CVE-2017-8689

Technical details about CVE-2017-8689 (affected product, root cause, impact, and fixes) are not provided in the connected documents. Monitor official advisories for updates; the available materials confirm a Windows kernel-mode elevation vulnerability but lack concrete specifics.

CVE-2017-8719

CVE-2017-8719 is a Windows Kernel information-disclosure vulnerability triggered by improper handling of objects in memory. Affected products include Windows Server 2008 SP2/R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold/R2, Windows RT 8.1, Windows 10 (Gold, 1511, 1607, 1703), and W...

CVE-2020-0699

CVE-2020-0699 is a Win32k Information Disclosure Vulnerability in the win32k component of Windows kernel. The issue arises when kernel information is inappropriately exposed, enabling an attacker with local access to obtain information from the affected system (information disclosure). Public dat...

CVE-2020-0723

Technical details for CVE-2020-0723 are not publicly provided in the provided documents; no affected products, root cause, or remediation are specified here. Monitor for updates from official advisories.

CVE-2020-0880

CVE-2020-0880 describes an information disclosure vulnerability in the Windows GDI component where memory contents can be improperly disclosed. The vulnerability affects Windows GDI memory handling; exploitation could allow an attacker to obtain information to further compromise the target system...

CVE-2020-1079

Technical details for CVE-2020-1079 are not publicly available in the provided documents. Monitor for updates.

CVE-2020-1088

Technical details for CVE-2020-1088 are not publicly provided in the supplied documents. No affected products, versions, exploitation status, or remediation details are present. Monitor for updates from official sources.

CVE-2020-1090

Technical details for CVE-2020-1090 are not publicly available in the provided documents. Monitor for updates from official advisories."

CVE-2020-1144

Technical details for CVE-2020-1144 are not publicly available in the provided documents; monitor for updates from trusted sources.

CVE-2020-1391

CVE-2020-1391 is a Windows information-disclosure issue in the Windows Agent Activation Runtime (AarSvc). The vulnerability arises because AarSvc fails to properly handle objects in memory, enabling an attacker who can log on to run a crafted app that could disclose information to further comprom...

CVE-2020-16854

Technical specifics for CVE-2020-16854 (affected product, vulnerable component, exploit access, or remediation) are not provided in the connected documents. The initial description offers high-level impact, but no concrete technical details are present for public disclosure. Monitor for updates.

CVE-2023-35329

Technical details about CVE-2023-35329 (affected product, vulnerable component, impact, exploitability, or fix) are not publicly provided in the connected documents. Monitor for updates to disclose concrete specifics.

CVE-2024-38247

CVE-2024-38247 is a Windows Graphics Component local elevation of privilege vulnerability. The CVSSv3.1 vector shows Attack Vector: Local, Privileges Required: Low, User Interaction: None, with all of Confidentiality/Integrity/Availability impacts: High. Public documents confirm a Windows patch r...

CVE-2024-43453

CVE-2024-43453 affects Windows Routing and Remote Access Service (RRAS). The RRAS component is vulnerable to remote code execution (CVE-2024-43453) with a CVSSv3.1 vector of AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, base score 8.8 (HIGH). The issue targets RRAS functionality and is linked to a total i...

CVE-2025-21220

CVE-2025-21220 is a Microsoft Message Queuing information disclosure vulnerability that has concrete public details in multiple connected sources: the CVE is listed as affecting Windows Message Queuing with the impact described as “Accessing Sensitive Data” and a CVSS basis of 7.5 (HIGH) indicati...

CVE-2025-21305

CVE-2025-21305 is documented as a Windows Telephony Service Remote Code Execution vulnerability. The connected CIRCL source explicitly lists CVE-2025-21305 under Windows Telephony Service with an impact described as Execute random code, indicating a code-execution vector in the Telephony service....

CVE-2025-29833

Technical details for CVE-2025-29833 are not provided in the connected documents. The EUVD and MSKB entries cover other issues and updates, but none specify affected product/version, root cause, impact, or remediation for this CVE. Monitor for updates.

CVE-2025-29959

Technical details about CVE-2025-29959 are not publicly available in the provided connected documents. The initial description notes a RRAS uninitialized resource issue, but no product/version/root-cause/fix specifics are present here; monitor official advisories for updates.

