CVE-2019-1471

CVE-2019-1471 is a Windows Hyper-V remote code execution vulnerability. The issue arises when a host server’s Hyper-V component fails to properly validate input from an authenticated user on a guest OS, allowing arbitrary code execution on the host. Affected product surface is Microsoft Windows H...

CVE-2020-0667

CVE-2020-0667 affects Microsoft Windows, specifically the Windows Search Indexer component. The connected documents confirm the root cause: the vulnerability arises from how the Windows Search Indexer handles objects in memory, enabling an elevation of privilege when exploited locally. The CNVD e...

CVE-2020-0678

Technical details for CVE-2020-0678 are not publicly available in the provided documents. Monitor for updates from official advisories.

CVE-2020-0680

CVE-2020-0680 is a Windows elevation-of-privilege vulnerability in the Windows Function Discovery Service related to how objects in memory are handled. The description states an elevation of privilege via memory handling in this service, indicating a local attack path with partial confidentiality...

CVE-2020-0799

CVE-2020-0799 is a Windows kernel elevation of privilege vulnerability. The flaw arises because the Windows kernel fails to properly handle parsing of certain symbolic links in its file-system/kernel parsing path, enabling local privilege escalation. The description and linked sources (NVD/NVD-de...

CVE-2020-0819

CVE-2020-0819 describes an elevation of privilege vulnerability in Windows Device Setup Manager caused by improper handling of file operations. The CVE is documented across multiple sources (NVD/NVD entry) with a base CVSS v3.1 score of 7.8 (HIGH) and CVSS v2 score of 7.2 (HIGH), indicating local...

CVE-2020-0877

CVE-2020-0887 is a Windows Win32k Elevation of Privilege vulnerability where the Win32k component fails to properly handle objects in memory. The description (and related CVEs 2020-0788 and 2020-0877) indicate a local privilege escalation risk, with kernel-mode execution potential as stated in mu...

CVE-2020-0948

Summary of CVE-2020-0948 (Media Foundation memory corruption) A memory corruption vulnerability exists in Windows Media Foundation when handling objects in memory (Media Foundation Memory Corruption Vulnerability). Current sources indicate related CVEs (CVE-2020-0949, CVE-2020-0950) and groupings...

CVE-2020-1029

CVE-2020-1029 affects the Windows Connected User Experiences and Telemetry Service. The vulnerability is an Elevation of Privilege caused by improper handling of file operations in this service. According to the data, it can be triggered locally (local access required) and could grant elevated/sy...

CVE-2020-1077

CVE-2020-1077 is a Windows Runtime elevation of privilege vulnerability caused by improper handling of objects in memory. The entry notes local attack vector with low complexity and partial/high impact per CVSS metrics, but the connected documents do not provide concrete technical details, affect...

CVE-2020-1222

Technical details about CVE-2020-1222/1309 are not publicly provided in the connected documents. Available entries summarize memory handling and privilege elevation but do not specify affected products, versions, root cause, impact, or remediation beyond generic references. Monitor for updates.

CVE-2020-1291

CVE-2020-1291 is an elevation of privilege vulnerability in the Windows Network Connections Service related to how memory objects are handled. The issue is documented for Windows Network Connections Service (no explicit affected OS versions in the provided texts). The CVSS data in the initial rec...

CVE-2020-1336

Technical details public in the provided documents are limited; the connected items do not disclose exact affected products/versions, root cause, or fixes for CVE-2020-1336. Monitor official advisories for precise impact and remediation.

CVE-2020-1356

CVE-2020-1356 affects the Windows iSCSI Target Service and is described as an Elevation of Privilege vulnerability caused by improper handling of file operations. The NVD entry notes local access Vector with Low complexity and that exploitation could grant Partial confidentiality/integrity/availa...

CVE-2020-16900

CVE-2020-16900 is a local privilege-escalation vulnerability in Windows where the Event System improperly handles objects in memory. An attacker must first gain code execution on the victim, then run a crafted application to elevate privileges. The fix is a security update that corrects how the W...

CVE-2020-17024

CVE-2020-17024 is a Windows Client Side Rendering Print Provider Elevation of Privilege vulnerability. Connected sources confirm impact as HIGH (base CVSS v3.1: 7.8) with LOCAL attack vector, LOW attack complexity, and privileges required: LOW; user interaction: NONE. Confidentiality/Integrity/Av...

