CVE-2019-1396

Technical details about CVE-2019-1396 are not present in the provided connected documents. The EUVD entries mention malware in 'sbrugna' but do not describe affected products, root causes, or fixes. Monitor for updates.

CVE-2020-0664

Technical details about CVE-2020-0664 are not publicly provided in the supplied documents. This entry's information disclosure is described, and remediation is patching ADIDNS handling in memory, but no affected versions or exploit specifics are included here. Monitor for updates.

CVE-2020-0672

Technical details about CVE-2020-0672 are not publicly available in the provided documents. Monitor for updates from official advisories for affected products, impact, and mitigations.

CVE-2020-0839

CVE-2020-0839 describes an elevation of privilege in the Windows dnsrslvr.dll memory handling. An attacker with local authentication could run a crafted app to execute code with elevated permissions. The vulnerability stems from improper memory object handling in dnsrslvr.dll, and mitigations rel...

CVE-2020-0888

CVE-2020-0888 is a DirectX elevation-of-privilege vulnerability. Description: DirectX improperly handles objects in memory, enabling local privilege escalation. It is distinct from CVE-2020-0784. The entry provides a CVSS v3.1 base score of 7.8 (LOCAL, LOW privileges, NONE user interaction, HIGH ...

CVE-2020-0922

Technical details about CVE-2020-0922 are not provided in the connected documents. The Initial Description only notes a remote code execution in Microsoft COM for Windows with a fix in a security update; no product/version/root-cause/exploit details are included here. Monitor for official disclos...

CVE-2020-0958

CVE-2020-0958 is a Windows kernel-mode elevation-of-privilege vulnerability tied to the Win32k driver. The CNVD-2020-32590/32588/32589 entries describe the flaw as an issue in how the kernel-mode Win32k object memory is handled, enabling local privilege escalation. The vulnerability affects Windo...

CVE-2020-0983

CVE-2020-0983 corresponds to a local Elevation of Privilege flaw in Windows Delivery Optimization. Connected CNVD records describe an EoP in the Delivery Optimization Service caused by improper handling of in-memory objects, enabling an attacker with local access to execute arbitrary code with el...

CVE-2020-1007

CVE-2020-1007 is a Windows kernel information disclosure vulnerability. The issue arises from how the Windows kernel handles objects in memory, enabling information disclosure when exploited locally. The description, CVSS data, and references indicate a kernel-level memory handling flaw with part...

CVE-2020-1038

Technical details about CVE-2020-1038 are not publicly provided in the connected documents; no affected products/versions or root-cause are specified beyond the generic memory-handling issue. Monitor for authoritative updates.

CVE-2020-1087

CVE-2020-1087 describes an elevation-of-privilege vulnerability in the Windows kernel, arising from how the kernel handles objects in memory. Affected component: Windows Kernel. Underlying cause: memory object handling leading to improper privilege checks, enabling local privilege escalation with...

CVE-2020-1146

CVE-2020-1146 is an elevation of privilege affecting the Microsoft Store Runtime, caused by improper memory handling. The vulnerability requires the attacker to gain code execution on the victim machine and then run a crafted application to elevate privileges. Microsoft addresses the issue via a ...

CVE-2020-1217

Windows Runtime Information Disclosure Vulnerability (CVE-2020-1217) stems from improper handling of memory objects in Windows Runtime. The CNVD entry describes an attacker being able to read freed memory and, with elevated privileges, execute arbitrary code. No patch/fix details are provided in ...

CVE-2020-1348

CVE-2020-1348 is a Microsoft Windows GDI Information Disclosure vulnerability. According to the initial description, it arises from the GDI component improperly disclosing memory contents, enabling information disclosure with partial confidentiality impact (CVSSv3 base score 6.5). OpenVAS-derived...

CVE-2020-1387

Technical details about CVE-2020-1387 (affected product, root cause, impact, or remediation) are not publicly provided in the supplied documents; monitor for updates.

CVE-2020-17027

Technical details about CVE-2020-17027 are not present in the provided documents; no specific affected products, root cause, impact, or remediation are disclosed. Monitor for updates.

