CVE-2022-37975

Technical details about CVE-2022-37975 (root cause, affected products/versions, exploit info, or explicit fix) are not provided in the connected documents. Monitor for official updates from Microsoft and CVE advisories for concrete remediation guidance.

CVE-2018-8320

Technical details (affected components, root cause, fixes) for CVE-2018-8320 are not provided in the connected documents. Initial description notes a Windows DNS Global Blocklist feature bypass but lacks version-specific impact or remediation information.

CVE-2019-1245

CVE-2019-1245 is a DirectWrite information disclosure vulnerability. The provided documents confirm a memory disclosure issue in DirectWrite, but do not specify affected product versions, root cause details beyond a memory disclosure, or concrete remediation steps. A CIRCL sighting notes exploita...

CVE-2020-0631

Technical details are not publicly available in the provided documents for CVE-2020-0631; no affected products, impact, or remediation are specified beyond the initial description. Monitor for updates.

CVE-2020-0956

Technical details for CVE-2020-0956 are not publicly available in the provided connected documents; monitor for updates.

CVE-2020-1207

Technical details for CVE-2020-1207 are not publicly available in the provided documents. Monitor for updates from official advisories and security bulletins for affected components and remediation.

CVE-2020-1473

CVE-2020-1473 : A remote code execution vulnerability in the Windows Jet Database Engine arises from improper handling of objects in memory. An attacker could trigger arbitrary code execution by enticing a user to open a specially crafted file. Mitigation is provided by the update that fixes the ...

CVE-2020-1538

Technical details about CVE-2020-1538 are not publicly provided in the connected documents; no explicit affected products, root cause, impact, or remediation specifics are documented here. Monitor for updates in the sources above.

CVE-2020-16889

CVE-2020-16889 describes an information disclosure vulnerability in Windows KernelStream where in-memory objects are not handled correctly. Exploitation requires an authenticated user to log on and run a crafted application; it does not directly enable code execution or privilege escalation, but ...

CVE-2020-17044

CVE-2020-17044 corresponds to a Windows vulnerability described as a Remote Access Elevation of Privilege. The provided records (NVD/NVD-based sources) list it with a CVSS-3.1 base score of 7.8 (HIGH) and CVSS‑2 base score of 6.8 (MEDIUM). According to CVSS‑3.1 details, the vulnerability is local...

CVE-2021-1671

CVE-2021-1671 corresponds to a Remote Procedure Call (RPC) Runtime Remote Code Execution vulnerability in Microsoft Windows/Windows Server. The connected documents confirm an RPC Runtime RCE with a network attack vector and a high-severity impact profile (CVSSv3.1 base score 8.8; Confidentiality/...

CVE-2021-1704

CVE-2021-1704 is documented as a Windows Hyper-V Elevation of Privilege vulnerability. The connected OpenVAS entries (KB4598** series) list CVE-2021-1704 among affected Windows vulnerabilities, indicating it is addressed across multiple Microsoft security updates. The provided documents do not in...

CVE-2021-25195

CVE-2021-25195 is described as a Windows PKU2U Elevation of Privilege vulnerability. The provided data include CVSSv3.1 metrics indicating a LOCAL attack with LOW privileges required, NO user interaction, and HIGH impact on confidentiality, integrity and availability (base score 7.8). The initial...

CVE-2021-28343

Technical details for CVE-2021-28343 are not provided in the supplied documents. Public information such as affected product/version, root cause, impact, or remediation is not present here; monitor for updates.

CVE-2021-33760

Technical details for CVE-2021-33760 are not publicly provided in the supplied connected documents. The materials mention a Media Foundation information disclosure vulnerability but contain no product/version/exploit specifics. Monitor for updates.

CVE-2021-40476

CVE-2021-40476 is a Windows AppContainer Elevation of Privilege vulnerability. The provided documents identify the impacted component as Windows AppContainer, with CVSS v3.1 base score 7.8 (LOCAL, LOW ATTACK COMPLEXITY, NO PRIVILEGES REQUIRED, UI REQUIRED, HIGH impact to C/I/A) and CVSS2 metrics ...

CVE-2022-22712

CVE-2022-22712: Windows Hyper-V Denial of Service vulnerability. Affects Hyper-V; root cause details are not provided in the initial document, but CVSS metrics indicate Local attack vector with no authentication and no user interaction, leading to a high availability impact (CVE‑v2 base score 4.7...

