CVE-2020-0725

Technical details for CVE-2020-0725 are not publicly provided in the supplied documents; no concrete affected products, versions, root cause, or fixes are included. Monitor for updates from official advisories and EUVD entries.

CVE-2020-0773

CVE-2020-0773 describes a local elevation-of-privilege vulnerability in Windows ActiveX Installer Service caused by improper memory handling. An attacker who can run code on the victim system could exploit this to gain higher privileges. The description confirms it is a local, memory-related issu...

CVE-2020-0821

Technical details about CVE-2020-0821 are not publicly provided in the supplied documents; the connected records reference a general Windows kernel information disclosure vulnerability. Monitor for updates.

CVE-2020-0856

Technical details for CVE-2020-0856 are not publicly provided in the supplied documents. Monitor for updates from official advisories for affected ADIDNS information disclosure specifics.

CVE-2020-0952

CVE-2020-0952 is a Windows GDI Information Disclosure Vulnerability. Connected sources confirm it involves the Windows GDI component disclosing memory contents, enabling information disclosure. Related entries from CNVD-2020-30654 and OpenVAS KEV listings acknowledge this CVE among Windows GDI di...

CVE-2020-1291

CVE-2020-1291 is an elevation of privilege vulnerability in the Windows Network Connections Service related to how memory objects are handled. The issue is documented for Windows Network Connections Service (no explicit affected OS versions in the provided texts). The CVSS data in the initial rec...

CVE-2020-17028

Technical details for CVE-2020-17028 are not publicly provided in the supplied documents. Monitor for updates to disclosure, patch availability, and affected products.

CVE-2021-26879

CVE-2021-26879 is described across the provided documents as a Windows Network Address Translation (NAT) Denial of Service vulnerability. The materials consistently reference the issue at the Windows NAT level, identifying the vulnerability and its impact as a DoS condition, but they do not speci...

CVE-2023-33168

CVE-2023-33168 is a Remote Procedure Call Runtime Denial of Service vulnerability. The connected documents provide only a generic description and CVSS metrics; they do not reveal affected product/vendor/component/versions, root cause, exploit details, or a fix. OpenVAS entries reference the CVE b...

CVE-2023-35314

Technical details for CVE-2023-35314 are not provided in the connected documents. The materials here only reiterate the vulnerability title. No affected products, root cause, or fixes are specified. Monitor for updates.

CVE-2024-35270

Technical details about CVE-2024-35270 (Windows iSCSI Service DoS) are not provided in the connected documents. Monitor for official advisories and Microsoft updates for affected products and remediation.

CVE-2024-37970

Technical details about CVE-2024-37970 are not provided in the connected documents. The initial description notes a Secure Boot security feature bypass, but no affected product/version/root cause/fix is disclosed here. Monitor for updates.

CVE-2024-43456

Mode C: The CVE-2024-43456 case relates to Windows Remote Desktop Services Tampering. Connected docs corroborate impact as Manipulating Data (per NCSC entry: CVSS ~4.8). Microsoft has fixed vulnerabilities in Windows as part of the referenced advisories, but explicit patch versions/KB numbers for...

CVE-2024-43553

CVE-2024-43553 is an NT OS Kernel elevation-of-privilege vulnerability associated with Windows NT OS Kernel. The connected data explicitly maps this CVE to Windows NT OS Kernel with a high impact (privilege escalation). The NCSC advisory notes that vulnerabilities in Windows have been fixed, and ...

CVE-2024-49121

CVE-2024-49121 is an LDAP Denial-of-Service vulnerability in Windows LDAP (Domain Controller). The connected advisory confirms the LDAP issue as a DoS risk and notes that Microsoft has released fixes via updates; applying the relevant Windows security updates is the recommended remediation. MITRE...

CVE-2025-21359

Technical details (affected product, root cause, impact, or fix) for CVE-2025-21359 are not provided in the supplied documents. Please monitor official advisories (Microsoft/MSRC updates) for concrete vulnerability specifics and remediation guidance.

CVE-2025-26669

CVE-2025-26669 is listed in RRAS (Windows Routing and Remote Access Service) with the impact described as Access to sensitive data and a severity score of 8.80. The RRAS entry indicates an information-disclosure risk via an out-of-bounds read, attributed to a vulnerability in RRAS. Connected sour...

CVE-2026-42909

CVE-2026-42909 involves a heap-based buffer overflow in the Remote Desktop Client that enables a remote attacker to execute code over the network. The vulnerability arises from improper handling of data during remote desktop operations, leading to memory corruption. The CVSS-3.1 vector (AV:N/AC:H...

