CVE-2020-1231

Technical details for CVE-2020-1231 are not provided in the connected documents. Monitor for updates; information on affected components, root cause, and remediation is not available here.

CVE-2020-1398

CVE-2020-1398 corresponds to the Windows Lockscreen Elevation of Privilege vulnerability. The connected CNVD entry confirms the issue originates from improper handling of the Lock screen’s Ease of Use dialog, enabling privilege escalation when exploited. The initial description states exploitatio...

CVE-2020-1593

Technical details about CVE-2020-1593 are not provided in the connected documents; no product/version/impact specifics are disclosed here. Monitor for updates as additional details may be published.

CVE-2021-1650

Technical details for CVE-2021-1650 are not publicly provided in the connected documents. Monitor for updates from official advisories; no specific affected product/version, root cause, impact, or remediation is included here.

CVE-2021-24102

CVE-2021-24102 is a Windows vulnerability described as a local elevation of privilege in Windows Event Tracing. The connected NVD entry lists a CVSS-3.1 base score of 7.8 with local attack vector, low attack complexity, and privileges required as Low, with no user interaction. The impact is high ...

CVE-2021-26877

Technical details for CVE-2021-26877 are not provided in the supplied documents. No affected products, root cause, impact, or remediation are specified here; monitor for updates from official advisories.

CVE-2021-27096

CVE-2021-27096 refers to an NTFS elevation-of-privilege weakness in Microsoft Windows/Windows Server. The CNVD entry confirms an NTFS vulnerability that could allow privilege escalation, but the provided documents do not disclose the exact root cause, affected builds, or a specific fix. NVD/Secur...

CVE-2021-31953

CVE-2021-31953 is a Windows elevation-of-privilege issue affecting the Windows Filter Manager. The NVD entry lists a CVSSv3.1 base score of 7.8 (HIGH) with LOCAL attack vector, LOW attack complexity, and privileges required: LOW; impact on confidentiality, integrity, and availability is high. The...

CVE-2021-33773

CVE-2021-33773 affects the Windows Remote Access Connection Manager in Windows/Windows Server, described as an Elevation of Privilege vulnerability. Connected sources confirm the affected component and privilege/escalation nature, with CVSS indicating high impact (local, with high confidentiality...

CVE-2022-21879

Technical details for CVE-2022-21879 are not publicly provided in the supplied documents; no affected products or fixes are described here. Monitor for official disclosures and updates.

CVE-2022-37982

CVE-2022-37982 relates to the Microsoft WDAC OLE DB provider for SQL Server, with a Remote Code Execution vulnerability. Connected documents identify the affected component as the WDAC OLE DB provider for SQL and indicate an impact of executing arbitrary code, consistent with a high-severity netw...

CVE-2022-37990

CVE-2022-37990 is a Windows kernel elevation-of-privilege issue tied to registry/hive memory handling. The connected analysis places this bug in a pool memory corruption class triggered by a 16‑bit integer overflow when calculating a dynamically allocated buffer length during registry hive operat...

CVE-2022-37999

CVE-2022-37999 is a Windows Group Policy Preference Client privilege-elevation vulnerability. The CNVD entry describes it as an elevation of privilege in the Windows Group Policy Preference Client stemming from improper privilege assignment, enabling a local attacker with LOW privileges (LOCAL, L...

CVE-2022-38004

Technical details about CVE-2022-38004 are not publicly available in the provided documents; the connected records reference Windows Fax Service and a remote code execution vulnerability but do not disclose affected versions, root cause, exploit info, or fixes. Monitor for updates.

CVE-2022-41101

CVE-2022-41101 is a Windows Overlay Filter Elevation of Privilege vulnerability with CVSS 3.1 base score 7.8 (HIGH). It is a LOCAL exploit requiring LOW privileges and no user interaction, with full impact on confidentiality, integrity, and availability as per the score. The provided documents id...

CVE-2023-21811

Technical details for CVE-2023-21811 are not publicly provided in the supplied documents. No affected products, root cause, or remediation are specified here. Monitor for updates from the connected sources.

CVE-2023-28240

Technical details for CVE-2023-28240 are not publicly available in the provided documents; monitor for updates.

