CVE-2026-62792

Summary: CVE-2026-62792 is a stack-based buffer overflow in the Windows TCP/IP stack that enables a remote attacker to execute code over the network. The provided documents identify the affected component as Windows TCP/IP and confirm a RCE impact, with the exploit delivered remotely via network ...

CVE-2020-0858

CVE-2020-0858 is a Windows elevation-of-privilege vulnerability where the Public Account Pictures folder improperly handles junctions. The root cause is incorrect handling of junctions in that folder, enabling local attacker code execution with privileges as described in the CVE entry. Exploitati...

CVE-2020-0909

CVE-2020-0909 affects Microsoft Windows Hyper-V on Windows Server. The vulnerability arises when Hyper-V fails to properly handle specially crafted network packets, which could allow a denial-of-service condition. The connected documents confirm Hyper-V as the affected component and describe the ...

CVE-2020-0997

CVE-2020-0997 is a Windows Camera Codec Pack remote code execution vulnerability caused by improper handling of objects in memory. An attacker could execute arbitrary code in the context of the current user, potentially taking control if the user has admin rights. Exploitation requires the user t...

CVE-2020-1253

Technical details about CVE-2020-1253 are not provided in the connected documents. The initial entry notes an elevation of privileges in the Windows kernel-mode driver, but no specifics (versions, impact, or fixes) are included here.

CVE-2020-1314

CVE-2020-1314: A Windows TSF Elevation of Privilege vulnerability exists where the TSF server mishandles messages from TSF clients, enabling an attacker with a crafted TSF client to execute arbitrary code with local privileges by exploiting the TSF messaging flow. No patch details are provided in...

CVE-2020-1485

CVE-2020-1485 is a Windows Information Disclosure vulnerability in the Windows Image Acquisition (WIA) Service. It allows an authenticated, local attacker who can connect an imaging device (camera/scanner/phone) and run a crafted app to disclose memory contents from WIA, potentially exposing info...

CVE-2020-1598

Technical details for CVE-2020-1598 are not provided in the connected documents; the sources here pertain to other Microsoft advisories and general updates. Monitor for public disclosures or vendor mitigations to confirm affected products, root cause, and fixes.

CVE-2021-1642

CVE-2021-1642 affects Windows AppX Deployment Extensions and is described as an Elevation of Privilege vulnerability. CVSSv3.1 score 7.8 (HIGH) with local attack vector, low complexity, and privileges required LOW; impact to confidentiality, integrity, and availability is HIGH. Connected document...

CVE-2021-28442

Technical details about CVE-2021-28442 are not provided in the supplied documents. No specifics on affected products, root cause, or fixes are present. Monitor for updates.

CVE-2022-21998

CVE-2022-21998 affects the Windows Common Log File System Driver and is described as a local-information-disclosure vulnerability. The CVSS details indicate a Local attack vector, low attack complexity, no user interaction, and a confidentiality impact of High (C:H) with no integrity or availabil...

CVE-2022-35832

CVE-2022-35832 is documented as a Windows Event Tracing Denial of Service vulnerability. The connected sources provide no explicit product/version information or fix details; the NVD entry lists a CVSSv3.1 base score of 5.5 (Medium) with LOCAL attack vector, LOW privileges required, no user inter...

CVE-2022-37994

Technical details about CVE-2022-37994—including affected product versions, root cause, exploitability, and remediation—are not disclosed in the provided connected documents. No concrete exploit information or fix is described here. Monitor official MSRC/NVD advisories for updates.

CVE-2022-44679

CVE-2022-44679 is a Windows Graphics Component Information Disclosure vulnerability. Affected: Windows Graphics Component; root cause details are not provided in the supplied documents beyond the vulnerability type. CVSS 3.1 base score 6.5 (AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N); attack vector loca...

CVE-2023-21697

Technical details about CVE-2023-21697 are not publicly available in the provided documents. Monitor for updates from Microsoft/NVD and Vulners for affected products, exploit information, and remediation.

CVE-2023-21702

CVE-2023-21702 refers to a Windows iSCSI Service Denial of Service vulnerability. The initial description notes a HIGH (7.5) CVSS v3.1 impact with network attack vector and no user interaction, but the connected documents do not provide additional technical details, affected software versions, ro...