CVE-2020-17035

Technical details for CVE-2020-17035 are not provided in the supplied connected documents. Monitor for updates.

CVE-2020-17041

CVE-2020-17041 technical details are not publicly available in the provided documents. Monitor for updates.

CVE-2021-1672

CVE-2021-1672 refers to a Windows vulnerability in the Projected File System (PFS) FS Filter Driver that enables information disclosure. The connected MSRC entry and NVD record confirm the affected component is the Windows PFS FS Filter Driver, with root cause described as an information disclosu...

CVE-2021-1734

CVE-2021-1734 is described as a Windows Remote Procedure Call Information Disclosure vulnerability. The provided metrics show CVSS v3.1 base score 7.5 (HIGH) with a network attack vector, low attack complexity, no privileges required, no user interaction, and an impact of high confidentiality los...

CVE-2021-26417

CVE-2021-26417 is described as a Windows Overlay Filter Information Disclosure vulnerability with local attack vector. Connected documents corroborate this as a Microsoft Windows/Windows Server information-disclosure issue connected to the Overlay Filter. Public references show the vulnerability ...

CVE-2021-28314

Technical details such as affected products, vulnerable components, exploit method, affected versions, and remediation specifics for CVE-2021-28314 are not provided in the connected documents; monitor for updates.

CVE-2021-28441

Technical details about CVE-2021-28441 are not provided in the connected documents. Monitor for updates from official advisories for affected products, scope, and fixes.

CVE-2021-43247

CVE-2021-43247 affects the Windows TCP/IP driver, enabling local elevation of privilege. It is rated HIGH (CVSSv3.1: LOCAL, LOW privileges required, NONE user interaction) withImpact/H. The vulnerability is addressed by Microsoft security updates (e.g., KB5008212/KB5008218 family; OS builds 19041...

CVE-2022-35760

Technical details about CVE-2022-35760 (affected product, root cause, impact or fix) are not provided in the connected documents. Please monitor for updates from official sources.

CVE-2022-38003

The CVE-2022-38003 issue is described in connected CNVD as a Windows Resilient File System (ReFS) Elevation of Privilege vulnerability stemming from improper privilege assignment in an application. This means local attackers could escalate privileges on affected Windows systems. The vulnerability...

CVE-2022-38030

Technical details about CVE-2022-38030 are not provided in the supplied documents. Public information about affected product versions, exploitation status, and fixes is not available here; monitor for updates from official advisories.

CVE-2023-32034

Technical details for CVE-2023-32034 are not publicly available in the provided documents. No specifics on affected products, versions, root cause, impact, or mitigations are included here. Monitor for updates.

CVE-2023-35326

CVE-2023-35326 (Windows CDP User Components Information Disclosure) affects Windows CDP User Components and is rated CVSS v3.1 base 5.5 (LOCAL, Privileges Low, Confidentiality High). Evidence from NVD shows Information Disclosure vulnerability with Local access and high confidentiality impact; Mi...

CVE-2023-35338

Technical details for CVE-2023-35338 (affected components, root cause, exploits, or fixes) are not provided in the connected documents. Monitor for updates from official sources.

CVE-2023-35339

CVE-2023-35339 is a Windows CryptoAPI Denial of Service vulnerability with a CVSS v3.1 base score of 7.5 (NETWORK, LOW attack complexity, NONE privileges, NONE user interaction, HIGH availability impact). The provided records do not specify affected versions, root cause details, exploitation stat...

CVE-2023-35641

CVE-2023-35641 is an Internet Connection Sharing (ICS) remote code execution in Windows. Connected sources confirm affected component (Windows ICS) and classify the impact as remote code execution with the attacker needing adjacent network access, no user interaction, and no privileges required (...

CVE-2023-36696

CVE-2023-36696 affects the Windows Cloud Files Mini Filter Driver and is described as an Elevation of Privilege vulnerability. The issue is exploitable locally (AV:L, PR:L) with no user interaction required and could lead to high impact (C:H/I:H/A:H) as per CVSS3.1. Connected sources (ENISA EUVD,...