CVE-2023-28256

CVE-2023-28256 corresponds to a Windows DNS Server remote code execution vulnerability. The initial record identifies the affected software as Windows DNS Server and provides a CVSSv3.1 base score of 6.6 (Medium) with Network attack vector, High attack complexity, and High privileges required; us...

CVE-2023-35297

CVE-2023-35297 is the Windows Pragmatic General Multicast (PGM) Remote Code Execution vulnerability. The connected Vulristics/AVLEONOV content notes this CVE as having public exploit activity and exposure on the same-network-segment (PGM) with a network attack vector and high impact. Specific aff...

CVE-2023-35363

Technical details about CVE-2023-35363 are not publicly provided in the supplied documents. No affected product/version or fix is described here. Monitor for official updates from Microsoft and CVE/NVD for details.

CVE-2024-37982

Technical details about CVE-2024-37982 are not provided in the connected documents. No specifics on affected components, root cause, or fixes are available here. Monitor official advisories/updates for authoritative guidance.

CVE-2024-38154

CVE-2024-38154 concerns Windows Routing and Remote Access Service (RRAS). The initial document states RRAS Remote Code Execution Vulnerability with a CVSS3.1 base score of 8.8 (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H). Connected documents do not supply concrete technical details (no vendor/product/ve...

CVE-2024-49127

CVE-2024-49127 is a Windows LDAP Remote Code Execution vulnerability in the LDAP component of Domain Controllers. The CVSS shows high impact (C/H, I/H, A/H) with network access required and no user interaction. The exploitation path involves an attacker obtaining network access to the DC and issu...

CVE-2025-21295

Technical details (affected product, vulnerable component, root cause, exploit conditions, or fix) for CVE-2025-21295 are not provided in the supplied documents. Monitor for updates from Microsoft and CVE repositories; current data confirms only high-level vulnerability existence.

CVE-2025-26668

CVE-2025-26668 is a heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) that allows a network-authenticated attacker to execute code remotely. Affected component is RRAS (Windows Routing and Remote Access Service); root cause is a heap-based overflow that can lead to ar...

CVE-2025-27735

CVE-2025-27735 affects Windows Virtualization-Based Security (VBS) Enclave. The root cause is insufficient verification of data authenticity, enabling an authorized local attacker to bypass a security feature. The connected NCSC listing labels the impact as bypassing a security measure with CVSS ...

CVE-2018-8497

CVE-2018-8497 is a Windows kernel elevation-of-privilege issue described as occurring in how the kernel handles objects in memory. Affected products listed in the CVE entry include Windows Server 2016, Windows 10, Windows Server 2019, and Windows 10 Server variants. The connected records confirm ...

CVE-2019-0719

CVE-2019-0719 describes a remote code execution vulnerability in the Windows Hyper-V Network Switch. The issue occurs when a host server fails to properly validate input from an authenticated user on a guest OS, enabling potential arbitrary code execution on the host. Affected component is the Hy...

CVE-2019-1017

CVE-2019-1017 is a Windows Win32k elevation-of-privilege vulnerability. The Win32k component mishandles in-memory objects, allowing a locally authenticated attacker to run arbitrary code in kernel mode after logging on and executing a crafted application. This could enable installation of program...

CVE-2019-1028

Technical details (affected products, versions, root cause, exploit vectors, and fixes) are not publicly provided in the supplied documents. Monitor for updates from official advisories.

CVE-2019-1041

CVE-2019-1041 (Windows Kernel Elevation of Privilege) is a Windows kernel vulnerability where improper handling of objects in memory allows an attacker who can log on to run arbitrary code in kernel mode. The attacker could then install programs, view/change/delete data, or create accounts with f...

CVE-2019-1170

CVE-2019-1170 is a Windows NTFS sandbox-elevation-of-privilege vulnerability. It arises when sandboxed processes create reparse points, enabling a sandbox escape and privilege escalation on the affected system. Public exploit activity exists (e.g., exploit-db). The issue is rooted in the NTFS san...

CVE-2019-1268

CVE-2019-1268 involves a privilege escalation in Microsoft Windows Winlogon. The root cause, as described in CNVD-2019-31856, is that Winlogon does not properly handle file path information, allowing an attacker to log on and run a specially crafted application to execute arbitrary code with elev...

