CVE-2021-26898

CVE-2021-26898 is described as a Windows Event Tracing Elevation of Privilege Vulnerability. The provided documents do not specify affected products, components, versions, root cause, exploit details, or remediation specific to this CVE. Public references confirm the vulnerability name and CVSS m...

CVE-2026-42977

CVE-2026-42977 describes a race condition in Windows Push Notifications caused by improper synchronization of a shared resource. This vulnerability enables an authorized, local attacker to elevate privileges. The CVSS 3.1 base score is 7.8 (HIGH) with Local attack vector, high complexity, and req...

CVE-2020-1029

CVE-2020-1029 affects the Windows Connected User Experiences and Telemetry Service. The vulnerability is an Elevation of Privilege caused by improper handling of file operations in this service. According to the data, it can be triggered locally (local access required) and could grant elevated/sy...

CVE-2020-1077

CVE-2020-1077 is a Windows Runtime elevation of privilege vulnerability caused by improper handling of objects in memory. The entry notes local attack vector with low complexity and partial/high impact per CVSS metrics, but the connected documents do not provide concrete technical details, affect...

CVE-2020-1204

CVE-2020-1204 is an Elevation of Privilege in Windows Mobile Device Management Diagnostics caused by improper handling of junctions. The vulnerability could allow an attacker to bypass access restrictions and delete files after logging on and running a crafted app. Microsoft’s MSRC entry notes a ...

CVE-2020-1222

Technical details about CVE-2020-1222/1309 are not publicly provided in the connected documents. Available entries summarize memory handling and privilege elevation but do not specify affected products, versions, root cause, impact, or remediation beyond generic references. Monitor for updates.

CVE-2020-1291

CVE-2020-1291 is an elevation of privilege vulnerability in the Windows Network Connections Service related to how memory objects are handled. The issue is documented for Windows Network Connections Service (no explicit affected OS versions in the provided texts). The CVSS data in the initial rec...

CVE-2020-1336

Technical details public in the provided documents are limited; the connected items do not disclose exact affected products/versions, root cause, or fixes for CVE-2020-1336. Monitor official advisories for precise impact and remediation.

CVE-2020-1356

CVE-2020-1356 affects the Windows iSCSI Target Service and is described as an Elevation of Privilege vulnerability caused by improper handling of file operations. The NVD entry notes local access Vector with Low complexity and that exploitation could grant Partial confidentiality/integrity/availa...

CVE-2020-1394

CVE-2020-1394 relates to an elevation-of-privilege in the Windows Geolocation Framework. Connected CNVD/EUVD entries describe the root cause as improper handling of memory objects within the Geolocation Framework, allowing a local attacker to elevate privileges and execute arbitrary code by runni...

CVE-2020-16900

CVE-2020-16900 is a local privilege-escalation vulnerability in Windows where the Event System improperly handles objects in memory. An attacker must first gain code execution on the victim, then run a crafted application to elevate privileges. The fix is a security update that corrects how the W...

CVE-2020-16973

Technical details for CVE-2020-16973 are not publicly available in the provided connected documents. The initial description notes an elevation of privilege via Windows Backup Service file operations with local access. Monitor for updates.

CVE-2020-17024

CVE-2020-17024 is a Windows Client Side Rendering Print Provider Elevation of Privilege vulnerability. Connected sources confirm impact as HIGH (base CVSS v3.1: 7.8) with LOCAL attack vector, LOW attack complexity, and privileges required: LOW; user interaction: NONE. Confidentiality/Integrity/Av...

CVE-2020-17028

Technical details for CVE-2020-17028 are not publicly provided in the supplied documents. Monitor for updates to disclosure, patch availability, and affected products.

CVE-2020-17071

Technical details about CVE-2020-17071 are not publicly provided in the supplied documents. No affected product/version/impact is specified here. Monitor for official updates from sources such as NVD/Microsoft for remediation and exposure details.

CVE-2021-24098

Technical details about CVE-2021-24098 are not provided in the connected documents. The entries only state a Windows Console Driver Denial of Service vulnerability. Monitor for updates from Microsoft and security advisories for any clarified scope and remediation.

CVE-2021-26882

CVE-2021-26882 is a Local Elevation of Privilege vulnerability described as a Remote Access API issue. The standard sources assign CVSS‑3.1: AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H (base 7.8) and CVSS‑2.0/3.1 metrics show a medium to high impact with high confidentiality, integrity, and availability ...

