CVE-2024-38230

CVE-2024-38230 is associated with Windows Standards-Based Storage Management Service and is described in the connected materials as a Denial of Service against that Windows component. The primary technical details available: affected software/component (Windows Standards-Based Storage Management ...

CVE-2019-0886

The CVE-2019-0886 entry concerns a vulnerability in Windows Hyper‑V where the host OS fails to properly validate input from a guest OS, potentially allowing information disclosure by an authenticated guest user. Public connected documents corroborate that the affected component is Windows Hyper‑V...

CVE-2020-0659

CVE-2020-0659 is a Windows elevation-of-privilege vulnerability in the Windows Data Sharing Service, arising when the service improperly handles file operations. The issue enables local attackers to escalate privileges (CVE-2020-0659 is distinct from CVE-2020-0747). The NVD entry indicates a MEDI...

CVE-2020-0682

Technical details about CVE-2020-0682 are not publicly provided in the supplied documents. No concrete affected product/version or remediation info is available here. Monitor for updates from official advisories.

CVE-2020-0747

Technical details about CVE-2020-0747 are not publicly provided in the attached documents. Monitor for updates from authoritative sources; current entries describe the vulnerability at a high level without specific affected products, versions, or mitigations.

CVE-2020-0756

Technical details for CVE-2020-0756 are not publicly available in the provided connected documents. Monitor for updates.

CVE-2020-0774

CVE-2020-0774 is a Windows GDI information-disclosure vulnerability. The Windows GDI component improperly handles memory objects, allowing an attacker to leak memory contents and potentially information needed for further compromise. The vulnerability can be exploited via social engineering (e.g....

CVE-2020-0806

CVE-2020-0806 concerns an elevation of privilege in Windows Error Reporting (WER) related to how WER handles and executes files. The combination of affected component (WER) and the underlying memory handling issue yields a local, low-attack-surface vector with a high-impact outcome (CVE-2020-0806...

CVE-2020-0998

CVE-2020-0998 is an elevation of privilege in the Windows Graphics Component caused by improper in-memory object handling; exploitable via a crafted local application to gain elevation. Microsoft patch addresses the memory handling to prevent unintended user-mode elevation.

CVE-2020-1097

CVE-2020-1097 describes an information-disclosure vulnerability in the Windows GDI component where memory contents could be exposed due to improper handling of objects in memory. An attacker could exploit this by convincing a user to open a specially crafted document or visit a malicious webpage,...

CVE-2020-1126

The CVE-2020-1126 entry relates to a memory corruption vulnerability in Windows Media Foundation caused by improper handling of objects in memory. The affected component is Windows Media Foundation within Windows; the root cause is object handling in memory leading to corruption. Severity metrics...

CVE-2020-1154

CVE-2020-1154 : Elevation of privilege in the Windows Common Log File System (CLFS) Driver due to improper handling of objects in memory. The vulnerability enables local privilege escalation, with a high-severity impact (CONFIDENTIALITY/INTEGRITY/AVAILABILITY listed as HIGH in CVSS 3.1, and LOCAL...

CVE-2020-1277

The CVE-2020-1277 entry relates to an elevation of privilege in Windows Installer. Connected CNVD entries describe the flaw as arising from how Windows Installer handles certain file system operations (some variants mention improper handling/cleanup of input) which can enable a local attacker to ...

CVE-2020-1324

CVE-2020-1324 is an elevation of privilege vulnerability in Windows Security Health Service that occurs when handling certain objects in memory. Per the NVD/Microsoft references, exploitation requires a logged-on attacker and could allow privilege elevation within the same user context due to in-...

CVE-2020-1352

CVE-2020-1352 is tied to a memory handling issue in Windows USO Core Worker that enables elevation of privilege when a specially crafted application runs on Windows/Windows Server. The CNVD entry describes the vulnerability as an OS component memory-management flaw in Windows USO Core Worker that...

CVE-2020-1372

CVE-2020-1372 refers to an Elevation of Privilege in Windows Mobile Device Management (MDM) Diagnostics. CNVD entries state the root cause as improper handling of objects in memory, exploitable by running a specially crafted application to bypass access restrictions (and, in one CNVD entry, delet...

