CVE-2023-33167

Technical details about CVE-2023-33167 are not publicly provided in the supplied documents. No explicit affected products, root cause, or fixes are described here. Monitor for updates.

CVE-2023-35308

Technical details for CVE-2023-35308 are not publicly available in the provided documents. Monitor for updates from official sources to learn affected products, impact, and mitigations.

CVE-2023-35345

Technical details (affected component, root cause, CVSS, exploit status) are not publicly available in the provided documents. Monitor for updates from official advisories.

CVE-2023-35361

CVE-2023-35361 is a Windows Kernel Elevation of Privilege vulnerability. The provided documents identify the flaw as a local-privilege escalation with high impact (confidentiality, integrity, and availability) but do not supply concrete technical details, affected versions, root cause specifics, ...

CVE-2024-37971

Technical details about CVE-2024-37971 are not publicly available in the provided connected documents. Monitor for updates from Microsoft and NVD for affected products, impact, and remediation; current sources do not specify affected components or fixes within this dataset.

CVE-2024-38013

Technical details about CVE-2024-38013 are not disclosed in the provided connected documents. The CVE entry exists (Windows Server Backup elevation of privilege), but no affected product versions, root cause, exploitation, or remediation are described here. Monitor for updates.

CVE-2024-38019

Technical details about CVE-2024-38019 are not provided in the supplied documents. Public sources in Connected documents do not specify affected products, root cause, exploit status or remediation. Monitor for official advisories and Microsoft update notes for confirmation.

CVE-2024-38061

Technical details for CVE-2024-38061 (affected products, root cause, impact, fixes) are not provided in the supplied documents. No remediation or exploitation specifics are available here. Monitor for updates.

CVE-2024-38064

Technical details for CVE-2024-38064 are not provided in the supplied documents. Public details (affected product/impact) are not disclosed here. Monitor for updates from vendors and vulnerability feeds to obtain concrete root cause, affected components, and fixes.

CVE-2024-43556

CVE-2024-43556 is a Windows Graphics Component elevation-of-privilege vulnerability. Public sources confirm it affects the Windows Graphics Component and can yield elevated privileges (base CVSS v3.1 7.8). The issue is listed as a local, privilege-escalation risk; exploitation details are not pro...

CVE-2024-43589

Technical details about CVE-2024-43589 (affected RRAS, root cause, impact, fixes) are not publicly provided in the connected documents. Monitor for updates from Microsoft and CVE registries.

CVE-2025-21231

CVE-2025-21231 documents describe a Denial-of-Service vulnerability in the Windows IP Helper component. The CVE entry lists a network-based attack vector with low attack complexity and no privileges required, resulting in availability impact. Connected records corroborate IP Helper as the affecte...

CVE-2025-21237

CVE-2025-21237 is a Windows Telephony Service Remote Code Execution vulnerability. Exploitation could allow remote code execution via the Telephony Service; CVSS v3.1 base score 8.8 (HIGH) with network access, user interaction required. Affected products are Windows components where Telephony Ser...

CVE-2026-25187

CVE-2026-25187 is a Winlogon elevation-of-privilege vulnerability described as improper link resolution before file access (link following). It is a local vulnerability in Windows Winlogon that could allow an authorized attacker to elevate privileges to SYSTEM with no user interaction required. T...

CVE-2026-54128

CVE-2026-54128 is a Windows DHCP Client use-after-free vulnerability that could allow an unauthenticated local attacker to execute code. The issue, described in the NVD entry and echoed by TALOS, affects the Windows DHCP Client component and is known to have been exploited in the wild (per CIRCL ...

CVE-2019-0865

Technical details about CVE-2019-0865 are not present in the provided connected documents. The supplied materials are unrelated MSKB entries and a generic CVE description. Monitor for updates.

CVE-2019-0998

CVE-2019-0998 affects Windows Storage Service, where improper handling of file operations allows an attacker who can execute code on a victim system to obtain elevated privileges. The root cause is an elevation-of-privilege flaw in the Storage Service’s file operation handling. Exploitation requi...