CVE-2019-1393

Technical details about CVE-2019-1393 are not provided in the connected documents. The EUVD entries mention malware 'sbrugna' but do not specify affected products, root cause, impact, or fixes. Monitor for updates.

CVE-2020-0684

CVE-2020-0684 is a Windows remote code execution vulnerability triggered when a .LNK file is processed. The connected docs confirm that an attacker could execute code with the current user’s privileges, affecting Windows/Windows Server platforms via .LNK handling, and that patches were released i...

CVE-2020-0962

CVE-2020-0962 is a Windows win32k information-disclosure vulnerability. The connected sources describe an information-disclosure flaw in the win32k component that may reveal kernel information when a specially crafted application is run. The vulnerability affects the win32k kernel subsystem and i...

CVE-2020-1009

CVE-2020-1009 is an Elevation of Privilege vulnerability in the Microsoft Store Install Service where local file operations in protected locations can be abused to gain elevated access. Root cause as stated: how the service handles file operations in protected locations. Impact is described as HI...

CVE-2020-1468

CVE-2020-1468: Information disclosure in Windows GDI. The Windows GDI component improperly discloses memory contents, enabling partial confidentiality impact. Connected CNVD entry corroborates Windows/Windows Server information disclosure presence; no vendor/product patch details are provided in ...

CVE-2020-1511

CVE-2020-1511 : A privilege-elevation vulnerability in the Connected User Experiences and Telemetry Service arises from improper handling of file operations. An attacker could run a specially crafted application on the victim’s system to execute code in an elevated context. The threat is mitigate...

CVE-2020-1534

CVE-2020-1534 is an Elevation of Privilege in Windows Backup Engine/Windows Backup Service. The connected AVLEONOV post confirms the affected component as Windows Backup Engine and describes the root cause as improper handling of file operations by the Backup Service, enabling privilege escalatio...

CVE-2020-1550

Technical details for CVE-2020-1550 are not publicly provided in the connected documents; the initial entry notes memory handling in Windows CDP User Components but no vendor/version/root-cause specifics are given here. Monitor for updates.

CVE-2020-16962

Technical details for CVE-2020-16962 are not publicly provided in the connected documents. Monitor for updates from NVD/MSRC and related feeds for affected software, vulnerable components, root cause, and available fixes.

CVE-2020-16964

CVE-2020-16964 is described as a Windows Backup Engine Elevation of Privilege vulnerability. The available documents indicate a local, low-privilege attack that yields full confidentiality, integrity, and availability impact (CVSS 3.1: AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). No specific affected pr...

CVE-2021-1653

CVE-2021-1653 details are not publicly provided in the provided documents. No affected products, root cause, or remediation are specified here. Monitor for updates.

CVE-2021-1654

Technical details for CVE-2021-1654 are not publicly provided in the connected documents. Monitor for updates as new information becomes available; current sources do not specify affected product versions, root cause, impact, or remediation beyond the initial description.

CVE-2021-1660

CVE-2021-1660 is a Remote Procedure Call (RPC) Runtime remote code execution vulnerability in Windows. The connected sources confirm the flaw affects RPC components and was addressed by Microsoft security updates released in January 2021 (KB4598242/KB4598243 and related advisories), with patches ...

CVE-2021-1695

Technical details for CVE-2021-1695 are not publicly available in the provided documents. Monitor for updates.

CVE-2021-1699

Technical details for CVE-2021-1699 are not provided in the supplied connected documents. Public information in the Initial document is limited to a Windows modem.sys information disclosure vulnerability. Monitor for updates.

CVE-2021-24103

CVE-2021-24103 corresponds to a Windows Event Tracing Elevation of Privilege vulnerability. Documents provide CVSS 3.1 base score 7.8 (LOCAL, LOW privileges required, NONE user interaction; high impact on confidentiality, integrity, and availability). The vulnerability is active per the CVE entry...

CVE-2021-28325

Technical details for CVE-2021-28325 are not publicly available in the provided connected documents. The materials reference the SMB information disclosure vulnerability and related entries, but no concrete specifics (affected products/versions/fixes) are provided here. Monitor for updates.