CVE-2019-1028

Technical details (affected products, versions, root cause, exploit vectors, and fixes) are not publicly provided in the supplied documents. Monitor for updates from official advisories.

CVE-2019-1268

CVE-2019-1268 involves a privilege escalation in Microsoft Windows Winlogon. The root cause, as described in CNVD-2019-31856, is that Winlogon does not properly handle file path information, allowing an attacker to log on and run a specially crafted application to execute arbitrary code with elev...

CVE-2019-1393

Technical details about CVE-2019-1393 are not provided in the connected documents. The EUVD entries mention malware 'sbrugna' but do not specify affected products, root cause, impact, or fixes. Monitor for updates.

CVE-2020-0684

CVE-2020-0684 is a Windows remote code execution vulnerability triggered when a .LNK file is processed. The connected docs confirm that an attacker could execute code with the current user’s privileges, affecting Windows/Windows Server platforms via .LNK handling, and that patches were released i...

CVE-2020-0962

CVE-2020-0962 is a Windows win32k information-disclosure vulnerability. The connected sources describe an information-disclosure flaw in the win32k component that may reveal kernel information when a specially crafted application is run. The vulnerability affects the win32k kernel subsystem and i...

CVE-2020-1009

CVE-2020-1009 is an Elevation of Privilege vulnerability in the Microsoft Store Install Service where local file operations in protected locations can be abused to gain elevated access. Root cause as stated: how the service handles file operations in protected locations. Impact is described as HI...

CVE-2020-1534

CVE-2020-1534 is an Elevation of Privilege in Windows Backup Engine/Windows Backup Service. The connected AVLEONOV post confirms the affected component as Windows Backup Engine and describes the root cause as improper handling of file operations by the Backup Service, enabling privilege escalatio...

CVE-2020-16962

Technical details for CVE-2020-16962 are not publicly provided in the connected documents. Monitor for updates from NVD/MSRC and related feeds for affected software, vulnerable components, root cause, and available fixes.

CVE-2021-1654

Technical details for CVE-2021-1654 are not publicly provided in the connected documents. Monitor for updates as new information becomes available; current sources do not specify affected product versions, root cause, impact, or remediation beyond the initial description.

CVE-2021-1660

CVE-2021-1660 is a Remote Procedure Call (RPC) Runtime remote code execution vulnerability in Windows. The connected sources confirm the flaw affects RPC components and was addressed by Microsoft security updates released in January 2021 (KB4598242/KB4598243 and related advisories), with patches ...

CVE-2021-1699

Technical details for CVE-2021-1699 are not provided in the supplied connected documents. Public information in the Initial document is limited to a Windows modem.sys information disclosure vulnerability. Monitor for updates.

CVE-2021-24103

CVE-2021-24103 corresponds to a Windows Event Tracing Elevation of Privilege vulnerability. Documents provide CVSS 3.1 base score 7.8 (LOCAL, LOW privileges required, NONE user interaction; high impact on confidentiality, integrity, and availability). The vulnerability is active per the CVE entry...

CVE-2021-26877

Technical details for CVE-2021-26877 are not provided in the supplied documents. No affected products, root cause, impact, or remediation are specified here; monitor for updates from official advisories.

CVE-2021-28350

Technical details about CVE-2021-28350, including affected components, root cause, impact specifics, and patch information, are not provided in the connected documents. Please monitor official advisories and updates for substantive, fact-grounded details.

CVE-2021-28440

Technical details about CVE-2021-28440 are not publicly provided in the supplied documents. No affected products, root cause, exploit status, or remediation specifics are included here. Monitor for updates in connected sources.

CVE-2021-43222

CVE-2021-43222 documents a Microsoft Message Queuing information disclosure vulnerability. The issue affects MSMQ when handling messages over the network, enabling an attacker with network access and no authentication to potentially access confidential information. According to the CVE entry, the...

CVE-2021-43229

CVE-2021-43229 is an NTFS elevation-of-privilege vulnerability affecting Windows systems. The connected exploit walkthrough describes a pool-based overflow caused by an integer overflow during allocation size computation (directory path length + file name length) in several NTFS paths (e.g., Ntfs...

