CVE-2024-43509

CVE-2024-43509 is listed in connected advisories as affecting the Windows Graphics Component with an elevation of privilege impact. The ENISA/NCSC entries corroborate this CVE under Windows Graphics Component and assign an impact/score (7.80) and local, privilege‑required conditions. Concrete det...

CVE-2024-49075

Technical details for CVE-2024-49075 are not publicly provided in the connected documents. The sources reference Windows Remote Desktop Services DoS but do not specify affected versions, root cause, exploit information, or fixes within this corpus. Monitor for updates.

CVE-2024-49091

Technical details for CVE-2024-49091 are not publicly provided in the supplied documents; no affected products, root cause, or remediation are stated. Monitor for updates.

CVE-2025-21236

CVE-2025-21236 is a Windows Telephony Service remote code execution vulnerability. The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) indicates network-based access with low complexity, requiring user interaction, and with high impact across confidentiality, integrity, and availability. Th...

CVE-2025-26665

CVE-2025-26665 affects Windows UPnP Device Host (upnphost.dll). The issue is described as sensitive data stored in memory that is not properly locked, enabling a local attacker with authorized access to obtain increased entitlements (privilege escalation). Connected sources corroborate the impact...

CVE-2019-0865

Technical details about CVE-2019-0865 are not present in the provided connected documents. The supplied materials are unrelated MSKB entries and a generic CVE description. Monitor for updates.

CVE-2019-1172

Technical details about CVE-2019-1172 are not publicly provided in the supplied documents; no concrete affected products, root cause, or remediation are listed beyond a generic description. Monitor for updates.

CVE-2019-1230

The CVE-2019-1230 entry describes an information-disclosure vulnerability in Microsoft Windows Hyper-V, where the Hyper-V Network Switch fails to properly validate input from an authenticated user on a guest OS. The root cause is a flawed input-validation path within the Hyper-V network switch, e...

CVE-2019-1382

CVE-2019-1382 affects Microsoft Windows ActiveX Installer Service (AxInstSV). The root cause is an elevation of privilege where the service may access files without proper authentication, enabling local privilege escalation. Documented impact is local access with elevated privileges; no exploit d...

CVE-2019-1394

Technical details about CVE-2019-1394 are not provided in the connected documents. Monitor for updates from official advisories; the supplied EUVD entries relate to unrelated malware listings and do not illuminate this CVE.

CVE-2019-1406

CVE-2019-1406 describes a remote code execution vulnerability in the Windows Jet Database Engine caused by improper handling of objects in memory. The issue could allow an attacker to execute arbitrary code on affected systems. Public references in the provided documents identify the Jet Database...

CVE-2019-1422

Technical details for CVE-2019-1422 are not provided in the connected documents. The sources mention Windows elevation-of-privilege context but do not specify affected components, versions, root cause, or fixes. Monitor for updates.

CVE-2019-1465

CVE-2019-1465 corresponds to a Windows GDI Information Disclosure vulnerability in the GDI component. The CNVD entries describe an information leakage vector where an attacker could obtain memory contents, with exploitation via social engineering (e.g., crafted documents or untrusted pages). The ...

CVE-2020-0627

Technical details for CVE-2020-0627 are not publicly available in the provided documents; no affected products or fixes are specified. Monitor for updates.

CVE-2020-0859

CVE-2020-0859 is described as an information disclosure vulnerability in Windows Modules Installer Service where file information could be disclosed. The primary details available: affected component is Windows Modules Installer Service; root cause and exact exploitation path are not elaborated i...

CVE-2020-0883

CVE-2020-0883 is a remote code execution flaw in Windows GDI+ involving memory handling of GDI objects. A working exploit PoC exists (CVE-2020-0883) showing a reverse shell workflow; patch availability is indicated by March 2020 updates (KB4541500/KB4541506) addressing GDI memory-related flaws, t...

CVE-2020-0946

CVE-2020-0946 is a Media Foundation Information Disclosure vulnerability in Microsoft Windows where improper handling of memory objects can allow an information disclosure. The initial entry identifies Media Foundation as the affected component and describes the flaw as memory-object handling lea...

