CVE-2020-1284

CVE-2020-1284 is a denial-of-service vulnerability in the SMBv3 protocol (SMBv3 Client/Server) for Microsoft Windows. The issue arises from how SMBv3 handles certain requests, allowing an authenticated SMB server attacker to cause the target system to crash, and an unauthenticated attacker to cra...

CVE-2020-1431

CVE-2020-1431 is the Windows AppX Deployment Extensions Elevation of Privilege vulnerability. The issue stems from improper privilege management within AppX Deployment Extensions, enabling an authenticated attacker to elevate privileges by running a specially crafted application and potentially a...

CVE-2020-1438

CVE-2020-1438 is an Elevation of Privilege vulnerability in Windows Network Connections Service. The issue arises from how in-memory objects are handled, enabling local attackers to potentially execute code with elevated privileges. Affected product: Windows Network Connections Service (per CVE-2...

CVE-2021-24095

CVE-2021-24095 is an elevation-of-privilege issue affecting Microsoft DirectX. The connected datasets identify DirectX as the affected component and categorize the impact as obtaining increased entitlements. No explicit root-cause technical details (e.g., vulnerable function/file/path) or patch/v...

CVE-2021-26869

CVE-2021-26869 affects Windows via the ActiveX Installer Service, described as an Information Disclosure Vulnerability. The available documentation (NVD/NVD entry) indicates a LOCAL attack vector with LOW attack complexity and no user interaction, impacting confidentiality (partial to high depend...

CVE-2021-26874

CVE-2021-26874 is a Windows elevation-of-privilege vulnerability affecting the Windows Overlay Filter component. The description and CVSS data indicate a local, low-privilege exploit with no user interaction required, potentially allowing a total compromise of the affected system (confidentiality...

CVE-2021-26887

The CVE-2021-26887 issue is an elevation of privilege in Microsoft Windows involving Folder Redirection enabled via Group Policy. Affected scenario occurs when the folder redirection file server is co-located with a Terminal Server; an attacker could begin redirecting another user’s personal data...

CVE-2021-27088

CVE-2021-27088 refers to Windows Event Tracing Elevation of Privilege. The NVD entry provides CVSS details (CVSS 3.1: LOCAL, LOW ATTACK COMPLEXITY, PR:L, NONE user interaction; impacts HIGH confidentiality, integrity, and availability) and labels it as a local elevation of privilege vulnerability...

CVE-2021-43227

CVE-2021-43227 is described as a Storage Spaces Controller Information Disclosure Vulnerability. The connected sources provide CVSS data: CVSS v3.1 vector CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N with a base score of 5.5 (MEDIUM) and a LOCAL attack vector with LOW complexity, requiring LOW pr...

CVE-2024-43501

CVE-2024-43501 affects the Windows Common Log File System Driver and is a local elevation-of-privilege vulnerability. Triggers could allow an attacker with low privileges to escalate to obtain high-level privileges, with the issue categorized as high severity (CVSS v3.1 base score 7.8). The CVE i...

CVE-2024-43506

CVE-2024-43506 refers to a Microsoft Windows BranchCache Denial-of-Service vulnerability. The available OpenVAS/NVD context indicates the issue is a network-exploitable DoS (CVSS 3.1: 7.5) affecting Windows BranchCache, with no user interaction required and no privilege escalation per the given d...

CVE-2024-43516

Technical details about CVE-2024-43516 are not provided in the connected documents. Public details appear limited in the supplied sources. Monitor for updates.

CVE-2025-21201

CVE-2025-21201 is cited by NCSC as a Windows Telephony Server remote code execution vulnerability with CVSS-like severity of 8.8 (high) andImpact described as executing random code. The connected NCSC advisory confirms the vulnerability exists in Windows Telephony Server and provides an explicit ...

CVE-2025-21272

CVE-2025-21272 affects Windows COM, specifically the COM Server component, described as an Information Disclosure vulnerability. The issue is exploitable locally with low privileges and low attack complexity, with confidentiality impact rated High. Connected sources corroborate Windows COM as aff...

CVE-2025-21278

CVE-2025-21278 is a Windows Remote Desktop Gateway (RD Gateway) Denial of Service vulnerability. The NVD entry lists a local attack vector with low attack complexity and a high availability impact (CVSS v3.1: AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H; base score 5.5; CNA score 6.2). Exploitation status...

CVE-2026-59127

CVE-2026-59127: Affected software is Windows Installer; vulnerability is an integer overflow/wraparound in Windows Installer that enables a locally authenticated attacker to elevate privileges. The issue stems from the overflow in a Windows Installer component, with CVSS v3.1 base score 7.8 (High...

