5318 matches found
CVE-2024-38235
CVE-2024-38235 is listed under Windows Hyper-V with a CVSS v3.1 score of 6.50 and impact described as a Denial-of-Service. The connected NCSC advisory confirms Windows vulnerabilities fixed in this cycle; it recommends applying the Microsoft updates per MSRC guidance. The provided documents do no...
CVE-2024-43516
Technical details about CVE-2024-43516 are not provided in the connected documents. Public details appear limited in the supplied sources. Monitor for updates.
CVE-2024-43537
CVE-2024-43537 is a denial-of-service vulnerability in the Windows Mobile Broadband Driver. Public sources confirm an availability impact (DoS) with the CVSS=3.1 vector: Adjacent attacker, Low attack complexity, No privileges required, No user interaction, Scope unchanged, Confidentiality/Integri...
CVE-2024-49074
CVE-2024-49074 is a Windows Kernel-Mode Driver elevation-of-privilege vulnerability. The connected docs indicate a local exploit requiring low privileges with no user interaction, potentially enabling privileged execution on affected Windows kernel code. Public exploits exist. Microsoft released ...
CVE-2025-21220
CVE-2025-21220 is a Microsoft Message Queuing information disclosure vulnerability that has concrete public details in multiple connected sources: the CVE is listed as affecting Windows Message Queuing with the impact described as “Accessing Sensitive Data” and a CVSS basis of 7.5 (HIGH) indicati...
CVE-2025-21339
CVE-2025-21339 corresponds to a Windows Telephony Service remote code execution vulnerability. The NCSC listing confirms a high-severity impact (CVSS 3.1: AV Network, AC L, PR None, UI Required, S U, C/H/I/A H) with an overall score of 8.80 and notes that exploitation can lead to executing code i...
CVE-2025-21411
Technical details about CVE-2025-21411 are not provided in the connected documents. Public sources reference Windows Telephony Service Remote Code Execution, but this dataset contains no product/version/root-cause/fix specifics. Monitor for updates from MSRC and NVD.
CVE-2025-33057
CVE-2025-33057 is a Windows Local Security Authority (LSA) vulnerability where a null pointer dereference could allow an authorized attacker to cause a network-based Denial-of-Service. Affected component is LSA; impact is DoS over the network. Documented in NVD and corroborated by NC SC/NCSC entr...
CVE-2025-33075
CVE-2025-33075 affects Windows Installer and is tied to an improper link resolution before file access (a link following issue). The root cause enables a locally authenticated attacker to achieve privilege escalation (local, high impact). The NCSC advisory aggregates list CVE-2025-33075 under Win...
CVE-2025-59295
CVE-2025-59295 is a heap-based buffer overflow in Internet Explorer that could allow an unauthenticated attacker to execute code remotely over the network (CVSS 3.1/8.8). The connected MSKB guidance and advisories indicate Windows security updates addressing this class of issue; apply the latest ...
CVE-2026-54113
The CVE-2026-54113 entry pertains to resource allocation without limits or throttling in the Windows Kernel accessible over a network, enabling a remote attacker to cause a denial of service. Documents indicate the affected component is the Windows Kernel involved in network-resource handling; ro...
CVE-2026-62698
The CVE-2026-62698 entry concerns a numeric truncation error in Microsoft Digest Authentication. The vulnerability is described as enabling a locally authenticated attacker to achieve privilege elevation (base score 7.8, CVSS 3.1, LOCAL, LOW privileges required, NONE user interaction, HIGH impact...
CVE-2026-62785
CVE-2026-62785: Heap-based buffer overflow in Windows LDAP (Lightweight Directory Access Protocol) allows unauthenticated remote code execution over the network. Affected: Windows LDAP service. Root cause: improper heap handling leading to overflow. Impact: remote code execution with high severit...
CVE-2026-65678
CVE-2026-65678: A use-after-free in Windows Win32K enables an in-local privilege elevation by an authorized attacker. Affected software is Windows with Win32K component; the vulnerability arises from improper lifecycle handling leading to use-after-free conditions. The CVSS score is 7.0 (High) wi...
CVE-2020-0685
CVE-2020-0685 is a Windows local elevation-of-privilege vulnerability due to improper handling of COM object creation in the Windows COM Server. The root cause is misuse in COM object creation, enabling an attacker who logs on locally to run a specially crafted application and gain elevated privi...