CVE-2022-34711

Technical details about CVE-2022-34711 are not publicly available in the provided connected documents. No explicit affected product/component/versions or remediation are stated here. Monitor for updates from official sources.

CVE-2022-34732

CVE-2022-34732 corresponds to a Microsoft ODBC Driver Remote Code Execution vulnerability. According to the provided data, it has a CVSS v3.1 base score of 8.8 (HIGH) with network attack, no privileges required, user interaction needed, and impacts to confidentiality, integrity, and availability....

CVE-2023-21699

Technical details for CVE-2023-21699 are not provided in the connected documents. The initial description only notes an iSNS information disclosure vulnerability. Monitor for updates as more details become available.

CVE-2023-21819

CVE-2023-21819 is a Windows Secure Channel Denial of Service vulnerability. The NVD entry lists a CVSSv3.1 base score of 7.5 (HIGH), with network attack vector, low attack complexity, no privileges required, no user interaction, and impact limited to availability (I: NONE, A: HIGH). The Connectiv...

CVE-2023-24857

Technical details for CVE-2023-24857 are not present in the provided connected documents. The materials reference the vulnerability name and Microsoft advisory, but no product/version/impact/fix specifics are included. Monitor for updates.

CVE-2023-35302

CVE-2023-35302 corresponds to a Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution vulnerability. The NVD entry specifies a CVSS v3.1 base score of 8.8 (Network attack vector, Low attack complexity, Privileges Required: Low, User Interaction: None, Scope: Unchanged) with hig...

CVE-2023-36907

Technical details about CVE-2023-36907 are not publicly available in the provided documents; no affected products, root cause, impact, or fixes are described here. Monitor official updates from NVD/Microsoft for remediation.

CVE-2024-30002

CVE-2024-30002 is listed in multiple feeds as a Windows Mobile Broadband Driver remote code execution vulnerability affecting the Windows Mobile Broadband component. Connected sources confirm the CVE ID appears under the Windows Mobile Broadband category with a CVSS-like indication of code execut...

CVE-2024-38121

CVE-2024-38121 is a Windows RRAS remote code execution vulnerability. Connected documents explicitly list CVE-2024-38121 under Windows Routing and Remote Access Service (RRAS) with an impact described as executing random code, indicating a high-severity issue (CVSS 3.1/8.8; network attack, no pri...

CVE-2024-38215

The CVE CVE-2024-38215 concerns the Windows Cloud Files Mini Filter Driver and is labeled as an Elevation of Privilege vulnerability with high impact. The available connected data indicates a local-execution vector (attackVector: LOCAL, attackComplexity: LOW) requiring LOW privileges and no user ...

CVE-2024-49085

CVE-2024-49085 corresponds to a Windows RRAS Remote Code Execution vulnerability. The vulnerability is rated CVSS v3.1: AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, base score 8.8 (HIGH). It affects Windows Routing and Remote Access Service and is exploitable over a network, requiring user interaction, w...

CVE-2025-21232

CVE-2025-21232 is a Windows Digital Media Elevation of Privilege vulnerability. The linked data show a CVSS v3.1 base score of 6.6 (Medium) with a physical attack vector, requiring low privileges and no user interaction, and yielding high impact to confidentiality, integrity, and availability. Th...

CVE-2025-21285

Technical details (affected products, root cause, impact or fixes for CVE-2025-21285 MSMQ DoS) are not included in the provided documents. Monitor updates from Microsoft and CVE/CIRCL references for remedies and exposure.

CVE-2025-21292

CVE-2025-21292 affects Windows Search Service (Windows Search Component) and is categorized as an elevation-of-privilege vulnerability with a CVSS v3.1 base score of 8.8 (HIGH). The connected sources identify the impact as obtaining increased privileges and confirm the vulnerability within Window...

CVE-2025-24059

CVE-2025-24059 affects Windows Common Log File System Driver. Root cause: incorrect numeric type conversion leading to local privilege escalation. Impact per sources: high (privilege escalation, high confidentiality/integrity/availability impact) with local exploitation and no user interaction re...

CVE-2025-27486

CVE-2025-27486 affects Windows Standards-Based Storage Management Service, causing Denial-of-Service through uncontrolled resource consumption over the network. The primary public description confirms the vulnerability class, and Microsoft has released updates to address it (e.g., KBs in the Apri...