CVE-2024-37974

Technical details about CVE-2024-37974 are not provided in the given documents. The connected items mention related issues (e.g., BitLocker / Secure Boot references) but do not reveal affected products, root cause, or remediation for this CVE. Monitor for updates.

CVE-2024-37987

Technical details about CVE-2024-37987 are not provided in the given documents; no affected products, versions, root cause, impact, or fixes are described. Monitor for updates from vendors and security advisories.

CVE-2024-38034

Public technical details for CVE-2024-38034 are not provided in the connected documents. The sources reference related updates and other CVEs but do not specify affected products, versions, root cause, or remediation for this CVE. Monitor for updates.

CVE-2024-43511

Technical details about CVE-2024-43511 are not provided in the supplied documents. Public information beyond basic CVSS data is not included here; monitor for updates.

CVE-2025-21296

CVE-2025-21296 corresponds to a BranchCache remote code execution vulnerability in Microsoft BranchCache. Connected sources describe BranchCache as a WAN optimization feature and indicate a vulnerability that could allow remote code execution. The CVE entry itself lists a 7.5 CVSSv3.1 score with ...

CVE-2025-21347

CVE-2025-21347 is linked to the Windows Update Stack and is described in the connected NCSC advisory as a Denial-of-Service vulnerability. The CVE entry in that document assigns a base CVSS-like severity of 6.0 and notes that Microsoft has updates available to fix the issue. The mode of the vulne...

CVE-2025-26664

CVE-2025-26664 is a Windows RRAS vulnerability described as a buffer over-read in Routing and Remote Access Service that can allow an unauthenticated attacker to disclose information over the network. The CVE is listed with a network attack vector, low attack complexity, and no privileges require...

CVE-2025-26680

CVE-2025-26680 affects the Windows Standards-Based Storage Management Service and describes an adversary-enabled condition of uncontrolled resource consumption leading to a network-based denial of service. The vulnerability is categorized with a high base score (CVSS 3.1: 7.5, NETWORK, no user in...

CVE-2025-26688

CVE-2025-26688 is a stack-based buffer overflow in Microsoft Virtual Hard Disk that enables a locally authenticated attacker to elevate privileges. The vulnerability is labeled as “Obtaining Increased Entitlements” (CVSS v3.1 base score 7.8). Connected sources corroborate the affected product (Mi...

CVE-2026-23668

CVE-2026-23668 affects the Windows Graphics Component and is an elevation-of-privilege vulnerability. The advisory indicates a local attack vector with high attack complexity, requiring low privileges and no user interaction (UI: NONE). The vulnerability impacts confidentiality, integrity, and av...

CVE-2019-1325

Technical details for CVE-2019-1325 are not provided in the connected documents; no affected product/version/root cause or fix is described beyond the initial entry. Monitor for updates.

CVE-2019-1334

Technical details about CVE-2019-1334 are not publicly available in the provided connected documents. Monitor for updates; no affected products, root cause, or fixes are described here.

CVE-2019-1424

CVE-2019-1424 is a Windows Netlogon security feature bypass vulnerability. Public data describe a vulnerability in how the Netlogon secure channel is handled, with a CVSS v3.1 base score of 8.1 (AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) and a NETWORK attack vector, no user interaction required. No exp...

CVE-2019-1435

Technical details for CVE-2019-1435 are not publicly available in the provided documents. Connected entries mention malware but do not reveal the affected component, root cause, impact, or remediation. Monitor for updates.

CVE-2020-0628

Technical details for CVE-2020-0628 are not publicly available in the provided documents. Monitor for updates.

CVE-2020-1003

Technical details for CVE-2020-1003 are not publicly provided in the supplied documents; no affected products, root cause, or remediation are specified here. Monitor for authoritative updates from MSRC/NVD.

CVE-2020-1010

Technical details about CVE-2020-1010 (affected product wbengine, root cause, exploit specifics, mitigations) are not publicly available in the provided Connected documents; monitor for updates from Microsoft MSRC and NVD.