CVE-2020-0745

CVE-2020-0745 is a Windows Graphics Component elevation-of-privilege vulnerability caused by improper handling of memory objects. The entry (CVE-2020-0745) indicates a local attack vector requiring low privileges and no user interaction (CVSS v3.1: Local, Low, None, Privilege Escalation with High...

CVE-2020-1029

CVE-2020-1029 affects the Windows Connected User Experiences and Telemetry Service. The vulnerability is an Elevation of Privilege caused by improper handling of file operations in this service. According to the data, it can be triggered locally (local access required) and could grant elevated/sy...

CVE-2020-1086

Technical details about CVE-2020-1086 are not publicly available in the provided documents. Monitor for updates from authoritative sources.

CVE-2020-1097

CVE-2020-1097 describes an information-disclosure vulnerability in the Windows GDI component where memory contents could be exposed due to improper handling of objects in memory. An attacker could exploit this by convincing a user to open a specially crafted document or visit a malicious webpage,...

CVE-2020-1134

Technical details for CVE-2020-1134 are not provided in the connected documents. Public information in the Initial Description is limited to general vulnerability context. Monitor for updates from ENISA EUVD entries if relevant.

CVE-2020-1165

Technical details about CVE-2020-1165 are not publicly available in the provided documents; monitor for updates.

CVE-2020-1197

CVE-2020-1197 is an elevation-of-privilege vulnerability in Windows Error Reporting Manager caused by improper handling of a process crash. Public sources (CNVD entry) describe that an attacker who can log on and run a crafted app may delete target files and elevate privileges. NVD lists impact a...

CVE-2020-1204

CVE-2020-1204 is an Elevation of Privilege in Windows Mobile Device Management Diagnostics caused by improper handling of junctions. The vulnerability could allow an attacker to bypass access restrictions and delete files after logging on and running a crafted app. Microsoft’s MSRC entry notes a ...

CVE-2020-1249

Technical details about CVE-2020-1249 are not publicly provided in the supplied documents. No affected products, exploit specifics, or remediation information are confirmed here. Monitor for official disclosures and updates.

CVE-2020-1309

Technical details for CVE-2020-1309 (affected product/version, impact, exploitability) are not publicly available in the provided documents. Monitor for updates from CVE/NVD entries and vendor advisories.

CVE-2020-1361

CVE-2020-1361 affects Windows WalletService, described as an information-disclosure vulnerability stemming from how WalletService handles memory. The entry notes an attacker would first need code execution on a victim system, making it a local-attack scenario with information disclosure as the im...

CVE-2020-1394

CVE-2020-1394 relates to an elevation-of-privilege in the Windows Geolocation Framework. Connected CNVD/EUVD entries describe the root cause as improper handling of memory objects within the Geolocation Framework, allowing a local attacker to elevate privileges and execute arbitrary code by runni...

CVE-2020-1413

Technical details about CVE-2020-1413 are not publicly available in the provided Connected documents. Monitor for updates from official sources to obtain affected products, impact, and remediation information.

CVE-2020-1419

Technical details about CVE-2020-1419 are not publicly provided in the supplied documents; no vendor, product, version, impact, or fix specifics are present. Monitor for updates.

CVE-2021-28351

CVE-2021-28351 is a Windows Speech Runtime Elevation of Privilege vulnerability affecting the Windows Speech Runtime component. The entry provides high-severity context (CVSS v3.1 base score 7.8) with Local attack vector, Low privileges required, and no user interaction, claiming impact to confid...

CVE-2024-38067

Technical details about CVE-2024-38067 (Windows OCSP Server DoS) are not provided in the supplied connected documents; no product/version/root-cause/impact/fix information is present. Monitor for updates.

CVE-2024-38149

CVE-2024-38149 is a Windows BranchCache Denial of Service vulnerability. Documents indicate a network-exploitable issue (CVSS v3.1: 7.5, AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) affecting BranchCache components. Microsoft provides fixes via security updates (KB/MSRC guidance); no explicit root-cause ...

CVE-2024-38245

CVE-2024-38245 is a Windows Kernel Streaming Service Driver elevation-of-privilege flaw. A local attacker could exploit it with low privileges and no user interaction to gain SYSTEM-level access; CVSS v3.1/3.1 vector indicates local access, low complexity, with high impact to confidentiality, int...

