CVE-2023-35305

Technical details about CVE-2023-35305 are not publicly provided in the supplied documents. Monitor for updates from Microsoft and security bulletins for affected product/version, impact, and remediation.

CVE-2019-1433

Technical details about CVE-2019-1433 are not publicly available in the provided connected documents; monitor for updates.

CVE-2019-1438

Technical details for CVE-2019-1438 are not publicly available in the provided documents. No exposed affected products, root cause, impact, or remediation are disclosed here. Monitor official advisories and NVD for updates.

CVE-2019-1470

CVE-2019-1470 is described as an information-disclosure vulnerability in Windows Hyper-V where a host OS fails to properly validate input from an authenticated user on a guest OS. The linked Red Hat advisory repeats this description. The connected documents do not provide specific affected versio...

CVE-2020-0637

The connected records describe CVE-2020-0637 as an information-disclosure vulnerability in Microsoft Remote Desktop Web Access caused by improper handling of credential information. Affected component: Remote Desktop Web Access (Microsoft). Root cause: incorrect credential handling leading to dis...

CVE-2020-0708

CVE-2020-0708 is a Windows Imaging Library remote code execution vulnerability caused by improper memory handling. An attacker must coerce a victim to open a specially crafted file, leading to arbitrary code execution with the user’s privileges. Microsoft released a security update to fix the mem...

CVE-2020-0753

Technical details for CVE-2020-0753 are not provided in the connected documents. The Initial Description only notes an Elevation of Privilege in Windows Error Reporting. Monitor for updates from Microsoft/MSRC for full specifics (affected products, root cause, and remediation).

CVE-2020-0776

CVE-2020-0776 is a Windows elevation-of-privilege vulnerability in the Windows AppX Deployment Server. The root cause is the component’s improper handling of file operations, enabling a local attacker who already has execution on the victim machine to escalate privileges. The NVD entry describes ...

CVE-2020-0800

CVE-2020-0800 corresponds to a Windows Work Folder Service privilege escalation vulnerability. CNVD-2020-23447 describes improper handling of file operations in the Work Folder Service that can be exploited by a specially crafted application to run code with elevated privileges. The vulnerability...

CVE-2020-0803

Technical details for CVE-2020-0803 are not publicly provided in the connected documents; monitor for updates.

CVE-2020-0934

Technical details about CVE-2020-0934 are not publicly provided in the supplied documents. Monitor for updates from official advisories.

CVE-2020-0987

Technical details (affected product/version, root cause, impact, fixes) are not publicly available in the provided Connected Documents; cross‑references exist (CVE-2020-0982, CVE-2020-0987, CVE-2020-1005) but no specifics are given.

CVE-2020-1067

CVE-2020-1067 is a remote code execution vulnerability in Windows, caused by how the OS handles objects in memory. The NVD entry notes a network-based attack vector with low attack complexity and low privileges required, resulting in high impact to confidentiality, integrity, and availability (CV...

CVE-2020-1094

CVE-2020-1094 is an elevation of privilege vulnerability in the Windows Work Folder Service. The flaw arises from improper handling of file operations within the Work Folder Service, enabling a locally authenticated attacker to elevate privileges by running a crafted application. The vulnerabilit...

CVE-2020-1153

CVE-2020-1153 is a remote code execution vulnerability in the way Microsoft Graphics Components handles objects in memory. The connected MSKB entries reference Windows updates that include security fixes for the Microsoft Graphics Component as part of the May 2020 updates (e.g., KB4556799 and rel...

CVE-2020-1162

CVE-2020-1162 and CVE-2020-1324 are elevation-of-privilege flaws in Windows Security Health Service. They arise from how memory objects are handled, enabling local attackers who can log on to execute code with elevated privileges and potentially compromise memory, depending on the specific CVE. T...

CVE-2020-1174

Technical details about CVE-2020-1174/1175/1176 are not provided in the connected documents. Public details are not included in the supplied material. Monitor for updates from Microsoft and CVE feeds.

