CVE-2020-17014

CVE-2020-17014 is a Windows Print Spooler elevation of privilege vulnerability. The NVD record lists a local, low-complexity attack with LOW privileges required and no user interaction, yielding HIGH integrity and availability impact (CVSS v3.1 base score 7.1; v2 base score 6.6). The provided doc...

CVE-2020-17057

CVE-2020-17057 affects Windows Win32k via elevation of privilege. A PoC/exploit exists in a connected document, and Microsoft issued a patch on 2020-11-10 to fix the issue. The exact affected product/version details and vulnerability root cause are not fully enumerated in the provided sources, bu...

CVE-2020-17090

Technical details about CVE-2020-17090, including affected product versions, root cause, and fix, are not publicly available in the provided documents. Monitor for updates from NVD, OSV, and vendor advisories.

CVE-2021-1659

No public technical details for CVE-2021-1659 are provided in the supplied documents. Monitor for updates.

CVE-2021-1673

CVE-2021-1673 is described as a Remote Procedure Call (RPC) Runtime Remote Code Execution vulnerability affecting Microsoft Windows/Windows Server. The CVE entry lists a high-severity CVSS score (3.1) of 8.8 with network access, low attack complexity, and no user interaction, implying reliable RC...

CVE-2021-42276

Technical details about CVE-2021-42276 are not provided in the supplied connected documents. Please monitor for updates in the sources list to learn affected products, root cause, impact, and remediation.

CVE-2022-26933

Technical details about CVE-2022-26933 (NTFS Information Disclosure) are not provided in the connected documents. Monitor for updates; no affected products, root cause, impact, or fixes are disclosed here.

CVE-2022-34726

Technical details (affected component, root cause, impact, and fix) are not provided in the supplied documents; no concrete technical specifics are available. Monitor for official disclosures and updates.

CVE-2022-44669

Technical details about CVE-2022-44669 are not provided in the connected documents. The sources mention Windows Error Reporting elevation of privilege but do not disclose affected components, versions, or fixes. Monitor for updates.

CVE-2022-44681

Technical details about CVE-2022-44681 are not publicly provided in the connected documents. Monitoring for updates is recommended.

CVE-2023-28240

Technical details for CVE-2023-28240 are not publicly available in the provided documents; monitor for updates.

CVE-2023-35351

CVE-2023-35351: Windows Active Directory Certificate Services (AD CS) Remote Code Execution vulnerability. Affected: Windows AD CS; vulnerability type is remote code execution. CVSSv3.1 base score 6.6 (vector: CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H). Exploitation status and detailed root ca...

CVE-2023-35363

Technical details about CVE-2023-35363 are not publicly provided in the supplied documents. No affected product/version or fix is described here. Monitor for official updates from Microsoft and CVE/NVD for details.

CVE-2024-43550

CVE-2024-43550 is described in connected sources as a Windows Secure Channel vulnerability with an impact described as impersonation of another user. The NCSC advisory groups it with other Windows CVEs and notes that Microsoft has released security updates to fix affected components (e.g., Octobe...

CVE-2024-49124

According to the connected NCSC advisory, CVE-2024-49124 is an LDAP-related vulnerability in Windows LDAP with an impact described as Execution of random code (CVSS 8.1/8.10 range in the table). The advisory notes that Microsoft has fixed vulnerabilities and recommends applying the security updat...

CVE-2024-49127

CVE-2024-49127 is a Windows LDAP Remote Code Execution vulnerability in the LDAP component of Domain Controllers. The CVSS shows high impact (C/H, I/H, A/H) with network access required and no user interaction. The exploitation path involves an attacker obtaining network access to the DC and issu...

CVE-2025-21210

CVE-2025-21210 concerns Windows BitLocker information disclosure. Reports indicate that in certain scenarios the hibernation image created when a laptop with an open Windows session is closed may not be fully encrypted, potentially allowing recovery of RAM contents in plain text. This vulnerabili...

CVE-2025-21222

CVE-2025-21222 is a remote-code-execution vulnerability in Windows Telephony Service characterized by a heap-based buffer overflow that an unauthenticated attacker can trigger over the network. Connected sources corroborate its association with Windows Telephony Service and document it as a netwo...

