CVE-2019-1247

Technical details about CVE-2019-1247 are not publicly provided in the supplied documents. The materials reference the Jet Database Engine RCE generally but do not specify affected products, versions, impact, or fixes. Monitor for updates.

CVE-2020-1176

The CVE-2020-1176 entry concerns a remote code execution in the Windows Jet Database Engine caused by improper handling of objects in memory. The connected document indicates that the Jet Database Engine is referenced within a May 2020 Windows security update (KB4556799) affecting OS builds 18362...

CVE-2020-1235

Technical details for CVE-2020-1235 are not publicly available in the provided documents. Monitoring for updates is recommended.

CVE-2020-1333

CVE-2020-1333 is an elevation of privilege vulnerability in Microsoft Windows and Windows Server caused by Group Policy Services Policy Processing failing to properly handle reparse points. The CNVD-2020-52916 entry confirms the root cause as the policy processing re-resolution issue and lists Wi...

CVE-2020-1412

CNVD-2021-67490 identifies a Microsoft Windows/Windows Server remote code execution vulnerability stemming from how Graphics Components handles in-memory objects. Affected product scope is Windows/Windows Server with Graphics Components implicated; root cause is in-memory object handling in Graph...

CVE-2020-1556

CVE-2020-1556 affects Windows WalletService. It is an Elevation of Privilege vulnerability arising from how WalletService handles objects in memory, enabling a locally authenticated attacker to run a crafted application and execute code with elevated permissions. Exploitation requires local acces...

CVE-2020-17011

CVE-2020-17011 is a Windows Port Class Library elevation of privilege vulnerability. The NVD entry lists a local, low-complexity vector with no authentication required and a high impact on confidentiality, integrity, and availability (CVSS v3.1 base score 7.8). Connected documents identify the is...

CVE-2020-17036

CVE-2020-17036 corresponds to a Windows Function Discovery SSDP Provider Information Disclosure Vulnerability. The vulnerability affects Windows Function Discovery SSDP Provider and is described as an information disclosure issue. The provided documents do not include concrete technical details s...

CVE-2021-1685

CVE-2021-1685 is a Windows AppX Deployment Extensions Elevation of Privilege vulnerability. Affected component: Windows AppX Deployment Extensions. Exploitation is local with low attack complexity; privileges required are LOW and user interaction is not required per CVSS details, leading to parti...

CVE-2021-1710

Technical details for CVE-2021-1710 are not provided in the connected documents. The initial description only notes a Windows Media Foundation remote code execution vulnerability; no affected products, root cause, or remediation details are given here.

CVE-2021-28309

Technical details for CVE-2021-28309 (Windows Kernel Information Disclosure Vulnerability) are not publicly provided in the supplied documents. No affected products, versions, root cause, impact, or remediations are disclosed here. Monitor sources for updates.

CVE-2021-43223

CVE-2021-43223 affects the Windows Remote Access Connection Manager and is described as an Elevation of Privilege vulnerability. The NVD entry provides CVSS v3.1 details: AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H with a base score of 7.8 (HIGH). The vector indicates a local attacker with low privileges...

CVE-2021-43233

CVE-2021-43233 is a Windows Remote Desktop Client remote code execution vulnerability. Public data (NVD) rates it as CVSS v3.1 7.5 (HIGH) with NETWORK access, high attack complexity, and no privileges required, but user interaction is required. A connected document notes an additional assessment:...

CVE-2022-26797

Technical details about CVE-2022-26797 are not publicly available in the provided connected documents. Monitor for updates from official sources to obtain affected products, root cause, impact, and remediation.

CVE-2022-26820

Technical details about CVE-2022-26820 are not publicly available in the provided documents. Monitor for updates.

CVE-2022-35795

Technical details for CVE-2022-35795 are not provided in the connected documents; the materials here do not reveal affected products, root cause, or remediation. Monitor for updates from official sources.

CVE-2023-33166

No public technical details for CVE-2023-33166 are provided in the connected documents. The initial description offers a generic RPC DoS label; monitor for updates for any affected products, versions, or fixes.

CVE-2023-35318

Technical details about CVE-2023-35318 are not provided in the supplied documents; no affected products, root cause, or remediation are disclosed here. Monitor for updates.