CVE-2026-61918

CVE-2026-61918 is a Windows Remote Desktop Client vulnerability described as an out-of-bounds read that could allow an unauthenticated, remote attacker to disclose information over the network. The issue is confirmed in public CVE listings and is associated with the Remote Desktop Client componen...

CVE-2026-62712

CVE-2026-62712 is a Windows Win32K heap-based buffer overflow that enables local privilege escalation by an authorized attacker. Affected component: Windows kernel user-mode win32k; root cause is a heap overflow in Win32K handling. Impact per provided metrics: Confidentiality, Integrity, and Avai...

CVE-2015-0004

CVE-2015-0004 concerns a local privilege-escalation in the Windows User Profile Service (ProfSvc). According to the provided sources, the vulnerability is exploited by a junction attack that loads another user’s UsrClass.dat registry hive, enabling local users to gain privileges. Affected product...

CVE-2015-2535

CVE-2015-8467 affects Samba 4.x servers configured as AD DCs. The flaw in dsdb/samdb/ldb_modules/samldb.c allows remote authenticated users to bypass administrative privileges when creating machine accounts, by exploiting a domain that contains both a Samba DC and a Windows DC. This is related to...

CVE-2016-0036

CVE-2016-0036 (RDP Elevation of Privilege) affects the Remote Desktop Protocol in Microsoft Windows products including Windows 7 SP1, Windows 8.1, Windows Server 2012 (Gold/R2), and Windows 10. The flaw stems from the RDP implementation; remote authenticated users can execute arbitrary code by se...

CVE-2016-0088

CVE-2016-0088 corresponds to a Hyper-V remote code execution vulnerability in Microsoft Windows Hyper-V affecting Windows 8.1, Windows Server 2012 (Gold/R2), and Windows 10. The root cause is that Hyper-V fails to properly validate guest OS input from an authenticated user, enabling a crafted app...

CVE-2016-0184

CVE-2016-0184 is a use-after-free vulnerability in the Windows GDI/Direct3D path. The issue arises from improper handling of in-memory objects during parsing, enabling remote code execution when a crafted document or web content is processed. Affected products span Windows Vista SP2, Server 2008 ...

CVE-2016-7184

The CVE-2016-7184 issue affects the Common Log File System (CLFS) driver in Windows operating systems ranging from Windows Vista SP2 to Windows Server 2016 (including Windows 10 versions 1511 and 1607). The vulnerability enables local users to achieve privilege escalation via a crafted applicatio...

CVE-2016-7219

CVE-2016-7219 affects the Windows Crypto driver (kernel-mode) across multiple Windows releases (Vista/Server 2008 through Windows 10/Server 2016). The impact is information disclosure via a crafted application, caused by improper handling of objects in memory within the Crypto driver. The vulnera...

CVE-2016-7246

CVE-2016-7246 affects Windows kernel-mode drivers and is described as a local privilege-escalation vulnerability in Win32k. Public sources indicate the flaw resides in kernel-space handling accessed by user-mode apps, enabling a crafted application to gain elevated privileges. The initial documen...

CVE-2017-0075

CVE-2017-0075 (Hyper‑V RCE) affects Microsoft Windows Hyper‑V, with vulnerable scope including Windows Vista SP2, Windows Server 2008 SP2/R2, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold/R2, Windows 10 (Gold, 1511, 1607), and Windows Server 2016. The connected sources describe a remote co...

CVE-2017-0102

Technical details (affected components, root cause, exploit status, mitigations) are not publicly disclosed in the provided documents for CVE-2017-0102; monitor for updates.

CVE-2017-0259

CVE-2017-0259 is a Windows kernel local information-disclosure vulnerability affecting Windows 8.1, Windows Server 2012 R2, Windows RT 8.1, Windows 10 (Gold, 1511, 1607, 1703) and Windows Server 2016. A specially crafted document can cause leakage of sensitive information via the kernel. Public e...

CVE-2017-0270

CVE-2017-0270 is an SMBv1 information-disclosure vulnerability in Microsoft Windows SMB Server handling of certain requests. The connected documents indicate the issue arises from improper handling of SMBv1 requests, enabling an attacker to obtain sensitive information from affected systems. Affe...

CVE-2017-0274

Technical details for CVE-2017-0274 are not publicly available in the provided connected documents. The sources reference SMBv1 information disclosure generally but do not specify affected products/versions, root cause, impact, or remediation for this CVE. Monitor for updates.

CVE-2017-11784

CVE-2017-11784 affects the Windows kernel information-disclosure pathway in multiple Windows versions (Windows 7 SP1, 8.1, Server 2008 SP2/R2 SP1, 2012, Windows RT 8.1, Windows 10) where objects in memory are improperly handled. The root cause is an information-disclosure vulnerability in the Win...

