CVE-2020-1270

CVE-2020-1270 is documented as a Windows WLAN Service Privilege Elevation Vulnerability. The connected CNVD entry describes a privilege escalation in the way memory objects are handled by the Windows WLAN Service, enabling code execution with elevated privileges via a crafted application. Other c...

CVE-2020-1515

CVE-2020-1515 is an Elevation of Privilege vulnerability in Windows Telephony Server caused by improper memory handling. An attacker who already has code execution on the target could escalate privileges locally by running a crafted application. Microsoft’s security update fixes memory handling i...

CVE-2020-1528

CVE-2020-1528 concerns an elevation of privilege in Windows related to the Windows Radio Manager API improperly handling memory. The vulnerability requires an attacker to gain code execution on the victim and then run a crafted application to elevate privileges; Microsoft’s security update fixes ...

CVE-2020-1552

CVE-2020-1552 (Windows Work Folder Service Elevation of Privilege) Affects Windows Work Folders Service. The vulnerability arises because the service improperly handles file operations, allowing an attacker to run code with elevated privileges by executing a specially crafted application on the v...

CVE-2020-16885

Technical details about CVE-2020-16885 are not publicly provided in the supplied documents. Monitor for updates from official advisories and vendor advisories for confirmed impact and remediation.

CVE-2020-16892

CVE-2020-16892 is a Windows kernel image elevation-of-privilege vulnerability. It arises from how the Windows kernel handles objects in memory, enabling a locally authenticated attacker to execute code with elevated permissions. The described exploitation path requires a locally run crafted appli...

CVE-2020-16972

CVE-2020-16972 describes an elevation of privilege in the Windows Backup Service caused by improper handling of file operations. An attacker who already has execution on the victim system could run a crafted application to elevate privileges. The fixed behavior is implemented via a security updat...

CVE-2021-1683

CVE-2021-1683 concerns an impersonation issue in the Bluetooth Passkey Entry Protocol. The NVD description references a Bluetooth SIG statement, indicating mitigations via a Microsoft software update. The update changes pairing behavior to fail when the remote device exchanges a public key with t...

CVE-2021-1701

Technical details for CVE-2021-1701 are not publicly provided in the supplied documents. Monitor for updates from official advisories; no specifics on affected products, root cause, exploit, or fixes are included here.

CVE-2021-24093

Technical details about CVE-2021-24093 are not publicly provided in the supplied documents. Sources mention Windows Graphics Components and remote code execution at a high level but do not disclose affected versions, vectors, or fixes. Monitor for updates.

CVE-2021-26413

CVE-2021-26413 is the Windows Installer Spoofing Vulnerability. Microsoft and CVE records confirm a local-attack surface in the Windows Installer component that can impact integrity (as per CVSS) without user interaction. Public exploit details are not provided in the connected documents; however...

CVE-2021-27092

CVE-2021-27092: Azure AD Web Sign-in Security Feature Bypass Vulnerability. The connected data confirms a concrete vulnerability in Azure Active Directory web sign-in, enabling arbitrary browsing via federated endpoints. CVSS metrics show a high to critical impact (CVSSv3.1: 9.8, NETWORK, LOW exp...

CVE-2021-28313

Technical details about CVE-2021-28313 are not publicly provided in the supplied documents. Monitor for updates from NVD, MSRC, and vendor advisories for affected components and fixes.

CVE-2021-28331

CVE-2021-28331 is described in connected CNVD as a Remote Procedure Call Runtime Remote Code Execution vulnerability affecting Microsoft Windows/Windows Server, enabling remote code execution via RPC Runtime. The provided documents do not specify affected product versions, root cause specifics, e...

CVE-2021-31975

No technical details (affected products, root cause, or fixes) for CVE-2021-31975 are provided in the supplied documents. Monitor for updates from official advisories and vendor advisories.

CVE-2021-33774

CVE-2021-33774 is a Windows Event Tracing elevation-of-privilege vulnerability in Microsoft Windows/Windows Server. Connected sources confirm the flaw resides in Event Tracing and can yield increased privileges, with local attack prerequisites (no user interaction) per CVSS vectors cited in publi...

CVE-2021-33782

Technical details for CVE-2021-33782 are not publicly available in the provided documents. No confirmed impact or remediation are described here; monitor connected sources for updates.

