CVE-2020-16975

CVE-2020-16975 describes an elevation of privilege vulnerability in the Windows Backup Service caused by improper handling of file operations. An attacker who already has code execution on the victim system could exploit this by running a crafted application to elevate privileges. Microsoft’s sec...

CVE-2020-17088

CVE-2020-17088 is a Windows elevation-of-privilege vulnerability in the Common Log File System (CLFS) driver. The connected CNVD entry explicitly attributes an EoP issue to the CLFS component in Microsoft Windows/Windows Server, indicating a local attacker could exploit it to compromise confident...

CVE-2021-1706

Technical details for CVE-2021-1706 are not publicly available in the provided documents. No affected products, impact, or remediation are specified here. Monitor for updates from authoritative sources.

CVE-2021-1709

Technical details (affected component, root cause, impact, or fixes) for CVE-2021-1709 are not provided in the supplied documents. Monitor for further updates from official advisories and vendors.

CVE-2021-36964

Technical details for CVE-2021-36964 are not publicly provided in the supplied documents; monitor for updates.

CVE-2022-21834

Technical details for CVE-2022-21834 are not provided in the given documents. Monitor for updates from Microsoft and NVD; no affected products, root cause, impact, or remediation information is available here.

CVE-2022-23290

Technical details about CVE-2022-23290 are not publicly provided in the supplied connected documents. No concrete product/version/root-cause/impact/fix information is present beyond the generic vulnerability label. Monitor for official updates from primary sources.

CVE-2022-35754

Technical details (affected product, version, root cause, and remediation) are not publicly available in the provided documents. Monitor for updates.

CVE-2022-35834

CVE-2022-35834 : The vulnerability is described as a Remote Code Execution issue affecting the Microsoft WDAC OLE DB provider for SQL Server. The provided documents only state this product/weakness at a high level and do not include technical details such as affected versions, root cause, specifi...

CVE-2022-37975

Technical details about CVE-2022-37975 (root cause, affected products/versions, exploit info, or explicit fix) are not provided in the connected documents. Monitor for official updates from Microsoft and CVE advisories for concrete remediation guidance.

CVE-2016-0168

CVE-2016-0168 is a Windows GDI information-disclosure vulnerability affecting multiple Windows versions. Connected data confirms exploitation activity (Exploits listed on Exploit-DB and sightings in CIRCL) but provides no vendor-specific patch or remediation details in the supplied documents. No ...

CVE-2017-0099

CVE-2017-0099 pertains to Hyper-V in Microsoft Windows (lists affected: Windows Vista SP2, Server 2008 SP2/2008 R2, Windows 7 SP1, Windows 8.1, Server 2012 Gold/R2, Windows 10 Gold, 1511, 1607, Server 2016). The issue allows guest OS users, running as VMs, to cause a denial-of-service via a craft...

CVE-2017-0279

CVE-2017-0279 corresponds to a remote code execution vulnerability in the Microsoft Windows SMB v1 server. The available connected and initial documents indicate: affected component is the SMBv1 server (Server Message Block 1.0) on multiple Windows platforms (e.g., Windows 7, Windows 8.1, Windows...

CVE-2017-0288

CVE-2017-0288 is a Windows graphics information disclosure vulnerability in the Graphics Device Interface (GDI). The Windows GDI component improperly discloses memory contents, enabling information disclosure on affected systems. Connected advisories confirm this issue affecting multiple Windows ...

CVE-2017-8528

CVE-2017-8528 concerns a remote code execution vulnerability in Microsoft Windows Uniscribe (usp10.dll) where объектs in memory are mishandled. Affected platforms span Windows 7/8.1/10 and several Server SKUs with Office 2007/2010. Exploitation is possible via crafted documents or web content, pe...

CVE-2018-0757

Technical details about CVE-2018-0757 are not publicly available in the provided documents. Connected sources discuss malware and general Windows kernel disclosures but do not specify affected products, versions, or fixes. Monitor for official updates.

CVE-2018-0846

The connected documents confirm CVE-2018-0846 affects the Windows Common Log File System (CLFS) driver and describes an elevation-of-privilege flaw caused by improper handling of objects in memory. Affected products include various Windows client/server builds (Windows 7 SP1, Windows 8.1/RT 8.1, ...

