CVE-2025-33055

CVE-2025-33055 is an information-disclosure vulnerability: an out-of-bounds read in Windows Storage Management Provider could allow an authorized, local attacker to disclose information. Connected sources confirm the flaw and impact but do not provide concrete exploit details or a documented reme...

CVE-2025-33062

CVE-2025-33062 affects the Windows Storage Management Provider and is characterized as an out-of-bounds read that can allow an attacker with local access to disclose information. The NVD entry notes a CVSS v3.1 base score of 5.5 (Local, Low exploit complexity, Privileges Required: Low, Confidenti...

CVE-2026-62728

The vulnerability CVE-2026-62728 affects Windows systems via the Common Log File System (CLFS) Driver. It is a time-of-check time-of-use (TOCTOU) race condition that allows an authorized, local attacker to elevate privileges. The CVSSv3.1 metrics indicate a Local attack, High impact on confidenti...

CVE-2026-62741

CVE-2026-62741 is a Windows HTTP.sys elevation-of-privilege vulnerability caused by an integer underflow/wrap in HTTP.sys. An authorized local attacker can elevate privileges. Affected: Windows HTTP.sys. Root cause: integer underflow; Impact: local privilege escalation with high confidentiality/i...

CVE-2019-1383

Technical details about CVE-2019-1383 are not publicly provided in the supplied documents. Monitor for updates in connected feeds for affected products, versions, impact, and fixes.

CVE-2019-1418

The CVE-2019-1418 entry describes an information-disclosure vulnerability in Windows where the Windows Modules Installer Service improperly discloses file information. The affected component is the Windows Modules Installer Service; the underlying issue is an information disclosure vulnerability ...

CVE-2020-0917

Technical details are not publicly available in the provided connected documents for CVE-2020-0917. Monitor for updates.

CVE-2020-1139

Technical details (affected products, vulnerable components, fixes) are not provided in the connected documents. Monitor for updates.

CVE-2021-26892

Technical details about CVE-2021-26892 (affected product, root cause, impact, fixes) are not provided in the connected documents; no public details are included here. Monitor for updates.

CVE-2023-36005

CVE-2023-36005 is documented in connected sources as a Windows Telephony Server Elevation of Privilege vulnerability with a base impact of obtaining increased privileges. The NC SC advisory lists the CVE with a base CVSS-like rating of 7.5 (HIGH) and notes a network-associated context, but the pr...

CVE-2024-43547

CVE-2024-43547 is listed in the Windows Kerberos category as a Windows Kerberos Information Disclosure vulnerability with impact described as Access to sensitive data. The connected documents identify the CVE and its general risk context but do not provide concrete details on affected product ver...

CVE-2024-43593

CVE-2024-43593 is listed in the Windows RRAS category with high severity (CVSS v3.1 ~8.8) and is described as a remote code execution vulnerability. Connected sources (NCSC) indicate it affects Windows RRAS and assigns an 8.80 rating for Execute Random Code. The NVD entry confirms RRAS Remote Cod...

CVE-2025-21218

CVE-2025-21218 is cataloged as a Windows Kerberos Denial of Service vulnerability with CVSS 3.1, base score 7.5 (HIGH). The description and connected sources confirm the issue is a DoS affecting Windows Kerberos, but the provided documents do not specify affected product versions, root cause deta...

CVE-2025-29840

CVE-2025-29840 is a Windows component issue in Windows Media where a stack-based buffer overflow enables remote code execution over the network (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H; CVSSv3.1 base 8.8). The connected sources indicate this is tracked as a Windows Media vulnerability with high sever...

CVE-2025-29954

Technical details for CVE-2025-29954 are not publicly provided in the supplied documents. Monitor for official updates from Microsoft (MSRC) and vulnerability feeds as the connected sources are not detailed here.

CVE-2025-29962

Technical details about CVE-2025-29962 are not provided in the supplied documents; no affected products, root cause, or fixes are disclosed here. Monitor for updates.

CVE-2025-29964

CVE-2025-29964 is a Windows Media heap-based buffer overflow that allows a network-exploiting attacker to execute code remotely. The connected NCSC advisory lists this CVE under Windows Media with a high risk score (8.80) and confirms an exploitable path labeled as “Execute random code.” The avai...

CVE-2025-32718

CVE-2025-32718 : Integer overflow or wraparound in Windows SMB enables a locally authenticated attacker to elevate privileges. Connected sources confirm impact as local privilege escalation on Windows SMB, with CVSS v3.1 base score 7.8 (HIGH) and local attack vector. Public references in NVD/NCSC...

