CVE-2020-1004

Technical details (affected products/versions, root cause, exploit information, fixes) for CVE-2020-1004 are not publicly provided in the supplied documents. Monitor for updates as new details may be published.

CVE-2020-1176

The CVE-2020-1176 entry concerns a remote code execution in the Windows Jet Database Engine caused by improper handling of objects in memory. The connected document indicates that the Jet Database Engine is referenced within a May 2020 Windows security update (KB4556799) affecting OS builds 18362...

CVE-2020-1390

CVE-2020-1390 — Windows Network Connections Service elevation of privilege vulnerability. Root cause: the service mishandles objects in memory, enabling code execution with elevated privileges on a locally accessible Windows host. Affected: Windows Network Connections Service (Windows). Exploitat...

CVE-2020-1598

Technical details for CVE-2020-1598 are not provided in the connected documents; the sources here pertain to other Microsoft advisories and general updates. Monitor for public disclosures or vendor mitigations to confirm affected products, root cause, and fixes.

CVE-2020-17069

Technical details about CVE-2020-17069 are not publicly available in the supplied documents. Monitor for updates from official sources for affected products, root cause, and remediation.

CVE-2021-43223

CVE-2021-43223 affects the Windows Remote Access Connection Manager and is described as an Elevation of Privilege vulnerability. The NVD entry provides CVSS v3.1 details: AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H with a base score of 7.8 (HIGH). The vector indicates a local attacker with low privileges...

CVE-2021-43233

CVE-2021-43233 is a Windows Remote Desktop Client remote code execution vulnerability. Public data (NVD) rates it as CVSS v3.1 7.5 (HIGH) with NETWORK access, high attack complexity, and no privileges required, but user interaction is required. A connected document notes an additional assessment:...

CVE-2022-35758

Technical details about CVE-2022-35758 (affected product/component, root cause, impact, or remediation) are not publicly provided in the supplied connected documents. Monitor for updates from official sources.

CVE-2022-38034

CVE-2022-38034 is a Windows Workstation Service Elevation of Privilege vulnerability. Connected documents confirm the affected component is Windows Workstation Service and that the root cause is improper privilege assignment, enabling an attacker to obtain increased privileges (described as privi...

CVE-2017-0294

CVE-2017-0294 is a Windows remote code execution vulnerability caused by improper handling of cabinet (.cab) files. The affected platforms include Windows 7 SP1, Windows Server 2008 SP2/R2 SP1, Windows 8.1, Windows RT 8.1, Windows Server 2012/R2, Windows 10 (various builds), and Windows Server 20...

CVE-2017-8534

The connected KLA11039 entry confirms CVE-2017-8534 as an information-disclosure vulnerability in Windows Uniscribe. It can be exploited remotely via specially crafted documents to disclose memory contents. Microsoft security updates from June 2017 (KB4022714/2717/2718/2719/2724/2725/2726 and rel...

CVE-2018-0888

CVE-2018-0888 corresponds to a vulnerability in the Microsoft Hyper-V Network Switch where 64-bit Windows clients/servers (Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012/R2; Windows 10 versions 1511–1709; Windows Server 2016) are exposed to information disclos...

CVE-2018-0973

Technical details for CVE-2018-0973 are not publicly available in the provided documents. The connected EUVD and CIRCL entries do not reveal affected products, impacts, or fixes for this CVE. Monitor sources for updates.

CVE-2019-0734

CVE-2019-0734 is a Windows elevation-of-privilege issue where a man-in-the-middle can decode and replace Kerberos authentication requests, enabling an attacker to be validated as Administrator. Affected: Microsoft Windows Kerberos authentication flow. Impact as documented: high severity with pote...

CVE-2019-1341

Technical details about CVE-2019-1341 are not provided in the connected documents. The current set does not reveal affected products, root cause, or fixes beyond the initial description. Monitor for updates.

CVE-2020-0735

Technical details for CVE-2020-0735 are not publicly available in the provided documents. Monitor for updates.

CVE-2020-0909

CVE-2020-0909 affects Microsoft Windows Hyper-V on Windows Server. The vulnerability arises when Hyper-V fails to properly handle specially crafted network packets, which could allow a denial-of-service condition. The connected documents confirm Hyper-V as the affected component and describe the ...

