CVE-2020-0946

CVE-2020-0946 is a Media Foundation Information Disclosure vulnerability in Microsoft Windows where improper handling of memory objects can allow an information disclosure. The initial entry identifies Media Foundation as the affected component and describes the flaw as memory-object handling lea...

CVE-2020-0957

CVE-2020-0957 is a Windows Win32k elevation-of-privilege vulnerability in which the Windows kernel-mode driver fails to properly handle objects in memory, enabling local privilege escalation. Affected component: Win32k within the Windows kernel. Underlying cause: memory object handling issue in k...

CVE-2020-0995

CVE-2020-0995 represents a Remote Code Execution vulnerability in Microsoft Windows Jet Database Engine. Connected sources describe the issue as stemming from improper handling of memory objects within the Jet Database Engine, enabling an attacker to execute arbitrary code on a target system, typ...

CVE-2020-1067

CVE-2020-1067 is a remote code execution vulnerability in Windows, caused by how the OS handles objects in memory. The NVD entry notes a network-based attack vector with low attack complexity and low privileges required, resulting in high impact to confidentiality, integrity, and availability (CV...

CVE-2020-1116

CVE-2020-1116 is described as a Windows CSRSS Information Disclosure Vulnerability, arising from CSRSS failing to properly handle objects in memory. The affected component is Windows CSRSS; the vulnerability enables information disclosure via local access (CVSSv3.1: 5.5 MEDIUM, AV:L/AC:L/PR:L/UI:...

CVE-2020-1153

CVE-2020-1153 is a remote code execution vulnerability in the way Microsoft Graphics Components handles objects in memory. The connected MSKB entries reference Windows updates that include security fixes for the Microsoft Graphics Component as part of the May 2020 updates (e.g., KB4556799 and rel...

CVE-2020-1236

CVE-2020-1236 is a remote code execution vulnerability in the Windows Jet Database Engine caused by improper handling of in-memory objects. The Jet DB Engine (Jet Database Engine/RCE) is listed among CVEs tied to Microsoft Jet components in OpenVAS entries, and is explicitly referenced in the lin...

CVE-2020-1302

Technical details for CVE-2020-1302 are not publicly available in the provided documents. Monitor for updates.

CVE-2020-1365

Technical details about CVE-2020-1365 are not publicly provided in the connected documents. The Windows Event Logging Service elevation-of-privilege vulnerability lacks product/version/impact/fix specifics here. Monitor sources for updates and confirmed technical details.

CVE-2020-1371

Technical details about CVE-2020-1371 are not publicly provided in the connected documents. Please monitor for updates from official sources for affected products, impact, and remediation.

CVE-2020-1430

Technical details about CVE-2020-1430 are not publicly provided in the connected documents. Please monitor for official advisories or vendor advisories for affected products, exposure, and fixes.

CVE-2020-17000

CVE-2020-17000 is a Windows/Windows Server Remote Desktop Protocol (RDP) client information-disclosure vulnerability. The connected CNVD entry describes it as an information-disclosure flaw in the RDP client that can allow an attacker to read uninitialized memory contents. CVSSv3.1 indicates aLoc...

CVE-2021-1688

Technical details for CVE-2021-1688 are not publicly available in the provided connected documents. Monitor for updates from official advisories.

CVE-2021-27091

CVE-2021-27091 is an elevation-of-privilege flaw in the RPC Endpoint Mapper Service of Windows/Windows Server. The vulnerability is described as a local-privilege escalation with a low attack complexity and no user interaction, allowing an attacker to gain high confidentiality/integrity/availabil...

CVE-2021-28446

CVE-2021-28446 is a Windows Portmapping Information Disclosure Vulnerability with local attack vector. NVD data shows Confidentiality Impact HIGH (I) and no Integrity/Availability impact, base score 5.5 (3.1) / 2.1 (2.0) and a higher CNA score 7.1 (HIGH). Exploitation status is listed as null in ...

CVE-2021-43234

CVE-2021-43234 is a Windows Fax Service Remote Code Execution Vulnerability. Connected CNVD entry explicitly states a remote code execution vulnerability exists in Microsoft Windows Fax Service, enabling an attacker to run arbitrary code on the target host. NVD entries corroborate the CVE and ass...

