CVE-2025-27471

CVE-2025-27471 affects Microsoft Windows Streaming Service. Technical details in connected docs confirm that the vulnerability arises from sensitive data storage in improperly locked memory, enabling a network-based Denial of Service. The CVSS v3.1 base score is 5.9 (Network, High attack complexi...

CVE-2023-32045

Technical details about CVE-2023-32045 are not provided in the supplied documents. For updates and potential remediation, monitor official advisories (MSRC) and NVD entries.

CVE-2023-33173

Technical details about CVE-2023-33173 are not provided in the supplied documents. No specific affected products, root causes, or fixes are disclosed here. Monitor for updates from official advisories.

CVE-2023-35296

Technical details for CVE-2023-35296 are not provided in the supplied documents. No information on affected products, versions, impact, or fixes. Monitor for updates from Microsoft and CVE sources.

CVE-2023-35322

Technical details about CVE-2023-35322 are not publicly provided in the supplied documents; no affected products, root cause, or remediation details are listed. Monitor for updates in forthcoming connected sources.

CVE-2023-35341

Technical details for CVE-2023-35341 are not publicly available in the provided documents. Monitor for updates from official sources (e.g., vendor advisories, CVE records) to obtain affected products, impact, and remediation information.

CVE-2023-35643

CVE-2023-35643 affects Windows DHCP Server and is classified as a network-based information disclosure with CVSSv3.1 score 7.5 (C:H/I:N/A:N). The vulnerability resides in the DHCP Server Service and is capable of exposing sensitive data. Public sources in the connected set confirm the DHCP Server...

CVE-2024-37986

Technical details for CVE-2024-37986 are not publicly provided in the supplied documents. No affected products, versions, root cause, or remediation are specified here. Monitor for updates.

CVE-2024-37987

Technical details about CVE-2024-37987 are not provided in the given documents; no affected products, versions, root cause, impact, or fixes are described. Monitor for updates from vendors and security advisories.

CVE-2024-38056

Technical details about CVE-2024-38056 are not publicly provided in the connected documents. The entry is listed, but no affected products, root cause, impact, or fixes are described here.

CVE-2024-38099

Technical details about CVE-2024-38099 (Windows Remote Desktop Licensing Service DoS) are not provided in the supplied documents. Monitor for official advisories for affected products, impact, and fixes.

CVE-2024-38105

CVE-2024-38105 details are not publicly available in the provided documents. Monitor for updates; no specifics on vulnerable components, impact, or fixes are included here.

CVE-2024-38151

Technical details (affected product/component/root cause/impact/fix) for CVE-2024-38151 are not provided in the connected documents. Only the label “Windows Kernel Information Disclosure” with CVSS 5.5 is given; monitor for updates.

CVE-2024-38191

Technical details for CVE-2024-38191 are not publicly provided in the supplied documents. Monitor for updates from Microsoft MSRC/NVD, NVD, or CVE listings as new information becomes available.

CVE-2024-43487

CVE-2024-43487 corresponds to a Windows Mark of the Web (MOTW) security feature bypass. The MOTW component itself is identified as the vulnerable area, enabling bypass of the MOTW protection. Public materials in the connected documents indicate the vulnerability is addressed by Microsoft security...

CVE-2025-21291

CVE-2025-21291 is a Windows Direct Show remote code execution vulnerability. Documented CVSSv3.1 shows high risk (8.8) with network exploitation requiring user interaction. Affected: Windows DirectShow components; root cause specifics not disclosed in provided materials. Microsoft has released se...

CVE-2025-21378

Technical details about CVE-2025-21378 are not publicly available in the provided documents. The set includes only high-level summaries and advisories; monitor for updates from Microsoft and NVD for affected products, impact, and fixes.

CVE-2025-26688

CVE-2025-26688 is a stack-based buffer overflow in Microsoft Virtual Hard Disk that enables a locally authenticated attacker to elevate privileges. The vulnerability is labeled as “Obtaining Increased Entitlements” (CVSS v3.1 base score 7.8). Connected sources corroborate the affected product (Mi...

