CVE-2024-38126

CVE-2024-38126 affects Windows Network Address Translation (NAT). The provided table lists it under Windows NAT with a CVSS v3.1 score of 7.5 (HIGH) and impact as Denial-of-Service. Other connected documents reference general Microsoft Windows fixes but do not provide concrete technical details (...

CVE-2020-1358

CVE-2020-1358 corresponds to a memory-handling information disclosure in the Windows Resource Policy component. The initial description notes that exploitation requires prior code execution on the victim system, implying local access is needed, with the vulnerability potentially exposing memory-c...

CVE-2022-34712

Technical details about CVE-2022-34712 are not publicly provided in the connected documents. Based on the supplied sources, we cannot determine affected products, root cause, or remediation. Monitor for updates from official advisories and CVE records.

CVE-2022-35793

Technical details about CVE-2022-35793 are not provided in the connected documents. The set contains only general MSKB updates; monitor official disclosures or vendor advisories for affected products, root cause, impact, and fixes.

CVE-2022-38003

The CVE-2022-38003 issue is described in connected CNVD as a Windows Resilient File System (ReFS) Elevation of Privilege vulnerability stemming from improper privilege assignment in an application. This means local attackers could escalate privileges on affected Windows systems. The vulnerability...

CVE-2023-32043

CVE-2023-32043 is a Windows Remote Desktop Security Feature Bypass vulnerability. The available document set confirms the issue as a remote-network vulnerability with no user impact on availability, but with high confidentiality and integrity impact per CVSS v3.1 (score 6.8). The connected source...

CVE-2023-35322

Technical details about CVE-2023-35322 are not publicly provided in the supplied documents; no affected products, root cause, or remediation details are listed. Monitor for updates in forthcoming connected sources.

CVE-2023-35643

CVE-2023-35643 affects Windows DHCP Server and is classified as a network-based information disclosure with CVSSv3.1 score 7.5 (C:H/I:N/A:N). The vulnerability resides in the DHCP Server Service and is capable of exposing sensitive data. Public sources in the connected set confirm the DHCP Server...

CVE-2024-30093

Technical details about CVE-2024-30093 are not provided in the supplied documents; no affected products, root cause, impact, or fixes are specified.

CVE-2024-37986

Technical details for CVE-2024-37986 are not publicly provided in the supplied documents. No affected products, versions, root cause, or remediation are specified here. Monitor for updates.

CVE-2024-38142

CVE-2024-38142 is a Windows Secure Kernel Mode elevation-of-privilege vulnerability (local, low-privilege prerequisite; high impact). The connected sources provide CVSS and impact only (Obtaining Increased Entitlements) and do not specify root cause details beyond the Windows kernel context. Publ...

CVE-2024-43454

CVE-2024-43454 is a Windows vulnerability affecting the Windows Remote Desktop Licensing Service that enables a Remote Code Execution via network with low privileges and no user interaction. The connected materials confirm this CVE entry and associate it with Microsoft’s September 2024 security u...

CVE-2024-49108

CVE-2024-49108 is a Windows Remote Desktop Services remote code execution vulnerability. According to the connected advisories, it is rated high severity (CVSSv3.1 base 8.1) with network access required and no user interaction, and the impact is execution of arbitrary code with high confidentiali...

CVE-2026-50472

The CVE-2026-50472 entry refers to a heap-based buffer overflow in Windows LUA File Virtualization Filter Driver (LUAFV) that allows an authorized, local attacker to achieve privilege escalation. Affected software is Windows LUAFV; the underlying issue is a heap-based overflow, leading to local p...

CVE-2026-54999

The CVE-2026-54999 entry concerns a race condition in Windows TCP/IP where concurrent access to a shared resource allows an unauthorized attacker on an adjacent network to execute code. Documented impact is remote code execution with high severity (CVSSv3.1: AV=A, AC=L, PR=N, UI=N, S=U, C=H, I=H,...

CVE-2017-0081

CVE-2017-0081 affects Windows kernel-mode drivers in Windows 8.1, Windows Server 2012 (Gold/R2), Windows RT 8.1, Windows 10 (Gold, 1511, 1607) and Windows Server 2016, enabling local privilege escalation via a crafted application in Win32k. Impact is described as complete confidentiality, integri...

CVE-2017-11815

CVE-2017-11815 is an information-disclosure vulnerability in the Windows SMB Server, caused by how SMB requests are handled. An authenticated attacker could craft a packet to trigger disclosure from the SMB server. Affected platforms include Windows SMB Server implementations referenced in the CV...

