Server 2012 RT/R2, Windows RT 8.1, Windows 10). The issue allows local attackers to gain privileges via a crafted application and is addressed by MS15-111 (KB3096447). Public exploits exist (per Exploit...

CVE-2015-6111

CVE-2015-6111 describes a Denial of Service affecting Windows IPSec: IPSec in Windows 8/8.1, Windows Server 2012 (Gold/R2), Windows RT (Gold/8.1), and Windows 10 (Gold/1511) mishandles encryption negotiation, allowing an authenticated remote attacker to cause the system to hang via crafted IP tra...

CVE-2016-3371

CVE-2016-3371 is a Windows kernel elevation of privilege vulnerability affecting a broad set of Windows versions (Vista SP2/2008 SP2 R2, Windows 7 SP1, 8.1, Server 2012/RT, Windows 10 1511/1607). The issue stems from improper enforcement of permissions by the Windows Kernel API, allowing local at...

CVE-2017-0084

CVE-2017-0084 concerns a remote code execution in Microsoft Windows Uniscribe (USP10) via font processing. The vulnerability is triggered by a crafted font during text rendering, leading to an invalid memory operation in USP10 which can be exploited to execute arbitrary code. Exploit details in p...

CVE-2017-0166

CVE-2017-0166: An LDAP elevation of privilege vulnerability in Windows occurs when LDAP request buffer lengths are improperly calculated. This enables a remote attacker to send malicious traffic to a Domain Controller to achieve elevated privileges. The initial description and connected documents...

CVE-2017-0268

CVE-2017-0268 is an SMBv1 information-disclosure vulnerability in Microsoft Windows SMB Server handling of certain requests. Connected entries corroborate an SMBv1 information-disclosure issue affecting Windows SMB Server and reference published advisories and mitigations. IBM API Connect advisor...

CVE-2017-11781

CVE-2017-11781 is a denial-of-service vulnerability in the Microsoft Windows SMB Server (SMBv1) where an authenticated attacker can send specially crafted SMB requests to crash the server. Affected products include Windows SMB Server implementations as described in the CVE entry (server role comp...

CVE-2017-8589

CVE-2017-8589 is a Windows Search Remote Code Execution vulnerability affecting Windows 7 SP1, Windows Server 2008 SP2/R2 SP1, Windows 8.1/RT 8.1, Windows Server 2012/R2, Windows 10 (gold and 1511–1703) and Windows Server 2016. The root cause is the way Windows Search handles objects in memory, e...

CVE-2018-0883

CVE-2018-0883 is a remote code execution vulnerability in Windows Shell caused by improper validation of file copy destinations. Affected are Windows Shell components across multiple Windows platforms (Windows 7 SP1, Windows 8.1/RT 8.1, Windows Server 2008 R2/2012/2016 and Windows 10 builds up to...

CVE-2018-17612

Summary of CVE-2018-17612 : Sennheiser HeadSetup (and HeadSetup Pro) improperly published the private signing key in the public distribution and installed CA/root certificates into the local Trusted Root CA store. The root cause is the inclusion of the private key in the SennComCCKey.pem file, en...

CVE-2018-8175

CVE-2018-8175 describes a denial-of-service in Windows WebDAV Minirdr when querying a WebDAV directory. The vulnerability can be triggered by a user visiting a attacker-controlled site or link, leading to the victim’s system stopping to respond. Affected products include Windows 10 and Windows Se...

CVE-2018-8212

The CVE-2018-8212 entry describes a security feature bypass in Microsoft Device Guard (Code Integrity Policy) that could allow an attacker to inject malicious code into a Windows PowerShell session. Affected products include Windows Server 2016 and Windows 10/Windows 10 Servers. The underlying is...

CVE-2018-8486

CVE-2018-8486 is an information disclosure in DirectX caused by DirectX's improper handling of memory objects. Affected are Windows 7, Windows 8.1, Windows 10 and multiple Windows Server editions (e.g., 2008/R2, 2012, 2016, 2019). Root cause: memory objects not handled safely by DirectX. Impact: ...

CVE-2018-8497

CVE-2018-8497 is a Windows kernel elevation-of-privilege issue described as occurring in how the kernel handles objects in memory. Affected products listed in the CVE entry include Windows Server 2016, Windows 10, Windows Server 2019, and Windows 10 Server variants. The connected records confirm ...

CVE-2019-0893

The connected CNVD entries describe Microsoft Windows Jet Database Engine Buffer Overflow vulnerabilities in Windows and Windows Server. The flaw arises when the engine performs memory operations without proper data-boundary validation, leading to buffer/heap overflows. Concrete exploit details, ...

CVE-2019-0972

CVE-2019-0972 affects the Local Security Authority Subsystem Service (LSASS) where an authenticated attacker can trigger a denial of service by sending specially crafted authentication requests. Exploitation could cause the LSASS service to reboot the target system. Microsoft’s security update mi...

CVE-2019-0984

The CVE-2019-0984 entry concerns a Windows Common Log File System (CLFS) driver elevation of privilege vulnerability. The issue arises from improper handling of memory objects in CLFS, enabling an attacker who can log on to the system to run a specially crafted application with elevated privilege...

CVE-2019-1166

CVE-2019-1166 describes a Windows NTLM tampering vulnerability: a man-in-the-middle attacker could bypass NTLM Message Integrity Check protection. The provided documents reiterate the same description and do not specify the affected Windows versions, patches, or remediation steps. No explicit exp...

CVE-2019-1250

Technical details for CVE-2019-1250 are not provided in the supplied documents. Public information here confirms it’s a Windows Jet Database Engine RCE vulnerability but no product/version, affected component, impact, or fix details are specified. Monitor for updates.

CVE-2019-1268

CVE-2019-1268 involves a privilege escalation in Microsoft Windows Winlogon. The root cause, as described in CNVD-2019-31856, is that Winlogon does not properly handle file path information, allowing an attacker to log on and run a specially crafted application to execute arbitrary code with elev...

CVE-2019-1346

Technical details for CVE-2019-1346 are not provided in the connected documents. The materials reference a Windows memory-handling DoS but do not specify affected components, versions, impact, or remediation. Monitor for updates.

CVE-2019-1397

Technical details about CVE-2019-1397 are not publicly available in the provided documents; no affected products, versions, or fixes are described. Monitor for updates.

CVE-2020-0629

Technical details about CVE-2020-0629 are not provided in the supplied documents; monitoring for updates in the connected sources is advised.

CVE-2020-0739

CVE-2020-0739 is an elevation-of-privilege vulnerability in Windows where dssvc.dll improperly handles file creation, enabling file overwrite/creation in secured locations. The CVE description confirms this as a Windows privilege issue, distinct from CVE-2020-0737. Connected sources provide the c...

CVE-2020-0896

Technical details about CVE-2020-0896 are not provided in the connected documents. Public information in these sources does not specify affected products, root cause, or fixes. Monitor for updates.