CVE-2023-35319

CVE-2023-35319 is a Remote Procedure Call (RPC) Runtime Denial of Service vulnerability. The NVD entry lists a network attack vector with low attack complexity, requiring low privileges and no user interaction, leading to an availability impact (C:A) of High and no confidentiality or integrity im...

CVE-2023-35320

CVE-2023-35320 corresponds to a Windows vulnerability described as an elevation of privilege in Connected User Experiences and Telemetry. Connected documents provide a high‑level reference and list this CVE among Windows vulnerabilities, noting an elevation of privilege with vague, non‑specific d...

CVE-2023-35357

CVE-2023-35357 is a Windows Kernel local privilege escalation stemming from registry hive memory corruption. The material shows how an attacker can leverage an out-of-bounds hive cell index to manipulate the CMHIVE/HHIVE, potentially reading/writing kernel memory via hacks like the registry value...

CVE-2024-30062

CVE-2024-30062 affects Windows Standards-Based Storage Management Service. The connected data documents confirm a local, user-interaction–required remote code execution vulnerability in Windows Storage components, with CVSSv3.1: AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H (base 7.8). The issue is tied to...

CVE-2024-38053

Technical details for CVE-2024-38053 are not provided in the supplied documents; no affected products, root cause, impact, or remediation are specified here. Monitor for updates.

CVE-2024-38143

CVE-2024-38143 is a Windows WLAN AutoConfig Service elevation of privilege vulnerability. The CVSS 3.1 vector indicates an attacker must have physical access (AV:P) and exploit with high complexity, no user interaction, and local access (PR:N, UI:N). The vulnerability could yield elevated privile...

CVE-2024-49104

The connected NCSC advisory (EUVD/NCSC) lists CVE-2024-49104 under Windows Routing and Remote Access Service (RRAS) with a high impact: Execution of arbitrary code (CVSS 8.80). The RRAS entry is described as vulnerable to arbitrary code execution, but the document does not provide root cause spec...

CVE-2025-21247

CVE-2025-21247 is a MapUrlToZone security bypass in Windows. Description: Improper resolution of path equivalence allows a network attacker to bypass a security feature. CVSS: 3.1, Network attack, Low complexity, No privileges required, User interaction required, Confidentiality impact Low; Integ...

CVE-2025-21280

CVE-2025-21280 is a Windows Virtual Trusted Platform Module Denial of Service vulnerability. Connected documents identify the affected component as the Windows Virtual TPM and note an impact on availability. The NCSC advisory lists a CVSS v3.1 base score of 5.5 (LOCAL attack, LOW privileges requi...

CVE-2025-21319

CVE-2025-21319 is a Windows kernel memory information disclosure vulnerability. The issue is tracked in multiple vulnerabilities and discussed by Microsoft, with a CVSSv3.1 base score of 5.5 (Local attack, Low attack complexity, Low privileges required, no user interaction, High confidentiality i...

CVE-2025-26670

CVE-2025-26670 is a Windows LDAP use-after-free vulnerability that enables remote code execution over the network. The available connected sources confirm the issue affects Windows LDAP and describe the underlying cause as a use-after-free condition, with the impact explicitly stated as remote co...

CVE-2025-26674

CVE-2025-26674 is a Windows Media heap-based buffer overflow vulnerability that could allow an authorized, locally present attacker to execute code on the system. The CVE has a base score of 7.8 ( HIGH ) and is addressed by Microsoft security updates (e.g., KBs from the April 2025 cycle). See Mic...

CVE-2025-26677

CVE-2025-26677 affects Windows Remote Desktop Gateway Service and involves uncontrolled resource consumption leading to a denial of service. The provided documents do not include exploit details or exact root-cause; they indicate that Microsoft released May 2025 security updates addressing vulner...

CVE-2025-32725

CVE-2025-32725 is a Windows DHCP Server vulnerability described as a protection‑mechanism failure that allows an attacker to cause a network DoS. Connected sources confirm this CVE is associated with the DHCP Server and note that remediation involves applying June 2025 Windows security updates (e...

