CVE-2019-1277

CVE-2019-1277 describes an elevation of privilege vulnerability in the Windows Audio Service triggered by processing a malformed parameter. The affected component is Windows Audio Service on Windows systems. Root cause: malformed parameter handling leading to unauthorized privilege escalation. CV...

CVE-2019-1437

Technical details about CVE-2019-1437 are not publicly available in the provided Connected documents. Monitor for updates; the material here does not specify affected products/versions, root cause, impact, or remediation.

CVE-2020-0701

CVE-2020-0701 affects the Windows Client License Service (ClipSVC). The vulnerability arises from how the service handles in-memory objects, allowing a locally authenticated attacker to execute code with elevated permissions by running a crafted application. Impact is elevation of privilege; expl...

CVE-2020-0775

CVE-2020-0775 is an information disclosure vulnerability in Windows Error Reporting caused by improper handling of file operations. The vulnerability requires local execution to exploit. Affected component is Windows Error Reporting (Windows OS). Impact is information disclosure (confidentiality)...

CVE-2020-0863

CVE-2020-0863 affects Windows with the Connected User Experiences and Telemetry Service, where the service improperly discloses file information, enabling a local attacker to read files on the file system. Public exploits are noted in community sources. The vulnerability is addressed by Microsoft...

CVE-2020-1165

Technical details about CVE-2020-1165 are not publicly available in the provided documents; monitor for updates.

CVE-2020-1188

Technical details about CVE-2020-1188 are not provided in the supplied documents; no affected products, versions, exploitation, or remediation details are included. Monitor for updates in connected sources.

CVE-2020-1252

Technical details for CVE-2020-1252 are not publicly available in the provided Connected Documents; the sources here reference related updates (e.g., RemoteFX, CVE-2020-1036) but do not specify affected product/version/root cause/mitigation for this CVE. Monitor for updates.

CVE-2020-1258

CVE-2020-1258 is an elevation-of-privilege vulnerability in DirectX where objects in memory are improperly handled. The impact is local privilege escalation with the potential to compromise the system if an attacker can cause the vulnerable DirectX component to execute code with higher privileges...

CVE-2020-1279

CVE-2020-1279 is described as a Windows Lockscreen Elevation of Privilege vulnerability. The initial record states an elevation of privilege when Windows Lockscreen fails to properly load spotlight images from a secure location. Connected documents reference Windows Lockscreen in CVE-2020-1279 as...

CVE-2020-1330

CVE-2020-1330 is an information-disclosure vulnerability in Windows Mobile Device Management Diagnostics. The issue arises when MDM Diagnostics improperly handles junctions, enabling an attacker who can log on to read files via a specially crafted application. Microsoft’s advisory states that the...

CVE-2020-1369

CVE-2020-1369 is a Windows WalletService elevation-of-privilege vulnerability. The issue arises from how WalletService handles objects in memory, enabling a local attacker to execute code with elevated privileges. The CVE is linked to WalletService references in the CVE-2020-1369 entry and relate...

CVE-2020-1373

Technical details (affected products, root cause, impact, fixes) are not publicly available in the provided connected documents. Monitor for updates.

CVE-2020-1413

Technical details about CVE-2020-1413 are not publicly available in the provided Connected documents. Monitor for updates from official sources to obtain affected products, impact, and remediation information.

CVE-2021-26873

Technical details about CVE-2021-26873 (affected product/version, root cause, exploitability, fixes) are not provided in the connected documents. Monitor for updates from official advisories.

CVE-2021-26887

The CVE-2021-26887 issue is an elevation of privilege in Microsoft Windows involving Folder Redirection enabled via Group Policy. Affected scenario occurs when the folder redirection file server is co-located with a Terminal Server; an attacker could begin redirecting another user’s personal data...

CVE-2024-38044

Technical details (affected product/version, root cause, impact, and fix) for CVE-2024-38044 are not disclosed in the provided Connected Documents; no public technical details are available here. Monitor for updates.

CVE-2024-38249

CVE-2024-38249 is a Windows Graphics Component elevation-of-privilege vulnerability. The connected sources confirm this CVE affects Windows Graphics Component and carries a CVSS v3.1 base score of 7.8 (HIGH), with local attack vector, low attack complexity, and privileges required: LOW; impact to...

