CVE-2025-32722

CVE-2025-32722 causes improper access control in the Windows Storage Port Driver . The vulnerability could allow an authorized local attacker to disclose information, per the CVE description. CVSSv3.1: Local attack, Low privileges required, no user interaction, Confidentiality impact High, others...

CVE-2025-48822

CVE-2025-48822 is an out-of-bounds read vulnerability in Windows Hyper-V that could enable local code execution. The connected NCSC entry explicitly lists the impact as Execution of arbitrary code on Windows Hyper‑V, with CVSS base score 8.6 (LOCAL, HIGH). The documents do not provide additional ...

CVE-2026-20922

CVE-2026-20922 is a heap-based buffer overflow in Windows NTFS that enables a locally authenticated attacker to execute code. The description and connected sources confirm NTFS as the vulnerable component and local execution as the impact. Public details in the provided documents are consistent w...

CVE-2026-50474

CVE-2026-50474 is a Remote Desktop Client vulnerability described as a use-after-free that allows an unauthenticated attacker to execute code over a network. The affected component is the Remote Desktop Client; the root cause is use-after-free in the client handling of remote sessions. The CVE is...

CVE-2026-62748

CVE-2026-62748 affects the Windows Telephony Service. The issue is a race condition due to improper synchronization on a shared resource, enabling a locally authorized attacker to elevate privileges. The weakness is exploited locally with no user interaction and results in high impact to confiden...

CVE-2016-7246

CVE-2016-7246 affects Windows kernel-mode drivers and is described as a local privilege-escalation vulnerability in Win32k. Public sources indicate the flaw resides in kernel-space handling accessed by user-mode apps, enabling a crafted application to gain elevated privileges. The initial documen...

CVE-2017-0183

CVE-2017-0184 is a Hyper-V Denial of Service vulnerability caused by improper validation of input from a privileged user on a guest OS. Exploitation could crash the host Hyper-V service. A known remediation is the security update KB3217841 (April 2017).

CVE-2017-0212

CVE-2017-0212 : Windows Hyper-V vSMB Elevation of Privilege. Affected: Windows 10 (Gold, 1511, 1607, 1703) and Windows Server 2016, where Hyper-V fails to properly validate vSMB packet data, enabling privilege escalation. Root cause: improper validation in vSMB handling. Impact: elevation of priv...

CVE-2017-11763

CVE-2017-11763 is a remote code execution vulnerability in the Microsoft Graphics Component exploited via specially crafted embedded fonts. Affected products include multiple Windows versions listed in the CVE description. Remediation is provided by security updates in the October 2017 rollups (e...

CVE-2017-8479

Technical details for CVE-2017-8479 are not publicly available in the provided documents. Monitor for updates from official advisories and CVE records.

CVE-2018-0828

CVE-2018-0828 is a Windows elevation-of-privilege vulnerability affecting Windows 10 (version 1607) and Windows Server 2016. The root cause is improper protection of the MultiPoint management account password, allowing a local attacker who logs in to run a specially crafted application to execute...

CVE-2018-8218

CVE-2018-8218 is a denial-of-service vulnerability in the Microsoft Hyper-V Network Switch. It arises when a privileged guest user’s input is not properly validated by the Hyper-V component on the host, causing the host server to crash (DoS). Affected: Windows 10 client and Windows Server variant...

CVE-2019-1440

Technical details for CVE-2019-1440 are not provided in the supplied documents; no affected products, versions, impact, or fixes are specified. Monitor for updates from official sources.

CVE-2020-0658

CVE-2020-0658 affects the Windows Common Log File System (CLFS) driver. The vulnerability stems from a flaw in how objects in memory are handled, allowing an information disclosure. According to the provided data, exploitation is local with low attack complexity, and confidentiality impact is lis...

CVE-2020-0682

Technical details about CVE-2020-0682 are not publicly provided in the supplied documents. No concrete affected product/version or remediation info is available here. Monitor for updates from official advisories.

CVE-2020-0698

Technical details for CVE-2020-0698 are not provided in the connected documents; the sources list the CVE but do not specify affected products, root cause, impact, or fixes. Monitor for updates from official advisories.

CVE-2020-0723

Technical details for CVE-2020-0723 are not publicly provided in the provided documents; no affected products, root cause, or remediation are specified here. Monitor for updates from official advisories.

