CVE-2024-30094

Technical details about CVE-2024-30094 (RRAS remote code execution) are not publicly provided in the supplied connected documents. No affected products/versions, exploit information, root cause, or remediation details are present. Monitor for updates.

CVE-2024-38049

Technical details (affected components, exploit vectors, or patch specifics) for CVE-2024-38049 are not provided in the connected documents. No public details are present in the supplied sources; monitor for updates.

CVE-2024-43450

CVE-2024-43450 is a Windows DNS spoofing vulnerability affecting Windows DNS/NTLM; the CVSS v3.1 base score is 7.5 (Network, High impact, User interaction required). Connected sources place this CVE in Microsoft Windows DNS with impact described as “Pretend to be another user.” Microsoft has rele...

CVE-2025-21261

Technical details about CVE-2025-21261 (affected product, vulnerability vector, impact, or patch) are not publicly provided in the connected documents; no concrete specifics are available here. Monitor official advisories and Microsoft/MSRC guidance for remediation.

CVE-2025-33070

CVE-2025-33070 is reported in EU/NCSC context as affecting Windows Netlogon, caused by use of an uninitialized resource, enabling an unauthenticated attacker to obtain elevated privileges. The CVSS vector indicates network access is required with high impact on confidentiality, integrity, and ava...

CVE-2010-2551

CVE-2010-2551 – SMB Variable Validation Vulnerability (Mode C) Affected software: SMB Server on Windows Vista SP1/SP2, Windows Server 2008 (Gold, SP2), and Windows 7. The issue arises in the SMB server’s handling of specially crafted SMB packets where internal fields are not properly validated in...

CVE-2017-0276

Technical details for CVE-2017-0276 are not publicly available in the provided documents. Monitor for updates; current sources in the set do not describe affected products/versions, root cause, or remediation specific to this CVE.

CVE-2017-0282

CVE-2017-0282 is an information disclosure vulnerability in the Windows Uniscribe component. It affects Windows and Office products listed in the initial entry, with memory contents disclosure possible via specially crafted documents. Public sources in the connected materials confirm an informati...

CVE-2017-8495

CVE-2017-8495 is a Kerberos security feature bypass in which Extended Protection for Authentication can be circumvented by tampering with the SNAME field during ticket exchange (Orpheus’ Lyre). Affected Windows family includes Windows 7 SP1, Windows Server 2008 SP2/R2, Windows 8.1, Windows RT 8.1...

CVE-2017-8533

CVE-2017-8533 is an information‑disclosure vulnerability in Windows graphics handling, specifically the Uniscribe/GDI path, where memory contents can be exposed. The issue affects multiple Windows editions listed in the CVE entry (e.g., Windows 7 SP1, 8.1, various Windows 10 versions, Windows Ser...

CVE-2017-8682

CVE-2017-8682 is a Win32k Graphics Remote Code Execution issue where remote code could be executed by mis-handling embedded fonts. Affected products include multiple Windows versions (Server 2008 SP2/R2 SP1, Windows 7 SP1, 8.1, 10 1511/1607/1703, Server 2012/2016) and Office Word Viewer/Office 20...

CVE-2019-1085

Technical details for CVE-2019-1085 are not provided in the connected documents. The initial description mentions a Windows WLAN Service elevation of privilege vulnerability but includes no vendor/product/version specifics, exploit info, or remediation details. Monitor for updates and refer to of...

CVE-2019-1158

The CVE-2019-1158 entry corresponds to a Windows Graphics Device Interface (GDI) information disclosure vulnerability. Connected sources describe it as an issue in GDI’s handling of memory, specifically involving EMF file parsing, which can allow an attacker to obtain sensitive information. Explo...

CVE-2019-1212

CVE-2019-1212 describes a memory corruption vulnerability in the Windows Server DHCP service triggered when processing specially crafted packets. The flaw could allow a remote unauthenticated attacker to cause the DHCP server service to stop responding. The vulnerability affects the Windows DHCP ...

CVE-2019-1249

CVE-2019-1249 describes a remote code execution vulnerability in the Windows Jet Database Engine caused by improper handling of in-memory objects. An attacker could trigger arbitrary code execution by convincing a user to open a specially crafted file, with the impact described as remote code exe...

