CVE-2020-1457

CVE-2020-1457 is described across the provided documents as a remote code execution vulnerability in the Microsoft Windows Codecs Library, related to how memory objects are handled. The vulnerability is cited by multiple sources (NVD entry, CVE lists) with the same core description: memory handli...

CVE-2020-1491

Technical details about CVE-2020-1491 are not publicly provided in the supplied documents. Monitor for updates from official advisories.

CVE-2020-16895

CVE-2020-16895 corresponds to a Windows elevation-of-privilege flaw in the Windows Error Reporting manager that occurs when handling a process crash. A local attacker who can log on and run a crafted application could delete a targeted file, achieving elevated permissions. The vulnerability is ad...

CVE-2020-17004

According to CNVD-2021-63301, CVE-2020-17004 is a Windows/Windows Server graphics component information-disclosure vulnerability. It allows an attacker to read kernel memory contents from a user-mode process. The affected product is Microsoft Windows/Windows Server; the exact root cause, vulnerab...

CVE-2020-17025

Technical details for CVE-2020-17025 are not provided in the supplied documents; affected products, impact, root cause, or remediation are not disclosed. Monitor for updates.

CVE-2020-17029

CVE-2020-17029 is a Windows Canonical Display Driver Information Disclosure Vulnerability. Affected software: Windows Canonical Display Driver. Root cause: information disclosure vulnerability within the Canonical Display driver. Impact: confidentiality impact HIGH (per CVSS 3.1), with local atta...

CVE-2020-17099

CVE-2020-17099 corresponds to a Windows lock-screen security feature bypass. The available data indicate a physical-access vulnerability affecting Windows lock screen functionality, with a CVSSv3.1 base score of 6.8 and impact on confidentiality, integrity, and availability (C:H/I:H/A:H) when exp...

CVE-2020-17162

Technical details about CVE-2020-17162 are not publicly provided in the connected documents; only a general description and CVSS metrics are present. Monitor official advisories for updates.

CVE-2021-1652

Technical details for CVE-2021-1652 are not publicly provided in the connected documents. No affected product/version or exploit information is disclosed here. Monitor for updates.

CVE-2021-1662

CVE-2021-1662 is a Windows Event Tracing Elevation of Privilege vulnerability (local, low complexity, high impact per CVSS 3.1). The available connected documents indicate Windows event tracing is the affected component and classify the issue as a local privilege escalation; no specific exploit d...

CVE-2021-24081

CVE-2021-24081 is described in the provided documents as a Microsoft Windows Codecs Library Remote Code Execution vulnerability. The OSV entry reiterates the label but does not specify affected versions, root cause details, or a patch. CVSSv3.1 metrics shown indicate a HIGH base score (7.8) with ...

CVE-2021-24091

CVE-2021-24091 corresponds to a remote code execution in the Windows Camera Codec Pack. Connected CNVD data attributes the issue to the Windows camera codec package on Windows/Windows Server. The vulnerability is described as enabling remote code execution; no remediation details are provided in ...

CVE-2021-26901

CVE-2021-26901 is a Windows Event Tracing Elevation of Privilege vulnerability. The entry is active with a local, low-attack-complexity vector and high impact (confidentiality, integrity, and availability) per CVSS v3.1 and CVSS v2.0 metrics. Connected docs show Windows updates (e.g., KB5000802/K...

CVE-2021-28312

CVE-2021-28312 is a Windows NTFS Denial of Service vulnerability. Connected materials confirm the issue resides in NTFS and provide a PoC/description showing how it can be exploited (reproduction via NTFS $i30:$bitmap reference and a remote exploitation scenario). Exploitation details are documen...

CVE-2021-28326

Technical details about CVE-2021-28326 are not provided in the supplied documents. The connected items mention advisories but do not describe affected components, root cause, impact, or fixes.

CVE-2021-28446

CVE-2021-28446 is a Windows Portmapping Information Disclosure Vulnerability with local attack vector. NVD data shows Confidentiality Impact HIGH (I) and no Integrity/Availability impact, base score 5.5 (3.1) / 2.1 (2.0) and a higher CNA score 7.1 (HIGH). Exploitation status is listed as null in ...

