CVE-2024-38235

CVE-2024-38235 is listed under Windows Hyper-V with a CVSS v3.1 score of 6.50 and impact described as a Denial-of-Service. The connected NCSC advisory confirms Windows vulnerabilities fixed in this cycle; it recommends applying the Microsoft updates per MSRC guidance. The provided documents do no...

CVE-2024-43563

CVE-2024-43563 affects Windows Ancillary Function Driver for WinSock. The vulnerability is an Elevation of Privilege in the driver, with local attack vector, low privileges required, no user interaction, and high impact to confidentiality, integrity, and availability. Connected sources corroborat...

CVE-2024-43575

CVE-2024-43575 (Windows Hyper-V Denial of Service) : The initial docs identify a Denial of Service vulnerability in Microsoft Windows Hyper-V with a base score of 7.5 (CVSS 3.1: AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) and network-based exploitation requiring no privileges or user interaction, leadin...

CVE-2024-43620

CVE-2024-43620 corresponds to a Windows Telephony Service remote code execution vulnerability with a high impact (base CVSS 8.8; network access; user interaction required). In the connected documents, it is listed under Windows Telephony Service with an impact described as Execute arbitrary code ...

CVE-2025-21246

CVE-2025-21246 is a Windows Telephony Service remote code execution vulnerability with a CVSS v3.1 base score of 8.8 (HIGH) and network attack vector. The provided connected documents confirm this CVE and indicate Microsoft has released updates to address it (e.g., KB5050009 and related January 2...

CVE-2025-21320

CVE-2025-21320 is a Windows kernel memory information disclosure vulnerability. The CVE is documented as a local, memory-information leakage issue with low attack complexity and low privileges required, potentially exposing high-confidentiality data. Public details provided in connected sources a...

CVE-2025-21339

CVE-2025-21339 corresponds to a Windows Telephony Service remote code execution vulnerability. The NCSC listing confirms a high-severity impact (CVSS 3.1: AV Network, AC L, PR None, UI Required, S U, C/H/I/A H) with an overall score of 8.80 and notes that exploitation can lead to executing code i...

CVE-2025-29969

Technical details about CVE-2025-29969 (affected product/version, root cause, exploitability, and remediation) are not provided in the supplied documents; monitor for updates.

CVE-2025-33057

CVE-2025-33057 is a Windows Local Security Authority (LSA) vulnerability where a null pointer dereference could allow an authorized attacker to cause a network-based Denial-of-Service. Affected component is LSA; impact is DoS over the network. Documented in NVD and corroborated by NC SC/NCSC entr...

CVE-2025-33068

CVE-2025-33068 is a denial-of-service vulnerability in Windows Standards-Based Storage Management Service caused by uncontrolled resource consumption. The issue can be triggered over the network to degrade or disrupt service. Microsoft has released security updates addressing this family of issue...

CVE-2025-49734

CVE-2025-49734 affects Windows PowerShell. The root cause is an improper restriction of the communication channel to intended endpoints, enabling an authorized local attacker to elevate privileges. The CVE maps to a local privilege escalation with high impact (C:H/I:H/A:H) and requires local acce...

CVE-2026-45592

CVE-2026-45592 describes an integer overflow/wraparound in Windows Internet (wininet.dll) that enables local privilege escalation for an authorized attacker. The CVSS 3.1 metrics indicate a HIGH impact across confidentiality, integrity, and availability, with a LOCAL attack vector, LOW privileges...

CVE-2026-61348

This CVE (CVE-2026-61348) is a local privilege escalation in the Windows Ancillary Function Driver for WinSock. The issue is a use-after-free in the driver component, enabling an authenticated attacker to elevate privileges on the affected system. The provided materials indicate a high-severity i...

CVE-2026-62734

CVE-2026-62734 describes a race condition due to concurrent execution with an improper synchronization in the Windows Telephony Service, allowing an authorized attacker to locally elevate privileges. The issue is identified as a local privilege escalation with a high impact on confidentiality, in...

CVE-2026-65795

CVE-2026-65795: Windows DNS contains a local elevation of privileges issue. An authorized attacker can elevate privileges locally. CVSS v3.1 reflects LOCAL attack vector, HIGH confidentiality/integrity/availability impact, with HIGH privileges required and no user interaction. Exploitation detail...

CVE-2016-7224

CVE-2016-7224 concerns the Microsoft Virtual Hard Disk (VHD) Driver, affecting Windows 8.1, Windows Server 2012 (Gold/R2), Windows RT 8.1, Windows 10 (various builds), and Windows Server 2016. The vulnerability arises from the VHD Driver not properly restricting access to files, enabling a local ...