CVE-2021-27063

CVE-2021-27063 is a Windows DNS Server Denial of Service vulnerability. The NVD entry lists a NETWORK attack vector with LOW complexity and NO authentication, causing a PARTIAL availability impact (CVSS v2 base score 5.0; CVSS v3.1 base score 7.5, HIGH impact on availability). The connected recor...

CVE-2021-28435

Technical details about CVE-2021-28435 are not publicly provided in the connected documents you supplied. Monitor for updates from vendor advisories and security feeds to learn affected products, impact, and fixes.

CVE-2021-43235

Technical details for CVE-2021-43235 are not publicly available in the provided documents. Monitor for updates from official sources; currently only CVSS metrics and references are noted.

CVE-2022-35746

Technical details about CVE-2022-35746 are not provided in the supplied documents. No product/version/root-cause/impact are specified here; monitor for official updates from Microsoft/NVD to obtain concrete information and remediation.

CVE-2023-35299

CVE-2023-35299 affects the Windows Common Log File System Driver and is an Elevation of Privilege vulnerability. CVSSv3.1 base score 7.8 (Local, Privilege Required: Low, User Interaction: None, Scope: Unchanged; Impact: Confidentiality/Integrity/Availability High). The connected sources (includin...

CVE-2023-35314

Technical details for CVE-2023-35314 are not provided in the connected documents. The materials here only reiterate the vulnerability title. No affected products, root cause, or fixes are specified. Monitor for updates.

CVE-2024-29999

CVE-2024-29999 is listed as Windows Mobile Broadband Driver Remote Code Execution vulnerability. Connected sources identify it under Windows Mobile Broadband as allowing execution of code, with CVSS-like rating around 6.8/10 and a local-access context in some mappings. Technical details (affected...

CVE-2024-38142

CVE-2024-38142 is a Windows Secure Kernel Mode elevation-of-privilege vulnerability (local, low-privilege prerequisite; high impact). The connected sources provide CVSS and impact only (Obtaining Increased Entitlements) and do not specify root cause details beyond the Windows kernel context. Publ...

CVE-2024-38145

CVE-2024-38145 affects the Windows Layer-2 Bridge Network Driver. The available data shows a Denial-of-Service impact with CVSS v3.1 base score 7.5 (Network attack, Low attack complexity, No privileges, No user interaction). Root cause, affected software versions, and remediation are not provided...

CVE-2024-38260

CVE-2024-38260 is a Windows Remote Desktop Licensing Service RCE vulnerability. Affected: Windows systems with the Remote Desktop Licensing Service. Impact per sources: execution of arbitrary code with the attacker’s privileges; CVSSv3.1 base score 8.8 (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). Conne...

CVE-2024-43514

Technical details about CVE-2024-43514 are not publicly provided in the connected documents; they reference fixes but do not describe root cause, vectors, or affected versions. Monitor for updates.

CVE-2024-49101

CVE-2024-49101 covers a privilege-elevation flaw in Windows Wireless Wide Area Network Service (WwanSvc). The vulnerability affects the WWAN service component, with the CVSSv3.1 base metrics indicating Physical attack vector, Low attack complexity, Low privileges required, no user interaction, an...

CVE-2024-49119

CVE-2024-49119 is corroborated by the connected KB entry for Windows vulnerabilities, which lists it under Windows Remote Desktop Services with a CVSS v3.1 score of 8.10 and an impact described as Execute Random Code. The document confirms RDS involvement and high-risk classification, but it does...

CVE-2025-21184

CVE-2025-21184 is an Elevation of Privilege issue affecting Windows Core Messaging. The connected AVLEONOV article identifies it as EoP in Windows Core Messaging and lists it among February Patch Tuesday CVEs. Provided documents do not include a vendor/product version, root cause, exploit details...

CVE-2025-21252

Technical details about CVE-2025-21252 are not publicly available in the provided documents. Monitor for updates from Microsoft and NVD for affected products, impact, and remediation.

CVE-2025-21266

CVE-2025-21266 is a Windows Telephony Service remote code execution vulnerability. The linked data shows a network-exposed impact with CVSS v3.1 base score 8.8 (HIGH), requiring user interaction for exploitation and affecting confidentiality, integrity, and availability. Affected component is the...

CVE-2025-26669

CVE-2025-26669 is listed in RRAS (Windows Routing and Remote Access Service) with the impact described as Access to sensitive data and a severity score of 8.80. The RRAS entry indicates an information-disclosure risk via an out-of-bounds read, attributed to a vulnerability in RRAS. Connected sour...

