CVE-2025-21376

CVE-2025-21376 is described as a Windows LDAP remote code execution vulnerability. The connected AVLEONOV article lists CVE-2025-21376 under Windows LDAP RCE but provides no vendor/product/versions, root cause, exploit details, or patch information in the supplied documents. Therefore, no concret...

CVE-2025-24065

CVE-2025-24065 is a vulnerability in the Windows Storage Management Provider causing an out-of-bounds read that can disclose information locally when exploited by an authorized user. The issue is documented with a CVSS v3.1 base score of 5.5 (Medium) and requires local access with low privileges ...

CVE-2025-26679

CVE-2025-26679 is described as a use-after-free in the RPC Endpoint Mapper Service that allows a locally authenticated attacker to escalate privileges. Connected sources corroborate its existence and categorize the impact as a privilege-escalation flaw within Windows’ RPC Endpoint Mapper componen...

CVE-2025-27727

CVE-2025-27727 affects Windows Installer through an improper link resolution before file access ("link following"), enabling local privilege elevation on an authorized attacker. The issue is evidenced by the CVE record and associated assessments (high impact, local access, user interaction none)....

CVE-2025-27732

CVE-2025-27732 is a Windows Graphics Component Elevation of Privilege vulnerability in the Win32K GRFX subsystem. The flaw stems from Sensitive data stored in improperly locked memory in the GRFX path, enabling an authorized, local attacker to elevate privileges. The vulnerability affects Windows...

CVE-2026-62890

CVE-2026-62890 is a heap-based buffer overflow in Windows GDI+ that allows an authorized attacker to execute code locally. CVSS v3.1 base score 7.8 (HIGH) with LOCAL attack vector, requiring LOW privileges and no user interaction; impact to confidentiality, integrity, and availability is HIGH. No...

CVE-2019-0725

CVE-2019-0725 is a memory corruption vulnerability in the Windows Server DHCP service caused by improper processing of DHCP response messages, enabling remote code execution by an unauthenticated attacker sending crafted DHCP responses to a vulnerable target. Affected component: Windows DHCP Serv...

CVE-2019-0888

CVE-2019-0888 affects Microsoft ActiveX Data Objects (ADO). A use-after-free in memory handling could allow remote code execution when a user visits a crafted website; the vulnerability is addressed by a Microsoft security update that changes how ADO handles objects in memory. A PoC/Exploit exist...

CVE-2019-0891

CVE-2019-0891 involves the Windows Jet Database Engine. Connected CNVD entries describe multiple buffer overflow/heap overflow vulnerabilities in the Jet Database Engine across Windows/Windows Server, arising when memory operations fail to validate data boundaries, leading to out-of-bounds reads/...

CVE-2020-0620

Technical details for CVE-2020-0620 are not publicly available in the provided documents. Monitor for updates.

CVE-2020-0959

CVE-2020-0959 is a Windows Jet Database Engine remote code execution vulnerability caused by improper handling of memory objects in the Jet DB Engine. The issue can be triggered by processing crafted files that lead to arbitrary code execution with the attacker’s context. Public sources (CNVD fam...

CVE-2020-1201

CVE-2020-1201 is an elevation-of-privilege vulnerability in Windows Now Playing Session Manager where memory objects are mishandled. Exploitation requires local access (authenticated user) and could allow the attacker to run code with elevated privileges by logging onto the system and executing a...

CVE-2020-1384

CVE-2020-1384 is an elevation-of-privilege issue in the Windows Cryptography Next Generation (CNG) Key Isolation Service where memory is not handled correctly. The vulnerability enables local attackers to elevate privileges by exploiting the memory handling defect. This CVE is related to CVE-2020...

CVE-2020-1475

CVE-2020-1475 is a Windows Server Resource Management Service Elevation of Privilege vulnerability. The issue arises from how srmsvc.dll handles objects in memory, enabling a locally authenticated attacker to execute code with elevated privileges. The vulnerability is triggered by running a speci...

CVE-2020-1484

CVE-2020-1484 is an elevation-of-privilege vulnerability in the Windows Work Folders Service caused by improper handling of memory. An attacker would need to gain execution on the victim system, then run a crafted application to elevate privileges. The vulnerability is addressed by a security upd...

CVE-2020-16914

CVE-2020-16914 is an information-disclosure in Windows GDI+ caused by how GDI+ handles memory addresses. Exploitation requires a logged-on attacker with a crafted app; remediation is a Microsoft security update addressing memory handling in GDI+.