CVE-2026-59131

Summary: CVE-2026-59131 pertains to AMD Zen and is described as an information-disclosure vulnerability that can be exploited by an authorized, local attacker to disclose information. The available documents indicate a CVSS v3.1 base score of 5.6 (Medium) with LOCAL attack vector, HIGH confidenti...

CVE-2026-61363

CVE-2026-61363 describes a heap-based buffer overflow in the Remote Desktop Client that enables remote code execution over the network. Affected component is the Remote Desktop Client; root cause is a heap overflow allowing arbitrary code execution on a vulnerable host. The NVD entries confirm th...

CVE-2019-1014

CVE-2019-1014 is a Windows Win32k elevation-of-privilege vulnerability. The issue arises when Win32k fails to properly handle memory objects, allowing a locally authenticated attacker to run arbitrary code in kernel mode, install programs, and gain full user rights. Exploitation requires logon an...

CVE-2019-1067

CVE-2019-1067 is described as a Windows kernel elevation of privilege vulnerability where the kernel fails to properly handle objects in memory. The provided connected documents do not specify a product/vendor/version, root cause details beyond the general memory handling issue, or a concrete fix...

CVE-2019-1093

Technical details about CVE-2019-1093 are not provided in the connected documents. Monitor for updates from Microsoft/MSRC and ENISA entries for affected components and remediation.

CVE-2019-1236

CVE-2019-1236 describes a remote code execution vulnerability in the VBScript engine related to how it handles objects in memory. The issue is tied to the VBScript engine’s object memory management and is documented as a vulnerability distinct from CVE-2019-1208. The vulnerability affects Interne...

CVE-2019-1240

CVE-2019-1240 affects the Windows Jet Database Engine. The vulnerability stems from improper handling of objects in memory, enabling remote code execution when a user opens a specially crafted file. Exploitation would occur locally (attackVector LOCAL) with user interaction required, and could al...

CVE-2019-1454

CVE-2019-1454 affects the Windows User Profile Service (ProfSvc). The root cause is improper handling of symlinks, enabling elevation of privilege. Impact is local, with partial confidentiality/integrity/availability concerns stated; exploitation details are not provided in the connected document...

CVE-2020-0724

Technical details for CVE-2020-0724 are not provided in the connected documents; the supplied records do not reveal affected product/version, root cause, impact, or remediation beyond the generic description.

CVE-2020-0985

CVE-2020-0985 is a Windows vulnerability described as an Elevation of Privilege in the Windows Update Stack, caused by improper handling of objects in memory. The entry confirms it is a distinct CVE from CVE-2020-0996 and assigns a Local, Low-Privilege, No-Interaction attack model with high impac...

CVE-2020-1306

Technical details about CVE-2020-1306 are not provided in the connected documents. The entry notes a Windows Runtime elevation of privilege issue but does not specify affected products/versions or fixes. Monitor for updates.

CVE-2020-1308

CVE-2020-1308 is a DirectX Elevation of Privilege vulnerability caused by improper handling of memory objects. It requires the attacker to log on locally and to run a crafted application, potentially allowing kernel-mode code execution, data modification, or creation of privileged accounts. The v...

CVE-2020-1362

CVE-2020-1362 affects the Windows WalletService, an elevation-of-privilege vulnerability caused by how WalletService handles objects in memory. Multiple connected sources (CNVD entries) confirm the root cause is improper in‑memory handling leading to privilege escalation. No specific exploit vect...

CVE-2020-1393

Summary: CVE-2020-1393 is an elevation of privilege in Windows Diagnostics Hub related to the Standard Collector Service failing to sanitize input, causing insecure library loading. The root cause is input validation/sanitization weaknesses leading to loading of untrusted libraries. This CVE is r...

CVE-2020-1463

Technical details for CVE-2020-1463 are not provided in the connected documents; public specifics (affected products/versions, root cause, or fixes) are not available here. Monitor for updates.

CVE-2020-1478

CVE-2020-1478 describes a memory-corruption vulnerability in Windows Media Foundation caused by improper handling of objects in memory. The weakness could allow an attacker to install programs, view/change/delete data, or create accounts with full user rights, with exploitation possible through s...

CVE-2020-1553

CVE-2020-1553 is a Windows Runtime elevation-of-privilege vulnerability. The flaw occurs when Windows Runtime improperly handles objects in memory, allowing a locally authenticated attacker to run arbitrary code with elevated privileges by executing a crafted application. The public description s...