CVE-2019-0811

Technical details about CVE-2019-0811 (affected products, root cause, impact, fixes) are not provided in the connected documents. Please monitor for updates.

CVE-2019-1074

CVE-2019-1074 is a Windows elevation-of-privilege vulnerability involving symbolic link handling in folders with local service privileges. The available description states that exploitation could grant access to unauthorized information, and that the fix is to prevent symbolic links in these scen...

CVE-2019-1267

CVE-2019-1267 describes an elevation of privilege in Microsoft Compatibility Appraiser. A local attacker can exploit a vulnerable configuration file through symbolic/link attacks to gain higher privileges. Documented impact is elevation of privilege with local access required; CVSS scores indicat...

CVE-2020-0637

The connected records describe CVE-2020-0637 as an information-disclosure vulnerability in Microsoft Remote Desktop Web Access caused by improper handling of credential information. Affected component: Remote Desktop Web Access (Microsoft). Root cause: incorrect credential handling leading to dis...

CVE-2020-0779

CVE-2020-0779 is described as an elevation of privilege vulnerability in Windows Installer, arising when MSI packages process symbolic links. The affected component is Windows Installer (MSI) handling of symbolic links, enabling a local attacker to escalate privileges by bypassing access restrict...

CVE-2020-0803

Technical details for CVE-2020-0803 are not publicly provided in the connected documents; monitor for updates.

CVE-2020-0838

CVE-2020-0838 describes an elevation-of-privilege vulnerability in Windows NTFS where access checks are insufficiently performed. An attacker who can log on locally and run a specially crafted application could execute code in an elevated context, potentially gaining full control of the affected ...

CVE-2020-0994

The CVE-2020-0994 entry describes a Remote Code Execution in the Windows Jet Database Engine caused by improper handling of in-memory objects. Connected documents corroborate a Jet Database Engine memory-corruption vulnerability that could allow arbitrary code execution when a user opens a crafte...

CVE-2020-1162

CVE-2020-1162 and CVE-2020-1324 are elevation-of-privilege flaws in Windows Security Health Service. They arise from how memory objects are handled, enabling local attackers who can log on to execute code with elevated privileges and potentially compromise memory, depending on the specific CVE. T...

CVE-2020-1185

Technical details about CVE-2020-1185 are not publicly available in the provided EUVD documents; monitor for updates.

CVE-2020-1196

CVE-2020-1196 is described as an elevation of privilege vulnerability in Windows Print Configuration, caused by how printconfig.dll handles objects in memory. The CVE entry notes local access is required with low attack complexity, and the impact is high on confidentiality, integrity, and availab...

CVE-2020-1256

Technical details, affected components, and fixes for CVE-2020-1256 are not provided in the connected documents. Public details unavailable here; monitor the Security Update Guide and KB notes for updates.

CVE-2020-1282

Technical details for CVE-2020-1282 are not provided in the connected documents. Based on the initial entry, no explicit exploit vectors, impacted products, or remediation are disclosed here; monitor for official updates.

CVE-2020-1334

Technical details about CVE-2020-1334 are not publicly provided in the supplied documents. Monitor for updates from official advisories and connected sources.

CVE-2021-1694

Technical details about CVE-2021-1694 are not publicly provided in the supplied documents. Monitor for updates from vendor advisories or standard CVE databases.

CVE-2021-1696

CVE-2021-1696 is a Windows Graphics Component Information Disclosure Vulnerability. The initial entry provides the vulnerability type but no detailed product/version/affected component beyond that. Connected sources (OpenVAS entries and a Xerox advisory) reference CVE-2021-1696 among broader Wind...

CVE-2021-24081

CVE-2021-24081 is described in the provided documents as a Microsoft Windows Codecs Library Remote Code Execution vulnerability. The OSV entry reiterates the label but does not specify affected versions, root cause details, or a patch. CVSSv3.1 metrics shown indicate a HIGH base score (7.8) with ...

CVE-2021-27086

CVE-2021-27086 concerns a local-elevation-of-privilege in Windows where the Windows Services and Controller App is the affected component. The CVE’s base metrics indicate a local, low-attack-complexity path with high-impact (confidentiality, integrity, and availability) if exploited, with no user...