CVE-2020-16921

CVE-2020-16921 is an information-disclosure vulnerability in the Windows Text Services Framework caused by improper handling of objects in memory. An attacker who can log on to an affected system and open a specially crafted file could read data not intended to be disclosed. The issue does not en...

CVE-2020-16975

CVE-2020-16975 describes an elevation of privilege vulnerability in the Windows Backup Service caused by improper handling of file operations. An attacker who already has code execution on the victim system could exploit this by running a crafted application to elevate privileges. Microsoft’s sec...

CVE-2020-17088

CVE-2020-17088 is a Windows elevation-of-privilege vulnerability in the Common Log File System (CLFS) driver. The connected CNVD entry explicitly attributes an EoP issue to the CLFS component in Microsoft Windows/Windows Server, indicating a local attacker could exploit it to compromise confident...

CVE-2021-1698

CVE-2021-1698 corresponds to a Windows Win32k Elevation of Privilege vulnerability. Public references in the connected documents identify the issue as a Win32k component elevation of privilege flaw with a CVSS base score around 7.8 (HIGH) and local attack vector. Remediation in the provided sourc...

CVE-2021-1706

Technical details for CVE-2021-1706 are not publicly available in the provided documents. No affected products, impact, or remediation are specified here. Monitor for updates from authoritative sources.

CVE-2021-26895

Technical details about CVE-2021-26895 are not available in the provided connected documents. The materials include general references to Windows DNS Server RCE and related advisories, but no product/version/impact/remediation specifics are given here. Monitor for updates.

CVE-2021-41337

Technical details about CVE-2021-41337 are not publicly provided in the connected documents. Monitor for updates; no specifics about affected products, root cause, or fix are included in the materials.

CVE-2022-21834

Technical details for CVE-2022-21834 are not provided in the given documents. Monitor for updates from Microsoft and NVD; no affected products, root cause, impact, or remediation information is available here.

CVE-2022-21918

Technical details about CVE-2022-21918 are not publicly provided in the connected documents. Monitor for updates and rely on official advisories for affected products, versions, and remediation.

CVE-2022-21924

CVE-2022-21924 is described in the provided documents as a Workstation Service Remote Protocol Security Feature Bypass Vulnerability , with a MEDIUM severity (CVSS v2 base score 5.4 and CVSS v3.1 base score 5.3). The available sources stop short of naming affected products, versions, or root caus...

CVE-2022-21993

CVE-2022-21993 corresponds to a Microsoft Windows NFS ONCRPC XDR Driver information disclosure vulnerability. The connected advisory CPAI-2022-0336 states an information disclosure exists and that successful exploitation by a remote attacker would allow obtaining sensitive information. No further...

CVE-2022-26784

CVE-2022-26784 describes a Denial of Service vulnerability in Windows Cluster Shared Volumes (CSV). The provided documents identify CSV as the affected component and cite a vulnerability with a MEDIUM base severity (CVSS 3.1 base score 6.5) and a network-based, low-effort exploit scenario, with n...

CVE-2022-30198

CVE-2022-30198 is mapped to Windows Point-to-Point Tunneling Protocol with an 8.10 CVSS equivalent and is described as enabling remote code execution (Executing Random Code) on affected Windows PPTP components. Connected data confirms this CVE is listed among Windows vulnerabilites fixed/monitore...

CVE-2022-35754

Technical details (affected product, version, root cause, and remediation) are not publicly available in the provided documents. Monitor for updates.

CVE-2022-38038

CVE-2022-38038 is a Windows kernel registry vulnerability caused by a 16-bit integer overflow during dynamic buffer length calculations in hive loading, leading to hive-based memory corruption and local privilege escalation. The issue is tied to regf/hive loading paths and is grouped with other r...

CVE-2022-44697

CVE-2022-44697 corresponds to a Windows Graphics Component Elevation of Privilege vulnerability. The CVE entry indicates a LOCAL attack vector with LOW privileges required and NO user interaction, resulting in HIGH impact on confidentiality, integrity, and availability (CVSSv3.1 base score 7.8). ...

CVE-2023-21691

Technical details about CVE-2023-21691 are not provided in the supplied documents. Public information here only reiterates the vulnerability title; no affected products, root cause, impact, or remediation details are included. Monitor for updates.

