CVE-2020-1571

Technical details about CVE-2020-1571 are not provided in the supplied documents. The records reference a Windows Setup elevation-of-privilege issue with no specific affected builds, root cause, exploit info, or fixes disclosed here. Monitor for updates.

CVE-2020-16915

CVE-2020-16915 - Windows Media Foundation memory corruption vulnerability : Affected software is Microsoft Windows, specifically the Windows Media Foundation component. The root cause is memory corruption due to improper handling of objects in memory. Exploitation could allow an attacker to insta...

CVE-2020-17000

CVE-2020-17000 is a Windows/Windows Server Remote Desktop Protocol (RDP) client information-disclosure vulnerability. The connected CNVD entry describes it as an information-disclosure flaw in the RDP client that can allow an attacker to read uninitialized memory contents. CVSSv3.1 indicates aLoc...

CVE-2021-1694

Technical details about CVE-2021-1694 are not publicly provided in the supplied documents. Monitor for updates from vendor advisories or standard CVE databases.

CVE-2021-27070

CVE-2021-27070 is the Windows 10 Update Assistant Elevation of Privilege vulnerability. Connected sources confirm it affects the Windows Update Assistant component and was addressed by Microsoft in KB5000802 (March 9, 2021) which lists CVE-2021-27070 among fixed issues. The CVSS information in th...

CVE-2021-27079

Technical details about CVE-2021-27079 are not publicly available in the provided documents; no affected versions, root cause, or fixes are disclosed here. Monitor for updates.

CVE-2021-28316

CVE-2021-28316 affects Windows WLAN AutoConfig, enabling a security feature bypass in that service. Reports indicate it is a local-attack surface with no public exploitation to date, and Microsoft released fixes as part of the September 2021 Patch Tuesday. The vulnerability’s impact is described ...

CVE-2021-34509

Technical details about CVE-2021-34509 (Storage Spaces Controller Information Disclosure Vulnerability) are not publicly provided in the connected documents. Monitor for updates; current sources do not disclose affected products, root cause, impact, or fixes beyond general references.

CVE-2022-34728

CVE-2022-34728 is described as a Windows Graphics Component Information Disclosure Vulnerability. The provided metrics indicate a CVSSv3.1 base score of 5.5 (MEDIUM), with LOCAL attack vector, LOW attack complexity, LOW privileges required, and NONE user interaction. The confidentiality impact is...

CVE-2022-37965

CVE-2022-37965 concerns Windows PPTP Denial of Service. The documents describe a network-exploitable vulnerability in the Windows Point-to-Point Tunneling Protocol that impacts availability (I) with no confidentiality or integrity impact (C/I). CVSSv3.1 metrics show AV:N, AC:H, PR:N, UI:N, S:U, C...

CVE-2017-0121

CVE-2017-0121 is an information disclosure vulnerability in Microsoft Windows Uniscribe. The vulnerability allows a remote attacker to obtain sensitive information from the memory of a process by luring a user to a crafted web site. Affected are Windows Vista SP2, Windows Server 2008 SP2 and R2 S...

CVE-2017-0258

CVE-2017-0258 is a Windows kernel local information-disclosure vulnerability affecting multiple Windows versions (Windows 7 SP1, Windows 8.1, Windows Server 2008 SP2/R2 SP1, Windows Server 2012/2016, Windows 10 releases 1511–1703, RT 8.1). A specially crafted document can allow an authenticated u...

CVE-2018-0969

The CVE-2018-0969 entry describes an information-disclosure vulnerability in the Windows kernel that could enable retrieval of information to bypass Kernel ASLR. Affected products include Windows 7, Windows Server 2012 R2/2012, Windows RT 8.1, Windows 8.1, Windows 10 and various Windows Server ed...

CVE-2018-8347

CVE-2018-8347 is a Windows kernel elevation of privilege vulnerability where the kernel fails to properly handle parsing of certain symbolic links. Affects Windows Server 2016 and Windows 10 (including Windows 10 Server variants). The connected sources confirm the root cause as a parsing issue in...

CVE-2019-0983

CVE-2019-0983 is a Windows Storage Service elevation-of-privilege vulnerability caused by improper handling of file operations. The vulnerability allows a local attacker who already has code execution on the victim to gain elevated privileges by running a specially crafted application. The issue ...