CVE-2017-11831

CVE-2017-11831 is a Windows kernel information disclosure vulnerability affecting Windows 7 SP1, Windows 8.1/RT 8.1, Windows Server 2008 SP2/R2 SP1, 2012/R2, Windows 10 (various builds up to 1709) and Windows Server 2016. Root cause: kernel initializes memory in a way that can expose information;...

CVE-2017-8544

CVE-2017-8544 describes a Windows Search Information Disclosure vulnerability in the Windows Search service caused by how objects are handled in memory. Affected systems span multiple Windows versions: Windows 7 SP1, Windows Server 2008 SP2/R2 SP1, Windows 8.1/RT 8.1, Windows Server 2012/R2, Wind...

CVE-2017-8694

CVE-2017-8694 is a local privilege escalation in the Windows kernel-mode driver (Win32k) caused by improper handling of memory objects. Affects Windows versions listed in the description (Windows 7 SP1, Windows 8.1, Windows Server 2008 SP2/R2 SP1, Windows Server 2012, Windows RT 8.1, Windows 10 v...

CVE-2018-0899

Technical details for CVE-2018-0899 are not publicly provided in the supplied documents. Monitor for updates from official advisories.

CVE-2018-8637

CVE-2018-8637 is a Windows kernel vulnerability (Win32k Information Disclosure) that can disclose memory addresses from kernel space, potentially bypassing KASLR. Affected: Windows kernel components (Win32k) on Windows 10/Windows Server 2019. Root cause: how the kernel handles memory addresses en...

CVE-2019-0931

Technical details about CVE-2019-0931 are not publicly provided in the supplied documents; no concrete affected products, root cause, or fixes are present. Monitor for updates.

CVE-2019-0999

CVE-2019-0999 is an elevation of privilege vulnerability in DirectX where memory objects are improperly handled. The vulnerability allows local attackers to gain high integrity, with exploit characteristics noted in NVD as Local access, Low attack complexity, and no user interaction (CVSS v3.0: A...

CVE-2019-1417

CVE-2019-1417 involves an Elevation of Privilege in Windows Data Sharing Service due to improper handling of file operations. Affected product: Windows operating systems with the Data Sharing Service. The root cause is improper file operation handling that enables local privilege escalation. Impa...

CVE-2019-1472

CVE-2019-1472 is described in CNVD-2020-02181 as a Microsoft Windows Kernel Information Disclosure Vulnerability. It results from improper handling of memory objects in the Windows kernel; an attacker who can log on to an affected system and run a specially crafted application could disclose info...

CVE-2020-0616

CVE-2020-0616 is a Windows denial-of-service flaw caused by improper handling of hard links. An attacker must log on to an affected system and run a crafted application to disrupt the target (potentially overwrite system files). Microsoft’s update fixes ACLs on system files to address this vulner...

CVE-2020-0725

Technical details for CVE-2020-0725 are not publicly provided in the supplied documents; no concrete affected products, versions, root cause, or fixes are included. Monitor for updates from official advisories and EUVD entries.

CVE-2020-0730

CVE-2020-0730 concerns Windows User Profile Service (ProfSvc) elevation of privilege due to improper handling of symbolic links. The CNVD-2020-14305 entry describes that an attacker could delete files and folders in an elevated context by exploiting this symlink handling issue. The provided conne...

CVE-2020-0773

CVE-2020-0773 describes a local elevation-of-privilege vulnerability in Windows ActiveX Installer Service caused by improper memory handling. An attacker who can run code on the victim system could exploit this to gain higher privileges. The description confirms it is a local, memory-related issu...

CVE-2020-0821

Technical details about CVE-2020-0821 are not publicly provided in the supplied documents; the connected records reference a general Windows kernel information disclosure vulnerability. Monitor for updates.

CVE-2020-0856

Technical details for CVE-2020-0856 are not publicly provided in the supplied documents. Monitor for updates from official advisories for affected ADIDNS information disclosure specifics.

CVE-2020-0860

Technical details for CVE-2020-0860 are not publicly provided in the connected documents. Available sources mention the vulnerability in general terms; monitor for updates and additional technical disclosures.

CVE-2020-0866

The CVE-2020-0866 entry maps to a Windows Work Folder Service elevation of privilege vulnerability. Connected CNVD-2020-23447 describes a privilege escalation via the service’s improper handling of file operations, enabling a specially crafted application to execute processes with elevated privil...