CVE-2020-0982

CVE-2020-0982 is an information disclosure vulnerability in Microsoft Windows Graphics Component. Affected: Windows Graphics Component; root cause: improper handling of in-memory objects. Impact per sources: potential disclosure of information. The connected documents also list related CVEs (CVE-...

CVE-2020-1314

CVE-2020-1314: A Windows TSF Elevation of Privilege vulnerability exists where the TSF server mishandles messages from TSF clients, enabling an attacker with a crafted TSF client to execute arbitrary code with local privileges by exploiting the TSF messaging flow. No patch details are provided in...

CVE-2020-1333

CVE-2020-1333 is an elevation of privilege vulnerability in Microsoft Windows and Windows Server caused by Group Policy Services Policy Processing failing to properly handle reparse points. The CNVD-2020-52916 entry confirms the root cause as the policy processing re-resolution issue and lists Wi...

CVE-2020-1410

CVE-2020-1410 describes a remote code execution vulnerability in Windows Address Book (WAB) where processing of vcard files is flawed. The CNVD-2021-65603 entry corroborates a WAB-based RCE affecting Windows/Windows Server. Public descriptions state that an attacker could deliver a malicious vCar...

CVE-2020-1412

CNVD-2021-67490 identifies a Microsoft Windows/Windows Server remote code execution vulnerability stemming from how Graphics Components handles in-memory objects. Affected product scope is Windows/Windows Server with Graphics Components implicated; root cause is in-memory object handling in Graph...

CVE-2020-1485

CVE-2020-1485 is a Windows Information Disclosure vulnerability in the Windows Image Acquisition (WIA) Service. It allows an authenticated, local attacker who can connect an imaging device (camera/scanner/phone) and run a crafted app to disclose memory contents from WIA, potentially exposing info...

CVE-2021-28309

Technical details for CVE-2021-28309 (Windows Kernel Information Disclosure Vulnerability) are not publicly provided in the supplied documents. No affected products, versions, root cause, impact, or remediations are disclosed here. Monitor sources for updates.

CVE-2022-21998

CVE-2022-21998 affects the Windows Common Log File System Driver and is described as a local-information-disclosure vulnerability. The CVSS details indicate a Local attack vector, low attack complexity, no user interaction, and a confidentiality impact of High (C:H) with no integrity or availabil...

CVE-2022-26797

Technical details about CVE-2022-26797 are not publicly available in the provided connected documents. Monitor for updates from official sources to obtain affected products, root cause, impact, and remediation.

CVE-2017-0056

Technical details for CVE-2017-0056 are not publicly available in the provided documents. Monitor for updates from official advisories.

CVE-2017-0190

CVE-2017-0190 affects the GDI component in multiple Windows platforms (Windows Server 2008 SP2/R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold/R2, Windows RT 8.1, Windows 10 (Gold, 1511, 1607), and Windows Server 2016). The vulnerability allows remote attackers to obtain sensitive in...

CVE-2018-0881

CVE-2018-0881 concerns a privilege-elevation flaw in the Microsoft Video Control component. The vulnerability stems from how objects are handled in memory, enabling an attacker who can log on and run a crafted application to execute code with elevated/system privileges on affected Windows release...

CVE-2018-0899

Technical details for CVE-2018-0899 are not publicly provided in the supplied documents. Monitor for updates from official advisories.

CVE-2018-0960

Technical details for CVE-2018-0960 are not publicly available in the provided documents. No product/version-specific impact or remediation is stated here; monitor for updates from official advisories.

CVE-2019-1143

CVE-2019-1143 is a Windows GDI information-disclosure vulnerability. The issue arises when the GDI component improperly discloses memory contents, potentially allowing an attacker to obtain sensitive information to further compromise a system. Affected software is Windows with the Graphics Device...

CVE-2020-0722

Technical details for CVE-2020-0722 are not publicly available in the provided documents; no affected products, root cause, or remediation are specified here. Monitor for updates from official advisories.

CVE-2020-0737

CVE-2020-0737 is a Windows elevation-of-privilege vulnerability tied to how tapisrv.dll handles in-memory objects. The root cause is memory-objects handling in this DLL, enabling an attacker who can supply or manipulate objects to execute code with elevated privileges on affected Windows systems....

