CVE-2020-1253

Technical details about CVE-2020-1253 are not provided in the connected documents. The initial entry notes an elevation of privileges in the Windows kernel-mode driver, but no specifics (versions, impact, or fixes) are included here.

CVE-2020-1272

CVE-2020-1272 is a Windows Installer elevation-of-privilege vulnerability. The Windows Installer component is affected by improper input sanitization that leads to insecure library loading, enabling a locally authenticated attacker to execute arbitrary code with elevated system privileges. Exploi...

CVE-2020-1293

CVE-2020-1293 is an Elevation of Privilege vulnerability in Diagnostics Hub Standard Collector Service where file operations are mishandled. The connected AVLeonarov item places CVE-2020-1293 under Diagnostics Hub Standard Collector EOP and lists it alongside CVE-2020-1257 and CVE-2020-1278, but ...

CVE-2020-1382

CVE-2020-1382 is a Windows Graphics Component elevation of privilege vulnerability. The affected component is the Windows Graphics Component, and the root cause is improper handling of objects in memory, enabling an attacker to run processes in an elevated context after logging onto a vulnerable ...

CVE-2020-1508

CVE-2020-1508 affects Windows Media Audio Decoder and is described as a remote code execution vulnerability. The connected document (AVLEONOV article) lists Windows Media Audio Decoder as vulnerable under the September 2020 Patch Tuesday with multiple CVEs, including CVE-2020-1508, indicating an ...

CVE-2020-1524

CVE-2020-1524 is a Windows vulnerability affecting the Windows Speech Shell Components, where memory handling leads to elevation of privilege. The issue requires an attacker who already has code execution on the target to run a crafted application to gain higher privileges. Microsoft’s advisory i...

CVE-2020-1550

Technical details for CVE-2020-1550 are not publicly provided in the connected documents; the initial entry notes memory handling in Windows CDP User Components but no vendor/version/root-cause specifics are given here. Monitor for updates.

CVE-2020-16905

CVE-2020-16905 describes an elevation-of-privilege flaw in Windows Error Reporting (WER) where the vulnerability is triggered through WER’s handling/execution of files. Exploitation could give an attacker higher privileges and access to sensitive system functionality by running a crafted applicat...

CVE-2020-16964

CVE-2020-16964 is described as a Windows Backup Engine Elevation of Privilege vulnerability. The available documents indicate a local, low-privilege attack that yields full confidentiality, integrity, and availability impact (CVSS 3.1: AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). No specific affected pr...

CVE-2020-17014

CVE-2020-17014 is a Windows Print Spooler elevation of privilege vulnerability. The NVD record lists a local, low-complexity attack with LOW privileges required and no user interaction, yielding HIGH integrity and availability impact (CVSS v3.1 base score 7.1; v2 base score 6.6). The provided doc...

CVE-2020-17047

CVE-2020-17047: Windows Network File System (NFS) Denial of Service. The issue arises from improper handling of crafted RPC packets, allowing a remote attacker to disrupt a Windows/Windows Server target by sending malicious RPC calls. Root cause: RPC handling defect in the Windows NFS component. ...

CVE-2020-17057

CVE-2020-17057 affects Windows Win32k via elevation of privilege. A PoC/exploit exists in a connected document, and Microsoft issued a patch on 2020-11-10 to fix the issue. The exact affected product/version details and vulnerability root cause are not fully enumerated in the provided sources, bu...

CVE-2021-1654

Technical details for CVE-2021-1654 are not publicly provided in the connected documents. Monitor for updates as new information becomes available; current sources do not specify affected product versions, root cause, impact, or remediation beyond the initial description.

CVE-2021-1676

Technical details for CVE-2021-1676 are not publicly available in the provided connected documents. Monitor for updates.

CVE-2021-1680

Technical details about CVE-2021-1680 are not publicly available in the provided connected documents. Monitor for updates for affected product, root cause, impact, and remediation information.

CVE-2021-1699

Technical details for CVE-2021-1699 are not provided in the supplied connected documents. Public information in the Initial document is limited to a Windows modem.sys information disclosure vulnerability. Monitor for updates.

CVE-2021-1727

CVE-2021-1727 is a Windows Installer elevation-of-privilege vulnerability. CVSS v3.1 vector: AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H; base score 7.8 (HIGH). Local access with low privileges and no user interaction, impacting confidentiality, integrity, and availability. Related entries reference Micr...