CVE-2020-0936

CVE-2020-0936 is an Elevation of Privilege vulnerability in Windows/Windows Server caused by a Windows Scheduled Task that fails to properly handle file redirections. CNVD-2020-32583 describes the root cause as improper file redirection handling in the scheduled task, enabling an authenticated at...

CVE-2020-0949

CVE-2020-0949 is a Windows Media Foundation memory corruption vulnerability caused by improper handling of memory objects. The affected component is Windows Media Foundation; the CVSSv3 base score is 8.8 (HIGH) with HIGH impact on confidentiality, integrity, and availability, and exploitability n...

CVE-2020-0952

CVE-2020-0952 is a Windows GDI Information Disclosure Vulnerability. Connected sources confirm it involves the Windows GDI component disclosing memory contents, enabling information disclosure. Related entries from CNVD-2020-30654 and OpenVAS KEV listings acknowledge this CVE among Windows GDI di...

CVE-2020-0963

The CVE-2020-0963 entry describes an information disclosure vulnerability in the Windows Graphics Device Interface (GDI) where memory contents may be exposed. The vulnerability is tied to the GDI component’s handling of objects in memory, enabling disclosure of memory contents by an attacker. The...

CVE-2020-1006

CVE-2020-1006 affects the Windows Push Notification Service (WNS) in Windows. The root cause is an elevation of privilege due to how memory objects are handled by WNS, enabling a locally authenticated attacker to escalate privileges. The CVSS data indicates a LOCAL attack vector with LOW required...

CVE-2020-1061

CVE-2020-1061 is a remote code execution vulnerability described as affecting the Microsoft Script Runtime, stemming from how it handles objects in memory. The available connected docs reiterate this in the CVE description and identify the component as the Microsoft Script Runtime, with no explic...

CVE-2020-1123

CVE-2020-1123 is a denial-of-service vulnerability in Microsoft Windows Connected User Experiences and Telemetry Service, arising from improper handling of operations (e.g., file-related handling) and related to the CVE-2020-1084 distinction. Connected documents corroborate DoS impact from failur...

CVE-2020-1245

Technical details about CVE-2020-1245 are not provided in the supplied connected documents; public information in the initial description is high-level. Monitor for official security advisories for affected products, impact, and fixes.

CVE-2020-1265

Technical details about CVE-2020-1265 are not present in the connected documents; the provided sources do not specify affected products, root cause, or remediation. Monitor for updates.

CVE-2020-1360

CVE-2020-1360 affects the Windows Profile Service. The vulnerability arises from improper handling of file operations within the service, enabling local elevation of privilege if an attacker can run a crafted application on a vulnerable system. The issue is mapped to Windows Profile Service (Wind...

CVE-2020-1397

CVE-2020-1397 is an information-disclosure flaw in Windows Imaging Component (WIC) related to how WindowsCodecs handles image decoding, particularly TIFF/CCITT paths. FireEye’s analysis identifies the root cause as uninitialized memory flowing through the image decoding pipeline (TIFFReadBufferSe...

CVE-2020-1437

CVE-2020-1437 is described in CNVD as an elevation-of-privilege vulnerability in the Windows Network Location Awareness Service. The flaw stems from how the service handles objects in memory, enabling an attacker to execute code with elevated privileges by running a specially crafted application....

CVE-2020-17012

CVE-2020-17012 is a Windows Elevation of Privilege affecting the Bind Filter Driver. The vulnerability is rooted in the Windows Bind Filter Driver component, enabling local attackers with low privileges and no user interaction to elevate privileges (CVSSv3.1: 7.8, HIGH; CVSSv2: 4.6, MEDIUM). Affe...

CVE-2020-17094

CVE-2020-17094 is described as a Windows Error Reporting Information Disclosure Vulnerability. The connected sources provide a CVSS 3.1 base vector (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) with a Medium severity and High confidentiality impact, plus a CVSS2 base score of 5.5. The documents do not sp...

CVE-2021-1729

CVE-2021-1729 is described as a Windows Update Stack Setup Elevation of Privilege vulnerability. The connected documents confirm the issue concerns the Windows Update Stack installer and reference multiple advisories from 2021–2022, including ZDI advisory ZDI-21-284 and Microsoft MSRC/KB entries....

CVE-2021-28351

CVE-2021-28351 is a Windows Speech Runtime Elevation of Privilege vulnerability affecting the Windows Speech Runtime component. The entry provides high-severity context (CVSS v3.1 base score 7.8) with Local attack vector, Low privileges required, and no user interaction, claiming impact to confid...