CVE-2022-38005

Technical details for CVE-2022-38005 are not publicly provided in the supplied documents. No specifics on affected products, impact, or fixes are present here; please monitor for updates.

CVE-2023-21754

Technical details about CVE-2023-21754 are not publicly provided in the supplied documents. No information on affected products, root cause, impact, or remediation is available here. Monitor for updates from official sources.

CVE-2023-35351

CVE-2023-35351: Windows Active Directory Certificate Services (AD CS) Remote Code Execution vulnerability. Affected: Windows AD CS; vulnerability type is remote code execution. CVSSv3.1 base score 6.6 (vector: CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H). Exploitation status and detailed root ca...

CVE-2023-36004

CVE-2023-36004 is a Windows DPAPI spoofing vulnerability. The records indicate the DPAPI component can be abused to pretend to be another user, with high impact on confidentiality, integrity, and availability (CVSSv3.1: 7.5). Multiple sources (NVD entry and ENISA/OpenVAS listings) corroborate the...

CVE-2025-21197

CVE-2025-21197 is an information disclosure in Windows NTFS due to improper access control, enabling an authorized user to disclose file path information in folders they cannot list. Connected sources corroborate NTFS as affected and classify the impact as data exposure. Mitigation involves apply...

CVE-2025-21295

Technical details (affected product, vulnerable component, root cause, exploit conditions, or fix) for CVE-2025-21295 are not provided in the supplied documents. Monitor for updates from Microsoft and CVE repositories; current data confirms only high-level vulnerability existence.

CVE-2025-26668

CVE-2025-26668 is a heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) that allows a network-authenticated attacker to execute code remotely. Affected component is RRAS (Windows Routing and Remote Access Service); root cause is a heap-based overflow that can lead to ar...

CVE-2016-3305

Technical details about CVE-2016-3305 are not publicly available in the provided documents. Monitor for updates to confirm affected components, impact, and fixes.

CVE-2016-3345

CVE-2016-3345 is the Windows SMBv1 Server Remote Code Execution vulnerability. The SMBv1 server on affected Windows editions (Vista SP2, Server 2008 SP2/R2, Windows 7 SP1, Windows 8.1, Server 2012 R2/2012, Windows RT 8.1, Windows 10 1511/1607) could allow an authenticated attacker to execute arbi...

CVE-2017-0045

CVE-2017-0045 is a Windows DVD Maker XML External Entity (XXE) information-disclosure vulnerability affecting Windows 7 SP1, Windows Server 2008 SP2/R2 SP1, and Windows Vista SP2. The vulnerability arises when parsing crafted .msdvd files, enabling an attacker to access local files information on...

CVE-2017-0175

CVE-2017-0175 is a Windows kernel local information disclosure vulnerability reported for Windows 7 SP1 and Windows Server 2008 SP2/R2 SP1. The initial entry describes an information leak via a specially crafted document, with authentication required marked as none in CVSS. Connected sources refe...

CVE-2017-8681

Technical details about CVE-2017-8681 are not publicly provided in the connected documents. No specifics on affected versions, root cause, impact, or remediation are present. Monitor for updates.

CVE-2018-0883

CVE-2018-0883 is a remote code execution vulnerability in Windows Shell caused by improper validation of file copy destinations. Affected are Windows Shell components across multiple Windows platforms (Windows 7 SP1, Windows 8.1/RT 8.1, Windows Server 2008 R2/2012/2016 and Windows 10 builds up to...

CVE-2018-8116

The provided connected documents confirm CVE-2018-8116 is a DoS vulnerability in the Windows Graphics Component, arising from how the component handles objects in memory and affecting multiple Windows versions (e.g., Windows 7, Windows 10, server editions). Concrete details include the affected p...

CVE-2019-1250

Technical details for CVE-2019-1250 are not provided in the supplied documents. Public information here confirms it’s a Windows Jet Database Engine RCE vulnerability but no product/version, affected component, impact, or fix details are specified. Monitor for updates.