CVE-2022-35747

Technical details for CVE-2022-35747 are not provided in the connected documents. No affected products, root cause, impacts, or fixes are specified beyond the generic description. Monitor for updates for public disclosure and remediation guidance.

CVE-2022-35759

Technical details for CVE-2022-35759 (affected product, root cause, impact, and fix) are not provided in the connected documents. Monitor for updates.

CVE-2023-32033

CVE-2023-32033: Microsoft Failover Cluster Remote Code Execution vulnerability with CVSS v3.1 base score 7.2 (HIGH). Attack vector is NETWORK, no user interaction, with confidentiality, integrity, and availability impacts all HIGH. Initial description confirms the affected vector but does not spe...

CVE-2023-35340

Microsoft Windows CVE-2023-35340 affects the CNG Key Isolation Service and is a local elevation-of-privilege vulnerability. It has a CVSS v3.1 base score of 7.8 (AV:L, AC:H, PR:L, UI:N, S:C, C:H, I:H, A:H). The provided documents identify the affected component and impact but do not include explo...

CVE-2025-21407

According to the provided documents, CVE-2025-21407 is associated with Windows Telephony Service and is listed with a high impact (CVSS 8.80) involving the execution of arbitrary code. The NCSC advisory explicitly catalogs CVE-2025-21407 under Windows Telephony Service with an impact of executing...

CVE-2025-21410

CVE-2025-21410 is a Windows RRAS Remote Code Execution vulnerability. AFFECTED: Windows RRAS component (Routing and Remote Access Service) with exploitation yielding total impact (RCE) on the host. ROOT CAUSE/DETAILS: Not explicitly provided in the documents beyond RRAS RCE naming; exploitation i...

CVE-2012-0003

CVE-2012-0003 is a remote-code-execution issue in Windows Multimedia Library (winmm.dll) used by Windows Media Player. A specially crafted MIDI file can trigger the vulnerability, leading to arbitrary code execution with the user’s context. Affected products include Windows XP SP2/SP3, Windows Se...

CVE-2016-3342

Technical details for CVE-2016-3342 are not publicly available in the provided documents. No affected products, root cause, or remediation are specified here. Monitor for updates.

CVE-2016-3396

CVE-2016-3396 is a GDI+ remote code execution in Graphics Device Interface (GDI) that allows a remote attacker to execute arbitrary code via a crafted embedded font. Affected products include Windows Vista SP2, Windows Server 2008 SP2/R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold/R...

CVE-2017-0121

CVE-2017-0121 is an information disclosure vulnerability in Microsoft Windows Uniscribe. The vulnerability allows a remote attacker to obtain sensitive information from the memory of a process by luring a user to a crafted web site. Affected are Windows Vista SP2, Windows Server 2008 SP2 and R2 S...

CVE-2017-0127

Technical details about CVE-2017-0127 are not publicly available in the provided documents. Monitor for updates.

CVE-2017-11880

CVE-2017-11880 affects the Windows kernel across multiple OS versions (Windows 7 SP1, Server 2008 SP2/R2 SP1, 8.1, 2012/2012 R2, 10 1511/1607/1703, Server 2016). It enables an attacker to run a specially crafted application to obtain information and further compromise the system due to the kernel...

CVE-2017-8480

Technical details for CVE-2017-8480 are not publicly available in the provided documents. Monitor for updates.

CVE-2017-8490

Technical details about CVE-2017-8490 are not publicly provided in the connected EUVD entries; no affected products, root cause, impact, or remediation details are disclosed here. Monitor for updates.

CVE-2019-0960

CVE-2019-0960 is a Windows Win32k elevation-of-privilege vulnerability. The Win32k component fails to properly handle objects in memory, allowing an attacker who can log on to run arbitrary kernel-mode code via a crafted application. Consequences include installing programs, viewing/changing/dele...

CVE-2019-1406

CVE-2019-1406 describes a remote code execution vulnerability in the Windows Jet Database Engine caused by improper handling of objects in memory. The issue could allow an attacker to execute arbitrary code on affected systems. Public references in the provided documents identify the Jet Database...