CVE-2017-11831

CVE-2017-11831 is a Windows kernel information disclosure vulnerability affecting Windows 7 SP1, Windows 8.1/RT 8.1, Windows Server 2008 SP2/R2 SP1, 2012/R2, Windows 10 (various builds up to 1709) and Windows Server 2016. Root cause: kernel initializes memory in a way that can expose information;...

CVE-2017-11849

The CVE-2017-11849 entry concerns the Windows kernel information disclosure vulnerability. Affected software includes Windows kernel on Windows 7 SP1; Windows Server 2008 SP2/R2 SP1; Windows 8.1/RT 8.1; Windows Server 2012/R2; Windows 10 versions (Gold, 1511, 1607, 1703, 1709); and Windows Server...

CVE-2017-8476

CVE-2017-8476 is a kernel information-disclosure vulnerability affecting multiple Windows platforms (Windows Server 2008 SP2/R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold/R2, Windows RT 8.1, Windows 10 variants 1511–1703, and Windows Server 2016). The issue allows an authenticated ...

CVE-2017-8481

Technical details about CVE-2017-8481 are not publicly available in the provided connected documents. Monitor for updates from official advisories to obtain affected products, impact, and fixes.

CVE-2017-8633

The CVE-2017-8633 vulnerability is an elevation of privilege in Windows Error Reporting (WER). The issue arises when WER handles and executes files, allowing an attacker to escalate privileges on affected Windows versions (Windows 7/8.1/10 and corresponding server SKUs). The linked OpenVAS/KB dat...

CVE-2017-8677

CVE-2017-8677 is a Win32k/GDI+-related information-disclosure vulnerability in Windows that exposes kernel memory addresses when handling GDI+ objects. Affected products include Windows kernel/UI components on Windows Server 2008 SP2/R2 SP1, Windows 7 SP1, Windows 8.1, Windows 10 (various builds)...

CVE-2017-8694

CVE-2017-8694 is a local privilege escalation in the Windows kernel-mode driver (Win32k) caused by improper handling of memory objects. Affects Windows versions listed in the description (Windows 7 SP1, Windows 8.1, Windows Server 2008 SP2/R2 SP1, Windows Server 2012, Windows RT 8.1, Windows 10 v...

CVE-2020-0667

CVE-2020-0667 affects Microsoft Windows, specifically the Windows Search Indexer component. The connected documents confirm the root cause: the vulnerability arises from how the Windows Search Indexer handles objects in memory, enabling an elevation of privilege when exploited locally. The CNVD e...

CVE-2020-0721

Technical details for CVE-2020-0721 are not publicly available in the provided documents . Monitor for updates in case further specifics on affected products, impact, or fixes are released.

CVE-2020-0799

CVE-2020-0799 is a Windows kernel elevation of privilege vulnerability. The flaw arises because the Windows kernel fails to properly handle parsing of certain symbolic links in its file-system/kernel parsing path, enabling local privilege escalation. The description and linked sources (NVD/NVD-de...

CVE-2020-0819

CVE-2020-0819 describes an elevation of privilege vulnerability in Windows Device Setup Manager caused by improper handling of file operations. The CVE is documented across multiple sources (NVD/NVD entry) with a base CVSS v3.1 score of 7.8 (HIGH) and CVSS v2 score of 7.2 (HIGH), indicating local...

CVE-2020-0875

CVE-2020-0875 describes an information disclosure vulnerability in how splwow64.exe handles certain calls. An attacker who exploits this could obtain information to further compromise the user’s system (low-integrity to medium-integrity). The flaw by itself does not grant arbitrary code execution...

CVE-2020-0877

CVE-2020-0887 is a Windows Win32k Elevation of Privilege vulnerability where the Win32k component fails to properly handle objects in memory. The description (and related CVEs 2020-0788 and 2020-0877) indicate a local privilege escalation risk, with kernel-mode execution potential as stated in mu...

CVE-2020-1014

CVE-2020-1014 is described in connected docs as an elevation of privilege in the Microsoft Windows Update Client caused by improper privilege handling. The CNVD entry attributes the flaw to the Windows Update Client, enabling privilege escalation, and the OpenVAS/MSKB references corroborate this ...

CVE-2020-1081

CVE-2020-1081 is an elevation-of-privilege issue in the Windows Printer Service caused by improper validation of file paths when loading printer drivers. Affected product: Windows Printer Service. Root cause details and specific vulnerable versions are not enumerated in the provided documents bey...

CVE-2021-26882

CVE-2021-26882 is a Local Elevation of Privilege vulnerability described as a Remote Access API issue. The standard sources assign CVSS‑3.1: AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H (base 7.8) and CVSS‑2.0/3.1 metrics show a medium to high impact with high confidentiality, integrity, and availability ...