CVE-2020-1406

The CVE-2020-1406 entry describes a local Elevation of Privilege in Windows Network List Service related to in-memory object handling. The provided connected documents do not include concrete technical details (no affected product versions, root-cause specifics, exploit info, or remediation guida...

CVE-2020-1426

Technical details for CVE-2020-1426 are not publicly available in the provided documents. Monitor for updates from official advisories to confirm affected products, impact, and remediation.

CVE-2020-16912

The CVE-2020-16912 entry describes a local elevation-of-privilege vulnerability in the Windows Backup Service caused by improper handling of file operations. An attacker who can execute code on the victim system could run a crafted application to elevate privileges. The issue is tied to the Backu...

CVE-2020-17077

CVE-2020-17077 is a Windows Update Stack Elevation of Privilege vulnerability tracked in CVE-2020-17077. The vulnerability is identified as a local, low-attack-complexity issue that requires low privileges and can yield high impact on confidentiality, integrity, and availability per NVD metrics (...

CVE-2021-24075

CVE-2021-24075 is a Microsoft Windows VMSwitch Denial of Service vulnerability. Affected component: VMSwitch in Windows. Underlying issue: remote Denial of Service via network vector with low attack complexity and required privileges, leading to HIGH availability impact per CVSS v3.1 (AV:N/AC:L/P...

CVE-2021-28436

CVE-2021-28436 is a Windows Speech Runtime elevation-of-privilege vulnerability with local attack vector and no user interaction required (CVSSv3.1: base score 7.8, HIGH). Affected component is the Speech Runtime in Windows; underlying root-cause and exact exploit details are not spelled out in t...

CVE-2021-28444

Technical details for CVE-2021-28444 are not provided in the supplied documents. Public information appears to exist elsewhere; monitor official advisories and vendor updates for concrete affected products, root cause, impact, and remediation when they become available.

CVE-2021-43237

CVE-2021-43237 is a Windows Setup Elevation of Privilege vulnerability. Affected: Windows setup components (local vector). Impact per CVSS: high confidentiality, integrity, and availability; local, low/medium complexity with low privileges required (per CVSS 3.1) and user interaction may be requi...

CVE-2023-35310

Technical details about CVE-2023-35310 (affected components, impact, exploitability, and mitigations) are not publicly provided in the supplied connected documents. Monitor official disclosures and Microsoft advisories for updates.

CVE-2023-35339

CVE-2023-35339 is a Windows CryptoAPI Denial of Service vulnerability with a CVSS v3.1 base score of 7.5 (NETWORK, LOW attack complexity, NONE privileges, NONE user interaction, HIGH availability impact). The provided records do not specify affected versions, root cause details, exploitation stat...

CVE-2023-35622

CVE-2023-35622 affects the Windows DNS component and is associated with a spoofing/impersonation risk (impact: pretend to be another user) with a CVSS v3.1 base score of 7.5. The connected documents indicate Microsoft has released security updates in December 2023 addressing Windows DNS vulnerabi...

CVE-2024-38067

Technical details about CVE-2024-38067 (Windows OCSP Server DoS) are not provided in the supplied connected documents; no product/version/root-cause/impact/fix information is present. Monitor for updates.

CVE-2024-38149

CVE-2024-38149 is a Windows BranchCache Denial of Service vulnerability. Documents indicate a network-exploitable issue (CVSS v3.1: 7.5, AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) affecting BranchCache components. Microsoft provides fixes via security updates (KB/MSRC guidance); no explicit root-cause ...

CVE-2024-43553

CVE-2024-43553 is an NT OS Kernel elevation-of-privilege vulnerability associated with Windows NT OS Kernel. The connected data explicitly maps this CVE to Windows NT OS Kernel with a high impact (privilege escalation). The NCSC advisory notes that vulnerabilities in Windows have been fixed, and ...

CVE-2025-21268

CVE-2025-21268 is a Windows MapUrlToZone security feature bypass. Affected component: MapUrlToZone logic; impact is circumvention of security boundaries (CVSS v3.1: 4.3, NETWORK attack vector, user interaction required). Connected sources confirm it as a security feature bypass vulnerability and ...

CVE-2025-21282

Technical details about CVE-2025-21282 are not publicly provided in the supplied documents. No affected product/version or exploit information is disclosed here. Monitor for updates from official advisories and CVE/NVD entries.

