4929 matches found
CVE-2020-0754
Technical details for CVE-2020-0754 are not provided in the connected documents; only high-level information is available.
CVE-2020-1491
Technical details about CVE-2020-1491 are not publicly provided in the supplied documents. Monitor for updates from official advisories.
CVE-2020-17007
CVE-2020-17007 is a Windows Error Reporting Elevation of Privilege vulnerability. The NVD entry assigns a CVSSv3.1 base score of 7.8 (HIGH) with LOCAL attack vector, LOW attack complexity, and privileges required: LOW, no user interaction. The issue is categorized as a local, post-authentication ...
CVE-2020-17034
Technical details about CVE-2020-17034 are not publicly provided in the supplied documents; monitor for updates.
CVE-2021-26875
CVE-2021-26875 is described as a Windows Win32k Elevation of Privilege Vulnerability. The provided connected documents do not reveal concrete technical details (affected component versions, specific root cause, exploit vectors, or explicit remediation) for this CVE; only high-level references to ...
CVE-2021-43244
CVE-2021-43244 refers to a Windows Kernel information disclosure vulnerability. The connected documents confirm a Windows kernel information disclosure issue publicly addressed by December 2021 security updates across multiple Windows 10/Server builds. Patches are delivered via KB5008223, KB50082...
CVE-2023-32037
CVE-2023-32037 is a Windows Layer-2 Bridge Network Driver information disclosure vulnerability. The vulnerability is described as high confidentiality impact with adjacent-network exploitation, no privileges required, and no user interaction. The connected documents do not provide explicit exploi...
CVE-2023-35304
CVE-2023-35304 is a Windows Kernel Elevation of Privilege vulnerability. The NVD entry provides CVSS v3.1 metrics (LOCAL exploit, LOW complexity, LOW privileges required) with high impact on confidentiality, integrity, and availability (base score 7.8). Multiple OpenVAS entries and KB articles re...
CVE-2023-35364
Technical details about CVE-2023-35364 (affected product, root cause, impact, mitigations) are not publicly provided in the supplied documents. Monitor for updates from official advisories; current sources here do not disclose concrete specifics.
CVE-2023-35641
CVE-2023-35641 is an Internet Connection Sharing (ICS) remote code execution in Windows. Connected sources confirm affected component (Windows ICS) and classify the impact as remote code execution with the attacker needing adjacent network access, no user interaction, and no privileges required (...
CVE-2023-36696
CVE-2023-36696 affects the Windows Cloud Files Mini Filter Driver and is described as an Elevation of Privilege vulnerability. The issue is exploitable locally (AV:L, PR:L) with no user interaction required and could lead to high impact (C:H/I:H/A:H) as per CVSS3.1. Connected sources (ENISA EUVD,...
CVE-2024-30067
Technical details for CVE-2024-30067 are not provided in the supplied documents. Monitor official disclosures for affected products, impact, and remediation guidance.
CVE-2024-37987
Technical details about CVE-2024-37987 are not provided in the given documents; no affected products, versions, root cause, impact, or fixes are described. Monitor for updates from vendors and security advisories.
CVE-2024-37988
Technical details for CVE-2024-37988 are not publicly available in the provided documents. No information on affected products, root cause, impact, or fixes is present here. Monitor for updates from the referenced sources and connected advisories.
CVE-2024-38056
Technical details about CVE-2024-38056 are not publicly provided in the connected documents. The entry is listed, but no affected products, root cause, impact, or fixes are described here.
CVE-2024-38065
Technical details about CVE-2024-38065 (affected product/component/impact) are not provided in the supplied documents. No concrete exploit or remediation information is available here. Monitor for official disclosures and updated advisories.
CVE-2024-38099
Technical details about CVE-2024-38099 (Windows Remote Desktop Licensing Service DoS) are not provided in the supplied documents. Monitor for official advisories for affected products, impact, and fixes.
CVE-2024-38105
CVE-2024-38105 details are not publicly available in the provided documents. Monitor for updates; no specifics on vulnerable components, impact, or fixes are included here.