CVE-2021-40468

CVE-2021-40468 corresponds to a Windows Bind Filter Driver Information Disclosure vulnerability. The connected data confirms affected component as Windows Bind Filter Driver and assigns CVSS v3.1 base metrics of 5.5 (Medium) with LOCAL attack vector, LOW attack complexity, and LOW privileges requ...

CVE-2021-43232

CVE-2021-43232 corresponds to a Windows Event Tracing (ETW) remote code execution vulnerability. The CNVD entry explicitly identifies ETW as the affected component and states the vulnerability enables remote code execution on Windows. The CVE record itself notes Windows Event Tracing RCE with a m...

CVE-2021-43236

Technical details for CVE-2021-43236 are not publicly available in the provided documents. Monitor for updates from official advisories to confirm affected products, impact, and remediation.

CVE-2022-26795

CVE-2022-26795 is a Windows Print Spooler elevation-of-privilege vulnerability. The vulnerability is local, with low attack complexity and no user interaction required, and yields high impact to confidentiality, integrity, and availability per CVSS 3.1/3.1 metrics. The available connected sources...

CVE-2015-2455

CVE-2015-2455 (TrueType Font Parsing Vulnerability) is a Windows font-processing defect discovered via Project Zero fuzzing of the Windows kernel font stack (win32k.sys and ATMFD.DLL) affecting TrueType fonts and related SFNT tables. The Google Project Zero report outlines that incorrect handling...

CVE-2016-0173

CVE-2016-0173 is a Win32k Elevation of Privilege vulnerability affecting Windows kernel‑mode drivers across Windows Vista SP2 through Windows 10 (1511). A crafted user-mode application can trigger local privilege escalation, as described in the original entry. Public exploit access exists: Exploi...

CVE-2016-3396

CVE-2016-3396 is a GDI+ remote code execution in Graphics Device Interface (GDI) that allows a remote attacker to execute arbitrary code via a crafted embedded font. Affected products include Windows Vista SP2, Windows Server 2008 SP2/R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold/R...

CVE-2016-7295

Technical details about CVE-2016-7295 are not publicly provided in the supplied documents. The CLFS information-disclosure vulnerability details, affected products/versions, and fixes are not elaborated here. Monitor for updates from official advisories.

CVE-2017-0023

CVE-2017-0023 is a remote code execution vulnerability in the Microsoft Edge PDF Library, affecting Windows 8.1, Windows Server 2012/2012 R2, Windows RT 8.1, and Windows 10 (variants such as 1511/1607). Public reports describe memory corruption in the PDF rendering library leading to arbitrary co...

CVE-2017-0250

CVE-2017-0250 corresponds to a remote code execution vulnerability in the Microsoft JET Database Engine present in Windows components (e.g., older Office/Jet usage). The issue is a buffer overflow that could allow an attacker to take control of the affected system. Connected updates (KBxxxx-Oct 2...

CVE-2017-8490

Technical details about CVE-2017-8490 are not publicly provided in the connected EUVD entries; no affected products, root cause, impact, or remediation details are disclosed here. Monitor for updates.

CVE-2018-1035

CVE-2018-1035 is a Windows security feature bypass affecting Windows 10/Windows Server (notably 1709 per related advisories). The vulnerability stems from how Windows validates User Mode Code Integrity (UMCI) policies, allowing a local attacker with access to bypass Device Guard. The issue is add...

CVE-2018-8141

CVE-2018-8141 : Affects Windows 10 and Windows 10 Servers. Root cause: the Windows kernel improperly handles objects in memory, causing information disclosure. CVSS data in the initial doc shows a low to medium risk (CVSS v2 base score 1.9; CVSS v3 base score 4.7) with local attack vector and hig...

CVE-2018-8219

CVE-2018-8219 is a privilege-escalation flaw in Windows Hyper-V Code Integrity. The vulnerability arises when Hyper-V instruction emulation fails to properly enforce privilege levels, enabling elevation of privileges. Affected products include Windows Server 2016 and Windows 10 (including Windows...

CVE-2019-0865

Technical details about CVE-2019-0865 are not present in the provided connected documents. The supplied materials are unrelated MSKB entries and a generic CVE description. Monitor for updates.