CVE-2021-26877

Technical details for CVE-2021-26877 are not provided in the supplied documents. No affected products, root cause, impact, or remediation are specified here; monitor for updates from official advisories.

CVE-2021-40470

CVE-2021-40470 is a DirectX Graphics Kernel Elevation of Privilege vulnerability. The initial record indicates a LOCAL, low-logging, no-interaction attack with HIGH impact via CVSSv3.1 vector CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H (base 7.8). The connected documents reference Microsoft advi...

CVE-2021-41346

CVE-2021-41346 refers to a security feature bypass vulnerability in the Windows Console Window Host. Exploitation is local (AV:L, UI:N, integrity/confidentiality/availability impact: partial), effectively bypassing security controls and potentially enabling privilege escalation or data exposure a...

CVE-2021-42288

CVE-2021-42288 is identified as Windows Hello Security Feature Bypass Vulnerability. NVD CVSS details: CVSSv3.1 base score 6.1 (PHYSICAL access, NONE privileges, UI NONE; C:H/I:H/A:N; Confidentiality/Integrity HIGH). Connected docs corroborate this CVE in Microsoft KB updates KB5007186 (OS builds...

CVE-2021-43222

CVE-2021-43222 documents a Microsoft Message Queuing information disclosure vulnerability. The issue affects MSMQ when handling messages over the network, enabling an attacker with network access and no authentication to potentially access confidential information. According to the CVE entry, the...

CVE-2021-43230

CVE-2021-43230 is a Windows NTFS Elevation of Privilege vulnerability (local, low attack complexity) with no user interaction required, per the initial CVE entry. The connected documents primarily discuss NTFS-related CVEs in the 2021-4323x family and describe a pool/size calculation overflow in ...

CVE-2022-34726

Technical details (affected component, root cause, impact, and fix) are not provided in the supplied documents; no concrete technical specifics are available. Monitor for official disclosures and updates.

CVE-2022-41101

CVE-2022-41101 is a Windows Overlay Filter Elevation of Privilege vulnerability with CVSS 3.1 base score 7.8 (HIGH). It is a LOCAL exploit requiring LOW privileges and no user interaction, with full impact on confidentiality, integrity, and availability as per the score. The provided documents id...

CVE-2022-44674

CVE-2022-44674 is a Windows Bluetooth Driver information disclosure vulnerability. The CVSS v3.1 base score is 5.5 (Medium) with a Local attack vector, Low attack complexity, Privileges Required: Low, No user interaction, and an unchanged scope; confidentiality impact is High. Exploitation would ...

CVE-2023-28240

Technical details for CVE-2023-28240 are not publicly available in the provided documents; monitor for updates.

CVE-2023-28256

CVE-2023-28256 corresponds to a Windows DNS Server remote code execution vulnerability. The initial record identifies the affected software as Windows DNS Server and provides a CVSSv3.1 base score of 6.6 (Medium) with Network attack vector, High attack complexity, and High privileges required; us...

CVE-2024-38047

Technical details (affected product/component, root cause, impact, and patch specifics) are not publicly provided in the supplied documents. Monitor for updates from official advisories and connected sources for CVE-2024-38047.

CVE-2024-38185

Technical details about CVE-2024-38185 are not publicly available in the provided documents. No affected products, root cause, impact, or remediation details are specified here. Monitor for updates in the connected sources.

CVE-2024-43635

Technical details for CVE-2024-43635 are not publicly provided in the connected documents. The materials only reference a Windows Telephony Service RCE vulnerability. Monitor Microsoft advisories and vulnerability feeds for affected versions, impact, and remediation when they are disclosed.

CVE-2025-21242

CVE-2025-21242 is a Windows Kerberos information-disclosure vulnerability. Public sources (CNNVD/MSRC/NVD) identify it as a Kerberos-related information disclosure affecting multiple Windows builds (e.g., Windows 10/11 and Windows Server variants). The exact technical root cause and vulnerable su...

CVE-2025-21255

Technical details about CVE-2025-21255 are not provided in the supplied documents. Public information is limited to a basic description and references. Monitor Microsoft KBs/NVD for affected products, root cause, and remediation as updates are published.

CVE-2025-21328

CVE-2025-21328 maps to a Windows MapUrlToZone security feature bypass vulnerability. Connected docs confirm affected component and root cause: bypassing security checks in MapUrlToZone, enabling circumvention of security measures. CVSS v3.1 base metrics shown as 4.3 (MEDIUM) with Network attack v...

