CVE-2025-24072

CVE-2025-24072 is a use-after-free vulnerability in Microsoft Local Security Authority Server (lsasrv) that can allow an authorized attacker to locally elevate privileges. The affected component is lsasrv; impact is elevated privileges (local). Connected sources (including NCSC/KB advisories) con...

CVE-2025-29842

Technical details (affected product, root cause, impact, fixes) for CVE-2025-29842 are not provided in the supplied connected documents. Monitor for updates from official advisories.

CVE-2025-29963

CVE-2025-29963 describes a heap-based buffer overflow in Windows Media/Windows Media Foundation that could allow a remote attacker to execute code over the network. The connected documents indicate the issue affects Windows Media related components and has been addressed in May 2025 security upda...

CVE-2025-32722

CVE-2025-32722 causes improper access control in the Windows Storage Port Driver . The vulnerability could allow an authorized local attacker to disclose information, per the CVE description. CVSSv3.1: Local attack, Low privileges required, no user interaction, Confidentiality impact High, others...

CVE-2025-54109

CVE-2025-54109 affects Windows Defender Firewall Service. The vulnerability is described as a type confusion that can enable local privilege escalation by an authorized attacker. Connected sources (NCSC advisory) list CVE-2025-54109 with a base score of 6.7 (Medium) and attribute the impact to lo...

CVE-2026-20820

CVE-2026-20820 is a local privilege-escalation vulnerability caused by a heap-based buffer overflow in the Windows Common Log File System Driver. An authenticated, locally-adjacent attacker could trigger the overflow to obtain higher privileges on the host. The CVE is corroborated by multiple fee...

CVE-2026-20922

CVE-2026-20922 is a heap-based buffer overflow in Windows NTFS that enables a locally authenticated attacker to execute code. The description and connected sources confirm NTFS as the vulnerable component and local execution as the impact. Public details in the provided documents are consistent w...

CVE-2026-45592

CVE-2026-45592 describes an integer overflow/wraparound in Windows Internet (wininet.dll) that enables local privilege escalation for an authorized attacker. The CVSS 3.1 metrics indicate a HIGH impact across confidentiality, integrity, and availability, with a LOCAL attack vector, LOW privileges...

CVE-2026-50667

CVE-2026-50667 is a Windows NTFS/Windows Common Log File System Driver elevation-of-privilege vulnerability caused by a race condition in a shared resource. The CVE affects Windows NTFS and is identified by Microsoft as a privilege-escalation issue; updates have been released (July 2026 monthly r...

CVE-2026-59138

CVE-2026-59138 is a null pointer dereference in Microsoft Remote Registry Service that allows an authorized attacker to cause a denial of service over a network. The vulnerability has a CVSS v3.1 base score of 6.5 (MEDIUM) with Network attack vector, Low attack complexity, Privileges Required: Lo...

CVE-2019-1374

An information disclosure vulnerability exists in how Windows Error Reporting (WER) handles objects in memory. Multiple sources (NVD and Red Hat/SUSE advisories) identify it as a Windows in-memory handling issue that can expose sensitive information to an attacker with local access and user inter...

CVE-2019-1383

Technical details about CVE-2019-1383 are not publicly provided in the supplied documents. Monitor for updates in connected feeds for affected products, versions, impact, and fixes.

CVE-2019-1415

CVE-2019-1415 affects Windows Installer and is described as an elevation-of-privilege vulnerability arising from how Windows Installer handles certain filesystem operations. The CVE entry notes that exploitation would require unprivileged code execution on the victim system (local access) with no...

CVE-2019-1420

Technical details for CVE-2019-1420 are not publicly provided in the connected documents. Monitor for updates from official sources; no explicit exploit/victim/product/version data is available here.

CVE-2019-1437

Technical details about CVE-2019-1437 are not publicly available in the provided Connected documents. Monitor for updates; the material here does not specify affected products/versions, root cause, impact, or remediation.

CVE-2020-0699

CVE-2020-0699 is a Win32k Information Disclosure Vulnerability in the win32k component of Windows kernel. The issue arises when kernel information is inappropriately exposed, enabling an attacker with local access to obtain information from the affected system (information disclosure). Public dat...

CVE-2020-0798

CVE-2020-0798 is a Windows Installer elevation-of-privilege vulnerability. The issue arises when Windows Installer does not properly sanitize input, causing insecure library loading. A locally authenticated attacker could execute arbitrary code with elevated system privileges. The CVE is tied to ...