CVE-2019-0998

CVE-2019-0998 affects Windows Storage Service, where improper handling of file operations allows an attacker who can execute code on a victim system to obtain elevated privileges. The root cause is an elevation-of-privilege flaw in the Storage Service’s file operation handling. Exploitation requi...

CVE-2019-1007

CVE-2019-1007 is a Windows Audio Service local elevation-of-privilege vulnerability. The issue arises in how the Windows Audio Service handles certain process-related requests, enabling an attacker who can run a crafted application to gain elevated privileges. The CVSS3.0/3.1 metrics show a local...

CVE-2019-1172

Technical details about CVE-2019-1172 are not publicly provided in the supplied documents; no concrete affected products, root cause, or remediation are listed beyond a generic description. Monitor for updates.

CVE-2019-1185

CVE-2019-1185 affects Windows Subsystem for Linux. It is an elevation-of-privilege flaw caused by stack corruption in WSL, exploitable by a locally authenticated attacker via a crafted application to run code with elevated privileges. Mitigation is a security update that corrects how WSL handles ...

CVE-2019-1382

CVE-2019-1382 affects Microsoft Windows ActiveX Installer Service (AxInstSV). The root cause is an elevation of privilege where the service may access files without proper authentication, enabling local privilege escalation. Documented impact is local access with elevated privileges; no exploit d...

CVE-2019-1417

CVE-2019-1417 involves an Elevation of Privilege in Windows Data Sharing Service due to improper handling of file operations. Affected product: Windows operating systems with the Data Sharing Service. The root cause is improper file operation handling that enables local privilege escalation. Impa...

CVE-2019-1422

Technical details for CVE-2019-1422 are not provided in the connected documents. The sources mention Windows elevation-of-privilege context but do not specify affected components, versions, root cause, or fixes. Monitor for updates.

CVE-2019-1465

CVE-2019-1465 corresponds to a Windows GDI Information Disclosure vulnerability in the GDI component. The CNVD entries describe an information leakage vector where an attacker could obtain memory contents, with exploitation via social engineering (e.g., crafted documents or untrusted pages). The ...

CVE-2020-0766

CVE-2020-0766 is an elevation-of-privilege vulnerability in the Microsoft Store Runtime caused by improper memory handling. An attacker would need remote execution on the target to run a crafted program that could escalate privileges locally; the issue is mitigated by a security update that corre...

CVE-2020-0859

CVE-2020-0859 is described as an information disclosure vulnerability in Windows Modules Installer Service where file information could be disclosed. The primary details available: affected component is Windows Modules Installer Service; root cause and exact exploitation path are not elaborated i...

CVE-2020-0866

The CVE-2020-0866 entry maps to a Windows Work Folder Service elevation of privilege vulnerability. Connected CNVD-2020-23447 describes a privilege escalation via the service’s improper handling of file operations, enabling a specially crafted application to execute processes with elevated privil...

CVE-2020-0946

CVE-2020-0946 is a Media Foundation Information Disclosure vulnerability in Microsoft Windows where improper handling of memory objects can allow an information disclosure. The initial entry identifies Media Foundation as the affected component and describes the flaw as memory-object handling lea...

CVE-2020-0987

Technical details (affected product/version, root cause, impact, fixes) are not publicly available in the provided Connected Documents; cross‑references exist (CVE-2020-0982, CVE-2020-0987, CVE-2020-1005) but no specifics are given.

CVE-2020-0995

CVE-2020-0995 represents a Remote Code Execution vulnerability in Microsoft Windows Jet Database Engine. Connected sources describe the issue as stemming from improper handling of memory objects within the Jet Database Engine, enabling an attacker to execute arbitrary code on a target system, typ...

CVE-2020-1021

Technical details for CVE-2020-1021 are not publicly available in the provided documents; no affected products, root cause, impact, or fixes are specified here. Monitor for updates.

CVE-2020-1094

CVE-2020-1094 is an elevation of privilege vulnerability in the Windows Work Folder Service. The flaw arises from improper handling of file operations within the Work Folder Service, enabling a locally authenticated attacker to elevate privileges by running a crafted application. The vulnerabilit...

CVE-2020-1116

CVE-2020-1116 is described as a Windows CSRSS Information Disclosure Vulnerability, arising from CSRSS failing to properly handle objects in memory. The affected component is Windows CSRSS; the vulnerability enables information disclosure via local access (CVSSv3.1: 5.5 MEDIUM, AV:L/AC:L/PR:L/UI:...