CVE-2025-26668

CVE-2025-26668 is a heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) that allows a network-authenticated attacker to execute code remotely. Affected component is RRAS (Windows Routing and Remote Access Service); root cause is a heap-based overflow that can lead to ar...

CVE-2025-27479

CVE-2025-27479 appears in connected records as a Kerberos-related Denial-of-Service vulnerability described under the Kerberos Key Distribution Proxy Service. The available sources confirm an impact on Windows Kerberos with a network-based DoS potential due to an insufficient resource pool, but d...

CVE-2025-53766

CVE-2025-53766 is a heap-based buffer overflow in Windows GDI+ that enables a remote attacker to execute code over a network. Public details describe the vulnerability as a memory overflow in GDI+ triggered by processing specially crafted metafiles, potentially allowing arbitrary code execution w...

CVE-2016-7274

CVE-2016-7274 concerns the Windows Uniscribe component (usp10.dll). The issue stems from an integer/heap-related vulnerability in the LoadUvsTable() function that could enable remote code execution when processing untrusted font data via a crafted web site. Public analyses (e.g., Google Project Z...

CVE-2017-0268

CVE-2017-0268 is an SMBv1 information-disclosure vulnerability in Microsoft Windows SMB Server handling of certain requests. Connected entries corroborate an SMBv1 information-disclosure issue affecting Windows SMB Server and reference published advisories and mitigations. IBM API Connect advisor...

CVE-2017-8577

Technical details for CVE-2017-8577 are not provided in the supplied documents; no explicit affected product/version, root cause, impact, or fix is disclosed here. Monitor for updates.

CVE-2018-8313

CVE-2018-8313 is an elevation of privilege vulnerability in how the Windows Kernel API enforces permissions. The issue affects multiple Windows platforms including Windows Server 2012 R2, Windows RT 8.1, Windows Server 2012, Windows Server 2016, Windows 8.1, Windows 10, and Windows 10 Servers. Th...

CVE-2018-8486

CVE-2018-8486 is an information disclosure in DirectX caused by DirectX's improper handling of memory objects. Affected are Windows 7, Windows 8.1, Windows 10 and multiple Windows Server editions (e.g., 2008/R2, 2012, 2016, 2019). Root cause: memory objects not handled safely by DirectX. Impact: ...

CVE-2019-0698

Summary: CVE-2019-0698 is a memory corruption vulnerability in the Windows DHCP client that can allow remote code execution when an attacker sends specially crafted DHCP responses. The connected advisories confirm related CVEs (CVE-2019-0697 and CVE-2019-0726) describe the same class of issue aff...

CVE-2019-0901

CVE-2019-0901 maps to a Windows Jet Database Engine vulnerability. Connected CNVD entries describe a buffer overflow/heap overflow in Windows Jet Database Engine when memory boundaries are not validated, potentially allowing memory corruption on affected Windows/Windows Server systems. The CNVD d...

CVE-2019-0961

The CVE-2019-0961 entry concerns Microsoft Windows GDI (Graphics Device Interface). The vulnerability arises from improper handling of memory objects, leading to information disclosure of memory contents in GDI. Affected component: Windows GDI in Microsoft Windows. Impact, as stated, is informati...

CVE-2019-0973

CVE-2019-0973 affects the Windows Installer. The issue stems from improper input sanitization that enables insecure library loading, leading to elevation of privilege. A locally authenticated attacker could execute arbitrary code with elevated system privileges, potentially installing programs, v...

CVE-2019-1153

CVE-2019-1153 is a Windows Graphics Component information-disclosure vulnerability. It stems from improper handling of objects in memory, enabling an attacker who logs on and runs a specially crafted application to obtain information that could help further compromise the system. Mitigation is vi...

CVE-2019-1248

CVE-2019-1248 is a remote code execution vulnerability in the Windows Jet Database Engine caused by improper handling of objects in memory. The provided documents do not specify exploitation vectors, affected versions, root cause details, or remediations for this CVE.

CVE-2020-0641

CVE-2020-0641 affects Windows Media Service and enables elevation of privilege by allowing a logged-on attacker to create a file in an arbitrary location. The vulnerability is referenced in NVD with local, low-attack complexity conditions and high impact (confidentiality, integrity, availability)...

CVE-2020-0703

CVE-2020-0703 affects the Windows Backup Service. It is an Elevation of Privilege vulnerability caused by improper handling of file operations. attacker must first gain execution on the victim system; the description does not provide a vendor-specific fix or version details in the provided docume...