CVE-2019-1397

Technical details about CVE-2019-1397 are not publicly available in the provided documents; no affected products, versions, or fixes are described. Monitor for updates.

CVE-2020-0629

Technical details about CVE-2020-0629 are not provided in the supplied documents; monitoring for updates in the connected sources is advised.

CVE-2020-0771

CVE-2020-0771 is a Windows CSC Service privilege-elevation vulnerability caused by improper memory handling. It requires local execution to exploit and could allow an attacker to gain elevated privileges on the system. Connected documents confirm the affected component is Windows CSC Service and ...

CVE-2020-0785

CVE-2020-0785 is an elevation-of-privilege flaw in the Windows User Profile Service (ProfSvc) caused by improper handling of symlinks. The vulnerability allows a local attacker with low privileges to elevate to higher privileges without user interaction, as documented in the CVE description and c...

CVE-2020-1468

CVE-2020-1468: Information disclosure in Windows GDI. The Windows GDI component improperly discloses memory contents, enabling partial confidentiality impact. Connected CNVD entry corroborates Windows/Windows Server information disclosure presence; no vendor/product patch details are provided in ...

CVE-2020-16964

CVE-2020-16964 is described as a Windows Backup Engine Elevation of Privilege vulnerability. The available documents indicate a local, low-privilege attack that yields full confidentiality, integrity, and availability impact (CVSS 3.1: AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). No specific affected pr...

CVE-2021-1653

CVE-2021-1653 details are not publicly provided in the provided documents. No affected products, root cause, or remediation are specified here. Monitor for updates.

CVE-2021-1695

Technical details for CVE-2021-1695 are not publicly available in the provided documents. Monitor for updates.

CVE-2021-1727

CVE-2021-1727 is a Windows Installer elevation-of-privilege vulnerability. CVSS v3.1 vector: AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H; base score 7.8 (HIGH). Local access with low privileges and no user interaction, impacting confidentiality, integrity, and availability. Related entries reference Micr...

CVE-2021-27077

CVE-2021-27077 is a Windows Win32k Elevation of Privilege vulnerability in win32kfull.sys!BLTRECORD::bRotate. If the HOOK_PLGBLT flag is set, the code may read a surface object’s hdev and call DrvPlgBlt() on the referenced driver without verifying it implements the function, potentially leading t...

CVE-2021-28323

Technical details about CVE-2021-28323 are not provided in the supplied documents. Public disclosures, impacted products, root cause, and fixes are not specified here. Monitor for updates.

CVE-2022-35751

Technical details about CVE-2022-35751 are not publicly available in the provided documents. No information on affected products, root cause, impact, or fixes is provided here; monitor for updates.

CVE-2022-35837

Technical details about CVE-2022-35837 are not publicly provided in the supplied documents. Monitor for updates from official sources; current materials only confirm the vulnerability name and CVE ID without specifics.

CVE-2022-38000

CVE-2022-38000 is a Windows Point-to-Point Tunneling Protocol (PPTP) remote code execution vulnerability. Connected MS updates document this CVE under the Windows PPTP entry and indicate it is addressed by October 2022 security updates (e.g., KB5018410/KB5018427). The vulnerability affects the PP...

CVE-2022-44681

Technical details about CVE-2022-44681 are not publicly provided in the connected documents. Monitoring for updates is recommended.

CVE-2023-35319

CVE-2023-35319 is a Remote Procedure Call (RPC) Runtime Denial of Service vulnerability. The NVD entry lists a network attack vector with low attack complexity, requiring low privileges and no user interaction, leading to an availability impact (C:A) of High and no confidentiality or integrity im...

CVE-2024-38068

Technical details about CVE-2024-38068 are not provided in the supplied documents. No affected products, root cause, impact, or remediation are described here; monitor for updates from official advisories.

CVE-2024-38250

CVE-2024-38250 is a Windows Graphics Component elevation-of-privilege vulnerability. The CVE entry (Microsoft product area) indicates a local attacker with low privileges and no user interaction could obtain higher privileges (CVSS 7.8, High). Connected sources corroborate that Microsoft has issu...