CVE-2026-21530

CVE-2026-21530 : A double-free vulnerability in Windows Rich Text Edit is described as enabling an authorized attacker to perform local privilege escalation. The connected documents confirm the affected component and the local-privilege-elevation impact but do not provide exploit details, specifi...

CVE-2019-1175

CVE-2019-1175 is a Windows elevation-of-privilege vulnerability linked to psmsrv.dll handling of in-memory objects. A locally authenticated attacker could run a crafted application to execute code with elevated permissions. Microsoft security guidance notes the fix involves ensuring psmsrv.dll pr...

CVE-2019-1230

The CVE-2019-1230 entry describes an information-disclosure vulnerability in Microsoft Windows Hyper-V, where the Hyper-V Network Switch fails to properly validate input from an authenticated user on a guest OS. The root cause is a flawed input-validation path within the Hyper-V network switch, e...

CVE-2019-1286

CVE-2019-1286 concerns a Windows GDI information disclosure vulnerability. The connected materials describe an information disclosure in the Graphics Device Interface (GDI) where memory contents may be improperly disclosed. The vulnerability is tied to the GDI component and memory handling. The s...

CVE-2019-1394

Technical details about CVE-2019-1394 are not provided in the connected documents. Monitor for updates from official advisories; the supplied EUVD entries relate to unrelated malware listings and do not illuminate this CVE.

CVE-2020-0628

Technical details for CVE-2020-0628 are not publicly available in the provided documents. Monitor for updates.

CVE-2020-0841

Technical details for CVE-2020-0841 are not publicly provided in the supplied documents; no affected products, root cause, or remediation are disclosed here. Monitor for updates.

CVE-2020-0842

CVE-2020-0842 is a Windows Installer elevation-of-privilege vulnerability. It arises from how Windows Installer handles certain filesystem operations, enabling an unprivileged attacker to execute code on the victim system with local access. The entry is part of a set of CVEs linked to Windows Ins...

CVE-2020-1021

Technical details for CVE-2020-1021 are not publicly available in the provided documents; no affected products, root cause, impact, or fixes are specified here. Monitor for updates.

CVE-2020-1067

CVE-2020-1067 is a remote code execution vulnerability in Windows, caused by how the OS handles objects in memory. The NVD entry notes a network-based attack vector with low attack complexity and low privileges required, resulting in high impact to confidentiality, integrity, and availability (CV...

CVE-2020-1348

CVE-2020-1348 is a Microsoft Windows GDI Information Disclosure vulnerability. According to the initial description, it arises from the GDI component improperly disclosing memory contents, enabling information disclosure with partial confidentiality impact (CVSSv3 base score 6.5). OpenVAS-derived...

CVE-2020-1407

Technical details for CVE-2020-1407 are not provided in the supplied documents. The description mentions the Jet Database Engine RCE but no affected product/version specifics or remediation are included here. Monitor for updates.

CVE-2020-1422

Technical details about CVE-2020-1422 are not publicly provided in the supplied connected documents. Monitor for updates from authoritative sources to obtain affected products, impact, and remediation.

CVE-2020-17027

Technical details about CVE-2020-17027 are not present in the provided documents; no specific affected products, root cause, impact, or remediation are disclosed. Monitor for updates.

CVE-2020-17041

CVE-2020-17041 technical details are not publicly available in the provided documents. Monitor for updates.

CVE-2020-17068

Technical details for CVE-2020-17068 are not publicly provided in the connected documents. No confirmed affected products, root cause, or fixes are present here. Monitor for updates from authoritative sources.

CVE-2021-1672

CVE-2021-1672 refers to a Windows vulnerability in the Projected File System (PFS) FS Filter Driver that enables information disclosure. The connected MSRC entry and NVD record confirm the affected component is the Windows PFS FS Filter Driver, with root cause described as an information disclosu...

CVE-2021-1708

Technical details for CVE-2021-1708 are not provided in the supplied documents. Monitor for updates; no affected products, impact, or remediation details can be confirmed from the available sources.

