CVE-2020-0734

CVE-2020-0734 affects the Windows Remote Desktop Client. The connected Nessus entries describe a remote code execution vulnerability when a user connects to a malicious RDP server, enabling arbitrary code on the client. The issue is addressed by February 2020 Windows security updates (KB4537820 /...

CVE-2020-0737

CVE-2020-0737 is a Windows elevation-of-privilege vulnerability tied to how tapisrv.dll handles in-memory objects. The root cause is memory-objects handling in this DLL, enabling an attacker who can supply or manipulate objects to execute code with elevated privileges on affected Windows systems....

CVE-2020-0783

CVE-2020-0783 is an elevation-of-privilege vulnerability in the Windows Universal Plug and Play (UPnP) service. The root cause, as described in provided documents, is improper handling of objects in memory within the UPnP service, enabling a local attacker to execute code with elevated system pri...

CVE-2020-0793

CVE-2020-0793 is an elevation-of-privilege vulnerability affecting the Diagnostics Hub Standard Collector Service, where improper handling of file operations enables local attacker exploitation. The CVSSv3.1 vector indicates LOCAL access, LOW attack complexity, LOW privileges required, and NONE u...

CVE-2020-0840

This CVE (CVE-2020-0840) describes an elevation of privilege in Windows arising from improper handling of hard links (Windows Hard Link Elevation of Privilege Vulnerability). The description notes a local attack resulting in a higher-privilege impact, with the CVSS v3.1 vector indicating Local ac...

CVE-2020-0909

CVE-2020-0909 affects Microsoft Windows Hyper-V on Windows Server. The vulnerability arises when Hyper-V fails to properly handle specially crafted network packets, which could allow a denial-of-service condition. The connected documents confirm Hyper-V as the affected component and describe the ...

CVE-2020-0982

CVE-2020-0982 is an information disclosure vulnerability in Microsoft Windows Graphics Component. Affected: Windows Graphics Component; root cause: improper handling of in-memory objects. Impact per sources: potential disclosure of information. The connected documents also list related CVEs (CVE-...

CVE-2020-1004

Technical details (affected products/versions, root cause, exploit information, fixes) for CVE-2020-1004 are not publicly provided in the supplied documents. Monitor for updates as new details may be published.

CVE-2020-1176

The CVE-2020-1176 entry concerns a remote code execution in the Windows Jet Database Engine caused by improper handling of objects in memory. The connected document indicates that the Jet Database Engine is referenced within a May 2020 Windows security update (KB4556799) affecting OS builds 18362...

CVE-2020-1390

CVE-2020-1390 — Windows Network Connections Service elevation of privilege vulnerability. Root cause: the service mishandles objects in memory, enabling code execution with elevated privileges on a locally accessible Windows host. Affected: Windows Network Connections Service (Windows). Exploitat...

CVE-2020-1436

CVE-2020-1436 concerns Windows font library handling of specially crafted fonts. Root cause: improper input handling in the font subsystem. Impact: remote code execution on affected Windows versions (excluding Windows 10 per the description). Connected sources confirm the vulnerability exists; no...

CVE-2020-1485

CVE-2020-1485 is a Windows Information Disclosure vulnerability in the Windows Image Acquisition (WIA) Service. It allows an authenticated, local attacker who can connect an imaging device (camera/scanner/phone) and run a crafted app to disclose memory contents from WIA, potentially exposing info...

CVE-2020-1548

The CVE-2020-1548 entry concerns a memory-handling information disclosure in the Windows WaasMedic Service. The vulnerability requires an attacker to first gain execution on the target, then run a crafted application to disclose memory. The affected component is Windows WaasMedic Service; the und...

CVE-2020-16877

CVE-2020-16877 is a Windows elevation-of-privilege vulnerability caused by improper handling of reparse points. An attacker with local logon could run a crafted application to overwrite or delete files that normally require elevated permissions. Microsoft provides a security update addressing thi...

CVE-2020-17069

Technical details about CVE-2020-17069 are not publicly available in the supplied documents. Monitor for updates from official sources for affected products, root cause, and remediation.

CVE-2021-1696

CVE-2021-1696 is a Windows Graphics Component Information Disclosure Vulnerability. The initial entry provides the vulnerability type but no detailed product/version/affected component beyond that. Connected sources (OpenVAS entries and a Xerox advisory) reference CVE-2021-1696 among broader Wind...