CVE-2020-1194

Technical details about CVE-2020-1194 are not publicly provided in the connected documents. The material confirms a Windows Registry DoS vulnerability but lacks product/version context or fixes. Monitor for official updates from Microsoft/NVD to obtain concrete details.

CVE-2020-1212

Technical details about CVE-2020-1212 are not publicly provided in the supplied connected documents; no vendor/product/impact specifics beyond the initial description are present. Monitor for updates.

CVE-2020-1232

CVE-2020-1232 is an information-disclosure vulnerability in Windows Media Foundation caused by improper handling of objects in memory. The core component is Windows Media Foundation; affected behavior is the disclosure of memory contents, as described in the CVE entry and corroborated by related ...

CVE-2020-1255

CVE-2020-1255 refers to an elevation of privilege vulnerability in the Windows Background Intelligent Transfer Service (BITS) IIS module. Connected data (CNVD-2021-27705) states the flaw arises from the module’s failure to properly handle uploads, enabling an attacker to exploit a specially craft...

CVE-2020-1354

CVE-2020-1354 affects the Windows UPnP Device Host; root cause is improper memory handling leading to Elevation of Privilege. Exploitation requires local execution on the victim system, with impact described as elevated privileges. This CVE is related to CVE-2020-1430 and appears in NVD and CVE r...

CVE-2020-1365

Technical details about CVE-2020-1365 are not publicly provided in the connected documents. The Windows Event Logging Service elevation-of-privilege vulnerability lacks product/version/impact/fix specifics here. Monitor sources for updates and confirmed technical details.

CVE-2020-1430

Technical details about CVE-2020-1430 are not publicly provided in the connected documents. Please monitor for official advisories or vendor advisories for affected products, exposure, and fixes.

CVE-2020-1491

Technical details about CVE-2020-1491 are not publicly provided in the supplied documents. Monitor for updates from official advisories.

CVE-2020-17000

CVE-2020-17000 is a Windows/Windows Server Remote Desktop Protocol (RDP) client information-disclosure vulnerability. The connected CNVD entry describes it as an information-disclosure flaw in the RDP client that can allow an attacker to read uninitialized memory contents. CVSSv3.1 indicates aLoc...

CVE-2020-17004

According to CNVD-2021-63301, CVE-2020-17004 is a Windows/Windows Server graphics component information-disclosure vulnerability. It allows an attacker to read kernel memory contents from a user-mode process. The affected product is Microsoft Windows/Windows Server; the exact root cause, vulnerab...

CVE-2020-17025

Technical details for CVE-2020-17025 are not provided in the supplied documents; affected products, impact, root cause, or remediation are not disclosed. Monitor for updates.

CVE-2020-17029

CVE-2020-17029 is a Windows Canonical Display Driver Information Disclosure Vulnerability. Affected software: Windows Canonical Display Driver. Root cause: information disclosure vulnerability within the Canonical Display driver. Impact: confidentiality impact HIGH (per CVSS 3.1), with local atta...

CVE-2020-17099

CVE-2020-17099 corresponds to a Windows lock-screen security feature bypass. The available data indicate a physical-access vulnerability affecting Windows lock screen functionality, with a CVSSv3.1 base score of 6.8 and impact on confidentiality, integrity, and availability (C:H/I:H/A:H) when exp...

CVE-2020-17162

Technical details about CVE-2020-17162 are not publicly provided in the connected documents; only a general description and CVSS metrics are present. Monitor official advisories for updates.

CVE-2021-1662

CVE-2021-1662 is a Windows Event Tracing Elevation of Privilege vulnerability (local, low complexity, high impact per CVSS 3.1). The available connected documents indicate Windows event tracing is the affected component and classify the issue as a local privilege escalation; no specific exploit d...

CVE-2021-1688

Technical details for CVE-2021-1688 are not publicly available in the provided connected documents. Monitor for updates from official advisories.

CVE-2021-24091

CVE-2021-24091 corresponds to a remote code execution in the Windows Camera Codec Pack. Connected CNVD data attributes the issue to the Windows camera codec package on Windows/Windows Server. The vulnerability is described as enabling remote code execution; no remediation details are provided in ...