CVE-2019-1175

CVE-2019-1175 is a Windows elevation-of-privilege vulnerability linked to psmsrv.dll handling of in-memory objects. A locally authenticated attacker could run a crafted application to execute code with elevated permissions. Microsoft security guidance notes the fix involves ensuring psmsrv.dll pr...

CVE-2019-1188

CVE-2019-1188 is a remote code execution vulnerability in Microsoft Windows involving processing of .LNK shortcut references. An attacker could trick a user into opening a removable drive or remote share containing a malicious .LNK file and an associated binary; when the user opens the drive or p...

CVE-2019-1382

CVE-2019-1382 affects Microsoft Windows ActiveX Installer Service (AxInstSV). The root cause is an elevation of privilege where the service may access files without proper authentication, enabling local privilege escalation. Documented impact is local access with elevated privileges; no exploit d...

CVE-2019-1433

Technical details about CVE-2019-1433 are not publicly available in the provided connected documents; monitor for updates.

CVE-2019-1438

Technical details for CVE-2019-1438 are not publicly available in the provided documents. No exposed affected products, root cause, impact, or remediation are disclosed here. Monitor official advisories and NVD for updates.

CVE-2020-0841

Technical details for CVE-2020-0841 are not publicly provided in the supplied documents; no affected products, root cause, or remediation are disclosed here. Monitor for updates.

CVE-2020-0859

CVE-2020-0859 is described as an information disclosure vulnerability in Windows Modules Installer Service where file information could be disclosed. The primary details available: affected component is Windows Modules Installer Service; root cause and exact exploitation path are not elaborated i...

CVE-2020-0950

CVE-2020-0950 is described as a memory corruption vulnerability in Windows Media Foundation caused by improper handling of memory objects, part of the Media Foundation Memory Corruption family alongside CVE-2020-0948 and CVE-2020-0949. The connected CNVD entries similarly refer to a Media Foundat...

CVE-2020-0988

CVE-2020-0988 describes a remote code execution flaw in Microsoft Windows Jet Database Engine caused by improper handling of memory objects. The connected KB4549951 document indicates a security update addressing Jet DB Engine issues as part of Windows 10 OS builds 18362.778 and 18363.778 (securi...

CVE-2020-0995

CVE-2020-0995 represents a Remote Code Execution vulnerability in Microsoft Windows Jet Database Engine. Connected sources describe the issue as stemming from improper handling of memory objects within the Jet Database Engine, enabling an attacker to execute arbitrary code on a target system, typ...

CVE-2020-1094

CVE-2020-1094 is an elevation of privilege vulnerability in the Windows Work Folder Service. The flaw arises from improper handling of file operations within the Work Folder Service, enabling a locally authenticated attacker to elevate privileges by running a crafted application. The vulnerabilit...

CVE-2020-1153

CVE-2020-1153 is a remote code execution vulnerability in the way Microsoft Graphics Components handles objects in memory. The connected MSKB entries reference Windows updates that include security fixes for the Microsoft Graphics Component as part of the May 2020 updates (e.g., KB4556799 and rel...

CVE-2020-1155

IBM MaaS360 Cloud Extender has CVE-2020-1155 and CVE-2020-1156. The IBM security bulletin notes the affected product is IBM MaaS360 Cloud Extender (2.101.x and earlier) and provides a remediation: upgrade to version 2.102.000.060 or newer. No other technical details (e.g., root cause, exploitabil...

CVE-2020-1236

CVE-2020-1236 is a remote code execution vulnerability in the Windows Jet Database Engine caused by improper handling of in-memory objects. The Jet DB Engine (Jet Database Engine/RCE) is listed among CVEs tied to Microsoft Jet components in OpenVAS entries, and is explicitly referenced in the lin...

CVE-2020-1278

CVE-2020-1278 relates to an elevation of privilege in the Diagnostics Hub Standard Collector Service due to improper file operations. The vulnerability enables local privilege elevation, as the service handles files in a way that can be exploited by an authenticated attacker with access to the sy...