CVE-2020-1236

CVE-2020-1236 is a remote code execution vulnerability in the Windows Jet Database Engine caused by improper handling of in-memory objects. The Jet DB Engine (Jet Database Engine/RCE) is listed among CVEs tied to Microsoft Jet components in OpenVAS entries, and is explicitly referenced in the lin...

CVE-2020-1271

CVE-2020-1271 corresponds to a Windows Backup Service Elevation of Privilege vulnerability. Public docs in the connected set confirm the flaw stems from improper handling of file operations in the Windows Backup Service, enabling local privilege escalation when an attacker already has code execut...

CVE-2020-1302

Technical details for CVE-2020-1302 are not publicly available in the provided documents. Monitor for updates.

CVE-2020-1407

Technical details for CVE-2020-1407 are not provided in the supplied documents. The description mentions the Jet Database Engine RCE but no affected product/version specifics or remediation are included here. Monitor for updates.

CVE-2020-1422

Technical details about CVE-2020-1422 are not publicly provided in the supplied connected documents. Monitor for updates from authoritative sources to obtain affected products, impact, and remediation.

CVE-2021-1684

Technical details for CVE-2021-1684 are not provided in the connected documents. The Initial Description mentions a Passkey Entry Protocol impersonation and a Microsoft update that may fail pairing when public keys share the same X coordinate.

CVE-2021-1688

Technical details for CVE-2021-1688 are not publicly available in the provided connected documents. Monitor for updates from official advisories.

CVE-2021-26881

Technical details about CVE-2021-26881 are not provided in the connected documents. The initial entry only states a Windows Media Foundation Remote Code Execution vulnerability. Monitor for updates and additional public details.

CVE-2021-28317

Technical details about CVE-2021-28317 are not provided in the connected documents. Available sources only reiterate the vulnerability name; monitor for updates for public details.

CVE-2021-43234

CVE-2021-43234 is a Windows Fax Service Remote Code Execution Vulnerability. Connected CNVD entry explicitly states a remote code execution vulnerability exists in Microsoft Windows Fax Service, enabling an attacker to run arbitrary code on the target host. NVD entries corroborate the CVE and ass...

CVE-2022-37983

CVE-2022-37983 affects the Windows DWM Core Library. The vulnerability is an elevation of privilege that arises from improper privilege assignment in the DWM Core Library, enabling a local attacker with low privileges to gain higher privileges (high impact on confidentiality, integrity, and avail...

CVE-2022-38032

Technical details for CVE-2022-38032 are not publicly provided in the supplied documents; monitor for updates from Microsoft MSRC and related references.

CVE-2016-3342

Technical details for CVE-2016-3342 are not publicly available in the provided documents. No affected products, root cause, or remediation are specified here. Monitor for updates.

CVE-2016-7226

CVE-2016-7226 affects the Windows Virtual Hard Disk (VHD) driver on Windows 10 (Gold/1511, 1607) and Windows Server 2016. The VHDMP kernel driver fails to restrict access to certain files, enabling a local attacker to elevate privileges via a crafted application. The root cause is improper file a...

CVE-2017-0007

CVE-2017-0007 is a Device Guard security feature bypass in Windows 10 (Gold/1511/1607) and Windows Server 2016 where sign-checked PowerShell scripts could be modified without breaking the signature, allowing execution of unsigned/malicious code. Root cause: Device Guard’s validation of certain el...

CVE-2017-0167

CVE-2017-0167 is a Windows kernel information disclosure vulnerability affecting Windows 8.1, Windows RT 8.1, Windows Server 2012 R2, Windows 10, and Windows Server 2016, caused by the kernel improperly handling objects in memory. Successful exploitation could let an attacker obtain information f...

CVE-2017-11880

CVE-2017-11880 affects the Windows kernel across multiple OS versions (Windows 7 SP1, Server 2008 SP2/R2 SP1, 8.1, 2012/2012 R2, 10 1511/1607/1703, Server 2016). It enables an attacker to run a specially crafted application to obtain information and further compromise the system due to the kernel...

CVE-2017-8575

CVE-2017-8575 is a Windows kernel/Graphics component information disclosure vulnerability. An authenticated attacker could exploit memory handling flaws in the Windows Graphics Component to obtain information from memory via a specially crafted application. Affected products include Windows 10 (v...