CVE-2017-0024

Technical details for CVE-2017-0024 are not publicly available in the provided connected documents. Monitor for updates to confirm affected products, root cause, impact, and remediations.

CVE-2017-0179

CVE-2017-0179 describes a Hyper-V denial-of-service vulnerability affecting Windows host systems (e.g., Windows 10/Server 2012 R2/Server 2016) where input from a privileged user on a guest OS is not properly validated. Connected sources reference related Hyper-V CVEs (e.g., CVE-2017-0184) and ind...

CVE-2017-8477

CVE-2017-8477 : A local information-disclosure vulnerability in Windows kernel objects during memory initialization (Win32k). Affected: multiple Windows versions including Windows 7 SP1, Windows 8.1, Windows 10 variants (1511, 1607, 1703) and Windows Server equivalents. Impact: potential informat...

CVE-2017-8561

CVE-2017-8561 is a Windows kernel elevation-of-privilege vulnerability described as: a local attacker can exploit through improper handling of objects in memory by the Windows kernel, allowing code execution with elevated privileges. Affected software per the initial document includes Windows 8.1...

CVE-2018-8436

Technical details public in the provided documents are not available beyond the CVE summary; no specifics on affected products, versions, root cause, or fixes are given here. Monitor for updates.

CVE-2018-8441

CVE-2018-8441 is an elevation-of-privilege flaw in Windows Subsystem for Linux caused by an integer overflow. A locally authenticated attacker could exploit a crafted WSL object in memory to execute code with elevated privileges on affected Windows 10/Windows Server systems. Public advisories (MS...

CVE-2019-1173

CVE-2019-1173 is an elevation-of-privilege flaw affecting the Windows component PsmServiceExtHost.dll where in-memory object handling is improper. The vulnerability allows a locally authenticated attacker to execute code with elevated permissions by running a crafted application. Microsoft’s secu...

CVE-2019-1277

CVE-2019-1277 describes an elevation of privilege vulnerability in the Windows Audio Service triggered by processing a malformed parameter. The affected component is Windows Audio Service on Windows systems. Root cause: malformed parameter handling leading to unauthorized privilege escalation. CV...

CVE-2019-1368

CVE-2019-1368 describes a security feature bypass where Windows Secure Boot improperly restricts access to debugging functionality, potentially enabling an attacker to access protected kernel memory. Connected documents corroborate the vulnerability name and general context but do not provide exp...

CVE-2020-0685

CVE-2020-0685 is a Windows local elevation-of-privilege vulnerability due to improper handling of COM object creation in the Windows COM Server. The root cause is misuse in COM object creation, enabling an attacker who logs on locally to run a specially crafted application and gain elevated privi...

CVE-2020-0699

CVE-2020-0699 is a Win32k Information Disclosure Vulnerability in the win32k component of Windows kernel. The issue arises when kernel information is inappropriately exposed, enabling an attacker with local access to obtain information from the affected system (information disclosure). Public dat...

CVE-2020-0715

Technical details for CVE-2020-0715 are not publicly provided in the connected documents. Monitor for updates from official advisories.

CVE-2020-0742

CVE-2020-0742 describes an elevation of privilege in the Connected Devices Platform Service. Connected documents (CNVD) corroborate: Microsoft Windows and Windows Server are affected; the issue stems from how the Connected Devices Platform Service handles objects in memory, enabling an attacker t...

CVE-2020-0798

CVE-2020-0798 is a Windows Installer elevation-of-privilege vulnerability. The issue arises when Windows Installer does not properly sanitize input, causing insecure library loading. A locally authenticated attacker could execute arbitrary code with elevated system privileges. The CVE is tied to ...

CVE-2020-0861

CVE-2020-0861 is a Windows NDIS information-disclosure vulnerability. The issue arises from improper memory handling in the Windows Network Driver Interface Specification (NDIS). Exploitation requires local access with execution on the victim system (no user interaction), and the vulnerability en...

CVE-2020-0863

CVE-2020-0863 affects Windows with the Connected User Experiences and Telemetry Service, where the service improperly discloses file information, enabling a local attacker to read files on the file system. Public exploits are noted in community sources. The vulnerability is addressed by Microsoft...

CVE-2020-0869

CVE-2020-0869 denotes a memory corruption vulnerability in Windows Media Foundation caused by improper handling of in-memory objects. Connected sources identify Windows Media Foundation as the affected component, with generic attacker impact described (unauthorized data access or modification; po...