CVE-2020-17028

Technical details for CVE-2020-17028 are not publicly provided in the supplied documents. Monitor for updates to disclosure, patch availability, and affected products.

CVE-2020-17071

Technical details about CVE-2020-17071 are not publicly provided in the supplied documents. No affected product/version/impact is specified here. Monitor for official updates from sources such as NVD/Microsoft for remediation and exposure details.

CVE-2021-24098

Technical details about CVE-2021-24098 are not provided in the connected documents. The entries only state a Windows Console Driver Denial of Service vulnerability. Monitor for updates from Microsoft and security advisories for any clarified scope and remediation.

CVE-2021-26882

CVE-2021-26882 is a Local Elevation of Privilege vulnerability described as a Remote Access API issue. The standard sources assign CVSS‑3.1: AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H (base 7.8) and CVSS‑2.0/3.1 metrics show a medium to high impact with high confidentiality, integrity, and availability ...

CVE-2021-27063

CVE-2021-27063 is a Windows DNS Server Denial of Service vulnerability. The NVD entry lists a NETWORK attack vector with LOW complexity and NO authentication, causing a PARTIAL availability impact (CVSS v2 base score 5.0; CVSS v3.1 base score 7.5, HIGH impact on availability). The connected recor...

CVE-2021-28435

Technical details about CVE-2021-28435 are not publicly provided in the connected documents you supplied. Monitor for updates from vendor advisories and security feeds to learn affected products, impact, and fixes.

CVE-2021-43235

Technical details for CVE-2021-43235 are not publicly available in the provided documents. Monitor for updates from official sources; currently only CVSS metrics and references are noted.

CVE-2022-35746

Technical details about CVE-2022-35746 are not provided in the supplied documents. No product/version/root-cause/impact are specified here; monitor for official updates from Microsoft/NVD to obtain concrete information and remediation.

CVE-2023-35314

Technical details for CVE-2023-35314 are not provided in the connected documents. The materials here only reiterate the vulnerability title. No affected products, root cause, or fixes are specified. Monitor for updates.

CVE-2024-37975

Technical details for CVE-2024-37975 are not provided in the connected documents. The available materials only label it as a Secure Boot bypass without product, vector, impact, or remediation specifics. Monitor for updates for publicly disclosed details.

CVE-2024-38142

CVE-2024-38142 is a Windows Secure Kernel Mode elevation-of-privilege vulnerability (local, low-privilege prerequisite; high impact). The connected sources provide CVSS and impact only (Obtaining Increased Entitlements) and do not specify root cause details beyond the Windows kernel context. Publ...

CVE-2024-38260

CVE-2024-38260 is a Windows Remote Desktop Licensing Service RCE vulnerability. Affected: Windows systems with the Remote Desktop Licensing Service. Impact per sources: execution of arbitrary code with the attacker’s privileges; CVSSv3.1 base score 8.8 (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). Conne...

CVE-2024-43514

Technical details about CVE-2024-43514 are not publicly provided in the connected documents; they reference fixes but do not describe root cause, vectors, or affected versions. Monitor for updates.

CVE-2024-49101

CVE-2024-49101 covers a privilege-elevation flaw in Windows Wireless Wide Area Network Service (WwanSvc). The vulnerability affects the WWAN service component, with the CVSSv3.1 base metrics indicating Physical attack vector, Low attack complexity, Low privileges required, no user interaction, an...

CVE-2024-49119

CVE-2024-49119 is corroborated by the connected KB entry for Windows vulnerabilities, which lists it under Windows Remote Desktop Services with a CVSS v3.1 score of 8.10 and an impact described as Execute Random Code. The document confirms RDS involvement and high-risk classification, but it does...

CVE-2025-21184

CVE-2025-21184 is an Elevation of Privilege issue affecting Windows Core Messaging. The connected AVLEONOV article identifies it as EoP in Windows Core Messaging and lists it among February Patch Tuesday CVEs. Provided documents do not include a vendor/product version, root cause, exploit details...

CVE-2025-21252

Technical details about CVE-2025-21252 are not publicly available in the provided documents. Monitor for updates from Microsoft and NVD for affected products, impact, and remediation.

CVE-2025-21266

CVE-2025-21266 is a Windows Telephony Service remote code execution vulnerability. The linked data shows a network-exposed impact with CVSS v3.1 base score 8.8 (HIGH), requiring user interaction for exploitation and affecting confidentiality, integrity, and availability. Affected component is the...