CVE-2021-1734

CVE-2021-1734 is described as a Windows Remote Procedure Call Information Disclosure vulnerability. The provided metrics show CVSS v3.1 base score 7.5 (HIGH) with a network attack vector, low attack complexity, no privileges required, no user interaction, and an impact of high confidentiality los...

CVE-2021-28314

Technical details such as affected products, vulnerable components, exploit method, affected versions, and remediation specifics for CVE-2021-28314 are not provided in the connected documents; monitor for updates.

CVE-2021-28328

Technical details for CVE-2021-28328 are not publicly available in the provided documents. No affected products, root cause, impact, or remediation are specified here. Monitor for updates from official advisories and vulnerability feeds.

CVE-2022-35747

Technical details for CVE-2022-35747 are not provided in the connected documents. No affected products, root cause, impacts, or fixes are specified beyond the generic description. Monitor for updates for public disclosure and remediation guidance.

CVE-2022-35759

Technical details for CVE-2022-35759 (affected product, root cause, impact, and fix) are not provided in the connected documents. Monitor for updates.

CVE-2022-35760

Technical details about CVE-2022-35760 (affected product, root cause, impact or fix) are not provided in the connected documents. Please monitor for updates from official sources.

CVE-2022-38032

Technical details for CVE-2022-38032 are not publicly provided in the supplied documents; monitor for updates from Microsoft MSRC and related references.

CVE-2023-35340

Microsoft Windows CVE-2023-35340 affects the CNG Key Isolation Service and is a local elevation-of-privilege vulnerability. It has a CVSS v3.1 base score of 7.8 (AV:L, AC:H, PR:L, UI:N, S:C, C:H, I:H, A:H). The provided documents identify the affected component and impact but do not include explo...

CVE-2023-35358

CVE-2023-35358 refers to a Windows kernel registry vulnerability where an unexpected -1 cell index was observed in KCB.KeyCell, indicating that the code assumed at least one key with an allocated node in the key node stack, but differed when using layered/differencing hives and transactions. The ...

CVE-2023-35638

CVE-2023-35638 is an identified Denial-of-Service vulnerability affecting the Windows DHCP Server component. The connected sources confirm it is a network-accessible issue with a CVSS v3.1 base score of 7.5 (HIGH), attack vector: NETWORK, attack complexity: LOW, privileges required: NONE, user in...

CVE-2024-37984

Technical details for CVE-2024-37984 are not provided in the connected documents. No affected products, root cause, impact, or remediation are specified here. Monitor for updates from Microsoft and other sources for further information.

CVE-2024-38073

Technical specifics for CVE-2024-38073 (Windows Remote Desktop Licensing Service DoS) are not disclosed in the provided connected documents. Affected products, vulnerable components, and fixes are not present here; monitor for official disclosures and updates.

CVE-2024-38212

Technical details for CVE-2024-38212 are not publicly available in the provided documents. Monitor for updates from Microsoft/NVD and follow their vulnerability guidance.

CVE-2024-38214

CVE-2024-38214 is a Windows RRAS Information Disclosure Vulnerability affecting RRAS in Windows. The provided data lists RRAS as the vulnerable component with an impact of accessing sensitive data, and references Microsoft security updates (e.g., KB5041773 and related August 2024 updates) as miti...

CVE-2024-38236

Technical details about CVE-2024-38236 are not provided in the connected documents. Public details (affected product/version, exploit info, and fixes) are not available here; monitor for updates from official advisories.

CVE-2024-38242

CVE-2024-38242: Kernel Streaming Service Driver Elevation of Privilege. A local attacker with low privileges can exploit this to gain SYSTEM-level access without user interaction (per CVSS 3.1: AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H; base 7.8). Microsoft has released updates to fix the issue (e.g., ...

CVE-2025-21231

CVE-2025-21231 documents describe a Denial-of-Service vulnerability in the Windows IP Helper component. The CVE entry lists a network-based attack vector with low attack complexity and no privileges required, resulting in availability impact. Connected records corroborate IP Helper as the affecte...