CVE-2026-33104

CVE-2026-33104 is a Windows Win32K - GRFX race condition vulnerability rated CVSS v3.1 7.0 (High) with local privilege escalation impact. The connected sources label this as a Win32K-GRFX issue enabling “Obtain increased privileges” and reference Microsoft Windows updates guidance, but the provid...

CVE-2026-50387

CVE-2026-50387 — Windows GDI Elevation of Privilege Affects: Windows GDI subsystem. The vulnerability is a stack-based buffer overflow in GDI that can be triggered by an authorized attacker to achieve local privilege escalation. Impact: Local elevation of privileges with a CVSS v3.1 base score of...

CVE-2026-59130

AMD Zen CPUs are affected by CVE-2026-59130, described as an information disclosure vulnerability that allows an authorized user to disclose information locally. The NVD/CVE description notes no CWE mapping and that the attack vector is LOCAL with LOW privileges required and HIGH confidentiality ...

CVE-2020-0727

CVE-2020-0727 describes an elevation-of-privilege vulnerability in Windows’ Connected User Experiences and Telemetry Service via improper file operations. The provided connected documents (EUVD-2020-2216, CNVD-2020-14328, OSV-CVE entries, NVD) reiterate the vulnerability title and impact but do n...

CVE-2020-0750

CVE-2020-0750 involves an elevation of privileges in Microsoft Windows/Windows Server related to the Connected Devices Platform Service . The root cause, as described in CNVD entries, is a flaw in how the service handles objects in memory, enabling an attacker to execute code with elevated privil...

CVE-2020-1075

CVE-2020-1075 is a Windows Subsystem for Linux information-disclosure vulnerability caused by improper handling of memory-resident objects. The vulnerability could allow an attacker with local access to obtain sensitive information from memory, with CVSSv3.1 indicating local access, low attack co...

CVE-2020-1137

CVE-2020-1137 is a Windows Push Notification Service Elevation of Privilege vulnerability. The issue stems from how the service handles memory objects, allowing a locally logged-on attacker to run a specially crafted application with elevated privileges, potentially installing programs or alterin...

CVE-2020-1186

Public technical details about CVE-2020-1186 are not present in the provided documents. The connected EUVD entries mention malware named 'sbrugna' but do not describe affected products, vulnerable components, impact, or mitigations. Monitor for updates.

CVE-2020-1386

CVE-2020-1386 is an information-disclosure vulnerability in Windows Connected User Experiences and Telemetry Service where file information is disclosed improperly. The NVD data shows: Impact on confidentiality: PARTIAL ; attack vector: LOCAL ; authentication: NONE ; user interaction: NONE (CVSS2...

CVE-2020-1395

CVE-2020-1395 is an elevation-of-privilege flaw in the Windows Speech Brokered API related to in-memory handling of objects. The issue is local, with low attack complexity and no user interaction required per the NVD metrics, yielding a CVSS v3.1 base score of 7.8 (High) and impact on confidentia...

CVE-2020-1405

CVE-2020-1405 affects Windows Mobile Device Management Diagnostics. The vulnerability is an elevation of privilege caused by improper handling of junctions in MDM Diagnostics, enabling local attackers to elevate privileges. The description confirms it is distinct from CVE-2020-1372. Public detail...

CVE-2023-33172

Technical details about CVE-2023-33172 are not publicly provided in the supplied documents; no affected products, versions, impact, or mitigations are specified. Monitor for updates.

CVE-2024-38234

CVE-2024-38234 is a Windows Network Virtualization vulnerability rated CVSS v3.1 base score 6.5 (Medium) with Adjacent attack vector, Low attack complexity, No privileges, No user interaction, and a High availability impact (Denial of Service). The connected documents confirm the CVE-ID and its D...

CVE-2024-38261

Technical details about CVE-2024-38261 are not provided in the connected documents. The RRAS RCE entry is described, but no exploit specifics, affected versions, or remediation steps are included here. Monitor for updates.

CVE-2024-43521

CVE-2024-43521 is a Windows Hyper-V Denial of Service vulnerability. Publicly available references confirm the issue affects Microsoft Windows Hyper-V and assigns a CVSS v3.1 base score of 7.5 (Network attack vector, low attack complexity, no privileges, no user interaction, availability impact)....