CVE-2021-1731

Technical details about CVE-2021-1731 are not publicly provided in the connected documents. Monitor for updates from NVD/OSV/MSKB mentions to clarify affected product, root cause, and remediation.

CVE-2021-28445

Technical details for CVE-2021-28445 are not publicly provided in the supplied documents. Monitor for updates from vendors and advisories to obtain affected products, impact, and remediation.

CVE-2021-43238

CVE-2021-43238 is a Windows local elevation-of-privilege vulnerability. The NVD entry shows LOCAL vector, LOW attack complexity, and no authentication required (CVSS2: AV:L/AC:L/Au:N/C:P/I:P/A:P; CVSS3.1: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). However, the connected documents do not provi...

CVE-2021-43240

Technical details about CVE-2021-43240 are not publicly provided in the supplied documents. No affected products, root cause, fixes, or exploitation details are specified here. Monitor official disclosures and updates.

CVE-2022-21998

CVE-2022-21998 affects the Windows Common Log File System Driver and is described as a local-information-disclosure vulnerability. The CVSS details indicate a Local attack vector, low attack complexity, no user interaction, and a confidentiality impact of High (C:H) with no integrity or availabil...

CVE-2022-26787

Technical details for CVE-2022-26787 are not provided in the supplied documents. Please monitor for updates from official sources for affected products, impact specifics, and remediations.

CVE-2022-34734

Technical details (affected product/version, root cause, exploit vector, impact, and fix) are not publicly provided in the supplied documents. Monitor for updates from official vulnerability feeds.

CVE-2022-37994

Technical details about CVE-2022-37994—including affected product versions, root cause, exploitability, and remediation—are not disclosed in the provided connected documents. No concrete exploit information or fix is described here. Monitor official MSRC/NVD advisories for updates.

CVE-2022-38034

CVE-2022-38034 is a Windows Workstation Service Elevation of Privilege vulnerability. Connected documents confirm the affected component is Windows Workstation Service and that the root cause is improper privilege assignment, enabling an attacker to obtain increased privileges (described as privi...

CVE-2016-0075

CVE-2016-0075 affects the Windows kernel on Windows 8.1, Windows Server 2012 (Gold/R2), Windows RT 8.1, and Windows 10 (1511/1607). It enables a local attacker to gain privileges by a crafted application that calls a kernel API to read sensitive information from the registry. Exploit PoCs exist (...

CVE-2017-0184

Microsoft Hyper-V remote Denial of Service vulnerability (CVE-2017-0184) arises from improper validation of input from a privileged user on a guest OS, potentially allowing a guest to crash the host. Affected component: Hyper-V on Windows Server. Consequence: denial of service impacting host avai...

CVE-2017-0190

CVE-2017-0190 affects the GDI component in multiple Windows platforms (Windows Server 2008 SP2/R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold/R2, Windows RT 8.1, Windows 10 (Gold, 1511, 1607), and Windows Server 2016). The vulnerability allows remote attackers to obtain sensitive in...

CVE-2017-0273

CVE-2017-0273 is a Windows SMBv1 vulnerability described as a denial-of-service issue in the SMBv1 server. The affected component is the Microsoft Windows Server Message Block 1.0 (SMBv1) server; the root cause is improper handling of crafted SMB requests that can cause the server to stop respond...

CVE-2017-0294

CVE-2017-0294 is a Windows remote code execution vulnerability caused by improper handling of cabinet (.cab) files. The affected platforms include Windows 7 SP1, Windows Server 2008 SP2/R2 SP1, Windows 8.1, Windows RT 8.1, Windows Server 2012/R2, Windows 10 (various builds), and Windows Server 20...

CVE-2018-0884

Technical details for CVE-2018-0884 are not publicly available in the provided documents. Monitor for updates from Microsoft MSRC and related advisories.

CVE-2018-0888

CVE-2018-0888 corresponds to a vulnerability in the Microsoft Hyper-V Network Switch where 64-bit Windows clients/servers (Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012/R2; Windows 10 versions 1511–1709; Windows Server 2016) are exposed to information disclos...

CVE-2018-0968

CVE-2018-0968 is a Windows kernel information-disclosure vulnerability that could enable an attacker to bypass Kernel ASLR. It affects Windows Server 2012 R2, Windows RT 8.1, Windows Server 2016, Windows 8.1, Windows 10, and Windows Server 2019/10-family variants as listed. The connected CIRCL en...