CVE-2018-8205

CVE-2018-8205 is a denial-of-service vulnerability: Windows improperly handles objects in memory, leading to a crash/DoS. Affected products include Windows 7, Windows 8.1, Windows 10 (and corresponding server editions such as Windows Server 2008 R2, 2012, 2012 R2, 2016). The Initial and NVD descr...

CVE-2019-0720

The CVE-2019-0720 entry concerns Windows Hyper-V Network Switch on a host server. The vulnerability arises when the Hyper-V switch fails to validate input from an authenticated user on a guest OS, allowing a specially crafted guest app to trigger the host OS to execute arbitrary code. The impact ...

CVE-2019-0888

CVE-2019-0888 affects Microsoft ActiveX Data Objects (ADO). A use-after-free in memory handling could allow remote code execution when a user visits a crafted website; the vulnerability is addressed by a Microsoft security update that changes how ADO handles objects in memory. A PoC/Exploit exist...

CVE-2020-0814

CVE-2020-0814 describes an elevation of privilege in Windows Installer caused by how Windows Installer handles certain filesystem operations. An attacker would need unprivileged code execution on the victim to exploit this local vulnerability. The CVSS data (3.1) reports a HIGH base score of 7.8 ...

CVE-2020-1384

CVE-2020-1384 is an elevation-of-privilege issue in the Windows Cryptography Next Generation (CNG) Key Isolation Service where memory is not handled correctly. The vulnerability enables local attackers to elevate privileges by exploiting the memory handling defect. This CVE is related to CVE-2020...

CVE-2020-1489

CVE-2020-1489 is a Windows elevation-of-privilege vulnerability in the CSC Service that arises from improper memory handling. An attacker who can execute code on the victim system could run a crafted application to elevate privileges. The root cause is memory handling in the Windows CSC Service, ...

CVE-2020-1517

CVE-2020-1517 is an Elevation of Privilege vulnerability in Windows File Server Resource Management Service caused by improper memory handling. An attacker who can execute code on a target system may leverage this to elevate privileges locally. The NVD description states exploitation requires ini...

CVE-2020-1540

CVE-2020-1540 is an elevation-of-privilege issue in Windows Backup Engine caused by improper memory handling. The CNVD entry explicitly notes a memory-handling root cause and that exploitation would require prior execution on the target. Both the NVD entry and Microsoft advisories indicate that a...

CVE-2021-25195

CVE-2021-25195 is described as a Windows PKU2U Elevation of Privilege vulnerability. The provided data include CVSSv3.1 metrics indicating a LOCAL attack with LOW privileges required, NO user interaction, and HIGH impact on confidentiality, integrity and availability (base score 7.8). The initial...

CVE-2021-33782

Technical details for CVE-2021-33782 are not publicly available in the provided documents. No confirmed impact or remediation are described here; monitor connected sources for updates.

CVE-2021-38662

Technical details for CVE-2021-38662 are not publicly available in the provided documents. Monitor for updates.

CVE-2022-21903

Technical details about CVE-2022-21903 are not publicly provided in the supplied documents; no affected products, impact, nor remediation specifics are given here. Monitor for updates from official advisories.

CVE-2022-21904

Technical details for CVE-2022-21904 are not publicly provided in the supplied documents. Monitor for updates.

CVE-2022-21924

CVE-2022-21924 is described in the provided documents as a Workstation Service Remote Protocol Security Feature Bypass Vulnerability , with a MEDIUM severity (CVSS v2 base score 5.4 and CVSS v3.1 base score 5.3). The available sources stop short of naming affected products, versions, or root caus...

CVE-2022-26794

Technical details for CVE-2022-26794 are not publicly provided in the supplied documents. No specifics on affected components, root cause, impact, or fixes are present here. Monitor for updates in connected sources.

CVE-2022-29103

Technical details for CVE-2022-29103 are not publicly provided in the supplied documents. The connected items discuss Windows update KB entries and security issues, but none specify affected products/versions or remediation for this CVE.