CVE-2019-1384

Technical details about CVE-2019-1384 are not publicly available in the provided documents. The materials mention a NETLOGON security feature bypass but do not specify affected products, versions, root cause, or fixes. Monitor for updates.

CVE-2019-1407

Technical details for CVE-2019-1407 are not publicly available in the provided Connected documents. Monitor for updates; no specifics on affected products/versions, root cause, impact, or fixes are included here.

CVE-2020-0911

CVE-2020-0911 describes an elevation-of-privilege vulnerability in Windows where the Windows Modules Installer improperly handles objects in memory. An attacker could exploit this by running a specially crafted application on a victim system to execute arbitrary code in an elevated context. The u...

CVE-2020-0965

CVE-2020-0965 corresponds to a remote code execution vulnerability in the Microsoft Windows Codecs Library. The CNVD entry describes a memory-handling flaw in Windows Codecs Library that can be exploited to execute arbitrary code via specially crafted image files. Public details in CNVD/NVD confi...

CVE-2020-0999

Technical details about CVE-2020-0999 are not publicly provided in the connected documents. The CVE entry mentions Jet Database Engine RCE, but no specifics on vulnerable versions, root cause, or remediation are included here. Monitor for updates.

CVE-2020-1115

The CVE-2020-1115 entry concerns the Windows Common Log File System (CLFS) driver, where improper in-memory handling creates an elevation of privilege vulnerability. Exploitation would require the attacker to log on locally and run a specially crafted application to gain control of the affected s...

CVE-2020-1435

The CVE-2020-1435 entry refers to a remote code execution in the Windows Graphics Device Interface (GDI), via how GDI/GDI+ handles objects in memory. The connected CNVD-2021-67491 description confirms the root cause as a memory-handling problem in the Windows GDI that can be exploited to execute ...

CVE-2020-17055

Technical details about CVE-2020-17055 are not provided in the connected documents; public specifics (affected products, root cause, exploitability) are not disclosed here. Monitor for updates.

CVE-2021-28349

Technical details (affected products/versions, root cause, exploit specifics, remediation) for CVE-2021-28349 are not provided in the connected documents. Monitor official advisories and vulnerability feeds for updates.

CVE-2021-28443

Technical details about CVE-2021-28443 (affected Windows Console Driver DoS) are not provided in the connected documents. No product/version/root-cause/exploit or remediation details are disclosed here; monitor for official updates.

CVE-2021-38625

Technical details about CVE-2021-38625 are not provided in the connected documents; there is mention of Windows Kernel privilege escalation generally, but no specific affected versions, root cause, exploit information, or fixes in the supplied sources. Monitor for updates.

CVE-2022-26821

Technical details about CVE-2022-26821 are not publicly provided in the supplied documents. Monitor for updates from official advisories and referenced sources.

CVE-2022-35795

Technical details for CVE-2022-35795 are not provided in the connected documents; the materials here do not reveal affected products, root cause, or remediation. Monitor for updates from official sources.

CVE-2023-21702

CVE-2023-21702 refers to a Windows iSCSI Service Denial of Service vulnerability. The initial description notes a HIGH (7.5) CVSS v3.1 impact with network attack vector and no user interaction, but the connected documents do not provide additional technical details, affected software versions, ro...

CVE-2023-28276

Technical details for CVE-2023-28276 are not publicly provided in the connected documents; only the NVD entry description is visible. Monitor for updates.

CVE-2024-38055

Technical details for CVE-2024-38055 (affected component, root cause, impact or fix) are not provided in the connected documents. Monitor for updates from Microsoft and coordinating sources for public details.

CVE-2024-38114

Technical details for CVE-2024-38114 are not provided in the connected documents. The initial description notes a Windows IP Routing Management Snapin Remote Code Execution vulnerability with CVSS 3.1/8.8, but no affected versions, root cause, or mitigations are included here.

CVE-2024-38128

Technical details (affected products, root cause, exploit status) are not publicly disclosed in the provided documents; monitor for updates as more information becomes available.

CVE-2024-43541

CVE-2024-43541 is a Microsoft Windows vulnerability in the Simple Certificate Enrollment Protocol that enables a network-based Denial of Service. The NCSC advisory lists a CVSS v3.1 base score of 7.5 (HIGH), with network access required and no user interaction, and specifies the impact as Denial ...