CVE-2025-21406

CVE-2025-21406 is listed by NCSC as a Windows Telephony Service vulnerability with CVSS 8.80, enabling execution of arbitrary code. No affected product/version details or patch specifics are provided in the connected documents; Microsoft updates are referenced generally as fixing vulnerabilities....

CVE-2025-24056

CVE-2025-24056 is a heap-based buffer overflow in the Windows Telephony Server that allows a network-based attacker to execute arbitrary code on affected systems. The issue is described as remote code execution with network access (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) and a base score of 8.8 (HIG...

CVE-2025-24060

CVE-2025-24060 affects Windows DWM Core Library and is caused by improper input validation, enabling local elevation of privileges for an authorized attacker. Microsoft lists mitigations via OS updates (April 2025 security updates) and related advisories; apply the provided patches to remediate. ...

CVE-2025-27476

CVE-2025-27476 is a Windows Digital Media use-after-free vulnerability that enables local privilege escalation on an affected system. Governance: the initial description confirms local elevation of privileges; connected Microsoft advisories and NVD entries indicate Windows Digital Media is the af...

CVE-2026-54128

CVE-2026-54128 is a Windows DHCP Client use-after-free vulnerability that could allow an unauthenticated local attacker to execute code. The issue, described in the NVD entry and echoed by TALOS, affects the Windows DHCP Client component and is known to have been exploited in the wild (per CIRCL ...

CVE-2019-1396

Technical details about CVE-2019-1396 are not present in the provided connected documents. The EUVD entries mention malware in 'sbrugna' but do not describe affected products, root causes, or fixes. Monitor for updates.

CVE-2019-1422

Technical details for CVE-2019-1422 are not provided in the connected documents. The sources mention Windows elevation-of-privilege context but do not specify affected components, versions, root cause, or fixes. Monitor for updates.

CVE-2019-1435

Technical details for CVE-2019-1435 are not publicly available in the provided documents. Connected entries mention malware but do not reveal the affected component, root cause, impact, or remediation. Monitor for updates.

CVE-2019-1465

CVE-2019-1465 corresponds to a Windows GDI Information Disclosure vulnerability in the GDI component. The CNVD entries describe an information leakage vector where an attacker could obtain memory contents, with exploitation via social engineering (e.g., crafted documents or untrusted pages). The ...

CVE-2020-0672

Technical details about CVE-2020-0672 are not publicly available in the provided documents. Monitor for updates from official advisories for affected products, impact, and mitigations.

CVE-2020-0766

CVE-2020-0766 is an elevation-of-privilege vulnerability in the Microsoft Store Runtime caused by improper memory handling. An attacker would need remote execution on the target to run a crafted program that could escalate privileges locally; the issue is mitigated by a security update that corre...

CVE-2020-0776

CVE-2020-0776 is a Windows elevation-of-privilege vulnerability in the Windows AppX Deployment Server. The root cause is the component’s improper handling of file operations, enabling a local attacker who already has execution on the victim machine to escalate privileges. The NVD entry describes ...

CVE-2020-0839

CVE-2020-0839 describes an elevation of privilege in the Windows dnsrslvr.dll memory handling. An attacker with local authentication could run a crafted app to execute code with elevated permissions. The vulnerability stems from improper memory object handling in dnsrslvr.dll, and mitigations rel...

CVE-2020-0888

CVE-2020-0888 is a DirectX elevation-of-privilege vulnerability. Description: DirectX improperly handles objects in memory, enabling local privilege escalation. It is distinct from CVE-2020-0784. The entry provides a CVSS v3.1 base score of 7.8 (LOCAL, LOW privileges, NONE user interaction, HIGH ...

CVE-2020-0958

CVE-2020-0958 is a Windows kernel-mode elevation-of-privilege vulnerability tied to the Win32k driver. The CNVD-2020-32590/32588/32589 entries describe the flaw as an issue in how the kernel-mode Win32k object memory is handled, enabling local privilege escalation. The vulnerability affects Windo...