CVE-2025-21277

CVE-2025-21277 affects Microsoft Message Queuing (MSMQ). A Denial of Service vulnerability exists in MSMQ, exploitable over the network without user interaction, with CVSSv3.1 base score 7.5 (HIGH). The affected component is MSMQ; the initial description confirms a DoS impact. Publicly available ...

CVE-2025-21336

Technical details about CVE-2025-21336 are not publicly provided in the supplied documents. The materials reference a Windows cryptographic information disclosure vulnerability but do not specify affected products/versions or fixes.

CVE-2025-27468

Technical details about CVE-2025-27468 (affected product, root cause, and patch status) are not publicly provided in the supplied Connected documents. Monitor for official updates from MSRC/Microsoft for specifics.

CVE-2026-70347

CVE-2026-70347 describes a heap-based buffer overflow in Windows Installer that can enable an authenticated, local attacker to elevate privileges. Affected component is Windows Installer; the vulnerability is a local, privilege-escalation flaw with high impact (C:H/I:H/A:H) and CVSSv3.1 score 7.8...

CVE-2016-7215

CVE-2016-7215 is a Windows kernel-level elevation of privilege affecting multiple Windows client/server platforms. The vulnerability resides in the Win32k subsystem (kernel-mode drivers) and is exploited via a crafted application to gain SYSTEM privileges. Affected products include Windows Vista ...

CVE-2016-7217

CVE-2016-7217 : Memory corruption in Media Foundation (Windows Graphics/Media Foundation) allows remote code execution via a crafted web site. Affected: Windows 8.1; Windows Server 2012 RT/Gold and R2; Windows RT 8.1; Windows 10 (Gold, 1511, 1607); Windows Server 2016. Root cause: memory corrupti...

CVE-2016-7224

CVE-2016-7224 concerns the Microsoft Virtual Hard Disk (VHD) Driver, affecting Windows 8.1, Windows Server 2012 (Gold/R2), Windows RT 8.1, Windows 10 (various builds), and Windows Server 2016. The vulnerability arises from the VHD Driver not properly restricting access to files, enabling a local ...

CVE-2017-0179

CVE-2017-0179 describes a Hyper-V denial-of-service vulnerability affecting Windows host systems (e.g., Windows 10/Server 2012 R2/Server 2016) where input from a privileged user on a guest OS is not properly validated. Connected sources reference related Hyper-V CVEs (e.g., CVE-2017-0184) and ind...

CVE-2017-0292

CVE-2017-0292 describes a Windows PDF remote code execution vulnerability in the Windows PDF handler. A specially crafted PDF file can cause arbitrary code execution on affected Windows versions (Windows 8.1; Windows Server 2012 Gold/R2; Windows RT 8.1; Windows 10 1511, 1607, 1703; Windows Server...

CVE-2017-8468

CVE-2017-8468 is a Win32k Elevation of Privilege vulnerability in Microsoft Windows. Public exploits exist and the root cause is improper handling of objects in memory within the Windows kernel’s Win32k subsystem, enabling an attacker to run processes in an elevated context locally. Affected prod...

CVE-2017-8713

CVE-2017-8713 refers to a Hyper-V information disclosure vulnerability in Windows Hyper-V component. Affected products include Windows 8.1, Windows Server 2012 (Gold/R2), Windows 10 (various builds: Gold, 1511, 1607, 1703), and Windows Server 2016. The issue arises when Hyper-V fails to properly ...

CVE-2018-8216

The CVE-2018-8216 entry describes a security feature bypass in Microsoft Device Guard that could allow a local attacker to inject malicious code into a Windows PowerShell session. Affected products include Windows Server 2016 and Windows 10/Windows 10 variants; the vulnerability relates to bypass...

CVE-2018-8217

CVE-2018-8217 is a local security feature bypass in Microsoft Device Guard (Code Integrity Policy) that could allow a local attacker to inject malicious code into a Windows PowerShell session. Affected are Windows Server 2016 and Windows 10/Windows 10 Servers. The vulnerability is described acros...

CVE-2019-1309

Technical details about CVE-2019-1309 are not provided in the supplied documents. Monitor for updates from official advisories.

CVE-2019-1415

CVE-2019-1415 affects Windows Installer and is described as an elevation-of-privilege vulnerability arising from how Windows Installer handles certain filesystem operations. The CVE entry notes that exploitation would require unprivileged code execution on the victim system (local access) with no...