CVE-2025-54109

CVE-2025-54109 affects Windows Defender Firewall Service. The vulnerability is described as a type confusion that can enable local privilege escalation by an authorized attacker. Connected sources (NCSC advisory) list CVE-2025-54109 with a base score of 6.7 (Medium) and attribute the impact to lo...

CVE-2026-20922

CVE-2026-20922 is a heap-based buffer overflow in Windows NTFS that enables a locally authenticated attacker to execute code. The description and connected sources confirm NTFS as the vulnerable component and local execution as the impact. Public details in the provided documents are consistent w...

CVE-2017-0051

CVE-2017-0051 affects Microsoft Windows 10 Version 1607 and Windows Server 2016. The description indicates a remote-denial-of-service via a crafted Office document, referred to as the Microsoft Hyper-V Network Switch Denial of Service Vulnerability. The vulnerability is described as causing an ap...

CVE-2017-0219

The CVE concerns Device Guard Code Integrity Policy security feature bypass allowing injection of code into PowerShell on affected Windows versions (Win10 1607, 1511/1607, Windows Server 2016). Root cause described as a security feature bypass in Device Guard; impact includes potential code execu...

CVE-2017-8484

Technical details about CVE-2017-8484 are not publicly provided in the connected documents. No specific affected product/version, root cause, or remediation are present here. Monitor for updates from official advisories.

CVE-2017-8688

CVE-2017-8688 is a Windows GDI+ information-disclosure issue that leaks kernel-memory addresses through GDI+ memory handling. Affected products include Windows 7 SP1, 8.1, Server 2008 SP2/R2 SP1, and Windows 10 variants up to 1703/Server 2016. Connected analysis documents reveal related kernel me...

CVE-2020-0867

CVE-2020-0867 is an elevation-of-privilege vulnerability in the Windows Update Orchestrator Service caused by improper handling of file operations. A local attacker could potentially exploit this to gain higher privileges within the system. The vulnerability is linked to CVE-2020-0867 and is dist...

CVE-2020-0918

CVE-2020-0918 corresponds to a Windows Hyper-V Elevation of Privilege vulnerability. Affected component: Hyper-V on Windows Server hosts. Root cause: vulnerability exists when the Hyper-V memory-handling of objects is faulty, allowing an attacker to elevate privileges on the host. Impact: high fo...

CVE-2020-1156

CVE-2020-1156 is a Windows Runtime elevation of privilege vulnerability caused by improper handling of objects in memory. It affects Windows Runtime components and allows local privilege escalation with partial confidentiality, integrity, and availability impact per CVSS v2/v3 metrics. The provid...

CVE-2020-1434

CVE-2020-1434: Windows Sync Host Service Elevation of Privilege. CNVD-2020-52919 confirms an in-memory handling flaw in Windows Sync Host Service, enabling a local attacker to execute code with elevated privileges by running a specially crafted application. No exploit details or patch/remediation...

CVE-2020-1590

Technical details about CVE-2020-1590 are not provided in the connected documents. Public information here notes an elevation of privilege via the Connected User Experiences and Telemetry Service, but no concrete affected versions, root cause, or fixes are disclosed. Monitor for updates.

CVE-2023-35346

Technical details (affected product, root cause, impact, fix) are not provided in the supplied documents. Monitor for updates from official sources.

CVE-2024-38252

Technical details about CVE-2024-38252 are not publicly provided in the supplied documents. The records reference a Windows kernel privilege-elevation issue but do not disclose affected components, root cause, or fixes. Monitor for updates.

CVE-2025-21389

Technical details about CVE-2025-21389 are not publicly provided in the connected documents. Monitor for updates from Microsoft and CVE repositories for affected products, exploitability, and remediation.

CVE-2025-29842

Technical details (affected product, root cause, impact, fixes) for CVE-2025-29842 are not provided in the supplied connected documents. Monitor for updates from official advisories.

CVE-2025-33057

CVE-2025-33057 is a Windows Local Security Authority (LSA) vulnerability where a null pointer dereference could allow an authorized attacker to cause a network-based Denial-of-Service. Affected component is LSA; impact is DoS over the network. Documented in NVD and corroborated by NC SC/NCSC entr...

CVE-2025-48807

CVE-2025-48807 affects Windows Hyper-V: improper restriction of communication to intended endpoints enables an authorized, local attacker to execute code. The CVE is tracked with a 3.1 3.1 CVSSv3.1 vector: Local, High impact on confidentiality, integrity, and availability; exploit requires Low pr...

