CVE-2020-17026

CVE-2020-17026 is documented as a Windows Remote Access Elevation of Privilege vulnerability. The available sources (NVD entry) label it with local attack vector and partial confidentiality, integrity, and availability impacts (CVSS v2 base score 4.6; CVSS v3.1 base score 7.8). Connected document...

CVE-2020-17068

Technical details for CVE-2020-17068 are not publicly provided in the connected documents. No confirmed affected products, root cause, or fixes are present here. Monitor for updates from authoritative sources.

CVE-2021-1672

CVE-2021-1672 refers to a Windows vulnerability in the Projected File System (PFS) FS Filter Driver that enables information disclosure. The connected MSRC entry and NVD record confirm the affected component is the Windows PFS FS Filter Driver, with root cause described as an information disclosu...

CVE-2021-1679

Technical details for CVE-2021-1679 are not publicly provided in the supplied documents. Please monitor for updates; no product, impact, or remediation specifics are included here.

CVE-2021-24091

CVE-2021-24091 corresponds to a remote code execution in the Windows Camera Codec Pack. Connected CNVD data attributes the issue to the Windows camera codec package on Windows/Windows Server. The vulnerability is described as enabling remote code execution; no remediation details are provided in ...

CVE-2021-26417

CVE-2021-26417 is described as a Windows Overlay Filter Information Disclosure vulnerability with local attack vector. Connected documents corroborate this as a Microsoft Windows/Windows Server information-disclosure issue connected to the Overlay Filter. Public references show the vulnerability ...

CVE-2021-26875

CVE-2021-26875 is described as a Windows Win32k Elevation of Privilege Vulnerability. The provided connected documents do not reveal concrete technical details (affected component versions, specific root cause, exploit vectors, or explicit remediation) for this CVE; only high-level references to ...

CVE-2021-27079

Technical details about CVE-2021-27079 are not publicly available in the provided documents; no affected versions, root cause, or fixes are disclosed here. Monitor for updates.

CVE-2021-28317

Technical details about CVE-2021-28317 are not provided in the connected documents. Available sources only reiterate the vulnerability name; monitor for updates for public details.

CVE-2021-40468

CVE-2021-40468 corresponds to a Windows Bind Filter Driver Information Disclosure vulnerability. The connected data confirms affected component as Windows Bind Filter Driver and assigns CVSS v3.1 base metrics of 5.5 (Medium) with LOCAL attack vector, LOW attack complexity, and LOW privileges requ...

CVE-2022-35760

Technical details about CVE-2022-35760 (affected product, root cause, impact or fix) are not provided in the connected documents. Please monitor for updates from official sources.

CVE-2022-35793

Technical details about CVE-2022-35793 are not provided in the connected documents. The set contains only general MSKB updates; monitor official disclosures or vendor advisories for affected products, root cause, impact, and fixes.

CVE-2023-32043

CVE-2023-32043 is a Windows Remote Desktop Security Feature Bypass vulnerability. The available document set confirms the issue as a remote-network vulnerability with no user impact on availability, but with high confidentiality and integrity impact per CVSS v3.1 (score 6.8). The connected source...

CVE-2023-35305

Technical details about CVE-2023-35305 are not publicly provided in the supplied documents. Monitor for updates from Microsoft and security bulletins for affected product/version, impact, and remediation.

CVE-2023-35350

Technical details for CVE-2023-35350 are not publicly available in the provided documents. Affected product/impact/root cause are not disclosed here. Monitor for updates and official advisories.

CVE-2023-35641

CVE-2023-35641 is an Internet Connection Sharing (ICS) remote code execution in Windows. Connected sources confirm affected component (Windows ICS) and classify the impact as remote code execution with the attacker needing adjacent network access, no user interaction, and no privileges required (...

CVE-2024-30067

Technical details for CVE-2024-30067 are not provided in the supplied documents. Monitor official disclosures for affected products, impact, and remediation guidance.

CVE-2024-38046

CVE-2024-38046 is described as a local privilege-escalation vulnerability in PowerShell. The primary public documentation (NVD/NCSC) confirms a local attacker with low privileges could elevate privileges on affected Windows components, with a CVSS v3.1 base score of 7.8 (LOCAL, Privileges Require...