CVE-2024-38120
CVE-2024-38120 is a Windows RRAS Remote Code Execution vulnerability in the Routing and Remote Access Service. The CVSSv3.1 vector shows NETWORK attack vector, LOW complexity, and NONE privileges required with UI interaction, yielding a HIGH impact on confidentiality, integrity, and availability....
CVE-2024-43544
CVE-2024-43544 is a Microsoft Windows vulnerability in the Simple Certificate Enrollment Protocol that enables Denial of Service over a network with no authentication or user interaction; CVSS v3.1 base score 7.5 (HIGH) with Availability impact. Connected sources corroborate the DoS impact and ca...
CVE-2025-21202
CVE-2025-21202 is a Windows Recovery Environment Agent elevation-of-privilege vulnerability. The consolidated sources show an impact of obtaining elevated privileges (CVE mapped under Windows Recovery Environment Agent) with a CVSS-like score around 6.1 (Medium) and physical access as a considera...
CVE-2025-21290
The CVE-2025-21290 vulnerability affects Microsoft Message Queuing (MSMQ) and is a Denial of Service issue exploitable over the network. The provided data show a CVSS v3.1 base score of 7.5 (HIGH) with attack vector Network and no user interaction required. The root cause detail is not explicitly...
CVE-2025-21296
CVE-2025-21296 corresponds to a BranchCache remote code execution vulnerability in Microsoft BranchCache. Connected sources describe BranchCache as a WAN optimization feature and indicate a vulnerability that could allow remote code execution. The CVE entry itself lists a 7.5 CVSSv3.1 score with ...
CVE-2025-26640
CVE-2025-26640 is a Windows Digital Media elevation-of-privilege vulnerability caused by a use-after-free condition. The issue affects Windows Digital Media components and could allow an authorized local user to obtain elevated privileges. Microsoft released updates as part of the April 2025 secu...
CVE-2025-27471
CVE-2025-27471 affects Microsoft Windows Streaming Service. Technical details in connected docs confirm that the vulnerability arises from sensitive data storage in improperly locked memory, enabling a network-based Denial of Service. The CVSS v3.1 base score is 5.9 (Network, High attack complexi...
CVE-2026-58640
CVE-2026-58640 is a heap-based buffer overflow in Windows NTFS that enables an authorized local attacker to execute code. The vulnerability is tied to Windows NTFS logic and has a CVSS v3.1 score of 7.3 (HIGH) with local access required and user interaction. Affected component: Windows NTFS; root...
CVE-2019-1090
CVE-2019-1090 is a Windows elevation-of-privilege vulnerability in dnsrslvr.dll caused by how objects are handled in memory. Attack remains local with no user interaction required per the CVSS vectors, and the impact is described as complete confidentiality, integrity, and availability loss if ex...
CVE-2019-1272
Connected sources confirm a Windows privilege escalation vulnerability related to ALPC in Microsoft Windows/Windows Server. The issue arises from improper handling of ALPC calls, allowing an attacker who logs on to the system to run arbitrary code in the security context of the local system (loca...
CVE-2019-1334
Technical details about CVE-2019-1334 are not publicly available in the provided connected documents. Monitor for updates; no affected products, root cause, or fixes are described here.
CVE-2020-0809
CVE-2020-0809 is a memory corruption vulnerability in Windows Media Foundation caused by improper handling of objects in memory. Affected component: Windows Media Foundation in Windows. Reported impact is high (CVE with base score 8.8/9.3) per NVD metrics, but no exploitation details or fixes are...
CVE-2020-0908
CVE-2020-0908 is a remote code execution vulnerability in the Windows Text Service Module. The issue arises from improper memory handling within TSM, enabling an attacker to execute code on a target system, typically by convincing a user to visit a specially crafted webpage or open content. Explo...
CVE-2020-0921
Technical details about CVE-2020-0921 are not provided in the connected documents; the materials reference the vulnerability in general terms related to Microsoft Graphics components but do not specify affected products/versions, root cause, or remediation. Monitor for updates.