CVE-2025-27738

CVE-2025-27738 affects Windows Resilient File System (ReFS). Description in NCSC advisory attributes an improper access control issue that could allow an authenticated attacker to disclose information over the network, with impact categorized as access to sensitive data. The NT/OS update guidance...

CVE-2026-65775

CVE-2026-65775 maps to a local privilege escalation due to a use-after-free in Windows Win32K. The affected component is Win32k in Windows; the underlying flaw is use-after-free, enabling an authorized attacker to elevate privileges locally (CVSS v3.1: 7.8, HIGH). The impact stated includes high ...

CVE-2019-1227

The CVE-2019-1227 entry describes an information-disclosure vulnerability in the Windows kernel where objects in memory are not handled securely. An attacker who can log on to an affected system and run a crafted application could obtain information to aid further compromise; the issue does not b...

CVE-2019-1251

Technical details for CVE-2019-1251 are not publicly provided in the connected documents. Monitor for updates. The initial description confirms DirectWrite memory disclosure but provides no product/version/impact details beyond that.

CVE-2020-0725

Technical details for CVE-2020-0725 are not publicly provided in the supplied documents; no concrete affected products, versions, root cause, or fixes are included. Monitor for updates from official advisories and EUVD entries.

CVE-2020-0730

CVE-2020-0730 concerns Windows User Profile Service (ProfSvc) elevation of privilege due to improper handling of symbolic links. The CNVD-2020-14305 entry describes that an attacker could delete files and folders in an elevated context by exploiting this symlink handling issue. The provided conne...

CVE-2020-0754

Technical details for CVE-2020-0754 are not provided in the connected documents; only high-level information is available.

CVE-2020-0774

CVE-2020-0774 is a Windows GDI information-disclosure vulnerability. The Windows GDI component improperly handles memory objects, allowing an attacker to leak memory contents and potentially information needed for further compromise. The vulnerability can be exploited via social engineering (e.g....

CVE-2020-0781

The CVE-2020-0781 issue is an elevation of privilege in Windows by the Universal Plug and Play (UPnP) service, caused by improper handling of in-memory objects. Affected component: Windows UPnP service. Root cause: memory handling flaw in UPnP. Impact: attacker could gain elevated system privileg...

CVE-2020-0790

Technical details about CVE-2020-0790 are not publicly provided in the connected documents. Monitor official advisories for updates; these sources mention a splwow64 Elevation of Privilege but do not provide concrete technical specifics in the supplied materials.

CVE-2020-0809

CVE-2020-0809 is a memory corruption vulnerability in Windows Media Foundation caused by improper handling of objects in memory. Affected component: Windows Media Foundation in Windows. Reported impact is high (CVE with base score 8.8/9.3) per NVD metrics, but no exploitation details or fixes are...

CVE-2020-0860

Technical details for CVE-2020-0860 are not publicly provided in the connected documents. Available sources mention the vulnerability in general terms; monitor for updates and additional technical disclosures.

CVE-2020-0921

Technical details about CVE-2020-0921 are not provided in the connected documents; the materials reference the vulnerability in general terms related to Microsoft Graphics components but do not specify affected products/versions, root cause, or remediation. Monitor for updates.

CVE-2020-0936

CVE-2020-0936 is an Elevation of Privilege vulnerability in Windows/Windows Server caused by a Windows Scheduled Task that fails to properly handle file redirections. CNVD-2020-32583 describes the root cause as improper file redirection handling in the scheduled task, enabling an authenticated at...

CVE-2020-0955

Technical details for CVE-2020-0955 are not publicly provided in the supplied documents. Monitor official advisories for updates; current sources only describe an information-disclosure via CPU memory access without specifics.

CVE-2020-0989

CVE-2020-0989 affects Windows Mobile Device Management Diagnostics. Root cause: improper handling of junctions, causing information disclosure. Exploitation requires local authentication: an attacker logs on and runs a crafted app to read restricted files. Impact is read access to files due to a ...

CVE-2020-1001

CVE-2020-1001 affects the Windows Push Notification Service on Windows client/server platforms. The vulnerability is described as an Elevation of Privilege due to how objects are handled in memory by WNS, enabling a local attacker to gain higher privileges. CVSSv3.1 base score is 7.8 (High), with...