CVE-2025-21359

Technical details (affected product, root cause, impact, or fix) for CVE-2025-21359 are not provided in the supplied documents. Please monitor official advisories (Microsoft/MSRC updates) for concrete vulnerability specifics and remediation guidance.

CVE-2026-23668

CVE-2026-23668 affects the Windows Graphics Component and is an elevation-of-privilege vulnerability. The advisory indicates a local attack vector with high attack complexity, requiring low privileges and no user interaction (UI: NONE). The vulnerability impacts confidentiality, integrity, and av...

CVE-2026-65787

The CVE-2026-65787 entry describes a heap-based buffer overflow in Desktop Window Manager that allows an authorized attacker to elevate privileges locally. Documented impact is local privilege escalation with a high severity (CVSS 3.1: AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). The vulnerability affec...

CVE-2016-7214

Technical details about CVE-2016-7214 are not publicly provided in the supplied documents. The connected EUVD/NVD entries do not reveal affected products or root causes here. Monitor for updates from official advisories.

CVE-2016-7260

CVE-2016-7260 affects multiple Windows releases via a Win32k.sys/Win32k component elevation of privilege vulnerability. The kernel-mode drivers in Vista SP2, Server 2008 SP2/R2 SP1, Windows 7 SP1, 8.1, 2012/2012 R2, RT 8.1, 10 (incl. 1511, 1607), and Server 2016 allow local users to gain privileg...

CVE-2017-11853

Technical details for CVE-2017-11853 (affected Windows kernel versions, root cause, impact, and fixes) are not publicly provided in the connected documents. Monitor for updates from official advisories (MSRC) and regional databases.

CVE-2017-8489

Technical details for CVE-2017-8489 are not provided in the connected documents. The EUVD entries mention malware titled 'Malware in sbrugna' but do not describe affected products, root cause, impact, or remediation.

CVE-2017-8592

CVE-2017-8592 is a browser security feature bypass in Microsoft browsers (Internet Explorer/Edge) caused by improper handling of redirect requests. This leads to bypassing CORS redirect restrictions and following redirects that should be ignored, potentially exposing data to an attacker. In the c...

CVE-2017-8717

CVE-2017-8717 affects the Microsoft JET Database Engine, with a buffer overflow in memory handling of objects that can allow remote code execution. The CPAI advisory notes a remote attacker could exploit this by enticing a user to open a specially crafted Excel file on affected Windows versions. ...

CVE-2019-0717

CVE-2019-0717 is a Microsoft Hyper-V Denial of Service vulnerability in the Hyper-V Network Switch (vmswitch.sys). A privileged user on a guest OS can craft input that, if exploited, crashes the host server. The underlying issue is improper input validation when guest VMs access the Hyper-V Netwo...

CVE-2019-1173

CVE-2019-1173 is an elevation-of-privilege flaw affecting the Windows component PsmServiceExtHost.dll where in-memory object handling is improper. The vulnerability allows a locally authenticated attacker to execute code with elevated permissions by running a crafted application. Microsoft’s secu...

CVE-2019-1292

CVE-2019-1292: A Windows denial of service vulnerability from improper handling of objects in memory. Public documents consistently describe the issue as affecting Windows memory handling and causing a DoS, but do not provide concrete affected product versions, root-cause details, exploits, or of...

CVE-2020-0676

Technical details for CVE-2020-0676 are not publicly available in the provided connected documents. The initial description offers a general summary only. Monitor for updates and rely on official advisories for affected products and fixes.

CVE-2020-0705

CVE-2020-0705 is an information-disclosure vulnerability in Windows’ Network Driver Interface Specification (NDIS) where memory handling is improper. The issue can disclose information from memory and requires prior execution on the target (local access with low attack complexity per CVSS v3.1: A...

CVE-2020-0741

CVE-2020-0741 is an elevation of privilege vulnerability affecting Microsoft Windows and Microsoft Windows Server via the Connected Devices Platform Service . The root cause, as described in connected CNVD records, is improper handling of objects in memory within this service, enabling an attacke...

CVE-2020-0747

Technical details about CVE-2020-0747 are not publicly provided in the attached documents. Monitor for updates from authoritative sources; current entries describe the vulnerability at a high level without specific affected products, versions, or mitigations.

CVE-2020-0751

CVE-2020-0751 describes a denial-of-service vulnerability in Microsoft Hyper-V where the host fails to validate malicious data from a guest OS. An attacker with a privileged guest account can trigger a crafted workload to cause a DoS on the host. The vulnerability affects Hyper-V’s handling of gu...