CVE-2024-38057

Technical details about CVE-2024-38057 (affected product/version, root cause, exploitability, and fix) are not provided in the connected documents. Monitor for updates from vendor/security advisories.

CVE-2024-38146

CVE-2024-38146 affects the Windows Layer-2 Bridge Network Driver. The CVSS 3.1 base score is 7.5 (HIGH) with Network attack, low complexity, no privileges, no user interaction, and high availability impact. Descriptions in connected OpenVAS items corroborate a DoS impact on Windows Layer-2 Bridge...

CVE-2024-38249

CVE-2024-38249 is a Windows Graphics Component elevation-of-privilege vulnerability. The connected sources confirm this CVE affects Windows Graphics Component and carries a CVSS v3.1 base score of 7.8 (HIGH), with local attack vector, low attack complexity, and privileges required: LOW; impact to...

CVE-2024-43509

CVE-2024-43509 is listed in connected advisories as affecting the Windows Graphics Component with an elevation of privilege impact. The ENISA/NCSC entries corroborate this CVE under Windows Graphics Component and assign an impact/score (7.80) and local, privilege‑required conditions. Concrete det...

CVE-2024-43511

Technical details about CVE-2024-43511 are not provided in the supplied documents. Public information beyond basic CVSS data is not included here; monitor for updates.

CVE-2024-43535

CVE-2024-43535 is a Windows Kernel-Mode Driver Elevation of Privilege affecting Windows Kernel-Mode Drivers (tm.sys cited in public discussions). The CVE entry lists a HIGH base impact (Privilege escalation) with LOCAL access and HIGH confidentiality/integrity/availability impact. A GitHub repo i...

CVE-2024-43544

CVE-2024-43544 is a Microsoft Windows vulnerability in the Simple Certificate Enrollment Protocol that enables Denial of Service over a network with no authentication or user interaction; CVSS v3.1 base score 7.5 (HIGH) with Availability impact. Connected sources corroborate the DoS impact and ca...

CVE-2024-43549

CVE-2024-43549 is documented as a Windows RRAS (Routing and Remote Access Service) Remote Code Execution vulnerability. Connected sources label the impact as running arbitrary code on the affected RRAS component when exposed over the network, with a base CVSS v3.1 score of 8.8 (HIGH) and network ...

CVE-2024-43553

CVE-2024-43553 is an NT OS Kernel elevation-of-privilege vulnerability associated with Windows NT OS Kernel. The connected data explicitly maps this CVE to Windows NT OS Kernel with a high impact (privilege escalation). The NCSC advisory notes that vulnerabilities in Windows have been fixed, and ...

CVE-2024-43567

CVE-2024-43567 is a Windows Hyper-V Denial-of-Service vulnerability. The CVSSv3.1 vector indicates a network-exposed flaw (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) that can be triggered remotely, resulting in an availability impact. The CVE is listed under Windows Hyper-V with confirmed Denial-of-Ser...

CVE-2024-49091

Technical details for CVE-2024-49091 are not publicly provided in the supplied documents; no affected products, root cause, or remediation are stated. Monitor for updates.

CVE-2024-49125

Technical details about CVE-2024-49125 are not publicly available in the provided connected documents. Monitor for updates from official sources for affected products, impact, and fixes.

CVE-2025-27469

CVE-2025-27469 affects Windows LDAP (Lightweight Directory Access Protocol) and describes an uncontrolled resource consumption that enables an unauthenticated attacker to cause network-denied service. The issue is categorized as a Denial-of-Service via LDAP on the network. Microsoft has released ...

CVE-2025-32719

CVE-2025-32719 is a Windows Storage Management Provider vulnerability described as an out-of-bounds read that allows an authorized, local attacker to disclose information. The CVE has a CVSS v3.1 base score of 5.5 (Local, Low attack complexity, Privileges Required: Low) with high confidentiality ...

CVE-2026-26182

CVE-2026-26182 is a Windows elevation-of-privilege vulnerability caused by a use-after-free in the Windows Ancillary Function Driver for WinSock. The impact is local privilege escalation for an authorized user, as described by multiple sources. Public notices confirm the issue affects Windows com...