CVE-2020-0741

CVE-2020-0741 is an elevation of privilege vulnerability affecting Microsoft Windows and Microsoft Windows Server via the Connected Devices Platform Service . The root cause, as described in connected CNVD records, is improper handling of objects in memory within this service, enabling an attacke...

CVE-2020-0747

Technical details about CVE-2020-0747 are not publicly provided in the attached documents. Monitor for updates from authoritative sources; current entries describe the vulnerability at a high level without specific affected products, versions, or mitigations.

CVE-2020-0762

CVE-2020-0762 is an elevation of privilege vulnerability in Windows Defender Security Center. According to the NVD entry and CNVD summaries, it arises when Defender Security Center handles certain objects in memory, enabling an attacker who can log on locally to elevate privileges. The vulnerabil...

CVE-2020-0792

Technical details about CVE-2020-0792 are not publicly provided in the supplied documents. Monitor for updates from official advisories.

CVE-2020-0797

CVE-2020-0797 is a Windows Privilege Mobilization vulnerability in the Windows Work Folder Service. The issue arises from the service handling file operations improperly, enabling an attacker with a specially crafted application to run processes with elevated privileges. No exploit details, patch...

CVE-2020-0845

Technical details for CVE-2020-0845 are not publicly available in the provided documents; monitor for updates.

CVE-2020-0857

CVE-2020-0857 is an elevation of privilege vulnerability in Windows: the Windows Search Indexer mishandles memory objects, enabling local attackers to gain elevated privileges. Affected: Windows Search Indexer process; root cause is memory handling. Impact per sources is elevation of privileges w...

CVE-2020-0877

CVE-2020-0887 is a Windows Win32k Elevation of Privilege vulnerability where the Win32k component fails to properly handle objects in memory. The description (and related CVEs 2020-0788 and 2020-0877) indicate a local privilege escalation risk, with kernel-mode execution potential as stated in mu...

CVE-2020-1119

CNVD-2021-63316 describes a Windows information disclosure vulnerability (CVE-2020-1119) arising from StartTileData.dll improperly handling objects in memory, allowing an attacker who can log on to an affected system and run a crafted application to obtain information that could help compromise t...

CVE-2020-1140

CVE-2020-1140 (DirectX Elevation of Privilege) is a Windows DirectX vulnerability where memory objects are improperly handled, enabling an attacker with local access to escalate privileges and potentially execute arbitrary code in kernel mode. The root cause, as described in MS and NVD records, i...

CVE-2020-1154

CVE-2020-1154 : Elevation of privilege in the Windows Common Log File System (CLFS) Driver due to improper handling of objects in memory. The vulnerability enables local privilege escalation, with a high-severity impact (CONFIDENTIALITY/INTEGRITY/AVAILABILITY listed as HIGH in CVSS 3.1, and LOCAL...

CVE-2020-1222

Technical details about CVE-2020-1222/1309 are not publicly provided in the connected documents. Available entries summarize memory handling and privilege elevation but do not specify affected products, versions, root cause, impact, or remediation beyond generic references. Monitor for updates.

CVE-2020-1241

CVE-2020-1241 is a Windows Kernel security feature bypass vulnerability. It arises when the Kernel fails to properly sanitize certain parameters, allowing a locally authenticated attacker to run a crafted application to bypass security checks. The vulnerability is addressed by updates that correc...

CVE-2020-1280

CVE-2020-1280 is an elevation of privilege vulnerability in Windows Bluetooth Service where memory objects are mishandled. The CVE is documented in NVD as a local, user-initiated issue with potential high impact if exploited, though exploitation details or root-cause specifics are not provided in...

CVE-2020-1283

CVE-2020-1283 is a Windows denial-of-service vulnerability where memory objects are improperly handled, causing the system to stop responding. The connected Nessus entry (KB4557957 family) lists CVE-2020-1283 among patched issues in June 2020, but the provided sources do not specify affected prod...

CVE-2020-1290

CVE-2020-1290 is a Win32k information-disclosure vulnerability in Windows. The root cause is that the Win32k component improperly provides kernel information, enabling an attacker who can run code locally to access due to information disclosure. The CVSS metrics in the record indicate LOCAL acces...

CVE-2020-1369

CVE-2020-1369 is a Windows WalletService elevation-of-privilege vulnerability. The issue arises from how WalletService handles objects in memory, enabling a local attacker to execute code with elevated privileges. The CVE is linked to WalletService references in the CVE-2020-1369 entry and relate...