CVE-2020-0988

CVE-2020-0988 describes a remote code execution flaw in Microsoft Windows Jet Database Engine caused by improper handling of memory objects. The connected KB4549951 document indicates a security update addressing Jet DB Engine issues as part of Windows 10 OS builds 18362.778 and 18363.778 (securi...

CVE-2020-1021

Technical details for CVE-2020-1021 are not publicly available in the provided documents; no affected products, root cause, impact, or fixes are specified here. Monitor for updates.

CVE-2020-1116

CVE-2020-1116 is described as a Windows CSRSS Information Disclosure Vulnerability, arising from CSRSS failing to properly handle objects in memory. The affected component is Windows CSRSS; the vulnerability enables information disclosure via local access (CVSSv3.1: 5.5 MEDIUM, AV:L/AC:L/PR:L/UI:...

CVE-2020-1185

Technical details about CVE-2020-1185 are not publicly available in the provided EUVD documents; monitor for updates.

CVE-2020-1271

CVE-2020-1271 corresponds to a Windows Backup Service Elevation of Privilege vulnerability. Public docs in the connected set confirm the flaw stems from improper handling of file operations in the Windows Backup Service, enabling local privilege escalation when an attacker already has code execut...

CVE-2020-1370

Technical details about CVE-2020-1370 are not publicly available in the provided documents. Monitor for updates from official advisories (e.g., MSRC, ENISA EUVD) for affected products, impact, and fixes.

CVE-2020-1407

Technical details for CVE-2020-1407 are not provided in the supplied documents. The description mentions the Jet Database Engine RCE but no affected product/version specifics or remediation are included here. Monitor for updates.

CVE-2020-1428

Technical details about CVE-2020-1428 are not publicly provided in the connected documents you supplied. Please monitor for updates from official advisories.

CVE-2020-1471

CVE-2020-1471 is an elevation-of-privilege vulnerability in Windows CloudExperienceHost. The root cause, as described in the initial document, is that CloudExperienceHost fails to properly check COM objects, enabling an attacker who can log on to an affected system to run a crafted script or appl...

CVE-2020-16915

CVE-2020-16915 - Windows Media Foundation memory corruption vulnerability : Affected software is Microsoft Windows, specifically the Windows Media Foundation component. The root cause is memory corruption due to improper handling of objects in memory. Exploitation could allow an attacker to insta...

CVE-2021-1694

Technical details about CVE-2021-1694 are not publicly provided in the supplied documents. Monitor for updates from vendor advisories or standard CVE databases.

CVE-2021-26881

Technical details about CVE-2021-26881 are not provided in the connected documents. The initial entry only states a Windows Media Foundation Remote Code Execution vulnerability. Monitor for updates and additional public details.

CVE-2021-27079

Technical details about CVE-2021-27079 are not publicly available in the provided documents; no affected versions, root cause, or fixes are disclosed here. Monitor for updates.

CVE-2021-28316

CVE-2021-28316 affects Windows WLAN AutoConfig, enabling a security feature bypass in that service. Reports indicate it is a local-attack surface with no public exploitation to date, and Microsoft released fixes as part of the September 2021 Patch Tuesday. The vulnerability’s impact is described ...

CVE-2022-35747

Technical details for CVE-2022-35747 are not provided in the connected documents. No affected products, root cause, impacts, or fixes are specified beyond the generic description. Monitor for updates for public disclosure and remediation guidance.

CVE-2022-37965

CVE-2022-37965 concerns Windows PPTP Denial of Service. The documents describe a network-exploitable vulnerability in the Windows Point-to-Point Tunneling Protocol that impacts availability (I) with no confidentiality or integrity impact (C/I). CVSSv3.1 metrics show AV:N, AC:H, PR:N, UI:N, S:U, C...

CVE-2023-32037

CVE-2023-32037 is a Windows Layer-2 Bridge Network Driver information disclosure vulnerability. The vulnerability is described as high confidentiality impact with adjacent-network exploitation, no privileges required, and no user interaction. The connected documents do not provide explicit exploi...