CVE-2019-1230

The CVE-2019-1230 entry describes an information-disclosure vulnerability in Microsoft Windows Hyper-V, where the Hyper-V Network Switch fails to properly validate input from an authenticated user on a guest OS. The root cause is a flawed input-validation path within the Hyper-V network switch, e...

CVE-2019-1394

Technical details about CVE-2019-1394 are not provided in the connected documents. Monitor for updates from official advisories; the supplied EUVD entries relate to unrelated malware listings and do not illuminate this CVE.

CVE-2019-1406

CVE-2019-1406 describes a remote code execution vulnerability in the Windows Jet Database Engine caused by improper handling of objects in memory. The issue could allow an attacker to execute arbitrary code on affected systems. Public references in the provided documents identify the Jet Database...

CVE-2019-1433

Technical details about CVE-2019-1433 are not publicly available in the provided connected documents; monitor for updates.

CVE-2020-0800

CVE-2020-0800 corresponds to a Windows Work Folder Service privilege escalation vulnerability. CNVD-2020-23447 describes improper handling of file operations in the Work Folder Service that can be exploited by a specially crafted application to run code with elevated privileges. The vulnerability...

CVE-2020-0802

Technical details for CVE-2020-0802 are not publicly provided in the supplied documents. Monitor for updates from official advisories; no affected products, root cause, or fixes are described here.

CVE-2020-0803

Technical details for CVE-2020-0803 are not publicly provided in the connected documents; monitor for updates.

CVE-2020-0883

CVE-2020-0883 is a remote code execution flaw in Windows GDI+ involving memory handling of GDI objects. A working exploit PoC exists (CVE-2020-0883) showing a reverse shell workflow; patch availability is indicated by March 2020 updates (KB4541500/KB4541506) addressing GDI memory-related flaws, t...

CVE-2020-0934

Technical details about CVE-2020-0934 are not publicly provided in the supplied documents. Monitor for updates from official advisories.

CVE-2020-0988

CVE-2020-0988 describes a remote code execution flaw in Microsoft Windows Jet Database Engine caused by improper handling of memory objects. The connected KB4549951 document indicates a security update addressing Jet DB Engine issues as part of Windows 10 OS builds 18362.778 and 18363.778 (securi...

CVE-2020-1067

CVE-2020-1067 is a remote code execution vulnerability in Windows, caused by how the OS handles objects in memory. The NVD entry notes a network-based attack vector with low attack complexity and low privileges required, resulting in high impact to confidentiality, integrity, and availability (CV...

CVE-2020-1162

CVE-2020-1162 and CVE-2020-1324 are elevation-of-privilege flaws in Windows Security Health Service. They arise from how memory objects are handled, enabling local attackers who can log on to execute code with elevated privileges and potentially compromise memory, depending on the specific CVE. T...

CVE-2020-1185

Technical details about CVE-2020-1185 are not publicly available in the provided EUVD documents; monitor for updates.

CVE-2020-1232

CVE-2020-1232 is an information-disclosure vulnerability in Windows Media Foundation caused by improper handling of objects in memory. The core component is Windows Media Foundation; affected behavior is the disclosure of memory contents, as described in the CVE entry and corroborated by related ...

CVE-2020-1255

CVE-2020-1255 refers to an elevation of privilege vulnerability in the Windows Background Intelligent Transfer Service (BITS) IIS module. Connected data (CNVD-2021-27705) states the flaw arises from the module’s failure to properly handle uploads, enabling an attacker to exploit a specially craft...

CVE-2020-1370

Technical details about CVE-2020-1370 are not publicly available in the provided documents. Monitor for updates from official advisories (e.g., MSRC, ENISA EUVD) for affected products, impact, and fixes.

CVE-2020-1430

Technical details about CVE-2020-1430 are not publicly provided in the connected documents. Please monitor for official advisories or vendor advisories for affected products, exposure, and fixes.

CVE-2020-1571

Technical details about CVE-2020-1571 are not provided in the supplied documents. The records reference a Windows Setup elevation-of-privilege issue with no specific affected builds, root cause, exploit info, or fixes disclosed here. Monitor for updates.

CVE-2020-16915

CVE-2020-16915 - Windows Media Foundation memory corruption vulnerability : Affected software is Microsoft Windows, specifically the Windows Media Foundation component. The root cause is memory corruption due to improper handling of objects in memory. Exploitation could allow an attacker to insta...