CVE-2020-0940
CVE-2020-0940 is a Windows Push Notification Service Elevation of Privilege vulnerability. Connected documents (CNVD-2020-25581, CNVD-2020-32584) describe an EoP arising from how memory objects are handled in Windows Push Notification Service, enabling a locally authenticated attacker to elevate ...
CVE-2020-0955
Technical details for CVE-2020-0955 are not publicly provided in the supplied documents. Monitor official advisories for updates; current sources only describe an information-disclosure via CPU memory access without specifics.
CVE-2020-1028
CVE-2020-1028 describes a memory corruption vulnerability in Windows Media Foundation due to improper handling of objects in memory. The issue is identified across multiple CVE entries (1028, 1126, 1136, 1150) as “Media Foundation Memory Corruption Vulnerability” and is consistent in wording acro...
CVE-2020-1033
CVE-2020-1033 (Windows Kernel Information Disclosure) The vulnerability is an information disclosure in the Windows kernel where objects in memory are improperly handled. An authenticated attacker could exploit this by running a specially crafted application to obtain information that could help ...
CVE-2020-1047
CVE-2020-1047 is an elevation-of-privilege vulnerability in Windows Hyper-V where memory object handling can allow an attacker to gain elevated privileges on the host OS. The flaw itself does not enable arbitrary code execution in isolation, but could be combined with other vulnerabilities (e.g.,...
CVE-2020-1241
CVE-2020-1241 is a Windows Kernel security feature bypass vulnerability. It arises when the Kernel fails to properly sanitize certain parameters, allowing a locally authenticated attacker to run a crafted application to bypass security checks. The vulnerability is addressed by updates that correc...
CVE-2020-1310
CVE-2020-1310 is a Windows Win32k elevation of privilege vulnerability where the Windows kernel-mode driver fails to properly handle objects in memory. The description identifies it as a local-privilege escalation (LOCAL vector, high privileges required) with a kernel-mode trust boundary issue in...
CVE-2020-1365
Technical details about CVE-2020-1365 are not publicly provided in the connected documents. The Windows Event Logging Service elevation-of-privilege vulnerability lacks product/version/impact/fix specifics here. Monitor sources for updates and confirmed technical details.
CVE-2020-1368
CVE-2020-1368 is a Windows elevation-of-privilege vulnerability in the Windows Credential Enrollment Manager Service. The CNVD entry states that the issue stems from how the Credential Enrollment Manager Service handles objects in memory, which an attacker can exploit by running a specially craft...
CVE-2020-1411
Technical details about CVE-2020-1411 (affected product, root cause, impact, or remediation) are not publicly provided in the connected documents. Monitor for updates.
CVE-2020-17029
CVE-2020-17029 is a Windows Canonical Display Driver Information Disclosure Vulnerability. Affected software: Windows Canonical Display Driver. Root cause: information disclosure vulnerability within the Canonical Display driver. Impact: confidentiality impact HIGH (per CVSS 3.1), with local atta...
CVE-2020-17030
Technical details for CVE-2020-17030 are not publicly available in the provided documents. Monitor for updates from the connected feeds for affected products, components, and remediation guidance.
CVE-2020-17046
Technical details for CVE-2020-17046 are not provided in the supplied documents. Public information is limited to basic description; monitor for updates.
CVE-2020-17056
Technical details about CVE-2020-17056 (affected product/component, root cause, impact, and fixes) are not provided in the connected documents. Monitor official advisories for updates.
CVE-2020-17075
CVE-2020-17075 corresponds to a Windows USO Core Worker elevation-of-privilege vulnerability. According to the linked NVD entry, the vulnerability has a CVSS v3.1 base score of 7.8 (HIGH) with local attack vector, low attack complexity, and privileges required: LOW; no user interaction needed. Th...
CVE-2021-1693
Technical details about CVE-2021-1693 are not provided in the connected documents. The initial description remains high‑level; monitor official advisories for updates to obtain affected products, impact, and fixes.
CVE-2021-26417
CVE-2021-26417 is described as a Windows Overlay Filter Information Disclosure vulnerability with local attack vector. Connected documents corroborate this as a Microsoft Windows/Windows Server information-disclosure issue connected to the Overlay Filter. Public references show the vulnerability ...