CVE-2023-35632

CVE-2023-35632 corresponds to a Windows Elevation of Privilege issue in the Windows Ancillary Function Driver for WinSock. The CVE is listed across multiple feeds (NVD, OpenVAS) with a high base score (CVSSv3.1 7.8; LOCAL, LOW attack complexity, LOw privileges required, user interaction None; imp...

CVE-2023-21754

Technical details about CVE-2023-21754 are not publicly provided in the supplied documents. No information on affected products, root cause, impact, or remediation is available here. Monitor for updates from official sources.

CVE-2023-21766

CVE-2023-21766 corresponds to a Windows Overlay Filter information-disclosure vulnerability. The CVE entry lists a local attack surface with a Confidentiality impact of High, no Integrity/Availability impact, and a CVSS 3.1 base score of 4.7 (Attack Vector: Local; Attack Complexity: High; Privile...

CVE-2023-32085

CVE-2023-32085 is a local information-disclosure vulnerability in the Microsoft PostScript and PCL6 Class Printer Driver. The NVD entry describes it as a PostScript/PCL6 printer driver information disclosure with a CVSS v3.1 base score of 5.5 (Medium), vector: AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N....

CVE-2023-35362

Technical details for CVE-2023-35362 are not publicly provided in the supplied documents. Monitor for updates from Microsoft and CVE repositories.

CVE-2023-35366

Technical details for CVE-2023-35366 (RRAS RCE) are not provided in the connected documents. Monitor for updates; no specific products, vectors, exploit status, or remediations are described in the supplied materials.

CVE-2024-37982

Technical details about CVE-2024-37982 are not provided in the connected documents. No specifics on affected components, root cause, or fixes are available here. Monitor official advisories/updates for authoritative guidance.

CVE-2024-38015

Technical details for CVE-2024-38015 (Windows RD Gateway DoS) are not publicly provided in the supplied documents. Monitor for updates and future disclosures; no actionable exploit, impact, or remediation details are present here.

CVE-2024-38062

Affected software: Windows Kernel-Mode Drivers. CVE-2024-38062 is described in the OpenVAS entries as a local privilege escalation vulnerability with an impact of obtaining elevated privileges (CVSS 7.80). Root cause is not detailed in the provided documents beyond the general kernel-mode driver ...

CVE-2024-38079

Technical details about CVE-2024-38079 (affected component, root cause, impact, affected products/versions, and fixes) are not provided in the supplied documents; monitor for updates and disclosures from official sources.

CVE-2024-38154

CVE-2024-38154 concerns Windows Routing and Remote Access Service (RRAS). The initial document states RRAS Remote Code Execution Vulnerability with a CVSS3.1 base score of 8.8 (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H). Connected documents do not supply concrete technical details (no vendor/product/ve...

CVE-2024-38250

CVE-2024-38250 is a Windows Graphics Component elevation-of-privilege vulnerability. The CVE entry (Microsoft product area) indicates a local attacker with low privileges and no user interaction could obtain higher privileges (CVSS 7.8, High). Connected sources corroborate that Microsoft has issu...

CVE-2024-43644

Technical details about CVE-2024-43644 (affected product, root cause, impact, or fix) are not provided in the connected documents. Monitor for updates from official advisories.

CVE-2025-21190

CVE-2025-21190 is listed by an EU NCSC advisory under Windows Telephony Service with a CVSS of 8.80 and impact described as executing random code. The Connected Documents do not provide vendor/product version details or a concrete patch/fix within the supplied materials; Microsoft MSRC guidance i...

CVE-2025-21295

Technical details (affected product, vulnerable component, root cause, exploit conditions, or fix) for CVE-2025-21295 are not provided in the supplied documents. Monitor for updates from Microsoft and CVE repositories; current data confirms only high-level vulnerability existence.

CVE-2025-21414

CVE-2025-21414 is associated with Windows Core Messaging and is listed in a vulnerability roundup as an Elevation of Privilege risk, with the AVLEONOV source explicitly grouping it under EoP for Windows Core Messaging. The connected materials confirm the affected component (Windows Core Messaging...

CVE-2025-24050

CVE-2025-24050 describes a heap-based buffer overflow in the Windows Hyper-V role that enables a local privilege escalation for an authorized attacker (CVSSv3.1: LOCAL, Privileges Required: LOW, User Interaction: NONE; impact high for confidentiality, integrity, and availability). The connected d...