CVE-2019-1465

CVE-2019-1465 corresponds to a Windows GDI Information Disclosure vulnerability in the GDI component. The CNVD entries describe an information leakage vector where an attacker could obtain memory contents, with exploitation via social engineering (e.g., crafted documents or untrusted pages). The ...

CVE-2020-0958

CVE-2020-0958 is a Windows kernel-mode elevation-of-privilege vulnerability tied to the Win32k driver. The CNVD-2020-32590/32588/32589 entries describe the flaw as an issue in how the kernel-mode Win32k object memory is handled, enabling local privilege escalation. The vulnerability affects Windo...

CVE-2020-0987

Technical details (affected product/version, root cause, impact, fixes) are not publicly available in the provided Connected Documents; cross‑references exist (CVE-2020-0982, CVE-2020-0987, CVE-2020-1005) but no specifics are given.

CVE-2020-1038

Technical details about CVE-2020-1038 are not publicly provided in the connected documents; no affected products/versions or root-cause are specified beyond the generic memory-handling issue. Monitor for authoritative updates.

CVE-2020-1094

CVE-2020-1094 is an elevation of privilege vulnerability in the Windows Work Folder Service. The flaw arises from improper handling of file operations within the Work Folder Service, enabling a locally authenticated attacker to elevate privileges by running a crafted application. The vulnerabilit...

CVE-2020-1428

Technical details about CVE-2020-1428 are not publicly provided in the connected documents you supplied. Please monitor for updates from official advisories.

CVE-2020-1491

Technical details about CVE-2020-1491 are not publicly provided in the supplied documents. Monitor for updates from official advisories.

CVE-2020-17068

Technical details for CVE-2020-17068 are not publicly provided in the connected documents. No confirmed affected products, root cause, or fixes are present here. Monitor for updates from authoritative sources.

CVE-2021-1734

CVE-2021-1734 is described as a Windows Remote Procedure Call Information Disclosure vulnerability. The provided metrics show CVSS v3.1 base score 7.5 (HIGH) with a network attack vector, low attack complexity, no privileges required, no user interaction, and an impact of high confidentiality los...

CVE-2021-26881

Technical details about CVE-2021-26881 are not provided in the connected documents. The initial entry only states a Windows Media Foundation Remote Code Execution vulnerability. Monitor for updates and additional public details.

CVE-2021-28317

Technical details about CVE-2021-28317 are not provided in the connected documents. Available sources only reiterate the vulnerability name; monitor for updates for public details.

CVE-2021-38626

CVE-2021-38626 is a Windows Kernel elevation of privilege vulnerability. Connected sources identify the affected component as the Microsoft Windows Kernel with a local attack vector and privilege escalation potential. The Windows Kernel is the targeted subsystem, involving privilege-granting and ...

CVE-2021-43236

Technical details for CVE-2021-43236 are not publicly available in the provided documents. Monitor for updates from official advisories to confirm affected products, impact, and remediation.

CVE-2022-38032

Technical details for CVE-2022-38032 are not publicly provided in the supplied documents; monitor for updates from Microsoft MSRC and related references.

CVE-2024-38120

CVE-2024-38120 is a Windows RRAS Remote Code Execution vulnerability in the Routing and Remote Access Service. The CVSSv3.1 vector shows NETWORK attack vector, LOW complexity, and NONE privileges required with UI interaction, yielding a HIGH impact on confidentiality, integrity, and availability....

CVE-2024-38212

Technical details for CVE-2024-38212 are not publicly available in the provided documents. Monitor for updates from Microsoft/NVD and follow their vulnerability guidance.

CVE-2024-38214

CVE-2024-38214 is a Windows RRAS Information Disclosure Vulnerability affecting RRAS in Windows. The provided data lists RRAS as the vulnerable component with an impact of accessing sensitive data, and references Microsoft security updates (e.g., KB5041773 and related August 2024 updates) as miti...

CVE-2024-38236

Technical details about CVE-2024-38236 are not provided in the connected documents. Public details (affected product/version, exploit info, and fixes) are not available here; monitor for updates from official advisories.