CVE-2020-1302

Technical details for CVE-2020-1302 are not publicly available in the provided documents. Monitor for updates.

CVE-2020-1428

Technical details about CVE-2020-1428 are not publicly provided in the connected documents you supplied. Please monitor for updates from official advisories.

CVE-2020-17000

CVE-2020-17000 is a Windows/Windows Server Remote Desktop Protocol (RDP) client information-disclosure vulnerability. The connected CNVD entry describes it as an information-disclosure flaw in the RDP client that can allow an attacker to read uninitialized memory contents. CVSSv3.1 indicates aLoc...

CVE-2020-17068

Technical details for CVE-2020-17068 are not publicly provided in the connected documents. No confirmed affected products, root cause, or fixes are present here. Monitor for updates from authoritative sources.

CVE-2020-17099

CVE-2020-17099 corresponds to a Windows lock-screen security feature bypass. The available data indicate a physical-access vulnerability affecting Windows lock screen functionality, with a CVSSv3.1 base score of 6.8 and impact on confidentiality, integrity, and availability (C:H/I:H/A:H) when exp...

CVE-2021-1652

Technical details for CVE-2021-1652 are not publicly provided in the connected documents. No affected product/version or exploit information is disclosed here. Monitor for updates.

CVE-2021-1661

Technical details for CVE-2021-1661 are not publicly available in the provided documents. Monitor for updates to confirm affected products, root cause, impact, and remediation.

CVE-2021-1684

Technical details for CVE-2021-1684 are not provided in the connected documents. The Initial Description mentions a Passkey Entry Protocol impersonation and a Microsoft update that may fail pairing when public keys share the same X coordinate.

CVE-2021-28316

CVE-2021-28316 affects Windows WLAN AutoConfig, enabling a security feature bypass in that service. Reports indicate it is a local-attack surface with no public exploitation to date, and Microsoft released fixes as part of the September 2021 Patch Tuesday. The vulnerability’s impact is described ...

CVE-2021-28446

CVE-2021-28446 is a Windows Portmapping Information Disclosure Vulnerability with local attack vector. NVD data shows Confidentiality Impact HIGH (I) and no Integrity/Availability impact, base score 5.5 (3.1) / 2.1 (2.0) and a higher CNA score 7.1 (HIGH). Exploitation status is listed as null in ...

CVE-2021-43234

CVE-2021-43234 is a Windows Fax Service Remote Code Execution Vulnerability. Connected CNVD entry explicitly states a remote code execution vulnerability exists in Microsoft Windows Fax Service, enabling an attacker to run arbitrary code on the target host. NVD entries corroborate the CVE and ass...

CVE-2021-43248

Technical details for CVE-2021-43248 are not publicly available in the provided documents; monitor for updates.

CVE-2022-26795

CVE-2022-26795 is a Windows Print Spooler elevation-of-privilege vulnerability. The vulnerability is local, with low attack complexity and no user interaction required, and yields high impact to confidentiality, integrity, and availability per CVSS 3.1/3.1 metrics. The available connected sources...

CVE-2022-26821

Technical details about CVE-2022-26821 are not publicly provided in the supplied documents. Monitor for updates from official advisories and referenced sources.

CVE-2022-35760

Technical details about CVE-2022-35760 (affected product, root cause, impact or fix) are not provided in the connected documents. Please monitor for updates from official sources.

CVE-2022-37983

CVE-2022-37983 affects the Windows DWM Core Library. The vulnerability is an elevation of privilege that arises from improper privilege assignment in the DWM Core Library, enabling a local attacker with low privileges to gain higher privileges (high impact on confidentiality, integrity, and avail...

CVE-2023-35350

Technical details for CVE-2023-35350 are not publicly available in the provided documents. Affected product/impact/root cause are not disclosed here. Monitor for updates and official advisories.

CVE-2023-35358

CVE-2023-35358 refers to a Windows kernel registry vulnerability where an unexpected -1 cell index was observed in KCB.KeyCell, indicating that the code assumed at least one key with an allocated node in the key node stack, but differed when using layered/differencing hives and transactions. The ...