CVE-2021-36967

CVE-2021-36967 affects the Windows WLAN AutoConfig Service and is an Elevation of Privilege vulnerability. CVSS details (NVD, CVSS 3.1) indicate an adjacent-network attack vector, low attack complexity, no authentication, and high impact to confidentiality, integrity, and availability (base score...

CVE-2021-38637

CVE-2021-38637 corresponds to a Windows Storage Information Disclosure vulnerability. The linked documents show mitigations via Microsoft security updates KB5005565, KB5005566, KB5005568, with advisories from MSRC. CVSS data indicate a MEDIUM base score (CVSS 3.1: 5.5) with LOCAL attack vector an...

CVE-2022-21904

Technical details for CVE-2022-21904 are not publicly provided in the supplied documents. Monitor for updates.

CVE-2022-26794

Technical details for CVE-2022-26794 are not publicly provided in the supplied documents. No specifics on affected components, root cause, impact, or fixes are present here. Monitor for updates in connected sources.

CVE-2022-29103

Technical details for CVE-2022-29103 are not publicly provided in the supplied documents. The connected items discuss Windows update KB entries and security issues, but none specify affected products/versions or remediation for this CVE.

CVE-2022-34730

Technical details about CVE-2022-34730 are not publicly provided in the supplied connected documents. No product/version/impact/fix details are present here; monitor for updates from official advisories.

CVE-2022-35830

CVE-2022-35830 is a Remote Procedure Call Runtime Remote Code Execution vulnerability with a CVSS v3.1 base score of 8.1 (HIGH). According to the NVD entry, it has Network attack vector, high impact on confidentiality, integrity, and availability, and requires no privileges and no user interactio...

CVE-2022-35831

CVE-2022-35831 affects the Windows Remote Access Connection Manager and is described as an Information Disclosure vulnerability. The connected data provides technical details: affected component is the Remote Access Connection Manager; root cause is an information disclosure fault; impact is Conf...

CVE-2022-37954

CVE-2022-37954 is a Elevation of Privilege vulnerability in the DirectX Graphics Kernel component of Windows. The initial CVSSv3.1 data indicates Local exploitability with Low attack complexity and Low privileges required, yielding a high base score of 7.8 (C:H, I:H, A:H). The vulnerability affec...

CVE-2022-37978

CVE-2022-37978 is a Windows Active Directory Certificate Services security feature bypass (Circumvention of security measure) with CVSS v3.1 base score 7.5. Affected component: Active Directory Certificate Services in Windows. Root cause details are not fully disclosed in the provided connected d...

CVE-2023-21677

Technical details (affected products, root cause, exploitability, and fixes) for CVE-2023-21677 are not provided in the supplied documents. No specifics on impact or remediation are present. Monitor for updates.

CVE-2023-21700

Technical details for CVE-2023-21700 are not publicly available in the provided documents. No concrete affected products, root cause, or remediation are confirmed here. Monitor official sources for updates and published fixes.

CVE-2023-28254

Technical details about CVE-2023-28254 are not provided in the connected documents. The materials confirm a Windows DNS Server RCE vulnerability in description form only. Monitor for updates from Microsoft/NVD for affected versions, impact, and fixes.

CVE-2023-32044

Technical details for CVE-2023-32044 are not provided in the connected documents; only the vulnerability name is cited. Monitor for updates.

CVE-2023-32054

CVE-2023-32054 is referenced in connected content as a local elevation-of-privilege vulnerability related to Shadow Copy restoration. The MagicDot tooling (GitHub: SafeBreach-Labs/MagicDot) includes a Shadow Copy restoration exploit specifically for CVE-2023-32054, described among a package of ro...

CVE-2023-36913

Technical details about CVE-2023-36913 are not publicly provided in the supplied documents. No specific affected products, root cause, or remediation are described here. Monitor for updates as new information may be released.

CVE-2024-35265

CVE-2024-35265 is described as a Windows Perception Service elevation-of-privilege vulnerability (local, CVSSv3.1 7.0). OpenVAS entries map it to Windows Perception Service with privilege-escalation impact. The connected documents show Microsoft security updates around June 2024, but there is no ...