CVE-2020-0885
CVE-2020-0885 concerns the Windows GDI component, where memory contents can be improperly disclosed (information disclosure vulnerability). The vulnerability arises from how GDI handles objects in memory, enabling potential leakage of memory contents. The public documentation consistently describ...
CVE-2020-1076
Technical details (affected product/versions, root cause, exploitability or fixes) for CVE-2020-1076 are not provided in the connected documents. No public specifics are available here; monitor for updated disclosures from official sources.
CVE-2020-1078
Technical details about CVE-2020-1078 (Windows Installer Elevation of Privilege) are not provided in the connected documents. Monitor for updates.
CVE-2020-1110
CVE-2020-1110 is a Windows Update Stack Elevation of Privilege vulnerability. The issue arises from the Windows Update Stack failing to properly handle objects in memory, enabling local privilege escalation (kernel-level impact per CNVD entries) with high CVSS scores. Affected product scope is Wi...
CVE-2020-1132
CVE-2020-1132 is described as an Elevation of Privilege in Windows Error Reporting Manager caused by improper handling of file/folder links. The connected CNVD entry expands this to a condition where an attacker could exploit the issue by using a specially crafted application to overwrite a targe...
CVE-2020-1267
CVE-2020-1267 is a Windows Local Security Authority Subsystem Service (LSASS) denial-of-service vulnerability. According to CNVD-2020-52913, an attacker could trigger a DoS by sending a specially crafted authentication request, potentially causing the target system to reboot. The connected docume...
CVE-2020-1388
The CVE-2020-1388 entry describes an Elevation of Privilege vulnerability in Windows, triggered by how psmsrv.dll handles objects in memory. The CNVD-2020-43110 record confirms a Windows psmsrv.dll EoP flaw (local attacker could run a crafted app to execute code with elevated privileges). No expl...
CVE-2020-1396
CVE-2020-1396 affects Microsoft Windows ALPC Elevation of Privilege. CNVD-2020-45187 describes a vulnerability where Windows ALPC is not correctly handling calls, allowing an attacker who logs on and runs a crafted application to execute arbitrary code with local system privileges. The connected ...
CVE-2020-17070
The CVE-2020-17070 entry concerns the Windows Update Medic Service Elevation of Privilege vulnerability. The available documents identify a local, low-privilege elevation of privilege in the Windows Update Medic Service, with the NVD metrics showing local access, low attack complexity, and high i...
CVE-2023-32083
CVE-2023-32083 is described in the documents as a Windows Failover Cluster Information Disclosure vulnerability, with impact stated as access to sensitive data. The connected sources do not provide explicit technical root cause details or a specific remediation patch/version for this CVE. Action:...
CVE-2024-38247
CVE-2024-38247 is a Windows Graphics Component local elevation of privilege vulnerability. The CVSSv3.1 vector shows Attack Vector: Local, Privileges Required: Low, User Interaction: None, with all of Confidentiality/Integrity/Availability impacts: High. Public documents confirm a Windows patch r...
CVE-2024-49087
CVE-2024-49087 affects the Windows Mobile Broadband Driver in Windows. It is an information-disclosure vulnerability in the Mobile Broadband component, with CVSS v3.1 base score 4.6 (AV: Physical, AC: Low, PR: None, UI: None, S: Unchanged; C: High, I: None, A: None). Exploitation requires physica...
CVE-2025-21300
CVE-2025-21300 affects Windows UPnP Device Host. Connected CNVD data ties the issue to the Windows upnphost.dll component and a Denial of Service impact. Microsoft has published January 2025 security updates to address this family of issues; applying KB5050021 (and related January 2025 updates) i...
CVE-2025-21323
Technical details about CVE-2025-21323 are not publicly available in provided connected documents. Records confirm the CVE exists and is linked to Windows Kernel Memory Information Disclosure, but no affected products, versions, root cause, or fixes are described here. Monitor updates.
CVE-2025-21367
CVE-2025-21367 targets the Windows Win32 Kernel subsystem with a local elevation-of-privilege flaw. The NVD entry lists a CVSS v3.1 base score of 7.8 (HIGH) with local access, low attack complexity, and privileges required, and the impact to confidentiality, integrity, and availability as HIGH. C...
CVE-2025-26641
CVE-2025-26641 affects Windows Cryptographic Services, causing Denial of Service via uncontrolled resource consumption over the network. Base score 7.5 (Network, High availability impact). Exploitation status not detailed in the provided connected documents; remediation per Microsoft security upd...