CVE-2020-1385

CVE-2020-1385 affects the Windows Credential Picker. The vulnerability arises from how memory objects are handled, enabling local elevation of privilege if a crafted application runs on a vulnerable system. The CVE is tied to the Windows Credential Picker component and has a Local, Low-Complexity...

CVE-2020-1392

CVE-2020-1392 is an Elevation of Privilege vulnerability in the Windows Delivery Optimization service. It arises from improper handling of memory objects, enabling a local attacker to execute code with elevated privileges by running a specially crafted script or application. Documents also associ...

CVE-2020-1399

Technical details for CVE-2020-1399 are not present in the provided connected documents. Public EUVD entries mention malware but do not describe the vulnerability specifics. Monitor for updates.

CVE-2020-16976

CVE-2020-16976 affects Windows systems via the Windows Backup Service. The root cause is an improper handling of file operations in the service, enabling a local attacker who already has code execution to run a crafted application to gain elevated privileges. The CVSS 3.1 base score is 7.8 (HIGH)...

CVE-2020-17031

Technical details about CVE-2020-17031 (Windows remote access elevation of privilege) are not provided in the connected documents; public information in the initial description is limited. Monitor for updates.

CVE-2021-24106

CVE-2021-24106 is a Windows DirectX information disclosure vulnerability. According to the NVD entry, the issue has a CVSS v3.1 base score of 5.5 (medium) with a local attack vector, low attack complexity, and no user interaction required. The confidentiality impact is listed as HIGH, while integ...

CVE-2023-35309

MSMQ Remote Code Execution vulnerability CVE-2023-35309 is discussed in the connected AVLEONOV article as an MSMQ RCE requiring an attacker to send a malicious MSMQ packet to an MSMQ server. The article also suggests blocking TCP port 1801 as a mitigation and notes the vulnerability context among...

CVE-2024-35270

Technical details about CVE-2024-35270 (Windows iSCSI Service DoS) are not provided in the connected documents. Monitor for official advisories and Microsoft updates for affected products and remediation.

CVE-2024-38052

Technical details for CVE-2024-38052 are not publicly available in the provided documents. No affected products, root cause, impact, or remediation are specified here. Monitor official sources for updates.

CVE-2024-38091

Technical details for CVE-2024-38091 are not provided in the connected documents. Monitor for updates; no affected products, root cause, vectors, or fixes are stated here.

CVE-2024-38149

CVE-2024-38149 is a Windows BranchCache Denial of Service vulnerability. Documents indicate a network-exploitable issue (CVSS v3.1: 7.5, AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) affecting BranchCache components. Microsoft provides fixes via security updates (KB/MSRC guidance); no explicit root-cause ...

CVE-2024-43524

CVE-2024-43524 is a Windows Mobile Broadband Driver Remote Code Execution vulnerability. The available connected documents confirm the affected component as the Windows Mobile Broadband driver and indicate that updates from Microsoft were released to address vulnerabilities in the Windows update ...

CVE-2024-43645

CVE-2024-43645 is a Windows Defender Application Control (WDAC) security feature bypass described in connected advisories. The vulnerability permits bypassing WDAC protections via a local attacker, with high potential impact to confidentiality, integrity, and availability. Microsoft has published...

CVE-2024-49121

CVE-2024-49121 is an LDAP Denial-of-Service vulnerability in Windows LDAP (Domain Controller). The connected advisory confirms the LDAP issue as a DoS risk and notes that Microsoft has released fixes via updates; applying the relevant Windows security updates is the recommended remediation. MITRE...

CVE-2025-21256

Technical details for CVE-2025-21256 are not provided in the connected documents. Public information here is limited to general Windows updates references; no product, exploit, or root-cause specifics are disclosed. Monitor for updates and additional disclosures.

CVE-2025-49740

CVE-2025-49740 is a protection mechanism failure in Windows Defender SmartScreen that can allow an unauthenticated attacker to bypass the SmartScreen protection over the network. This vulnerability affects the SmartScreen security feature in Windows and can lead to executing or delivering untrust...

CVE-2026-42909

CVE-2026-42909 involves a heap-based buffer overflow in the Remote Desktop Client that enables a remote attacker to execute code over the network. The vulnerability arises from improper handling of data during remote desktop operations, leading to memory corruption. The CVSS-3.1 vector (AV:N/AC:H...