CVE-2020-0834

CVE-2020-0834 (Windows ALPC Elevation of Privilege) is supported by the connected NVD entry, which describes a local-elevation vulnerability in Windows where improper handling of Advanced Local Procedure Call (ALPC) calls could allow an attacker to run arbitrary code in the security context of th...

CVE-2020-0937

Summary of CVE-2020-0937 context (Media Foundation): An information-disclosure vulnerability exists in Microsoft Windows Media Foundation due to improper handling of memory objects. The affected product is Microsoft Windows/Windows Server via the Media Foundation component. The root cause is memo...

CVE-2020-0942

CVE-2020-0942 is an Elevation of Privilege vulnerability in the Windows Connected User Experiences and Telemetry Service caused by improper handling of file operations. According to CNVD/NVD entries, exploitation would allow a locally authenticated attacker to execute code with elevated privilege...

CVE-2020-1109

CVE-2020-1109 is a Windows Update Stack elevation-of-privilege issue. The description in the CVE notes memory-object handling flaws in Windows Update Stack. Connected documents reference a Windows Update security update (KB4556799) that covers Windows Update Stack fixes among other components, in...

CVE-2020-1141

Technical details for CVE-2020-1141 are not publicly available in the provided documents. No explicit affected components, root cause, or fixes are stated here. Monitor for updates from official advisories.

CVE-2020-1228

CVE-2020-1228 is a DoS vulnerability in the Windows DNS service. An authenticated attacker can send crafted DNS queries that cause the DNS server to become nonresponsive. Affected component: Windows DNS processing of queries. Root cause: improper handling of DNS queries leading to resource exhaus...

CVE-2020-1258

CVE-2020-1258 is an elevation-of-privilege vulnerability in DirectX where objects in memory are improperly handled. The impact is local privilege escalation with the potential to compromise the system if an attacker can cause the vulnerable DirectX component to execute code with higher privileges...

CVE-2021-26884

CVE-2021-26884 is described as a Windows Media Photo Codec Information Disclosure Vulnerability . The connected documents confirm the CVE is associated with Windows Media components and appear in multiple vulnerability lists (NVD, CVE List, OpenVAS). The materials do not provide a concrete root-c...

CVE-2023-35331

Technical details about CVE-2023-35331 are not provided in the connected documents. The initial entry mentions an LSA Denial of Service vulnerability in Windows, but no affected product versions, root cause, impact specifics, exploitation status, or remediation are included here. Monitor for upda...

CVE-2023-36012

CVE-2023-36012 is a Windows DHCP Server information-disclosure vulnerability. Connected sources confirm the affected product area as Windows DHCP Server and provide a CVSS v3.1 base score of 5.3 (Medium) with vectors AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N, indicating a confidentiality impact of Low....

CVE-2024-38119

CVE-2024-38119 affects Windows Network Address Translation (NAT). The vulnerability allows Remote Code Execution with high impact (cctx: code execution, data/privilege impact) when an attacker on an adjacent network exploits NAT processing. CVSS 3.1 vector: AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H. Mi...

CVE-2024-43607

CVE-2024-43607 affects Windows Routing and Remote Access Service (RRAS). Vulnerability allows remote code execution over the network with no privileges and requires user interaction; CVSS v3.1 base score 8.8 (HIGH). Connected documents indicate RRAS-related fixes from Microsoft security updates (...

CVE-2025-21240

CVE-2025-21240 is a Windows Telephony Service remote code execution vulnerability. The CIRCL sighting data lists Windows Telephony Service with CVSS 8.80 (High) and impact: Execute random code, consistent with the CVSS vector in the Initial Description (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H). Conne...

CVE-2025-21271

CVE-2025-21271 affects the Windows Cloud Files Mini Filter Driver and is an Elevation of Privilege vulnerability. According to the CVE, the issue has a Local attack vector with Low access complexity and can lead to High impact on confidentiality, integrity, and availability. The CVSS metrics indi...

CVE-2025-21305

CVE-2025-21305 is documented as a Windows Telephony Service Remote Code Execution vulnerability. The connected CIRCL source explicitly lists CVE-2025-21305 under Windows Telephony Service with an impact described as Execute random code, indicating a code-execution vector in the Telephony service....

CVE-2025-21306

CVE-2025-21306 corresponds to a remote code execution vulnerability in Windows Telephony Service. The issue is mapped to Windows Telephony Service and is rated high (CVSSv3.1: 8.8, AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H). Connected sources confirm the affected component and vulnerability type; root ...