CVE-2024-43501

CVE-2024-43501 affects the Windows Common Log File System Driver and is a local elevation-of-privilege vulnerability. Triggers could allow an attacker with low privileges to escalate to obtain high-level privileges, with the issue categorized as high severity (CVSS v3.1 base score 7.8). The CVE i...

CVE-2024-43565

CVE-2024-43565 corresponds to a Windows NAT Denial of Service vulnerability with a CVSS v3.1 base score of 7.5 (NETWORK attack, LOW attack complexity, NO privileges, NO user interaction). The issue is tied to the Windows NAT component and is listed among multiple Microsoft Windows vulnerabilities...

CVE-2024-49121

CVE-2024-49121 is an LDAP Denial-of-Service vulnerability in Windows LDAP (Domain Controller). The connected advisory confirms the LDAP issue as a DoS risk and notes that Microsoft has released fixes via updates; applying the relevant Windows security updates is the recommended remediation. MITRE...

CVE-2025-21214

Technical details about CVE-2025-21214 (Windows BitLocker information disclosure) are not publicly provided in the supplied connected documents. The sources reference updates but do not specify affected versions, root cause, exploitability, or mitigation beyond patch availability. Monitor for upd...

CVE-2025-21272

CVE-2025-21272 affects Windows COM, specifically the COM Server component, described as an Information Disclosure vulnerability. The issue is exploitable locally with low privileges and low attack complexity, with confidentiality impact rated High. Connected sources corroborate Windows COM as aff...

CVE-2025-21289

CVE-2025-21289 is a denial-of-service vulnerability in Microsoft Message Queuing (MSMQ). Public details in the provided documents show a network‑accessible issue with a CVSS 3.1 base score of 7.5 (HIGH) where no user interaction is required and no privileges are needed to trigger the impact of de...

CVE-2025-21306

CVE-2025-21306 corresponds to a remote code execution vulnerability in Windows Telephony Service. The issue is mapped to Windows Telephony Service and is rated high (CVSSv3.1: 8.8, AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H). Connected sources confirm the affected component and vulnerability type; root ...

CVE-2025-49691

CVE-2025-49691 is a heap-based buffer overflow in Windows Media that could allow an adjacent-network attacker to execute code. CVSSv3.1 base score 8.0 (AV: Adjacent, AC: Low, PR: None, UI: Required, S: Unchanged, C/I/A: High). The connected documents indicate this affects Windows Media and has co...

CVE-2026-34339

Technical details about CVE-2026-34339 (Windows LDAP denial of service) are not publicly available in the provided connected documents. Monitor for updates from Microsoft/NVD for affected products, vectors, and fixes.

CVE-2026-59128

The CVE-2026-59128 entry documents an out-of-bounds read in Windows Encrypting File System (EFS) that can let an authorized local attacker disclose information. Affected component: Windows EFS. Root cause: out-of-bounds read leading to information disclosure. Impact: local disclosure of informati...

CVE-2026-61348

This CVE (CVE-2026-61348) is a local privilege escalation in the Windows Ancillary Function Driver for WinSock. The issue is a use-after-free in the driver component, enabling an authenticated attacker to elevate privileges on the affected system. The provided materials indicate a high-severity i...

CVE-2026-62748

CVE-2026-62748 affects the Windows Telephony Service. The issue is a race condition due to improper synchronization on a shared resource, enabling a locally authorized attacker to elevate privileges. The weakness is exploited locally with no user interaction and results in high impact to confiden...

CVE-2016-7215

CVE-2016-7215 is a Windows kernel-level elevation of privilege affecting multiple Windows client/server platforms. The vulnerability resides in the Win32k subsystem (kernel-mode drivers) and is exploited via a crafted application to gain SYSTEM privileges. Affected products include Windows Vista ...

CVE-2017-0178

CVE-2017-0178 affects Microsoft Hyper-V on Windows 10 (incl. 1511/1607), Windows 8.1, Windows Server 2012 R2, and Windows Server 2016. The vulnerability is a denial-of-service caused by improper validation of input from a privileged user on a guest OS, leading to host crash. Connected docs corrob...

CVE-2017-0189

Technical details about CVE-2017-0189 are not publicly available in the provided connected documents. Monitor for updates.

CVE-2017-11816

CVE-2017-11816 is an information disclosure flaw in the Microsoft Windows GDI component. The connected advisory notes a WMF-file processing out-of-bounds read as the root cause, enabling a remote attacker to cause information leakage by convincing a user to open a specially crafted web page or do...