CVE-2026-62712

CVE-2026-62712 is a Windows Win32K heap-based buffer overflow that enables local privilege escalation by an authorized attacker. Affected component: Windows kernel user-mode win32k; root cause is a heap overflow in Win32K handling. Impact per provided metrics: Confidentiality, Integrity, and Avai...

CVE-2026-62732

CVE-2026-62732 is a heap-based buffer overflow in the Windows Telephony Service that enables a locally authenticated attacker to achieve privilege elevation. The vulnerability affects the Telephony Service component and is characterized by a local exploit path with low privileges required and no ...

CVE-2017-8462

Technical details about CVE-2017-8462 are not publicly available in the provided connected documents. Monitor for updates.

CVE-2017-8478

Technical details about CVE-2017-8478 are not publicly available in the provided documents. Monitor for updates.

CVE-2017-8482

Technical details about CVE-2017-8482 are not publicly provided in the connected documents. The initial description gives general info, but no concrete affected products, versions, root cause, impact, or fix is documented here. Monitor for updates.

CVE-2017-8531

CVE-2017-8531 : Affected are Windows graphics components including Uniscribe across Windows client/server lines (e.g., Windows 7 SP1, 8.1, 10 variants; Windows Server 2008-2016) and Microsoft Office; root cause is an information disclosure vulnerability caused by improper memory disclosure in the...

CVE-2017-8679

CVE-2017-8679 pertains to a Windows kernel information disclosure vulnerability. The affected platform set includes Windows Server 2008 SP2/R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold/R2, Windows RT 8.1, Windows 10 (various builds), and Windows Server 2016. The root cause is impr...

CVE-2017-8746

The CVE-2017-8746 issue affects Microsoft Windows Device Guard Code Integrity on Windows 10 (1607, 1703) and Windows Server 2016. The root cause is how PowerShell exposes functions and user-supplied code, enabling a security feature bypass where a local attacker could inject malicious code into a...

CVE-2020-0728

CNVD-2020-10129 and related OpenVAS entries describe CVE-2020-0728 as an information disclosure vulnerability in Microsoft Windows, specifically involving the Windows Modules Installer Service. The root cause is improper disclosure of file information by the service, enabling an attacker to view ...

CVE-2020-0780

CVE-2020-0780 is described as an elevation of privilege affecting the Windows Network List Service, arising from how the service handles objects in memory. The CVE entry identifies a local attack vector with low complexity and no user interaction required; the exploit could grant at least partial...

CVE-2020-1366

CVE-2020-1366 is a Windows vulnerability in the Print Workflow Service described as an elevation of privilege where the service improperly handles objects in memory. The underlying cause is memory handling in the affected component, enabling a local attacker to escalate privileges (no user intera...

CVE-2020-1396

CVE-2020-1396 affects Microsoft Windows ALPC Elevation of Privilege. CNVD-2020-45187 describes a vulnerability where Windows ALPC is not correctly handling calls, allowing an attacker who logs on and runs a crafted application to execute arbitrary code with local system privileges. The connected ...

CVE-2020-1429

CVE-2020-1429 affects Microsoft Windows Error Reporting Manager. According to CNVD-2020-52921, the vulnerability is an elevation of privilege caused by the manager failing to properly handle process crashes, which can be exploited by running a specially crafted application to delete target files ...

CVE-2020-16879

CVE-2020-16879 is a Windows Projected Filesystem information-disclosure vulnerability. The issue arises when the Projected Filesystem improperly handles file redirections, enabling a user who is logged on to the system to run a crafted application that could disclose sensitive information and fur...

CVE-2020-17070

The CVE-2020-17070 entry concerns the Windows Update Medic Service Elevation of Privilege vulnerability. The available documents identify a local, low-privilege elevation of privilege in the Windows Update Medic Service, with the NVD metrics showing local access, low attack complexity, and high i...

CVE-2021-26866

CVE-2021-26866 is a Windows Update Service Elevation of Privilege vulnerability with local attack vector. The linked sources identify the affected component as Windows Update Service and classify impact as potential elevation of privileges, with high integrity/availability concerns in some vector...

CVE-2021-26870

CVE-2021-26870 : Windows Projected File System Elevation of Privilege vulnerability. The CVE is documented as a local, low-privilege escalation with high impact on confidentiality, integrity, and availability (per CVSS v3.1: 7.8, HIGH; LOCAL, PR:L, UI:N). The Connected documents do not provide ex...

CVE-2021-26889

Technical details about CVE-2021-26889 are not publicly provided in the supplied documents. Monitor for updates from vendors and security advisories to obtain affected products, impact, and remediation.