CVE-2024-38101

Technical details about CVE-2024-38101 are not publicly provided in the supplied connected documents. Information about affected components, impact, and fixes is unavailable here. Monitor for updates from official sources to obtain confirmed technical specifics and remediation guidance.

CVE-2024-43627

CVE-2024-43627 affects the Windows Telephony Service and enables Remote Code Execution. Affected component: Windows Telephony Service (Windows OS). Attack vector: network; prerequisites: none; user interaction required (UI: R). Impact per CVSS 3.1: Confidentiality, Integrity, and Availability are...

CVE-2024-43637

CVE-2024-43637 is a Windows USB Video Class System Driver elevation-of-privilege vulnerability. The connected documents confirm a Windows USB Video Driver entry and indicate that Microsoft patched this family of flaws in November 2024 updates (e.g., KB5046616/OS Build 20348.2849 and related KBs)....

CVE-2024-49094

CVE-2024-49094 is a Windows Wireless Wide Area Network Service (WwanSvc) elevation-of-privilege vulnerability. The connected documents indicate that exploitation can lead to elevated privileges on affected Windows endpoints (local context). Microsoft has published updates fixing the issue (e.g., ...

CVE-2025-24063

Technical details such as affected product/version, root cause, specific exploit scenario, and remediation for CVE-2025-24063 are not provided in the connected documents. Monitor for official updates (vendor advisories or CVE disclosures) for concrete technical information and fixes.

CVE-2026-20805

CVE-2026-20805 is a local information-disclosure vulnerability in Microsoft Windows Desktop Window Manager (dwm.exe). The provided documents describe that an authenticated, low-privilege user can leak sensitive information via improper handling of ALPC-related structures (ALPC ports/sections) and...

CVE-2026-49178

CVE-2026-49178 is a heap-based buffer overflow in Windows Active Directory Domain Services that enables a network-based remote code execution by an authenticated, low-privilege attacker. The affected component is AD DS; the vulnerability enables code execution with high impact on confidentiality,...

CVE-2019-0553

CVE-2019-0553 is a Windows Subsystem for Linux information disclosure vulnerability caused by improper in-memory handling in WSL. Affected products include Windows 10 (client) and Windows Server 2019. The databases concur on the vulnerability description and impact (information disclosure; no int...

CVE-2019-0692

CVE-2019-0692 describes an elevation-of-privilege vulnerability in Windows Subsystem for Linux caused by an integer overflow. The issue enables local attackers to potentially escalate privileges within affected Windows environments. The initial entry notes the vulnerability and distinguishes it f...

CVE-2019-1043

The CVE-2019-1043 entry concerns a remote code execution in the Windows comctl32.dll memory handling. The issue allows an attacker to execute arbitrary code in the caller’s context, with the attacker gaining the current user’s rights; administrative context could lead to full control of the syste...

CVE-2019-1164

CVE-2019-1164 is a Windows kernel elevation-of-privilege vulnerability. The security flaw arises when the Windows kernel mishandles objects in memory, allowing a logged-on attacker to run arbitrary code in kernel mode and potentially install programs, view/change/delete data, or create privileged...

CVE-2019-1174

CVE-2019-1174 is an elevation of privilege vulnerability in how the Windows component PsmServiceExtHost.dll handles objects in memory. A locally authenticated attacker could run a crafted application to execute code with elevated permissions. A Microsoft security update fixes the issue by ensurin...

CVE-2019-1245

CVE-2019-1245 is a DirectWrite information disclosure vulnerability. The provided documents confirm a memory disclosure issue in DirectWrite, but do not specify affected product versions, root cause details beyond a memory disclosure, or concrete remediation steps. A CIRCL sighting notes exploita...

CVE-2020-1207

Technical details for CVE-2020-1207 are not publicly available in the provided documents. Monitor for updates from official advisories and security bulletins for affected components and remediation.

CVE-2020-1538

Technical details about CVE-2020-1538 are not publicly provided in the connected documents; no explicit affected products, root cause, impact, or remediation specifics are documented here. Monitor for updates in the sources above.

CVE-2020-16889

CVE-2020-16889 describes an information disclosure vulnerability in Windows KernelStream where in-memory objects are not handled correctly. Exploitation requires an authenticated user to log on and run a crafted application; it does not directly enable code execution or privilege escalation, but ...