CVE-2025-21308

CVE-2025-21308 Windows Themes Spoofing affects the Windows Theme system. The vulnerability lets a malicious party impersonate the user and potentially execute code in the victim’s context, requiring the victim to open/edit a rogue file. The impact is described as impersonation with potential code...

CVE-2025-24067

CVE-2025-24067 is described in the connected documents as a heap-based buffer overflow in the Microsoft Streaming Service Driver that allows an authenticated, local attacker to elevate privileges. The vulnerability concerns the Windows kernel streaming service component and is listed with a high ...

CVE-2025-27479

CVE-2025-27479 appears in connected records as a Kerberos-related Denial-of-Service vulnerability described under the Kerberos Key Distribution Proxy Service. The available sources confirm an impact on Windows Kerberos with a network-based DoS potential due to an insufficient resource pool, but d...

CVE-2025-53766

CVE-2025-53766 is a heap-based buffer overflow in Windows GDI+ that enables a remote attacker to execute code over a network. Public details describe the vulnerability as a memory overflow in GDI+ triggered by processing specially crafted metafiles, potentially allowing arbitrary code execution w...

CVE-2019-0710

CVE-2019-0710 is a Windows Hyper-V denial-of-service vulnerability. A privileged guest-OS user can run a crafted application inside a VM that causes the host server to crash, due to Hyper-V failing to validate certain guest requests. The issue affects Hyper-V on the host and is exploitable by a g...

CVE-2019-0961

The CVE-2019-0961 entry concerns Microsoft Windows GDI (Graphics Device Interface). The vulnerability arises from improper handling of memory objects, leading to information disclosure of memory contents in GDI. Affected component: Windows GDI in Microsoft Windows. Impact, as stated, is informati...

CVE-2019-0984

The CVE-2019-0984 entry concerns a Windows Common Log File System (CLFS) driver elevation of privilege vulnerability. The issue arises from improper handling of memory objects in CLFS, enabling an attacker who can log on to the system to run a specially crafted application with elevated privilege...

CVE-2019-1027

The CVE-2019-1027 entry concerns a local elevation of privilege in Windows Audio Service. Affected component is the Windows Audio Service, with root cause described as improper handling of requests by the service that can be exploited to execute code with elevated privileges. Impact is local priv...

CVE-2019-1046

CVE-2019-1046 affects the Windows GDI component, where improper handling of memory allows information to be disclosed to an attacker. This vulnerability can be triggered by user actions such as opening a specially crafted document or visiting an untrusted webpage, leading to potential further com...

CVE-2019-1078

CVE-2019-1078 is a Windows Graphics Component information-disclosure vulnerability. It stems from the component improperly handling memory objects, allowing an attacker to obtain information that could help compromise the system. An authenticated attacker could exploit this by running a specially...

CVE-2019-1097

Technical details about CVE-2019-1097 are not publicly provided in the connected documents. The initial entry notes a DirectWrite information disclosure but lacks vendor/affected products, versions, impact, or remediation in the supplied materials. Monitor for updates.

CVE-2019-1153

CVE-2019-1153 is a Windows Graphics Component information-disclosure vulnerability. It stems from improper handling of objects in memory, enabling an attacker who logs on and runs a specially crafted application to obtain information that could help further compromise the system. Mitigation is vi...

CVE-2019-1248

CVE-2019-1248 is a remote code execution vulnerability in the Windows Jet Database Engine caused by improper handling of objects in memory. The provided documents do not specify exploitation vectors, affected versions, root cause details, or remediations for this CVE.

CVE-2019-1345

Technical details (affected product/version/patch) for CVE-2019-1345 are not publicly provided in the connected documents. The initial text notes a Windows kernel information disclosure but lacks specific vendor/product/version or mitigation details; monitor for updates.

CVE-2019-1358

CVE-2019-1358 is a Windows Jet Database Engine Remote Code Execution vulnerability. The issue arises from improper handling of objects in memory within the JET Database Engine, enabling a remote attacker to potentially execute code. Connected Microsoft KB updates (e.g., KB4519990, KB4519998, KB45...