CVE-2025-27469

CVE-2025-27469 affects Windows LDAP (Lightweight Directory Access Protocol) and describes an uncontrolled resource consumption that enables an unauthenticated attacker to cause network-denied service. The issue is categorized as a Denial-of-Service via LDAP on the network. Microsoft has released ...

CVE-2026-26151

CVE-2026-26151 describes insufficient UI warnings in Windows Remote Desktop that can enable a network attacker to spoof a remote session. The NVD entry lists a CVSS v3.1 base score of 7.1 (HIGH) with network access, no privileges required, user interaction required, and impact to confidentiality ...

CVE-2026-42989

Winlogon Elevation of Privilege (CVE-2026-42989) is caused by improper link resolution before file access ("link following"). This vulnerability allows an authorized, local attacker to gain higher privileges. Affected: Winlogon component on Windows; impact is local privilege escalation with a CVS...

CVE-2026-50655

CVE-2026-50655 is a Windows Media/Media Foundation heap-based buffer overflow that allows local code execution by a non-privileged attacker with user interaction. It has concrete details in multiple connected sources: exploitation status on CIRCL (exploited in the wild), and Microsoft/MSRC entrie...

CVE-2026-61352

The CVE-2026-61352 entry describes a race condition in the Remote Desktop Client caused by concurrent execution with improper synchronization on a shared resource. This leads to remote code execution over the network, classified with a high impact (CVSS 3.1: 7.5) and network attack vector, requir...

CVE-2019-0701

The CVE-2019-0701 entry describes a denial-of-service condition affecting Microsoft Hyper-V. It concerns the host Hyper-V environment failing to properly validate input from a privileged user on a guest OS, associated with the Windows Hyper-V Denial of Service vulnerability. The NVD entries group...

CVE-2019-1436

Technical details about CVE-2019-1436 are not publicly provided in the supplied documents. Monitoring for updates is recommended; the connected sources describe other vulnerabilities but do not elaborate on this CVE's affected products, root cause, or fix.

CVE-2019-1477

The CVE-2019-1477 issue affects the Windows Printer Service. Description and connected advisories indicate an elevation of privilege vulnerability caused by the Printer Service not properly validating file paths when loading printer drivers. An authenticated attacker who can log on could run a sp...

CVE-2020-0658

CVE-2020-0658 affects the Windows Common Log File System (CLFS) driver. The vulnerability stems from a flaw in how objects in memory are handled, allowing an information disclosure. According to the provided data, exploitation is local with low attack complexity, and confidentiality impact is lis...

CVE-2020-0661

The CVE-2020-0661 entry describes a denial-of-service vulnerability in Microsoft Hyper-V. It occurs when Hyper-V on a host fails to properly validate input from a privileged user on a guest OS, enabling a guest-level attacker to cause a denial of service. The CVE is stated as distinct from CVE-20...

CVE-2020-0698

Technical details for CVE-2020-0698 are not provided in the connected documents; the sources list the CVE but do not specify affected products, root cause, impact, or fixes. Monitor for updates from official advisories.

CVE-2020-0721

Technical details for CVE-2020-0721 are not publicly available in the provided documents . Monitor for updates in case further specifics on affected products, impact, or fixes are released.

CVE-2020-0875

CVE-2020-0875 describes an information disclosure vulnerability in how splwow64.exe handles certain calls. An attacker who exploits this could obtain information to further compromise the user’s system (low-integrity to medium-integrity). The flaw by itself does not grant arbitrary code execution...

CVE-2020-0993

Technical details about CVE-2020-0993 are not publicly provided in the supplied connected documents. The materials reference the Windows DNS DoS vulnerability but do not specify affected products/versions, root cause, exploitation status, or fixes. Monitor for updates.

CVE-2020-1005

CVE-2020-1005 is an information-disclosure vulnerability in the Microsoft Windows Graphics Component. The connected documents identify the issue as an information-disclosure vulnerability that arises when Windows Graphics Components improperly handle objects in memory (root cause: memory handling...

CVE-2020-1082

CVE-2020-1082 is an elevation of privilege vulnerability in Windows Error Reporting (WER) related to how WER handles and executes files. The description identifies the issue as distinct from CVE-2020-1021 and CVE-2020-1088. Public documentation in the connected sources confirms the vulnerable com...