CVE-2026-69485

CVE-2026-69485 is a Remote Code Execution vulnerability in Microsoft Remote Desktop Client caused by use of an uninitialized resource . An authorized attacker with low privileges can exploit it remotely over a network without user interaction, achieving full compromise of confidentiality, integri...

CVE-2016-3342

Technical details for CVE-2016-3342 are not publicly available in the provided documents. No affected products, root cause, or remediation are specified here. Monitor for updates.

CVE-2016-7259

CVE-2016-7259 affects the Windows Graphics Component in kernel-mode drivers (Win32k) across multiple Windows platforms, allowing local privilege escalation via a crafted application. The root cause is improper handling of memory objects by the Graphics component, enabling privilege elevation (loc...

CVE-2017-0297

Technical details (affected products, root cause, impact, remediation) are not publicly available in the provided connected documents. Monitor for updates from official advisories.

CVE-2017-11785

CVE-2017-11785 is a Windows kernel information-disclosure vulnerability caused by improper handling of objects in memory, affecting multiple Windows client and server versions (from Windows 7 SP1 to Windows 10 builds including 1511/1607/1703 and Windows Server 2008 SP2/R2 SP1, 2012, 2016). The un...

CVE-2018-0975

CVE-2018-0975 is an information-disclosure vulnerability in the Windows kernel that could enable an attacker to obtain information leading to a Kernel ASLR bypass. The Initial document lists affected Windows platforms (Windows 7, Windows Server 2008/2012/2016, Windows 8.1, Windows 10 and correspo...

CVE-2019-0998

CVE-2019-0998 affects Windows Storage Service, where improper handling of file operations allows an attacker who can execute code on a victim system to obtain elevated privileges. The root cause is an elevation-of-privilege flaw in the Storage Service’s file operation handling. Exploitation requi...

CVE-2019-1022

CVE-2019-1022 describes a local elevation-of-privilege in Windows Audio Service. The vulnerability arises from how the service handles certain process-related requests; a crafted, local application could enable an attacker to execute code with elevated privileges, potentially compromising the hos...

CVE-2019-1406

CVE-2019-1406 describes a remote code execution vulnerability in the Windows Jet Database Engine caused by improper handling of objects in memory. The issue could allow an attacker to execute arbitrary code on affected systems. Public references in the provided documents identify the Jet Database...

CVE-2019-1408

Technical details for CVE-2019-1408 are not publicly available in the provided documents. Monitor for updates.

CVE-2019-1435

Technical details for CVE-2019-1435 are not publicly available in the provided documents. Connected entries mention malware but do not reveal the affected component, root cause, impact, or remediation. Monitor for updates.

CVE-2020-0754

Technical details for CVE-2020-0754 are not provided in the connected documents; only high-level information is available.

CVE-2020-0841

Technical details for CVE-2020-0841 are not publicly provided in the supplied documents; no affected products, root cause, or remediation are disclosed here. Monitor for updates.

CVE-2020-0866

The CVE-2020-0866 entry maps to a Windows Work Folder Service elevation of privilege vulnerability. Connected CNVD-2020-23447 describes a privilege escalation via the service’s improper handling of file operations, enabling a specially crafted application to execute processes with elevated privil...

CVE-2020-0888

CVE-2020-0888 is a DirectX elevation-of-privilege vulnerability. Description: DirectX improperly handles objects in memory, enabling local privilege escalation. It is distinct from CVE-2020-0784. The entry provides a CVSS v3.1 base score of 7.8 (LOCAL, LOW privileges, NONE user interaction, HIGH ...

CVE-2020-0989

CVE-2020-0989 affects Windows Mobile Device Management Diagnostics. Root cause: improper handling of junctions, causing information disclosure. Exploitation requires local authentication: an attacker logs on and runs a crafted app to read restricted files. Impact is read access to files due to a ...

CVE-2020-1007

CVE-2020-1007 is a Windows kernel information disclosure vulnerability. The issue arises from how the Windows kernel handles objects in memory, enabling information disclosure when exploited locally. The description, CVSS data, and references indicate a kernel-level memory handling flaw with part...