CVE-2019-1483

CVE-2019-1483 affects Windows AppX Deployment Server (AppXSVC) and arises from improper handling of junctions, enabling elevation of privilege once an attacker gains execution on the target. The related CVE-2019-1476 entry describes a similar issue where AppXSVC mishandles hard links, allowing an...

CVE-2020-0849

Technical details for CVE-2020-0849 are not publicly available in the provided documents. Monitor for updates.

CVE-2020-0911

CVE-2020-0911 describes an elevation-of-privilege vulnerability in Windows where the Windows Modules Installer improperly handles objects in memory. An attacker could exploit this by running a specially crafted application on a victim system to execute arbitrary code in an elevated context. The u...

CVE-2020-0960

CVE-2020-0960 is a Windows Jet Database Engine remote code execution vulnerability caused by improper handling of memory objects. The connected Microsoft KB4549951 entry confirms that a security update addressing the JET Database Engine was released (OS builds 18362.778/18363.778) and notes guida...

CVE-2020-0962

CVE-2020-0962 is a Windows win32k information-disclosure vulnerability. The connected sources describe an information-disclosure flaw in the win32k component that may reveal kernel information when a specially crafted application is run. The vulnerability affects the win32k kernel subsystem and i...

CVE-2020-1052

Technical details for CVE-2020-1052 (ssdpsrv.dll memory handling vulnerability) are not provided in the connected documents. Monitor for updates; no public exploit specifics, affected versions, root cause, or remediation details are given here.

CVE-2020-1117

CVE-2020-1117 affects the Color Management Module in Windows (ICM32.dll). FireEye’s analysis documents a heap-based overflow in icm32 occurring during InitNamedColorProfileData while parsing the ‘ncl2’ color-profile element, due to using an incorrect offset (0x51) for verification and advancing t...

CVE-2020-1160

CVE-2020-1160 refers to an information-disclosure vulnerability in the Microsoft Windows Graphics Component caused by improper handling of objects in memory. The CVSS data from NVD indicates a local attack vector with low attack complexity and no user interaction, yielding a base score of 2.1 (NV...

CVE-2020-1521

CVE-2020-1521 corresponds to an Elevation of Privilege in Windows Speech Runtime caused by improper memory handling. The initial and connected sources consistently state that an attacker must first gain execution on the target to run a crafted application and elevate privileges, with a security u...

CVE-2020-16998

Technical details about CVE-2020-16998 are not publicly provided in the supplied documents. Monitor for updates from official advisories to obtain affected products, root causes, and remediation guidance.

CVE-2020-17038

Technical details for CVE-2020-17038 are not publicly available in the provided documents. No affected products, root cause, or remediation information are included. Monitor for updates.

CVE-2020-17043

Technical details for CVE-2020-17043 are not provided in the supplied documents. Public information is limited to a general vulnerability description; no product/version/root-cause/exploit details are included. Monitor for updates from official advisories.

CVE-2020-17139

CVE-2020-17139 affects Windows file-system mini-filter drivers (notably the Windows Overlay Filter, WOF). The vulnerability arose from OS-added IO control/FSCTL handling changes (FSCTL_SET_REPARSE_POINT_EX) that WOF did not handle, enabling an application to attach or remove WOF IO tags and there...

CVE-2021-1664

Technical details about CVE-2021-1664 are not provided in the supplied documents. Public details exist (NVD/Microsoft) but this citation set lacks product/version/root cause/impact info beyond the generic RPC RCE description. Monitor for updates.

CVE-2021-26415

CVE-2021-26415 affects the Windows Installer component and is described as a Windows privilege-elevation vulnerability. The connected documents confirm a local, low-privilege escalation path with no user interaction required, leveraging improper handling in Windows Installer. The CVE is associate...

CVE-2021-31972

Technical details about CVE-2021-31972 are not publicly available in the provided connected documents. Monitor for updates from official sources for affected products, vulnerability scope, and fixes.

CVE-2021-43228

CVE-2021-43228 is a SymCrypt Denial of Service vulnerability with a CVSS v3.1 base score of 7.5 (HIGH), vector AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H. The issue is described in multiple sources as a Denial of Service vulnerability and is associated with Microsoft’s SymCrypt component. The connected ...