CVE-2022-34725

Technical details about CVE-2022-34725 are not publicly provided in the supplied documents. No affected products, vulnerable components, exploit information, or remediation specifics are present. Monitor for official disclosures or updates from vendors.

CVE-2017-0087

CVE-2017-0087 is a remote code execution vulnerability in Windows Uniscribe (USP10) affecting Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1. Connected data show exploits targeting USP10!MergeLigRecords, with heap memory corruption in Uniscribe’s font processing triggere...

CVE-2017-0271

CVE-2017-0271 is an information-disclosure vulnerability in Microsoft Windows SMBv1 server processing. It stems from improper handling of SMBv1 requests, potentially allowing a remote attacker to obtain partial sensitive information from affected Windows systems. Affected products include Windows...

CVE-2018-0895

Technical details for CVE-2018-0895 are not provided in the connected documents. Public information in this dataset does not specify affected products/versions/impact. Monitor for updates.

CVE-2018-8419

Technical details are not publicly available in the provided documents. Monitor for updates.

CVE-2018-8471

CVE-2018-8471 describes a local elevation-of-privilege vulnerability in the Microsoft RemoteFX Virtual GPU miniport driver. The issue arises from how the driver handles objects in memory, enabling an attacker with local access to execute code with elevated privileges on affected Windows versions ...

CVE-2019-0898

Affected software: Windows Jet Database Engine (in Microsoft Windows and Windows Server). Vulnerability type & cause: Multiple connected CNVD entries describe a buffer overflow in the Jet Database Engine, occurring when memory operations do not properly validate data boundaries, leading to incorr...

CVE-2019-1108

Summary: CVE-2019-1108 is a vulnerability in the Windows Remote Desktop Protocol (RDP) Client that leads to information disclosure through memory contents. The connected exploit document describes an attacker connecting remotely to an affected system and running a specially crafted application to...

CVE-2019-1285

CVE-2019-1285 is a Windows Win32k elevation of privilege vulnerability caused by improper handling of memory objects in the Win32k component. Affects Windows systems; root cause is in-memory object handling leading to local privilege escalation. CVSS indicators: CVSSv2 base 7.2 (HIGH, LOCAL, no a...

CVE-2020-0755

Technical details for CVE-2020-0755 are not publicly provided in the connected documents. Monitor for updates from official advisories, as no concrete technical specifics (affected products, impact, or fixes) are present here.

CVE-2020-0822

CVE-2020-0822 is an Elevation of Privilege vulnerability in the Windows Language Pack Installer caused by improper handling of file operations. Evidence from security feeds (e.g., Tenable plugin for KB4541506/KB4541504) confirms the issue is addressed by Microsoft security updates that fix how th...

CVE-2020-1175

CVE-2020-1175 is a remote code execution vulnerability in the Windows Jet Database Engine related to improper handling of objects in memory. The connected KB document (KB4556799) references a May 12, 2020 security update for Windows 10 builds 18362.836 and 18363.836 that includes security fixes a...

CVE-2020-1473

CVE-2020-1473 : A remote code execution vulnerability in the Windows Jet Database Engine arises from improper handling of objects in memory. An attacker could trigger arbitrary code execution by enticing a user to open a specially crafted file. Mitigation is provided by the update that fixes the ...

CVE-2020-1484

CVE-2020-1484 is an elevation-of-privilege vulnerability in the Windows Work Folders Service caused by improper handling of memory. An attacker would need to gain execution on the victim system, then run a crafted application to elevate privileges. The vulnerability is addressed by a security upd...

CVE-2020-1535

CVE-2020-1535 is an Elevation of Privilege vulnerability in the Windows Backup Engine caused by improper handling of memory. An attacker would need to first gain code execution locally and then run a crafted application to elevate privileges. Microsoft’s security update addresses the issue by cor...

CVE-2020-1538

Technical details about CVE-2020-1538 are not publicly provided in the connected documents; no explicit affected products, root cause, impact, or remediation specifics are documented here. Monitor for updates in the sources above.

CVE-2020-1552

CVE-2020-1552 (Windows Work Folder Service Elevation of Privilege) Affects Windows Work Folders Service. The vulnerability arises because the service improperly handles file operations, allowing an attacker to run code with elevated privileges by executing a specially crafted application on the v...