CVE-2023-21797

Technical details about CVE-2023-21797 are not publicly provided in the supplied documents; no affected product/version or exploit information is present here. Monitor for updates from official sources.

CVE-2023-24906

CVE-2023-24906 concerns a vulnerability in the Microsoft PostScript and PCL6 Class Printer Driver that can lead to information disclosure. The affected component is the PostScript and PCL6 Class Printer Driver; root cause and detailed technical steps are not elaborated in the provided documents b...

CVE-2023-35317

Technical details (affected component/version/root cause/exploit status) for CVE-2023-35317 are not provided in the supplied documents. Monitor for updates from official sources.

CVE-2023-35324

Technical details about CVE-2023-35324 are not publicly available in the provided documents; no affected products, root cause, or remediation are specified here. Monitor for updates.

CVE-2023-36871

Technical details for CVE-2023-36871 are not publicly available in the provided connected documents. No vendor/product/version specifics, exploit information, or remediation are included here. Monitor for updates from official sources.

CVE-2024-30005

CVE-2024-30005 relates to the Windows Mobile Broadband Driver remote code execution. Per NCSC, it is listed under Windows Mobile Broadband with a CVSS around 6.8/6.80 and impact described as executing random code. No root-cause or remediation details are provided in the available documents; monit...

CVE-2024-30034

CVE-2024-30034 affects Windows Cloud Files Mini Filter Driver and is an information disclosure vulnerability. CVSSv3.1 provides a base score of 5.5 (MEDIUM), attack vector LOCAL, attack complexity LOW, privileges required LOW, no user interaction, with confidentiality impact HIGH. Exploitation st...

CVE-2024-38043

Technical details for CVE-2024-38043 are not publicly provided in the supplied documents. No affected product/version or root cause is specified here. Monitor for updates from Microsoft and CVE repositories.

CVE-2024-38048

Technical details for CVE-2024-38048 are not publicly provided in the connected documents. Please monitor for updates; the supplied sources do not include affected products, root cause, impact, or remediation specifics.

CVE-2024-38085

Technical details about CVE-2024-38085 are not provided in the supplied documents; no affected products, root cause, or mitigations are disclosed here. Monitor for updates from Microsoft and related CVE references.

CVE-2024-43628

According to the NCSC advisory, CVE-2024-43628 is a Windows Telephony Service Remote Code Execution vulnerability with a CVSS v3.1 base score of 8.8 (HIGH) and an impact described as Execute random code. The vulnerability is listed under Windows Telephony Service with a remediation path through M...

CVE-2024-49079

Technical details for CVE-2024-49079 are not provided in the supplied documents. Monitor for updates from Microsoft, NVD, CVE List, and other official sources as disclosures evolve.

CVE-2025-21200

CVE-2025-21200 is listed by ENISA/NCSC as a vulnerability affecting the Windows Telephony Service with high impact and the ability to execute arbitrary code. The linked material specifies a CVSSv3.1 base score of 8.8 (Network attack, No user privileges, User interaction required; High confidentia...

CVE-2025-21269

CVE-2025-21269 is described as a Windows HTML Platforms Security Feature Bypass vulnerability. Connected CNVD/NCSC/KB entries reference a Windows HTML Platforms security feature bypass without detailed exploit steps; the Initial metrics show CVSS 3.1 (4.3, Network, UI: Required). Exploitation spe...

CVE-2025-24995

CVE-2025-24995 is a heap-based buffer overflow in the Kernel Streaming WOW Thunk Service Driver that allows a locally authorized attacker to elevate privileges. The NVD entry confirms the vulnerable component and impact (local privilege elevation; high severity). Public references point to Micros...

CVE-2026-40415

Technical details (affected product, component, root cause, impact, remediation) are not publicly available in the provided documents. Monitor for updates from official advisories.

CVE-2018-8592

CVE-2018-8592 is an elevation-of-privilege vulnerability in Windows 10 version 1809 (and Windows Server 2019) that can be triggered when the OS is installed from physical media (USB/DVD) with the “keep nothing” option selected. Successful exploitation could grant local, elevated access to an atta...

CVE-2019-0733

Technical details for CVE-2019-0733 are not publicly provided in the connected documents; the initial description is generic. Monitor official advisories for updates and specifics.