CVE-2024-38119

CVE-2024-38119 affects Windows Network Address Translation (NAT). The vulnerability allows Remote Code Execution with high impact (cctx: code execution, data/privilege impact) when an attacker on an adjacent network exploits NAT processing. CVSS 3.1 vector: AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H. Mi...

CVE-2024-38239

Microsoft Windows Kerberos CVE-2024-38239 is an Elevation of Privilege in the Windows Kerberos component. The connected Windows vulnerability listing assigns CVSS v3.1 base score 7.2 (HIGH) with network attack vector, low attack complexity, and privileges required: HIGH; impact is CONfidentiality...

CVE-2024-43565

CVE-2024-43565 corresponds to a Windows NAT Denial of Service vulnerability with a CVSS v3.1 base score of 7.5 (NETWORK attack, LOW attack complexity, NO privileges, NO user interaction). The issue is tied to the Windows NAT component and is listed among multiple Microsoft Windows vulnerabilities...

CVE-2024-43607

CVE-2024-43607 affects Windows Routing and Remote Access Service (RRAS). Vulnerability allows remote code execution over the network with no privileges and requires user interaction; CVSS v3.1 base score 8.8 (HIGH). Connected documents indicate RRAS-related fixes from Microsoft security updates (...

CVE-2024-43622

CVE-2024-43622 is a Windows Telephony Service remote code execution vulnerability. According to NCSC guidance, it is associated with an 8.8/High severity score (CVSS 3.1: AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H), indicating network access without authentication is sufficient and user interaction is r...

CVE-2025-21223

Technical details about CVE-2025-21223 are not provided in the supplied connected documents. The initial entry notes a Windows Telephony Service RCE, but no vendor/version/impact specifics are disclosed here. Monitor for future updates.

CVE-2025-21240

CVE-2025-21240 is a Windows Telephony Service remote code execution vulnerability. The CIRCL sighting data lists Windows Telephony Service with CVSS 8.80 (High) and impact: Execute random code, consistent with the CVSS vector in the Initial Description (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H). Conne...

CVE-2025-21301

CVE-2025-21301 is a Windows Geolocation Service Information Disclosure vulnerability with CVSS 3.1 base score 6.5 (Network attack, Low attack complexity, Privileges required: Low, User interaction: None). The vulnerability is disclosed as affecting Windows Geolocation Service and is addressed by ...

CVE-2025-21339

CVE-2025-21339 corresponds to a Windows Telephony Service remote code execution vulnerability. The NCSC listing confirms a high-severity impact (CVSS 3.1: AV Network, AC L, PR None, UI Required, S U, C/H/I/A H) with an overall score of 8.80 and notes that exploitation can lead to executing code i...

CVE-2025-26641

CVE-2025-26641 affects Windows Cryptographic Services, causing Denial of Service via uncontrolled resource consumption over the network. Base score 7.5 (Network, High availability impact). Exploitation status not detailed in the provided connected documents; remediation per Microsoft security upd...

CVE-2025-29969

Technical details about CVE-2025-29969 (affected product/version, root cause, exploitability, and remediation) are not provided in the supplied documents; monitor for updates.

CVE-2025-32719

CVE-2025-32719 is a Windows Storage Management Provider vulnerability described as an out-of-bounds read that allows an authorized, local attacker to disclose information. The CVE has a CVSS v3.1 base score of 5.5 (Local, Low attack complexity, Privileges Required: Low) with high confidentiality ...

CVE-2025-59254

Summary: CVE-2025-59254 is a heap-based buffer overflow in the Windows DWM Core Library that enables a locally authenticated attacker to escalate privileges. Affected component: DWM Core Library on Windows. Impact: Local privilege escalation with high potential impact; CVSS 3.1 score 7.8 (LOCAL, ...

CVE-2025-62549

CVE-2025-62549 is a Windows RRAS Remote Code Execution vulnerability. The connected documents confirm an unauthenticated network exploit that allows code execution via RRAS component, with high impact and network access. Affected software is Windows RRAS services; root cause identified as an untr...

CVE-2026-0390

Technical details about CVE-2026-0390 are not publicly provided in the available documents. No information on affected product versions, root cause, exploitability, or remediation is included. Monitor for updates from official sources.

CVE-2026-20820

CVE-2026-20820 is a local privilege-escalation vulnerability caused by a heap-based buffer overflow in the Windows Common Log File System Driver. An authenticated, locally-adjacent attacker could trigger the overflow to obtain higher privileges on the host. The CVE is corroborated by multiple fee...