CVE-2025-27491

CVE-2025-27491 is a Windows Hyper-V remote code execution vulnerability described in the initial document as a use-after-free that could allow an authenticated attacker to execute code over the network. Connected sources corroborate Hyper-V as the affected component and reference patch delivery i...

CVE-2025-27735

CVE-2025-27735 affects Windows Virtualization-Based Security (VBS) Enclave. The root cause is insufficient verification of data authenticity, enabling an authorized local attacker to bypass a security feature. The connected NCSC listing labels the impact as bypassing a security measure with CVSS ...

CVE-2026-62889

CVE-2026-62889 is a Windows SSTP remote code execution vulnerability caused by a double free in the SSTP implementation. The available descriptions from NVD and CVE records state that an unauthenticated attacker could exploit this over a network to execute arbitrary code. The CVSS 3.1 base score ...

CVE-2017-0166

CVE-2017-0166: An LDAP elevation of privilege vulnerability in Windows occurs when LDAP request buffer lengths are improperly calculated. This enables a remote attacker to send malicious traffic to a Domain Controller to achieve elevated privileges. The initial description and connected documents...

CVE-2017-0280

CVE-2017-0280 is a remote-denial-of-service vulnerability in the Microsoft Windows SMB Server (SMBv1). The issue occurs when the SMBv1 server processes crafted SMB requests, allowing an unauthenticated attacker to trigger a DoS condition on the target system. Documents reference the vulnerability...

CVE-2017-0284

CVE-2017-0284 is an information-disclosure vulnerability in Windows Uniscribe that can disclose memory contents. It affects Windows and Office components (notably Uniscribe) across multiple OS releases (Windows 7/8.1/10, Windows Server variants, Office 2007/2010). The root cause is improper discl...

CVE-2018-0843

Technical details for CVE-2018-0843 are not publicly available in the provided documents; monitor for updates.

CVE-2018-0983

CVE-2018-0983 is a Windows Storage Services elevation-of-privilege vulnerability in Windows 10 (versions 1511, 1607, 1703, 1709) and Windows Server 2016/1709, caused by improper handling of objects in memory. Exploitation would allow local attackers to run processes with elevated privileges. The ...

CVE-2018-17612

Summary of CVE-2018-17612 : Sennheiser HeadSetup (and HeadSetup Pro) improperly published the private signing key in the public distribution and installed CA/root certificates into the local Trusted Root CA store. The root cause is the inclusion of the private key in the SennComCCKey.pem file, en...

CVE-2018-8497

CVE-2018-8497 is a Windows kernel elevation-of-privilege issue described as occurring in how the kernel handles objects in memory. Affected products listed in the CVE entry include Windows Server 2016, Windows 10, Windows Server 2019, and Windows 10 Server variants. The connected records confirm ...

CVE-2019-0682

The CVE-2019-0682 entry describes an elevation of privilege vulnerability in Windows Subsystem for Linux (WSL) caused by an integer overflow. The connected NVD record CVE-2019-0692 reiterates the same family of issue (WSL elevation of privilege) with no additional technical details in the provide...

CVE-2019-0719

CVE-2019-0719 describes a remote code execution vulnerability in the Windows Hyper-V Network Switch. The issue occurs when a host server fails to properly validate input from an authenticated user on a guest OS, enabling potential arbitrary code execution on the host. Affected component is the Hy...

CVE-2019-1041

CVE-2019-1041 (Windows Kernel Elevation of Privilege) is a Windows kernel vulnerability where improper handling of objects in memory allows an attacker who can log on to run arbitrary code in kernel mode. The attacker could then install programs, view/change/delete data, or create accounts with f...

CVE-2019-1124

Technical details for CVE-2019-1124 are not publicly provided in the supplied documents; no affected products, versions, exploit information, or fixes are specified. Monitor for updates in connected sources.

CVE-2020-0629

Technical details about CVE-2020-0629 are not provided in the supplied documents; monitoring for updates in the connected sources is advised.

CVE-2020-0785

CVE-2020-0785 is an elevation-of-privilege flaw in the Windows User Profile Service (ProfSvc) caused by improper handling of symlinks. The vulnerability allows a local attacker with low privileges to elevate to higher privileges without user interaction, as documented in the CVE description and c...