CVE-2019-0734

CVE-2019-0734 is a Windows elevation-of-privilege issue where a man-in-the-middle can decode and replace Kerberos authentication requests, enabling an attacker to be validated as Administrator. Affected: Microsoft Windows Kerberos authentication flow. Impact as documented: high severity with pote...

CVE-2019-1179

CVE-2019-1179 describes an elevation-of-privilege flaw in how unistore.dll handles objects in memory. A locally authenticated attacker could execute code with elevated permissions by running a crafted application. The vulnerability is addressed by a security update that ensures unistore.dll prope...

CVE-2019-1411

CVE-2019-1411 is a DirectWrite information disclosure vulnerability. The issue arises when DirectWrite improperly discloses memory contents. The CVSS v3.1 vector indicates NETWORK attack, LOW complexity, no privileges required, UI interaction is REQUIRED, with a HIGH impact on confidentiality and...

CVE-2019-1488

Technical details about CVE-2019-1488 are not available in the provided documents. Monitor for updates from ENISA/RH and OpenVAS references for any concrete exposures or fixes.

CVE-2020-0614

Technical details about CVE-2020-0614 are not provided in the connected documents; no specifics on affected products, root cause, or remediation are available here. Monitor for updates.

CVE-2020-0617

CVE-2020-0617 relates to a Microsoft Hyper-V Denial of Service vulnerability. The CNVD entry describes that the vulnerability stems from Hyper-V Virtual PCI on the host failing to properly validate input submitted by privileged users from a guest OS, allowing an attacker with privileged access an...

CVE-2020-0621

CVE-2020-0621 is a Windows 10 security feature bypass vulnerability where third‑party filters invoked during a password update can bypass protections. Affected product: Windows 10 (password update path with third‑party filters). Root cause: bypass of security feature during password change, enabl...

CVE-2020-0737

CVE-2020-0737 is a Windows elevation-of-privilege vulnerability tied to how tapisrv.dll handles in-memory objects. The root cause is memory-objects handling in this DLL, enabling an attacker who can supply or manipulate objects to execute code with elevated privileges on affected Windows systems....

CVE-2020-0865

CVE-2020-0865 is a Windows Work Folder Service elevation-of-privilege vulnerability. CNVD-2020-23447 describes a privilege-mobilization flaw where the service’s mis-handling of file operations allows an attacker with a specially crafted application to execute processes with elevated privileges on...

CVE-2020-0881

CVE-2020-0883 is a remote code execution vulnerability in Windows GDI (GDI+), caused by improper handling of memory objects. The CVE is documented as distinct from CVE-2020-0881. A working exploit PoC for CVE-2020-0883 exists in public GitHub material, indicating practical exploitability. Several...

CVE-2020-0982

CVE-2020-0982 is an information disclosure vulnerability in Microsoft Windows Graphics Component. Affected: Windows Graphics Component; root cause: improper handling of in-memory objects. Impact per sources: potential disclosure of information. The connected documents also list related CVEs (CVE-...

CVE-2020-1091

Technical details about CVE-2020-1091 are not provided in the supplied documents. Monitor for updates from Microsoft and vulnerability databases for affected products, root cause, and fixes.

CVE-2020-1176

The CVE-2020-1176 entry concerns a remote code execution in the Windows Jet Database Engine caused by improper handling of objects in memory. The connected document indicates that the Jet Database Engine is referenced within a May 2020 Windows security update (KB4556799) affecting OS builds 18362...

CVE-2020-1235

Technical details for CVE-2020-1235 are not publicly available in the provided documents. Monitoring for updates is recommended.

CVE-2020-1333

CVE-2020-1333 is an elevation of privilege vulnerability in Microsoft Windows and Windows Server caused by Group Policy Services Policy Processing failing to properly handle reparse points. The CNVD-2020-52916 entry confirms the root cause as the policy processing re-resolution issue and lists Wi...

CVE-2020-1412

CNVD-2021-67490 identifies a Microsoft Windows/Windows Server remote code execution vulnerability stemming from how Graphics Components handles in-memory objects. Affected product scope is Windows/Windows Server with Graphics Components implicated; root cause is in-memory object handling in Graph...