CVE-2020-1372

CVE-2020-1372 refers to an Elevation of Privilege in Windows Mobile Device Management (MDM) Diagnostics. CNVD entries state the root cause as improper handling of objects in memory, exploitable by running a specially crafted application to bypass access restrictions (and, in one CNVD entry, delet...

CVE-2020-1385

CVE-2020-1385 affects the Windows Credential Picker. The vulnerability arises from how memory objects are handled, enabling local elevation of privilege if a crafted application runs on a vulnerable system. The CVE is tied to the Windows Credential Picker component and has a Local, Low-Complexity...

CVE-2020-1399

Technical details for CVE-2020-1399 are not present in the provided connected documents. Public EUVD entries mention malware but do not describe the vulnerability specifics. Monitor for updates.

CVE-2020-1426

Technical details for CVE-2020-1426 are not publicly available in the provided documents. Monitor for updates from official advisories to confirm affected products, impact, and remediation.

CVE-2020-16976

CVE-2020-16976 affects Windows systems via the Windows Backup Service. The root cause is an improper handling of file operations in the service, enabling a local attacker who already has code execution to run a crafted application to gain elevated privileges. The CVSS 3.1 base score is 7.8 (HIGH)...

CVE-2020-17013

CVE-2020-17013 is a Win32k information disclosure vulnerability in Windows. Available connected documents indicate the issue affects the Win32k subsystem and is associated with information disclosure (confidentiality impact), with CVSS metrics suggesting local access requirements and low to moder...

CVE-2021-1729

CVE-2021-1729 is described as a Windows Update Stack Setup Elevation of Privilege vulnerability. The connected documents confirm the issue concerns the Windows Update Stack installer and reference multiple advisories from 2021–2022, including ZDI advisory ZDI-21-284 and Microsoft MSRC/KB entries....

CVE-2021-24075

CVE-2021-24075 is a Microsoft Windows VMSwitch Denial of Service vulnerability. Affected component: VMSwitch in Windows. Underlying issue: remote Denial of Service via network vector with low attack complexity and required privileges, leading to HIGH availability impact per CVSS v3.1 (AV:N/AC:L/P...

CVE-2021-26874

CVE-2021-26874 is a Windows elevation-of-privilege vulnerability affecting the Windows Overlay Filter component. The description and CVSS data indicate a local, low-privilege exploit with no user interaction required, potentially allowing a total compromise of the affected system (confidentiality...

CVE-2021-28435

Technical details about CVE-2021-28435 are not publicly provided in the connected documents you supplied. Monitor for updates from vendor advisories and security feeds to learn affected products, impact, and fixes.

CVE-2021-28444

Technical details for CVE-2021-28444 are not provided in the supplied documents. Public information appears to exist elsewhere; monitor official advisories and vendor updates for concrete affected products, root cause, impact, and remediation when they become available.

CVE-2023-35314

Technical details for CVE-2023-35314 are not provided in the connected documents. The materials here only reiterate the vulnerability title. No affected products, root cause, or fixes are specified. Monitor for updates.

CVE-2024-38260

CVE-2024-38260 is a Windows Remote Desktop Licensing Service RCE vulnerability. Affected: Windows systems with the Remote Desktop Licensing Service. Impact per sources: execution of arbitrary code with the attacker’s privileges; CVSSv3.1 base score 8.8 (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). Conne...

CVE-2024-43456

Mode C: The CVE-2024-43456 case relates to Windows Remote Desktop Services Tampering. Connected docs corroborate impact as Manipulating Data (per NCSC entry: CVSS ~4.8). Microsoft has fixed vulnerabilities in Windows as part of the referenced advisories, but explicit patch versions/KB numbers for...

CVE-2025-21256

Technical details for CVE-2025-21256 are not provided in the connected documents. Public information here is limited to general Windows updates references; no product, exploit, or root-cause specifics are disclosed. Monitor for updates and additional disclosures.

CVE-2025-21301

CVE-2025-21301 is a Windows Geolocation Service Information Disclosure vulnerability with CVSS 3.1 base score 6.5 (Network attack, Low attack complexity, Privileges required: Low, User interaction: None). The vulnerability is disclosed as affecting Windows Geolocation Service and is addressed by ...