CVE-2020-0679

Technical details about CVE-2020-0679 are not publicly provided in the connected documents. Based on the initial description, no concrete product/version/root-cause is disclosed here. Monitor for updates from official sources to obtain specifics and remediation.

CVE-2020-0715

Technical details for CVE-2020-0715 are not publicly provided in the connected documents. Monitor for updates from official advisories.

CVE-2020-0834

CVE-2020-0834 (Windows ALPC Elevation of Privilege) is supported by the connected NVD entry, which describes a local-elevation vulnerability in Windows where improper handling of Advanced Local Procedure Call (ALPC) calls could allow an attacker to run arbitrary code in the security context of th...

CVE-2020-0857

CVE-2020-0857 is an elevation of privilege vulnerability in Windows: the Windows Search Indexer mishandles memory objects, enabling local attackers to gain elevated privileges. Affected: Windows Search Indexer process; root cause is memory handling. Impact per sources is elevation of privileges w...

CVE-2020-0937

Summary of CVE-2020-0937 context (Media Foundation): An information-disclosure vulnerability exists in Microsoft Windows Media Foundation due to improper handling of memory objects. The affected product is Microsoft Windows/Windows Server via the Media Foundation component. The root cause is memo...

CVE-2020-0939

CVE-2020-0939 is a Windows Media Foundation information-disclosure vulnerability. The issue arises from Media Foundation not handling memory objects correctly, enabling an attacker to obtain sensitive information on a affected system. Documented as a local information-disclosure issue in Microsof...

CVE-2020-1016

CVE-2020-1016 is described as an information disclosure vulnerability in the Windows Push Notification Service caused by improper handling of objects in memory. The connected sources identify the affected component as Windows Push Notification Service on Windows/Windows Server and frame the issue...

CVE-2020-1131

Technical details about CVE-2020-1131 are not publicly available in the provided connected documents. Monitor for updates.

CVE-2020-1187

Technical details about CVE-2020-1187 are not publicly provided in the connected documents. No affected products, root cause, or fixes are specified here. Monitor for updates in the provided sources.

CVE-2020-17073

CVE-2020-17073 corresponds to a Windows Update Orchestrator Service Elevation of Privilege vulnerability. The connected KLA12004 advisory explicitly lists an elevation of privilege vulnerability in Windows Update Orchestrator Service (item 34) among a broad set of Windows kernel and subsystem vul...

CVE-2021-26884

CVE-2021-26884 is described as a Windows Media Photo Codec Information Disclosure Vulnerability . The connected documents confirm the CVE is associated with Windows Media components and appear in multiple vulnerability lists (NVD, CVE List, OpenVAS). The materials do not provide a concrete root-c...

CVE-2021-26896

CVE-2021-26896 is a Windows DNS Server denial-of-service vulnerability. The NVD entry characterizes it as a network-accessible issue with no authentication or user interaction required, causing an availability impact (A) and a base score of 7.5 (HIGH) under CVSS v3.1: CVSS:3.1/AV:N/AC:L/PR:N/UI:N...

CVE-2023-35331

Technical details about CVE-2023-35331 are not provided in the connected documents. The initial entry mentions an LSA Denial of Service vulnerability in Windows, but no affected product versions, root cause, impact specifics, exploitation status, or remediation are included here. Monitor for upda...

CVE-2024-43551

Technical details for CVE-2024-43551 (Windows Storage Elevation of Privilege) are not publicly provided in the supplied connected documents. The records confirm the vulnerability exists, but root cause, affected products/versions, exploit specifics, or fixes are not disclosed here. Monitor MSRC u...

CVE-2025-21289

CVE-2025-21289 is a denial-of-service vulnerability in Microsoft Message Queuing (MSMQ). Public details in the provided documents show a network‑accessible issue with a CVSS 3.1 base score of 7.5 (HIGH) where no user interaction is required and no privileges are needed to trigger the impact of de...

CVE-2025-21314

Technical details on CVE-2025-21314 are not publicly provided in the supplied documents. The materials reference Windows updates addressing vulnerabilities and general guidance, but do not specify affected components, root cause, or remediation for this CVE. Monitor for updates.

CVE-2025-24072

CVE-2025-24072 is a use-after-free vulnerability in Microsoft Local Security Authority Server (lsasrv) that can allow an authorized attacker to locally elevate privileges. The affected component is lsasrv; impact is elevated privileges (local). Connected sources (including NCSC/KB advisories) con...