CVE-2024-43543

CVE-2024-43543 is a Windows Mobile Broadband Driver Remote Code Execution vulnerability. The initial document states it affects Windows Mobile Broadband Driver and provides CVSS v3.1 metrics: AV/Physical, AC/Low, PR/None, UI/None, S/Unchanged; impacts Confidentiality, Integrity, Availability all ...

CVE-2025-29968

Technical details (affected product/versions, root cause, impact, exploit info, and fixes) are not provided in the connected documents. Based on the supplied sources, only the basic description and CVSS metrics are available. Monitor for updates.

CVE-2025-33058

CVE-2025-33058 describes an out-of-bounds read in the Windows Storage Management Provider, enabling a locally authorized attacker to disclose information. Affected product/component: Windows Storage Management Provider. Root cause: memory read beyond bounds leading to information disclosure (conf...

CVE-2026-40398

CVE-2026-40398 is a heap-based buffer overflow in Windows Remote Desktop Services that allows an authenticated attacker to perform local privilege escalation. The description across sources consistently identifies a local, authenticated exploit path with a high impact (C/H/I/A: High) and a CVSS v...

CVE-2020-0820

CVE-2020-0820 is a Windows Media Foundation information-disclosure vulnerability, caused by improper handling of objects in memory. CVSSv3 base: 5.5 (MEDIUM), local access, low privileges required, no user interaction. Confidentiality impact is HIGH; integrity/availability unaffected per the avai...

CVE-2020-1189

Technical details about CVE-2020-1189 are not publicly provided in the connected documents; no affected product/version or remediation is stated. Monitor for updates.

CVE-2020-1363

CVE-2020-1363 is a Windows Picker Platform elevation of privilege vulnerability. The issue arises from improper handling of memory, enabling an attacker who already has execution on the target to elevate privileges by running a crafted application. This vulnerability is documented in multiple sou...

CVE-2021-26886

CVE-2021-26886 is a Microsoft Windows User Profile Service Denial of Service vulnerability affecting the User Profile Service component. CVSS v3.1 base score 6.1 (Medium): attack vector LOCAL, privileges required LOW, user interaction NONE, with high impact on availability and low impact on integ...

CVE-2024-38262

CVE-2024-38262 is a Windows Remote Desktop Licensing Service Remote Code Execution vulnerability. The CVE entry lists a 3.1.1 CVSSv3.1 base score of 7.5 (High) with network as the attack vector, requiring low privileges and no user interaction, and resulting in high confidentiality, integrity, an...

CVE-2024-43525

CVE-2024-43525 refers to a Windows Mobile Broadband Driver Remote Code Execution vulnerability. The CVE entry lists a CVSS v3.1 base score of 6.8 (Medium) with an attack vector of Physical, requiring no privileges and no user interaction, and impacting confidentiality, integrity, and availability...

CVE-2024-43545

CVE-2024-43545 is a Windows OCSP (Online Certificate Status Protocol) Server Denial of Service vulnerability. The available documents identify the affected component as the Windows OCSP service and classify the impact as Denial of Service with a CVSS v3.1 base score of 7.5 (Network attack, low at...

CVE-2024-43646

Technical details are not publicly provided in the supplied documents. Monitor for updates from Microsoft/Microsoft Security Update Guide and NVD.

CVE-2025-29835

CVE-2025-29835 describes an out-of-bounds read in Windows Routing and Remote Access Service (RRAS) that could allow an unauthenticated attacker to disclose information over the network. The initial description does not provide concrete remediation guidance, and the connected documents do not spec...

CVE-2025-32713

CVE-2025-32713 corresponds to a heap-based buffer overflow in Windows Common Log File System Driver that enables local privilege escalation for an authorized attacker. The connected sources identify the affected component as the Windows Common Log File System Driver and list the impact as obtaini...

CVE-2025-49735

CVE-2025-49735 describes a use-after-free vulnerability in Windows KDC Proxy Service (KPSSVC) that could allow remote code execution over the network. The entry is publicly tracked with a Network attack vector, high impact on confidentiality, integrity, and availability (CVSS v3.1 base score 8.1)...

CVE-2026-34337

CVE-2026-34337 describes a local privilege escalation via a use-after-free in the Windows Cloud Files Mini Filter Driver. An authorized attacker could elevate privileges locally (CVSS v3.1: AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H; base 7.8). The connected documents confirm the vulnerability descripti...

CVE-2026-42825

CVE-2026-42825 describes a use-after-free in Windows Telephony Service that allows an authorized attacker to elevate privileges locally. The description clearly states local privilege escalation as the impact, but the connected documents do not provide specifics on affected product versions, root...