CVE-2020-1033

CVE-2020-1033 (Windows Kernel Information Disclosure) The vulnerability is an information disclosure in the Windows kernel where objects in memory are improperly handled. An authenticated attacker could exploit this by running a specially crafted application to obtain information that could help ...

CVE-2020-1047

CVE-2020-1047 is an elevation-of-privilege vulnerability in Windows Hyper-V where memory object handling can allow an attacker to gain elevated privileges on the host OS. The flaw itself does not enable arbitrary code execution in isolation, but could be combined with other vulnerabilities (e.g.,...

CVE-2020-1068

Technical details for CVE-2020-1068 are not publicly available in the provided documents. Monitor for updates; no explicit info on affected products, root cause, impact, or remediation is included here.

CVE-2020-1129

CVE-2020-1129 is a remote code execution vulnerability in Microsoft Windows Codecs Library. It stems from how the Codecs Library handles objects in memory, enabling an attacker to take control of an affected system by processing a specially crafted image file. The impact includes potential full s...

CVE-2020-1136

CVE-2020-1136 is described as a memory corruption vulnerability in Windows Media Foundation caused by improper handling of objects in memory. The connected CVE entries (CVE-2020-1150 family) likewise reference Windows Media Foundation memory corruption and imply broad impact within Windows. The i...

CVE-2020-1245

Technical details about CVE-2020-1245 are not provided in the supplied connected documents; public information in the initial description is high-level. Monitor for official security advisories for affected products, impact, and fixes.

CVE-2020-1250

Technical details about CVE-2020-1250, including affected products, root cause, impact, or patch specifics, are not provided in the connected documents. Monitor for updates from official advisories.

CVE-2020-1254

CVE-2020-1254 concerns an elevation of privilege in Windows Modules Installer Service. The vulnerability arises because the service improperly handles class object members, enabling a locally authenticated attacker to execute arbitrary code with system privileges. Affected: Windows Modules Instal...

CVE-2020-1311

CVE-2020-1311 is an elevation-of-privilege vulnerability in the Component Object Model (COM). Affected: Windows COM client using special case IIDs. Root cause cited as an elevation of privilege in COM. Connected documentRH: CVE-2020-1311 confirms the same issue; no explicit product/version patche...

CVE-2020-1344

CVE-2020-1344 is a Windows WalletService elevation-of-privilege vulnerability rooted in how WalletService handles objects in memory, potentially allowing a crafted app to execute code with elevated privileges. Related entries (CVE-2020-1362/1369) describe the same WalletService memory-handling th...

CVE-2020-1351

CVE-2020-1351 is described in connected sources as an information disclosure vulnerability linked to the Windows Graphics Component. The root cause, as stated in CNVD-2021-63330, is that the Windows graphics component fails to properly handle objects in memory, enabling information disclosure on ...

CVE-2020-16980

CVE-2020-16980 is an elevation-of-privilege vulnerability in the Windows iSCSI Target Service caused by improper handling of file operations. An attacker who can achieve code execution on a victim system could run a crafted application to gain elevated privileges. The entry notes the vulnerabilit...

CVE-2020-17007

CVE-2020-17007 is a Windows Error Reporting Elevation of Privilege vulnerability. The NVD entry assigns a CVSSv3.1 base score of 7.8 (HIGH) with LOCAL attack vector, LOW attack complexity, and privileges required: LOW, no user interaction. The issue is categorized as a local, post-authentication ...

CVE-2020-17075

CVE-2020-17075 corresponds to a Windows USO Core Worker elevation-of-privilege vulnerability. According to the linked NVD entry, the vulnerability has a CVSS v3.1 base score of 7.8 (HIGH) with local attack vector, low attack complexity, and privileges required: LOW; no user interaction needed. Th...

CVE-2020-17094

CVE-2020-17094 is described as a Windows Error Reporting Information Disclosure Vulnerability. The connected sources provide a CVSS 3.1 base vector (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) with a Medium severity and High confidentiality impact, plus a CVSS2 base score of 5.5. The documents do not sp...