CVE-2017-8590

CVE-2017-8590 is the Windows CLFS Elevation of Privilege vulnerability where the Common Log File System driver mishandles objects in memory, enabling local privilege elevation on affected Windows versions (Win7 SP1, Server 2008 SP2/R2 SP1, Win8.1/RT8.1, Server 2012/R2, Win10 1511/1607/1703, Serve...

CVE-2017-8678

CVE-2017-8678 is a Win32k information-disclosure vulnerability in the Windows kernel. Affected products include Windows 7 SP1, Windows 8.1, Windows Server 2008/R2 SP1, Windows Server 2012, Windows RT 8.1, Windows 10 (various builds), and Windows Server 2016. The root cause is improper handling of...

CVE-2018-1004

Technical details for CVE-2018-1004 (VBScript engine remote code execution) are not provided in the connected documents. Public details (affected versions, root cause, exploitability, fixes) are not available here. Monitor for updates and consult primary sources for specifics.

CVE-2019-1223

The CVE-2019-1223 entry describes a denial-of-service in Remote Desktop Protocol (RDP) where an attacker can cause the RDP service to stop responding by sending specially crafted connection requests. The vulnerability arises in how RDP handles connection requests, enabling network-based DoS when ...

CVE-2020-0659

CVE-2020-0659 is a Windows elevation-of-privilege vulnerability in the Windows Data Sharing Service, arising when the service improperly handles file operations. The issue enables local attackers to escalate privileges (CVE-2020-0659 is distinct from CVE-2020-0747). The NVD entry indicates a MEDI...

CVE-2020-0748

Technical details for CVE-2020-0748 are not publicly provided in the connected documents; no affected products, versions, or fixes are specified here. Monitor for updates from official advisories.

CVE-2020-0801

Technical details for CVE-2020-0801 are not publicly available in the provided documents. Monitor for updates.

CVE-2020-0834

CVE-2020-0834 (Windows ALPC Elevation of Privilege) is supported by the connected NVD entry, which describes a local-elevation vulnerability in Windows where improper handling of Advanced Local Procedure Call (ALPC) calls could allow an attacker to run arbitrary code in the security context of th...

CVE-2020-0864

CVE-2020-0864 affects Windows Work Folder Service and is an elevation-of-privilege flaw caused by improper handling of file operations. Connected CNVD-2020-23447 describes a privilege-escalation vulnerability in Windows Work Folder Service that can be exploited by a crafted application to run wit...

CVE-2020-0947

CVE-2020-0947 is an information-disclosure vulnerability in Microsoft Windows Media Foundation caused by improper handling of memory objects. The issue affects Windows/Windows Server environments using Media Foundation and can expose sensitive information when a crafted file is opened. Public det...

CVE-2020-1082

CVE-2020-1082 is an elevation of privilege vulnerability in Windows Error Reporting (WER) related to how WER handles and executes files. The description identifies the issue as distinct from CVE-2020-1021 and CVE-2020-1088. Public documentation in the connected sources confirms the vulnerable com...

CVE-2020-1126

The CVE-2020-1126 entry relates to a memory corruption vulnerability in Windows Media Foundation caused by improper handling of objects in memory. The affected component is Windows Media Foundation within Windows; the root cause is object handling in memory leading to corruption. Severity metrics...

CVE-2020-1277

The CVE-2020-1277 entry relates to an elevation of privilege in Windows Installer. Connected CNVD entries describe the flaw as arising from how Windows Installer handles certain file system operations (some variants mention improper handling/cleanup of input) which can enable a local attacker to ...

CVE-2020-1352

CVE-2020-1352 is tied to a memory handling issue in Windows USO Core Worker that enables elevation of privilege when a specially crafted application runs on Windows/Windows Server. The CNVD entry describes the vulnerability as an OS component memory-management flaw in Windows USO Core Worker that...

CVE-2020-1424

CVE-2020-1424 affects the Windows Update Stack, described as an elevation-of-privilege in memory handling of objects. This vulnerability enables local attackers to run code with kernel-level privileges, with no user interaction required per the description. The provided documents do not specify a...

CVE-2020-17024

CVE-2020-17024 is a Windows Client Side Rendering Print Provider Elevation of Privilege vulnerability. Connected sources confirm impact as HIGH (base CVSS v3.1: 7.8) with LOCAL attack vector, LOW attack complexity, and privileges required: LOW; user interaction: NONE. Confidentiality/Integrity/Av...