CVE-2025-62549

CVE-2025-62549 is a Windows RRAS Remote Code Execution vulnerability. The connected documents confirm an unauthenticated network exploit that allows code execution via RRAS component, with high impact and network access. Affected software is Windows RRAS services; root cause identified as an untr...

CVE-2026-59125

Use-after-free in the Virtual Hard Disk (VHD) Miniport Driver can allow an authorized local attacker to elevate privileges. The vulnerability is described as a local privilege escalation with high impact to confidentiality, integrity, and availability. The CVSS vector indicates LOCAL access, user...

CVE-2026-62770

CVE-2026-62770: Heap-based buffer overflow in Windows Shell is disclosed as a local privilege escalation vulnerability. Affects Windows Shell components; attacker must be authorized and can escalate privileges locally without user interaction (low privileges required, local access). CVSS 3.1 base...

CVE-2019-1309

Technical details about CVE-2019-1309 are not provided in the supplied documents. Monitor for updates from official advisories.

CVE-2019-1409

CVE-2019-1409 is an information disclosure vulnerability in the Windows Remote Procedure Call (RPC) runtime. The connected data confirms the root cause as improper initialization of objects in memory within RPC, enabling partial confidentiality impact. The CVE affects the Windows RPC component, w...

CVE-2019-1439

CVE-2019-1439 is described as a Windows GDI information disclosure vulnerability. Connected advisories provide concrete details: a heap-based buffer overflow in the MF3216 component of Microsoft Windows, with exploitation described as remote and triggered by the user opening a specially crafted f...

CVE-2020-0728

CNVD-2020-10129 and related OpenVAS entries describe CVE-2020-0728 as an information disclosure vulnerability in Microsoft Windows, specifically involving the Windows Modules Installer Service. The root cause is improper disclosure of file information by the service, enabling an attacker to view ...

CVE-2020-1124

CVE-2020-1124 is a Windows vulnerability affecting the Windows State Repository Service, where an elevation of privilege occurs due to improper handling of objects in memory. The issue can allow a local attacker to gain higher privileges, with CVSS-3.1 indicating a HIGH base score (local exploit,...

CVE-2020-1184

Technical details for CVE-2020-1184 are not publicly provided in the supplied documents; monitor for updates from official advisories.

CVE-2020-1187

Technical details about CVE-2020-1187 are not publicly provided in the connected documents. No affected products, root cause, or fixes are specified here. Monitor for updates in the provided sources.

CVE-2020-1431

CVE-2020-1431 is the Windows AppX Deployment Extensions Elevation of Privilege vulnerability. The issue stems from improper privilege management within AppX Deployment Extensions, enabling an authenticated attacker to elevate privileges by running a specially crafted application and potentially a...

CVE-2020-1438

CVE-2020-1438 is an Elevation of Privilege vulnerability in Windows Network Connections Service. The issue arises from how in-memory objects are handled, enabling local attackers to potentially execute code with elevated privileges. Affected product: Windows Network Connections Service (per CVE-2...

CVE-2020-16879

CVE-2020-16879 is a Windows Projected Filesystem information-disclosure vulnerability. The issue arises when the Projected Filesystem improperly handles file redirections, enabling a user who is logged on to the system to run a crafted application that could disclose sensitive information and fur...

CVE-2021-26866

CVE-2021-26866 is a Windows Update Service Elevation of Privilege vulnerability with local attack vector. The linked sources identify the affected component as Windows Update Service and classify impact as potential elevation of privileges, with high integrity/availability concerns in some vector...

CVE-2021-26870

CVE-2021-26870 : Windows Projected File System Elevation of Privilege vulnerability. The CVE is documented as a local, low-privilege escalation with high impact on confidentiality, integrity, and availability (per CVSS v3.1: 7.8, HIGH; LOCAL, PR:L, UI:N). The Connected documents do not provide ex...

CVE-2021-26872

CVE-2021-26872 is described as a Windows Event Tracing Elevation of Privilege vulnerability. The NVD entry provides a CVSS v3.1 base score of 7.8 (Local, Low attack complexity, Privileges required: Low, No user interaction) with high impact on confidentiality, integrity, and availability. Connect...

CVE-2021-43246

CVE-2021-43246 is a Windows Hyper-V Denial of Service vulnerability. Public records identify it with local attack vector and availability impact, with CVSS 3.1 base score 5.6 (medium) and CVSS 2.0 base score 4.9 (medium). Affected context is Windows Hyper-V; exact vulnerable component/versions ar...