CVE-2018-0973

Technical details for CVE-2018-0973 are not publicly available in the provided documents. The connected EUVD and CIRCL entries do not reveal affected products, impacts, or fixes for this CVE. Monitor sources for updates.

CVE-2018-8142

CVE-2018-8142 describes a Windows local security feature bypass where Windows incorrectly validates kernel driver signatures, allowing loading of improperly signed drivers. Affected products include Windows 10 and Windows Server 2016 (and related Windows 10/server versions). The root cause is imp...

CVE-2018-8221

The connected CNVD entry CNVD-2018-12041 confirms a security feature bypass in Microsoft Device Guard that could let a local attacker inject malicious code into a Windows PowerShell session, affecting Windows 10 and Windows Server 2016 . The underlying issue is a bypass of the Device Guard/Code I...

CVE-2018-8239

CVE-2018-8239 — Windows GDI Information Disclosure Vulnerability affects Windows Server 2016, Windows 10, and Windows 10 Server variants. The root cause is that the Windows GDI component improperly discloses the contents of memory (an information-disclosure flaw). An attacker could exploit this b...

CVE-2018-8592

CVE-2018-8592 is an elevation-of-privilege vulnerability in Windows 10 version 1809 (and Windows Server 2019) that can be triggered when the OS is installed from physical media (USB/DVD) with the “keep nothing” option selected. Successful exploitation could grant local, elevated access to an atta...

CVE-2019-0726

CVE-2019-0726 affects the Windows DHCP Client. The connected advisories describe a remote code execution vulnerability caused by improper processing of DHCP responses, leading to memory corruption. Exploitation is described as remote code execution with administrative privileges in the advisories...

CVE-2019-1166

CVE-2019-1166 describes a Windows NTLM tampering vulnerability: a man-in-the-middle attacker could bypass NTLM Message Integrity Check protection. The provided documents reiterate the same description and do not specify the affected Windows versions, patches, or remediation steps. No explicit exp...

CVE-2019-1188

CVE-2019-1188 is a remote code execution vulnerability in Microsoft Windows involving processing of .LNK shortcut references. An attacker could trick a user into opening a removable drive or remote share containing a malicious .LNK file and an associated binary; when the user opens the drive or p...

CVE-2019-1474

Technical details for CVE-2019-1474 are not publicly provided in the connected documents. The CVE entry lacks explicit product/version/impact/fix mapping in the supplied materials; monitor for updates.

CVE-2019-1488

Technical details about CVE-2019-1488 are not available in the provided documents. Monitor for updates from ENISA/RH and OpenVAS references for any concrete exposures or fixes.

CVE-2020-0614

Technical details about CVE-2020-0614 are not provided in the connected documents; no specifics on affected products, root cause, or remediation are available here. Monitor for updates.

CVE-2020-0621

CVE-2020-0621 is a Windows 10 security feature bypass vulnerability where third‑party filters invoked during a password update can bypass protections. Affected product: Windows 10 (password update path with third‑party filters). Root cause: bypass of security feature during password change, enabl...

CVE-2020-0719

Technical details about CVE-2020-0719 are not publicly provided in the connected documents. Monitor for updates; current sources only reference malware entries unrelated to the technical specifics.

CVE-2020-0722

Technical details for CVE-2020-0722 are not publicly available in the provided documents; no affected products, root cause, or remediation are specified here. Monitor for updates from official advisories.

CVE-2020-0784

CVE-2020-0784 is described as a DirectX Elevation of Privilege vulnerability where DirectX improperly handles memory objects. Affected component: DirectX in Windows graphics stack. Root cause stated: memory object handling issues in DirectX. Impact: local privilege escalation (high/complete confi...

CVE-2020-0837

CVE-2020-0837 affects Active Directory Federation Services (ADFS) and is an Elevation of Privilege vulnerability arising from improper handling of multi-factor authentication requests. The initial description states that an attacker could bypass some MFA factors by sending a specially crafted aut...

CVE-2020-0881

CVE-2020-0883 is a remote code execution vulnerability in Windows GDI (GDI+), caused by improper handling of memory objects. The CVE is documented as distinct from CVE-2020-0881. A working exploit PoC for CVE-2020-0883 exists in public GitHub material, indicating practical exploitability. Several...