CVE-2025-49734
CVE-2025-49734 affects Windows PowerShell. The root cause is an improper restriction of the communication channel to intended endpoints, enabling an authorized local attacker to elevate privileges. The CVE maps to a local privilege escalation with high impact (C:H/I:H/A:H) and requires local acce...
CVE-2026-34342
CVE-2026-34342 describes a race condition in Windows Print Spooler Components enabling local privilege escalation for an authenticated attacker. The vulnerability arises from improper synchronization on a shared resource, leading to concurrent execution issues. Impact is local elevation of privil...
CVE-2026-50502
CVE-2026-50502 corresponds to a Windows Event Logging Service remote code execution vulnerability. The issue is described as insufficient granularity of access control in the Event Logging Service, enabling an authenticated, network-accessing attacker to run code on the vulnerable system. For con...
CVE-2019-1323
Technical details about CVE-2019-1323 are not publicly available in the provided documents. No affected products/versions, root cause, impact, or remediation are specified here. Monitor for updates from primary sources.
CVE-2019-1324
CVE-2019-1324 is a Windows TCP/IP stack information-disclosure vulnerability created by improper handling of IPv6 flowlabel data in packets. An attacker could send specially crafted IPv6 packets to a remote Windows host to exfiltrate information, without directly gaining code execution or privile...
CVE-2020-0780
CVE-2020-0780 is described as an elevation of privilege affecting the Windows Network List Service, arising from how the service handles objects in memory. The CVE entry identifies a local attack vector with low complexity and no user interaction required; the exploit could grant at least partial...
CVE-2020-0808
CVE-2020-0808 describes an elevation of privilege vulnerability in the way the Provisioning Runtime validates certain file operations. The connected documents reiterate this description but do not specify affected products, versions, root cause details, impact metrics, exploit status, or availabl...
CVE-2020-0880
CVE-2020-0880 describes an information disclosure vulnerability in the Windows GDI component where memory contents can be improperly disclosed. The vulnerability affects Windows GDI memory handling; exploitation could allow an attacker to obtain information to further compromise the target system...
CVE-2020-1121
Technical details are not publicly available in the provided documents. Monitor for updates.
CVE-2020-1151
Technical details for CVE-2020-1151 are not publicly provided in the supplied documents. No concrete exploit, affected product/version, or remediation information is present. Monitor for updates from official advisories and vendor bulletins.
CVE-2020-1169
CVE-2020-1169 is a Windows Runtime Elevation of Privilege vulnerability. The root cause is the Windows Runtime improperly handling objects in memory, which could allow an attacker to run arbitrary code in an elevated context by executing a specially crafted application. The vulnerability is addre...
CVE-2020-1259
CVE-2020-1259 affects Windows Host Guardian Service. The vulnerability is a security feature bypass caused by improper handling of hashes that are recorded/logged. The provided documents do not specify the affected versions, exact exploit details, impact, or a remediation/patch. Microsoft MS advi...
CVE-2021-26880
Technical details (affected product/component/version/root cause/impact/fix) for CVE-2021-26880 are not provided in the connected documents. The initial description remains high‑level; monitor for updates and new disclosures.
CVE-2021-26889
Technical details about CVE-2021-26889 are not publicly provided in the supplied documents. Monitor for updates from vendors and security advisories to obtain affected products, impact, and remediation.
CVE-2021-27088
CVE-2021-27088 refers to Windows Event Tracing Elevation of Privilege. The NVD entry provides CVSS details (CVSS 3.1: LOCAL, LOW ATTACK COMPLEXITY, PR:L, NONE user interaction; impacts HIGH confidentiality, integrity, and availability) and labels it as a local elevation of privilege vulnerability...
CVE-2024-43523
CVE-2024-43523 refers to a Windows Mobile Broadband Driver remote code execution vulnerability. Microsoft and CVE records indicate fixes are delivered via October 2024 security updates (e.g., KB5044284 and related servicing stacks), with mitigations requiring installation of those updates. The CV...
CVE-2024-49078
Technical details about CVE-2024-49078 are not publicly available in the provided documents. Monitor for updates from Microsoft and CVE feeds for affected components, root cause, and remediation.
CVE-2025-21193
CVE-2025-21193 concerns Active Directory Federation Services (AD FS) spoofing. The connected documents identify the vulnerability as enabling a malicious actor to impersonate another user via AD FS, with a CVSS v3.1 base score of 6.5 (Network attack, short of user interaction, high confidentialit...