CVE-2021-34509

Technical details about CVE-2021-34509 (Storage Spaces Controller Information Disclosure Vulnerability) are not publicly provided in the connected documents. Monitor for updates; current sources do not disclose affected products, root cause, impact, or fixes beyond general references.

CVE-2021-43232

CVE-2021-43232 corresponds to a Windows Event Tracing (ETW) remote code execution vulnerability. The CNVD entry explicitly identifies ETW as the affected component and states the vulnerability enables remote code execution on Windows. The CVE record itself notes Windows Event Tracing RCE with a m...

CVE-2021-43236

Technical details for CVE-2021-43236 are not publicly available in the provided documents. Monitor for updates from official advisories to confirm affected products, impact, and remediation.

CVE-2022-26795

CVE-2022-26795 is a Windows Print Spooler elevation-of-privilege vulnerability. The vulnerability is local, with low attack complexity and no user interaction required, and yields high impact to confidentiality, integrity, and availability per CVSS 3.1/3.1 metrics. The available connected sources...

CVE-2022-34728

CVE-2022-34728 is described as a Windows Graphics Component Information Disclosure Vulnerability. The provided metrics indicate a CVSSv3.1 base score of 5.5 (MEDIUM), with LOCAL attack vector, LOW attack complexity, LOW privileges required, and NONE user interaction. The confidentiality impact is...

CVE-2022-35753

Technical details (affected products/versions, impact, root cause, or fixes) for CVE-2022-35753 are not provided in the connected documents. Monitor official sources (MSRC/NVD) for concrete details and remediation guidance.

CVE-2022-35757

CVE-2022-35757 affects the Windows Cloud Files Mini Filter Driver and is rated HIGH with LOCAL attacker access, requiring LOW privileges and USER interaction to exploit. The issue is an elevation-of-privilege in the Mini Filter Driver, enabling a local attacker to gain higher privileges. Microsof...

CVE-2023-33155

CVE-2023-33155 is a local elevation-of-privilege vulnerability in the Windows Cloud Files Mini Filter Driver. The NVD entry lists a CVSS v3.1 base score of 7.8 (High) with Local attack vector, Low attack complexity, Privileges Required: Low, and no user interaction, affecting the Cloud Files Mini...

CVE-2023-35358

CVE-2023-35358 refers to a Windows kernel registry vulnerability where an unexpected -1 cell index was observed in KCB.KeyCell, indicating that the code assumed at least one key with an allocated node in the key node stack, but differed when using layered/differencing hives and transactions. The ...

CVE-2023-35638

CVE-2023-35638 is an identified Denial-of-Service vulnerability affecting the Windows DHCP Server component. The connected sources confirm it is a network-accessible issue with a CVSS v3.1 base score of 7.5 (HIGH), attack vector: NETWORK, attack complexity: LOW, privileges required: NONE, user in...

CVE-2024-30093

Technical details about CVE-2024-30093 are not provided in the supplied documents; no affected products, root cause, impact, or fixes are specified.

CVE-2024-37971

Technical details about CVE-2024-37971 are not publicly available in the provided connected documents. Monitor for updates from Microsoft and NVD for affected products, impact, and remediation; current sources do not specify affected components or fixes within this dataset.

CVE-2024-37984

Technical details for CVE-2024-37984 are not provided in the connected documents. No affected products, root cause, impact, or remediation are specified here. Monitor for updates from Microsoft and other sources for further information.

CVE-2024-38013

Technical details about CVE-2024-38013 are not disclosed in the provided connected documents. The CVE entry exists (Windows Server Backup elevation of privilege), but no affected product versions, root cause, exploitation, or remediation are described here. Monitor for updates.

CVE-2024-38061

Technical details for CVE-2024-38061 (affected products, root cause, impact, fixes) are not provided in the supplied documents. No remediation or exploitation specifics are available here. Monitor for updates.

CVE-2024-38236

Technical details about CVE-2024-38236 are not provided in the connected documents. Public details (affected product/version, exploit info, and fixes) are not available here; monitor for updates from official advisories.