CVE-2020-0779

CVE-2020-0779 is described as an elevation of privilege vulnerability in Windows Installer, arising when MSI packages process symbolic links. The affected component is Windows Installer (MSI) handling of symbolic links, enabling a local attacker to escalate privileges by bypassing access restrict...

CVE-2020-0881

CVE-2020-0883 is a remote code execution vulnerability in Windows GDI (GDI+), caused by improper handling of memory objects. The CVE is documented as distinct from CVE-2020-0881. A working exploit PoC for CVE-2020-0883 exists in public GitHub material, indicating practical exploitability. Several...

CVE-2020-0994

The CVE-2020-0994 entry describes a Remote Code Execution in the Windows Jet Database Engine caused by improper handling of in-memory objects. Connected documents corroborate a Jet Database Engine memory-corruption vulnerability that could allow arbitrary code execution when a user opens a crafte...

CVE-2020-1091

Technical details about CVE-2020-1091 are not provided in the supplied documents. Monitor for updates from Microsoft and vulnerability databases for affected products, root cause, and fixes.

CVE-2020-17011

CVE-2020-17011 is a Windows Port Class Library elevation of privilege vulnerability. The NVD entry lists a local, low-complexity vector with no authentication required and a high impact on confidentiality, integrity, and availability (CVSS v3.1 base score 7.8). Connected documents identify the is...

CVE-2020-17036

CVE-2020-17036 corresponds to a Windows Function Discovery SSDP Provider Information Disclosure Vulnerability. The vulnerability affects Windows Function Discovery SSDP Provider and is described as an information disclosure issue. The provided documents do not include concrete technical details s...

CVE-2021-28439

Technical details for CVE-2021-28439 (Windows TCP/IP Driver DoS) are not present in the provided Connected documents. Public details, affected products/versions, impact, and fixes are not specified here—monitor for updates.

CVE-2021-43216

Technical details for CVE-2021-43216 are not publicly provided in the supplied documents. Monitor for updates from the referenced sources; no public specifics on affected products, versions, or impacts are included here.

CVE-2021-43238

CVE-2021-43238 is a Windows local elevation-of-privilege vulnerability. The NVD entry shows LOCAL vector, LOW attack complexity, and no authentication required (CVSS2: AV:L/AC:L/Au:N/C:P/I:P/A:P; CVSS3.1: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). However, the connected documents do not provi...

CVE-2015-2435

CVE-2015-2435 is a TrueType font parsing vulnerability impacting Microsoft Windows (multiple editions listed) and related components (e.g., Silverlight, Office) that allows remote code execution via a crafted font. The issue is documented with a CVSS v2 base score of 9.3 (high) and network attack...

CVE-2015-2463

CVE-2015-2463/2464 describe a TrueType font parsing vulnerability affecting multiple Windows variants (Vista SP2, 7 SP1, 8/8.1, Server 2008/2012, RT, Office 2007/2010, Silverlight, .NET Framework). The issue allows remote code execution via a crafted TrueType font, caused by a parsing flaw in the...

CVE-2016-0170

CVE-2016-0170 affects the Windows GDI component across multiple Windows versions (Vista SP2, Server 2008 SP2/R2, 7 SP1, 8.1, 2012/2012 R2, RT 8.1, 10). The vulnerability enables remote code execution when processing crafted documents, due to how the Graphics Component handles objects in memory. A...

CVE-2016-0171

CVE-2016-0171 is a Windows kernel‑mode elevation of privilege vulnerability affecting Win32k in several Windows releases (Vista SP2 to Windows 10 1511). The entry describes that a crafted user‑mode application can trigger a local privilege escalation via a flaw in the Win32k subsystem, with explo...

CVE-2016-3252

CVE-2016-3252 is a Windows kernel-mode privilege-escalation vulnerability affecting multiple Windows versions (Vista SP2 through Windows 10 1511) where a crafted application may exploit kernel-mode drivers to gain privileges. The root cause is insufficient handling of objects in memory within ker...

CVE-2016-3266

Technical details for CVE-2016-3266 are not publicly available in the provided documents. Monitor for updates from authoritative sources to determine affected products, root cause specifics, and remediation guidance.

CVE-2016-7238

CVE-2016-7238 is a local privilege-escalation vulnerability in Windows NTLM password-change caching across multiple Windows versions (Vista through Windows Server 2016). An attacker with local access could craft an application to trigger privilege escalation. The issue arises from incorrect cachi...