CVE-2025-54918

CVE-2025-54918 describes an improper authentication flaw in Windows NTLM that enables a network-authenticated attacker to elevate privileges. The CVSS v3.1 base score is 8.8 (HIGH) with network access, low attack complexity, and privileges required. A PoC exploit exists on GitHub (CVE-2025-54918-...

CVE-2026-34342

CVE-2026-34342 describes a race condition in Windows Print Spooler Components enabling local privilege escalation for an authenticated attacker. The vulnerability arises from improper synchronization on a shared resource, leading to concurrent execution issues. Impact is local elevation of privil...

CVE-2026-45592

CVE-2026-45592 describes an integer overflow/wraparound in Windows Internet (wininet.dll) that enables local privilege escalation for an authorized attacker. The CVSS 3.1 metrics indicate a HIGH impact across confidentiality, integrity, and availability, with a LOCAL attack vector, LOW privileges...

CVE-2026-62741

CVE-2026-62741 is a Windows HTTP.sys elevation-of-privilege vulnerability caused by an integer underflow/wrap in HTTP.sys. An authorized local attacker can elevate privileges. Affected: Windows HTTP.sys. Root cause: integer underflow; Impact: local privilege escalation with high confidentiality/i...

CVE-2016-3333

Technical details for CVE-2016-3333 are not publicly provided in the supplied documents; monitor for updates.

CVE-2016-3343

CVE-2016-3343 affects the Common Log File System (CLFS) driver in multiple Windows versions (Vista SP2, Server 2008 SP2/R2, 7 SP1, 8.1, Server 2012, RT 8.1, 10 variants, Server 2016). It enables local users to gain privileges via a crafted application, i.e., a local privilege escalation vulnerabi...

CVE-2017-0159

CVE-2017-0159 affects Windows 10 (1607), Windows Server 2012 R2, and Windows Server 2016. Root cause: ADFS may treat Extranet requests as Intranet, bypassing account lockout protections and enabling easier brute-force access. Public exploit details are not provided in the connected documents. Rem...

CVE-2017-0216

CVE-2017-0216 affects Microsoft Windows 10 (versions 1511, 1607) and Windows Server 2016, enabling a security feature bypass in Device Guard Code Integrity Policy that could allow an attacker to inject malicious code into a Windows PowerShell session. The underlying issue is a bypass of Code Inte...

CVE-2017-11782

CVE-2017-11782 is a Windows SMB Elevation of Privilege vulnerability affecting the SMB server configuration on Windows 10 version 1607 and Windows Server 2016. The underlying issue is the default SMB Server configuration that allows anonymous access to certain named pipes; an unauthenticated atta...

CVE-2017-8683

CVE-2017-8683 is a Windows graphics remote-code-execution vulnerability tied to Win32k Graphics via specially crafted embedded fonts. Affected products include Windows client/server releases from Windows 7 SP1 to Windows 10 1703 and Windows Server 2008 SP2/R2 SP1/2012, plus Office Word Viewer+Off...

CVE-2017-8686

CVE-2017-8686 affects the Windows Server DHCP service on Windows Server 2012 Gold/R2 and Windows Server 2016. The issue is a memory corruption vulnerability in the DHCP service that can allow an attacker to run arbitrary code on the DHCP failover server or cause the DHCP service to become nonresp...

CVE-2018-8329

CVE-2018-8329 is an Elevation of Privilege vulnerability in Windows Subsystem for Linux (WSL). The issue arises from improper handling of memory objects, allowing an attacker who can log on to a system to execute arbitrary code with elevated privileges and potentially take control of the affected...

CVE-2019-1323

Technical details about CVE-2019-1323 are not publicly available in the provided documents. No affected products/versions, root cause, impact, or remediation are specified here. Monitor for updates from primary sources.

CVE-2020-0749

CVE-2020-0749 describes an elevation of privilege affecting Microsoft Windows and Windows Server, caused by how the Connected Devices Platform Service handles objects in memory. CNVD entries for 2020-13560/13563/13562/13564 confirm Windows/Server as affected products and identify the root cause a...

CVE-2020-0763

CVE-2020-0763 is a Windows Defender Security Center elevation-of-privilege vulnerability. According to CNVD-2020-18167/18165, an attacker who can log on could exploit Defender Security Center by manipulating in-memory objects to elevate privileges. The initial description aligns with a memory-obj...