CVE-2020-1072

CVE-2020-1072 is described as a Windows kernel information disclosure vulnerability caused by the kernel’s improper handling of objects in memory. The connected CNVD entry repeats this description, confirming an information-disclosure risk stemming from memory object handling in Windows kernel sp...

CVE-2020-1097

CVE-2020-1097 describes an information-disclosure vulnerability in the Windows GDI component where memory contents could be exposed due to improper handling of objects in memory. An attacker could exploit this by convincing a user to open a specially crafted document or visit a malicious webpage,...

CVE-2020-1134

Technical details for CVE-2020-1134 are not provided in the connected documents. Public information in the Initial Description is limited to general vulnerability context. Monitor for updates from ENISA EUVD entries if relevant.

CVE-2020-1165

Technical details about CVE-2020-1165 are not publicly available in the provided documents; monitor for updates.

CVE-2020-1283

CVE-2020-1283 is a Windows denial-of-service vulnerability where memory objects are improperly handled, causing the system to stop responding. The connected Nessus entry (KB4557957 family) lists CVE-2020-1283 among patched issues in June 2020, but the provided sources do not specify affected prod...

CVE-2020-1385

CVE-2020-1385 affects the Windows Credential Picker. The vulnerability arises from how memory objects are handled, enabling local elevation of privilege if a crafted application runs on a vulnerable system. The CVE is tied to the Windows Credential Picker component and has a Local, Low-Complexity...

CVE-2020-1392

CVE-2020-1392 is an Elevation of Privilege vulnerability in the Windows Delivery Optimization service. It arises from improper handling of memory objects, enabling a local attacker to execute code with elevated privileges by running a specially crafted script or application. Documents also associ...

CVE-2020-1399

Technical details for CVE-2020-1399 are not present in the provided connected documents. Public EUVD entries mention malware but do not describe the vulnerability specifics. Monitor for updates.

CVE-2020-1418

CVE-2020-1418 describes a Windows Privilege Elevation vulnerability in the Windows Diagnostics Hub Execution Service. The issue arises from improper input sanitization, causing unsecure library loading and enabling local privilege escalation. Affected software is Windows Diagnostics Hub (Executio...

CVE-2020-16976

CVE-2020-16976 affects Windows systems via the Windows Backup Service. The root cause is an improper handling of file operations in the service, enabling a local attacker who already has code execution to run a crafted application to gain elevated privileges. The CVSS 3.1 base score is 7.8 (HIGH)...

CVE-2021-26879

CVE-2021-26879 is described across the provided documents as a Windows Network Address Translation (NAT) Denial of Service vulnerability. The materials consistently reference the issue at the Windows NAT level, identifying the vulnerability and its impact as a DoS condition, but they do not speci...

CVE-2021-43239

CVE-2021-43239 is a Windows Privilege Escalation vulnerability affecting the Windows Recovery Environment (WinRE) Agent. The NVD entry describes a local, low-attack-complexity flaw with high impact on confidentiality, integrity, and availability (CVSSv3.1 base score 7.8). NCSC integration lists r...

CVE-2023-33168

CVE-2023-33168 is a Remote Procedure Call Runtime Denial of Service vulnerability. The connected documents provide only a generic description and CVSS metrics; they do not reveal affected product/vendor/component/versions, root cause, exploit details, or a fix. OpenVAS entries reference the CVE b...

CVE-2023-35309

MSMQ Remote Code Execution vulnerability CVE-2023-35309 is discussed in the connected AVLEONOV article as an MSMQ RCE requiring an attacker to send a malicious MSMQ packet to an MSMQ server. The article also suggests blocking TCP port 1801 as a mitigation and notes the vulnerability context among...

CVE-2024-38070

Technical details about CVE-2024-38070 are not publicly provided in the supplied documents. Please monitor for updates from Microsoft and NVD; current entries reference WLDP but do not disclose exploit paths or affected products.

CVE-2024-38230

CVE-2024-38230 is associated with Windows Standards-Based Storage Management Service and is described in the connected materials as a Denial of Service against that Windows component. The primary technical details available: affected software/component (Windows Standards-Based Storage Management ...

CVE-2024-38256

CVE-2024-38256 is a Windows kernel‑mode driver information disclosure vulnerability. The incident affects Windows kernel‑mode drivers and has a CVSSv3.1 base score of 5.5 (MEDIUM) with local attack vector, low attack complexity, and low privileges required; confidentiality impact is High, others ...