CVE-2026-61352

The CVE-2026-61352 entry describes a race condition in the Remote Desktop Client caused by concurrent execution with improper synchronization on a shared resource. This leads to remote code execution over the network, classified with a high impact (CVSS 3.1: 7.5) and network attack vector, requir...

CVE-2026-65787

The CVE-2026-65787 entry describes a heap-based buffer overflow in Desktop Window Manager that allows an authorized attacker to elevate privileges locally. Documented impact is local privilege escalation with a high severity (CVSS 3.1: AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). The vulnerability affec...

CVE-2019-1310

Technical details for CVE-2019-1310 are not provided in the connected documents. Based on the initial description, no affected product/version or remediation details are available here. Monitor for updates from authoritative sources.

CVE-2020-0660

CVE-2020-0660 is a denial-of-service vulnerability in the Windows Remote Desktop Protocol (RDP). According to the trusted sources, an attacker can trigger the issue by establishing an RDP connection and sending specially crafted requests, resulting in a disruption of availability. The public reco...

CVE-2020-0745

CVE-2020-0745 is a Windows Graphics Component elevation-of-privilege vulnerability caused by improper handling of memory objects. The entry (CVE-2020-0745) indicates a local attack vector requiring low privileges and no user interaction (CVSS v3.1: Local, Low, None, Privilege Escalation with High...

CVE-2020-0748

Technical details for CVE-2020-0748 are not publicly provided in the connected documents; no affected products, versions, or fixes are specified here. Monitor for updates from official advisories.

CVE-2020-0845

Technical details for CVE-2020-0845 are not publicly available in the provided documents; monitor for updates.

CVE-2020-0853

CVE-2020-0853 is a Windows Imaging Component information-disclosure vulnerability rooted in uninitialized memory in Windows image decoders. FireEye’s analysis shows uninitialized memory in windowscodecs!CFormatConverter::Initialize led to leaking pixel data during TIFF/image decoding; PoC output ...

CVE-2020-0864

CVE-2020-0864 affects Windows Work Folder Service and is an elevation-of-privilege flaw caused by improper handling of file operations. Connected CNVD-2020-23447 describes a privilege-escalation vulnerability in Windows Work Folder Service that can be exploited by a crafted application to run wit...

CVE-2020-0869

CVE-2020-0869 denotes a memory corruption vulnerability in Windows Media Foundation caused by improper handling of in-memory objects. Connected sources identify Windows Media Foundation as the affected component, with generic attacker impact described (unauthorized data access or modification; po...

CVE-2020-0996

Technical details about CVE-2020-0996 are not publicly available in the provided documents. No confirmed affected products, root cause, or remediation are stated here. Monitor for official advisories and updates.

CVE-2020-1140

CVE-2020-1140 (DirectX Elevation of Privilege) is a Windows DirectX vulnerability where memory objects are improperly handled, enabling an attacker with local access to escalate privileges and potentially execute arbitrary code in kernel mode. The root cause, as described in MS and NVD records, i...

CVE-2020-1191

Technical details (affected product/component, root cause, impact, fixes) are not publicly available in the provided documents. Monitor for updates from official advisories.

CVE-2020-1283

CVE-2020-1283 is a Windows denial-of-service vulnerability where memory objects are improperly handled, causing the system to stop responding. The connected Nessus entry (KB4557957 family) lists CVE-2020-1283 among patched issues in June 2020, but the provided sources do not specify affected prod...

CVE-2020-1290

CVE-2020-1290 is a Win32k information-disclosure vulnerability in Windows. The root cause is that the Win32k component improperly provides kernel information, enabling an attacker who can run code locally to access due to information disclosure. The CVSS metrics in the record indicate LOCAL acces...

CVE-2020-1361

CVE-2020-1361 affects Windows WalletService, described as an information-disclosure vulnerability stemming from how WalletService handles memory. The entry notes an attacker would first need code execution on a victim system, making it a local-attack scenario with information disclosure as the im...

CVE-2020-1389

Technical details about CVE-2020-1389 are not provided in the connected documents. The materials only reiterate the vulnerability name and a generic Windows kernel information disclosure. Monitor official advisories for affected products, impact, and remediation updates.