CVE-2023-32043

CVE-2023-32043 is a Windows Remote Desktop Security Feature Bypass vulnerability. The available document set confirms the issue as a remote-network vulnerability with no user impact on availability, but with high confidentiality and integrity impact per CVSS v3.1 (score 6.8). The connected source...

CVE-2023-33167

Technical details about CVE-2023-33167 are not publicly provided in the supplied documents. No explicit affected products, root cause, or fixes are described here. Monitor for updates.

CVE-2023-35350

Technical details for CVE-2023-35350 are not publicly available in the provided documents. Affected product/impact/root cause are not disclosed here. Monitor for updates and official advisories.

CVE-2023-35361

CVE-2023-35361 is a Windows Kernel Elevation of Privilege vulnerability. The provided documents identify the flaw as a local-privilege escalation with high impact (confidentiality, integrity, and availability) but do not supply concrete technical details, affected versions, root cause specifics, ...

CVE-2024-30067

Technical details for CVE-2024-30067 are not provided in the supplied documents. Monitor official disclosures for affected products, impact, and remediation guidance.

CVE-2024-37989

Technical details and affected products for CVE-2024-37989 are not publicly provided in the supplied documents. Monitor for vendor advisories and CVE repositories for updates.

CVE-2024-38025

Technical details about CVE-2024-38025 are not provided in the supplied connected documents; no vendor/product/version/root-cause/impact/fix details are visible. Monitor for updates in case additional information becomes available.

CVE-2024-38046

CVE-2024-38046 is described as a local privilege-escalation vulnerability in PowerShell. The primary public documentation (NVD/NCSC) confirms a local attacker with low privileges could elevate privileges on affected Windows components, with a CVSS v3.1 base score of 7.8 (LOCAL, Privileges Require...

CVE-2024-38065

Technical details about CVE-2024-38065 (affected product/component/impact) are not provided in the supplied documents. No concrete exploit or remediation information is available here. Monitor for official disclosures and updated advisories.

CVE-2024-38120

CVE-2024-38120 is a Windows RRAS Remote Code Execution vulnerability in the Routing and Remote Access Service. The CVSSv3.1 vector shows NETWORK attack vector, LOW complexity, and NONE privileges required with UI interaction, yielding a HIGH impact on confidentiality, integrity, and availability....

CVE-2024-38146

CVE-2024-38146 affects the Windows Layer-2 Bridge Network Driver. The CVSS 3.1 base score is 7.5 (HIGH) with Network attack, low complexity, no privileges, no user interaction, and high availability impact. Descriptions in connected OpenVAS items corroborate a DoS impact on Windows Layer-2 Bridge...

CVE-2024-38258

Technical details (affected product, versions, root cause, exploit info) for CVE-2024-38258 are not provided in the connected documents. Monitor official advisories for fixes and remediation guidance.

CVE-2024-43449

CVE-2024-43449 is a Windows USB Video Class System Driver elevation-of-privilege vulnerability. The CVE entry lists a CVSSv3.1 base score of 6.8 (Medium) with attack vector as Physical, no user interaction required, and an impact profile of High on confidentiality, integrity, and availability. Mi...

CVE-2024-43544

CVE-2024-43544 is a Microsoft Windows vulnerability in the Simple Certificate Enrollment Protocol that enables Denial of Service over a network with no authentication or user interaction; CVSS v3.1 base score 7.5 (HIGH) with Availability impact. Connected sources corroborate the DoS impact and ca...

CVE-2024-43621

CVE-2024-43621 affects Windows Telephony Service (a Windows OS component). The vulnerability is a Remote Code Execution flaw in the Windows Telephony Service, with CVSS 3.1 base metrics indicating Network attack vector, no privileges required, and user interaction needed; impact is High/High/High...

CVE-2024-49092

CVE-2024-49092 is a Windows Mobile Broadband Driver elevation-of-privilege vulnerability. Public sources (CNNVD) describe a buffer-error flaw in the Windows Mobile Broadband Driver that could allow privilege escalation. Microsoft has released updates addressing this family of issues; see the MSRC...