CVE-2025-26669

CVE-2025-26669 is listed in RRAS (Windows Routing and Remote Access Service) with the impact described as Access to sensitive data and a severity score of 8.80. The RRAS entry indicates an information-disclosure risk via an out-of-bounds read, attributed to a vulnerability in RRAS. Connected sour...

CVE-2025-27469

CVE-2025-27469 affects Windows LDAP (Lightweight Directory Access Protocol) and describes an uncontrolled resource consumption that enables an unauthenticated attacker to cause network-denied service. The issue is categorized as a Denial-of-Service via LDAP on the network. Microsoft has released ...

CVE-2026-26151

CVE-2026-26151 describes insufficient UI warnings in Windows Remote Desktop that can enable a network attacker to spoof a remote session. The NVD entry lists a CVSS v3.1 base score of 7.1 (HIGH) with network access, no privileges required, user interaction required, and impact to confidentiality ...

CVE-2026-42989

Winlogon Elevation of Privilege (CVE-2026-42989) is caused by improper link resolution before file access ("link following"). This vulnerability allows an authorized, local attacker to gain higher privileges. Affected: Winlogon component on Windows; impact is local privilege escalation with a CVS...

CVE-2026-50655

CVE-2026-50655 is a Windows Media/Media Foundation heap-based buffer overflow that allows local code execution by a non-privileged attacker with user interaction. It has concrete details in multiple connected sources: exploitation status on CIRCL (exploited in the wild), and Microsoft/MSRC entrie...

CVE-2026-61352

The CVE-2026-61352 entry describes a race condition in the Remote Desktop Client caused by concurrent execution with improper synchronization on a shared resource. This leads to remote code execution over the network, classified with a high impact (CVSS 3.1: 7.5) and network attack vector, requir...

CVE-2019-0701

The CVE-2019-0701 entry describes a denial-of-service condition affecting Microsoft Hyper-V. It concerns the host Hyper-V environment failing to properly validate input from a privileged user on a guest OS, associated with the Windows Hyper-V Denial of Service vulnerability. The NVD entries group...

CVE-2019-1436

Technical details about CVE-2019-1436 are not publicly provided in the supplied documents. Monitoring for updates is recommended; the connected sources describe other vulnerabilities but do not elaborate on this CVE's affected products, root cause, or fix.

CVE-2019-1477

The CVE-2019-1477 issue affects the Windows Printer Service. Description and connected advisories indicate an elevation of privilege vulnerability caused by the Printer Service not properly validating file paths when loading printer drivers. An authenticated attacker who can log on could run a sp...

CVE-2020-0658

CVE-2020-0658 affects the Windows Common Log File System (CLFS) driver. The vulnerability stems from a flaw in how objects in memory are handled, allowing an information disclosure. According to the provided data, exploitation is local with low attack complexity, and confidentiality impact is lis...

CVE-2020-0661

The CVE-2020-0661 entry describes a denial-of-service vulnerability in Microsoft Hyper-V. It occurs when Hyper-V on a host fails to properly validate input from a privileged user on a guest OS, enabling a guest-level attacker to cause a denial of service. The CVE is stated as distinct from CVE-20...

CVE-2020-0698

Technical details for CVE-2020-0698 are not provided in the connected documents; the sources list the CVE but do not specify affected products, root cause, impact, or fixes. Monitor for updates from official advisories.

CVE-2020-0721

Technical details for CVE-2020-0721 are not publicly available in the provided documents . Monitor for updates in case further specifics on affected products, impact, or fixes are released.

CVE-2020-0875

CVE-2020-0875 describes an information disclosure vulnerability in how splwow64.exe handles certain calls. An attacker who exploits this could obtain information to further compromise the user’s system (low-integrity to medium-integrity). The flaw by itself does not grant arbitrary code execution...

CVE-2020-0993

Technical details about CVE-2020-0993 are not publicly provided in the supplied connected documents. The materials reference the Windows DNS DoS vulnerability but do not specify affected products/versions, root cause, exploitation status, or fixes. Monitor for updates.

CVE-2020-1005

CVE-2020-1005 is an information-disclosure vulnerability in the Microsoft Windows Graphics Component. The connected documents identify the issue as an information-disclosure vulnerability that arises when Windows Graphics Components improperly handle objects in memory (root cause: memory handling...