CVE-2023-28268

Technical details for CVE-2023-28268 are not publicly provided in the supplied documents. No affected products, root cause, impact, or remediation specifics are present. Monitor for updates in connected sources for any concrete information.

CVE-2025-21318

Technical details for CVE-2025-21318 are not publicly available in the provided documents. Monitor official advisories and vendor bulletins for updates.

CVE-2025-26671

CVE-2025-26671 is a Windows Remote Desktop Services remote code execution vulnerability. The connected documents indicate a use-after-free in the RDS component that allows a network-exposed attacker to execute arbitrary code on the affected host without user interaction. Exploitation is described...

CVE-2025-27733

CVE-2025-27733 is a local elevation-of-privileges vulnerability in Windows NTFS caused by an out-of-bounds read. The issue can be exploited by a local attacker to gain SYSTEM-like privileges on affected systems. Connected sources corroborate the NTFS-root cause and the elevated-privileges impact....

CVE-2018-8471

CVE-2018-8471 describes a local elevation-of-privilege vulnerability in the Microsoft RemoteFX Virtual GPU miniport driver. The issue arises from how the driver handles objects in memory, enabling an attacker with local access to execute code with elevated privileges on affected Windows versions ...

CVE-2019-0689

Technical details about CVE-2019-0689 are not publicly provided in the connected documents. The available Initial Description notes an elevation-of-privilege issue in Windows Subsystem for Linux, but no concrete exploit paths, affected versions, or fixes are present here. Monitor for updates.

CVE-2019-0696

CVE-2019-0696 is a Windows kernel local elevation-of-privilege vulnerability. Affected: Windows kernel; root cause described as improper handling of objects in memory. Impact: attacker gains kernel-level privileges locally (no user interaction required per CVSS). Exploitation status and exact pat...

CVE-2019-1108

Summary: CVE-2019-1108 is a vulnerability in the Windows Remote Desktop Protocol (RDP) Client that leads to information disclosure through memory contents. The connected exploit document describes an attacker connecting remotely to an affected system and running a specially crafted application to...

CVE-2019-1219

CVE-2019-1219 is an information disclosure vulnerability in Windows Transaction Manager caused by improper handling of objects in memory. Publicly documented by NVD as a Windows MCU information disclosure issue with a CVSS v2 base score of 2.1 (Low) and CVSS v3.1 base score of 5.5 (Medium), sugge...

CVE-2019-1318

CVE-2019-1318 corresponds to a TLS spoofing issue affecting Windows where TLS sessions without Extended Master Secret (EMS) can be exploited via man‑in‑the‑middle scenarios. Connected sources describe the vulnerability as a spoofing vulnerability in TLS when EMS is not used, with impact on confid...

CVE-2020-0677

Technical details for CVE-2020-0677 are not provided in the connected documents. The initial entry outlines memory handling in the CNG service but lacks explicit product/version/root-cause data. Monitor official advisories for updates.

CVE-2020-0755

Technical details for CVE-2020-0755 are not publicly provided in the connected documents. Monitor for updates from official advisories, as no concrete technical specifics (affected products, impact, or fixes) are present here.

CVE-2020-0761

CVE-2020-0761 is a remote code execution vulnerability in Active Directory integrated DNS (ADIDNS) where in-memory objects are mishandled. An authenticated attacker could send crafted requests to an ADIDNS server and execute arbitrary code with SYSTEM privileges. The root cause is described as im...

CVE-2020-0814

CVE-2020-0814 describes an elevation of privilege in Windows Installer caused by how Windows Installer handles certain filesystem operations. An attacker would need unprivileged code execution on the victim to exploit this local vulnerability. The CVSS data (3.1) reports a HIGH base score of 7.8 ...

CVE-2020-1175

CVE-2020-1175 is a remote code execution vulnerability in the Windows Jet Database Engine related to improper handling of objects in memory. The connected KB document (KB4556799) references a May 12, 2020 security update for Windows 10 builds 18362.836 and 18363.836 that includes security fixes a...

CVE-2020-1489

CVE-2020-1489 is a Windows elevation-of-privilege vulnerability in the CSC Service that arises from improper memory handling. An attacker who can execute code on the victim system could run a crafted application to elevate privileges. The root cause is memory handling in the Windows CSC Service, ...

CVE-2020-1490

Technical details for CVE-2020-1490 are not provided in the connected documents. Public information about affected products, root cause, impact, or fixes is not included here; monitor for updates from official sources.