CVE-2020-0880

CVE-2020-0880 describes an information disclosure vulnerability in the Windows GDI component where memory contents can be improperly disclosed. The vulnerability affects Windows GDI memory handling; exploitation could allow an attacker to obtain information to further compromise the target system...

CVE-2020-1191

Technical details (affected product/component, root cause, impact, fixes) are not publicly available in the provided documents. Monitor for updates from official advisories.

CVE-2020-1267

CVE-2020-1267 is a Windows Local Security Authority Subsystem Service (LSASS) denial-of-service vulnerability. According to CNVD-2020-52913, an attacker could trigger a DoS by sending a specially crafted authentication request, potentially causing the target system to reboot. The connected docume...

CVE-2020-1357

CVE-2020-1357 is described as an elevation of privilege affecting the Windows System Events Broker. The漏洞 arises from the broker’s improper handling of file operations, enabling an attacker to elevate privileges by running a crafted application on the local machine. The available connected docume...

CVE-2020-1389

Technical details about CVE-2020-1389 are not provided in the connected documents. The materials only reiterate the vulnerability name and a generic Windows kernel information disclosure. Monitor official advisories for affected products, impact, and remediation updates.

CVE-2020-1418

CVE-2020-1418 describes a Windows Privilege Elevation vulnerability in the Windows Diagnostics Hub Execution Service. The issue arises from improper input sanitization, causing unsecure library loading and enabling local privilege escalation. Affected software is Windows Diagnostics Hub (Executio...

CVE-2020-1424

CVE-2020-1424 affects the Windows Update Stack, described as an elevation-of-privilege in memory handling of objects. This vulnerability enables local attackers to run code with kernel-level privileges, with no user interaction required per the description. The provided documents do not specify a...

CVE-2020-17031

Technical details about CVE-2020-17031 (Windows remote access elevation of privilege) are not provided in the connected documents; public information in the initial description is limited. Monitor for updates.

CVE-2020-17074

CVE-2020-17074 is a Windows Update Orchestrator Service elevation-of-privilege vulnerability. Documents show it enables local privilege escalation with low privileges, no user interaction, and affects the Update Orchestrator Service (impacting confidentiality, integrity, and availability). Exploi...

CVE-2021-24095

CVE-2021-24095 is an elevation-of-privilege issue affecting Microsoft DirectX. The connected datasets identify DirectX as the affected component and categorize the impact as obtaining increased entitlements. No explicit root-cause technical details (e.g., vulnerable function/file/path) or patch/v...

CVE-2021-24106

CVE-2021-24106 is a Windows DirectX information disclosure vulnerability. According to the NVD entry, the issue has a CVSS v3.1 base score of 5.5 (medium) with a local attack vector, low attack complexity, and no user interaction required. The confidentiality impact is listed as HIGH, while integ...

CVE-2021-26869

CVE-2021-26869 affects Windows via the ActiveX Installer Service, described as an Information Disclosure Vulnerability. The available documentation (NVD/NVD entry) indicates a LOCAL attack vector with LOW attack complexity and no user interaction, impacting confidentiality (partial to high depend...

CVE-2021-26878

CVE-2021-26878 refers to a Windows Print Spooler elevation of privilege vulnerability. The connected documents confirm the affected component is the Windows Print Spooler service and that the vulnerability is locally exploitable with low attack complexity, with high impact on confidentiality, int...

CVE-2023-35325

Technical details for CVE-2023-35325 are not publicly available in the provided documents. Monitor for updates from official advisories; no concrete affected products, root cause, impact, or fixes are specified here.

CVE-2023-35353

CVE-2023-35353 is a Microsoft Windows elevation-of-privilege vulnerability in Connected User Experiences and Telemetry. Connected documents list affected products/versions including Windows 10/11 21H2 and 22H2 across multiple architectures (x86_64, ARM64) and Windows Server variants. The NVD entr...

CVE-2024-43643

CVE-2024-43643 is a Windows USB Video Class System Driver elevation-of-privilege vulnerability. The vulnerability pertains to the Windows USB Video Driver component and is categorized with CVSSv3.1 vektor: physical attack, low complexity, no privileges required, no user interaction, and impacts t...

CVE-2025-21288

Technical details about CVE-2025-21288 are not publicly provided in the supplied connected documents; the record notes a Windows COM Server information disclosure vulnerability but lacks specifics on affected products/versions or mitigations. Monitor for official disclosures.