CVE-2020-0791

CVE-2020-0791 is a Windows Graphics Component privilege-escalation vulnerability. Attackerkb aggregations cite a kernel-mode out-of-bounds dereference in win32kfull!vStrWrite01 that can be triggered from user-mode via gdi32!StretchBlt, potentially enabling arbitrary code execution with the caller...

CVE-2020-1152

Technical details about CVE-2020-1152 (affected product/component/root cause/impact/fix) are not provided in the connected documents. The entry’s description is present, but no concrete technical details are supplied. Monitor for updates.

CVE-2020-1293

CVE-2020-1293 is an Elevation of Privilege vulnerability in Diagnostics Hub Standard Collector Service where file operations are mishandled. The connected AVLeonarov item places CVE-2020-1293 under Diagnostics Hub Standard Collector EOP and lists it alongside CVE-2020-1257 and CVE-2020-1278, but ...

CVE-2020-1382

CVE-2020-1382 is a Windows Graphics Component elevation of privilege vulnerability. The affected component is the Windows Graphics Component, and the root cause is improper handling of objects in memory, enabling an attacker to run processes in an elevated context after logging onto a vulnerable ...

CVE-2020-1508

CVE-2020-1508 affects Windows Media Audio Decoder and is described as a remote code execution vulnerability. The connected document (AVLEONOV article) lists Windows Media Audio Decoder as vulnerable under the September 2020 Patch Tuesday with multiple CVEs, including CVE-2020-1508, indicating an ...

CVE-2020-16905

CVE-2020-16905 describes an elevation-of-privilege flaw in Windows Error Reporting (WER) where the vulnerability is triggered through WER’s handling/execution of files. Exploitation could give an attacker higher privileges and access to sensitive system functionality by running a crafted applicat...

CVE-2020-17047

CVE-2020-17047: Windows Network File System (NFS) Denial of Service. The issue arises from improper handling of crafted RPC packets, allowing a remote attacker to disrupt a Windows/Windows Server target by sending malicious RPC calls. Root cause: RPC handling defect in the Windows NFS component. ...

CVE-2021-1654

Technical details for CVE-2021-1654 are not publicly provided in the connected documents. Monitor for updates as new information becomes available; current sources do not specify affected product versions, root cause, impact, or remediation beyond the initial description.

CVE-2021-1676

Technical details for CVE-2021-1676 are not publicly available in the provided connected documents. Monitor for updates.

CVE-2021-1680

Technical details about CVE-2021-1680 are not publicly available in the provided connected documents. Monitor for updates for affected product, root cause, impact, and remediation information.

CVE-2021-1695

Technical details for CVE-2021-1695 are not publicly available in the provided documents. Monitor for updates.

CVE-2021-1699

Technical details for CVE-2021-1699 are not provided in the supplied connected documents. Public information in the Initial document is limited to a Windows modem.sys information disclosure vulnerability. Monitor for updates.

CVE-2021-1727

CVE-2021-1727 is a Windows Installer elevation-of-privilege vulnerability. CVSS v3.1 vector: AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H; base score 7.8 (HIGH). Local access with low privileges and no user interaction, impacting confidentiality, integrity, and availability. Related entries reference Micr...

CVE-2021-26877

Technical details for CVE-2021-26877 are not provided in the supplied documents. No affected products, root cause, impact, or remediation are specified here; monitor for updates from official advisories.

CVE-2021-27077

CVE-2021-27077 is a Windows Win32k Elevation of Privilege vulnerability in win32kfull.sys!BLTRECORD::bRotate. If the HOOK_PLGBLT flag is set, the code may read a surface object’s hdev and call DrvPlgBlt() on the referenced driver without verifying it implements the function, potentially leading t...

CVE-2021-28440

Technical details about CVE-2021-28440 are not publicly provided in the supplied documents. No affected products, root cause, exploit status, or remediation specifics are included here. Monitor for updates in connected sources.

CVE-2021-40470

CVE-2021-40470 is a DirectX Graphics Kernel Elevation of Privilege vulnerability. The initial record indicates a LOCAL, low-logging, no-interaction attack with HIGH impact via CVSSv3.1 vector CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H (base 7.8). The connected documents reference Microsoft advi...