CVE-2025-21373

Technical details for CVE-2025-21373 are not provided in the supplied documents. Monitor for updates from Microsoft and the KB/MSRC references for affected product, impact and fixes.

CVE-2025-27473

CVE-2025-27473 affects Windows HTTP.sys. Description in the connected sources confirms an uncontrolled resource consumption condition that enables a network-based Denial of Service, exploitable by an unauthorized attacker. The vulnerability impact is denial of service over the network; no exploit...

CVE-2025-29831

Technical details about CVE-2025-29831 (affected product, root cause, patch) are not provided in the supplied documents. Monitor for updates and refer to the official vulnerability entry for authoritative information.

CVE-2012-1848

CVE-2012-1848 affects win32k.sys kernel-mode drivers across multiple Windows versions (XP SP2/SP3, Server 2003 SP2, Vista SP2, Server 2008 SP2/R2/R2 SP1, Windows 7 SP1, and Windows 8 Consumer Preview). The underlying issue is improper handling of user-mode input passed to kernel mode, which enabl...

CVE-2016-0178

The CVE refers to CVE-2016-0178, describing a remote code execution flaw in the RPC Network Data Representation (NDR) Engine. The root cause is improper freeing of memory in the RPC NDR Engine, exploited via malformed RPC requests to remote hosts. Affected products include Windows Vista SP2, Wind...

CVE-2016-3303

CVE-2016-3303 affects the Windows font library in Windows Vista SP2, Windows Server 2008 SP2/R2 SP1, Windows 7 SP1, Office 2007 SP3/Office 2010 SP2, Word Viewer, Skype for Business 2016, Lync 2013 SP1, Lync 2010/Attendee, and Live Meeting 2007 Console. Root cause:** improper handling of construct...

CVE-2016-3373

CVE-2016-3373 is a Windows kernel local elevation-of-privilege vulnerability. The Windows Kernel API improperly restricts access to registry information, enabling a locally authenticated attacker to obtain sensitive user account data via a crafted application. Affected products include Windows Vi...

CVE-2017-8708

CVE-2017-8708 affects the Windows kernel information disclosure vulnerability caused by improper handling of objects in memory. Impact is information disclosure on a range of Windows desktop/server versions (Windows 7 SP1, Windows 8.1, Windows 10 various builds, Windows Server 2008 SP2/R2 SP1, 20...

CVE-2018-0814

Technical details for CVE-2018-0814 are not publicly available in the provided Connected documents. No explicit affected products, versions, root cause, impact, or remediation are disclosed here. Monitor for updates from official advisories.

CVE-2018-0885

CVE-2018-0885 : DoS in the Microsoft Hyper-V Network Switch triggered by unvalidated input from a guest OS. Affected: 64‑bit Windows Server 2008 SP2/ R2 SP1; Windows Server 2012/R2; Windows 10 (various builds); Windows Server 2016; and Windows Server version 1709. Root cause is described as impro...

CVE-2019-1168

CVE-2019-1168 describes a local elevation-of-privilege vulnerability in the Windows p2pimsvc service. According to NVD/NVD-derived descriptions, an attacker who can log on to the system could run a crafted application to execute arbitrary code with elevated privileges, effectively taking control ...

CVE-2019-1326

CVE-2019-1326 describes a denial of service vulnerability affecting Windows Remote Desktop Protocol (RDP). The Red Hat entry repeats the DoS description (attacker connects via RDP and sends specially crafted requests) but provides no further technical details, affected software versions, root cau...

CVE-2019-1359

CVE-2019-1359 is a remote code-execution issue in the Windows Jet Database Engine caused by improper handling of in-memory objects. Connected updates state that security fixes in October 2019 (KB4519990/4519998/4519985/4519338 and related MSKBs) include Microsoft JET Database Engine remediation a...

CVE-2020-0783

CVE-2020-0783 is an elevation-of-privilege vulnerability in the Windows Universal Plug and Play (UPnP) service. The root cause, as described in provided documents, is improper handling of objects in memory within the UPnP service, enabling a local attacker to execute code with elevated system pri...

CVE-2020-1436

CVE-2020-1436 concerns Windows font library handling of specially crafted fonts. Root cause: improper input handling in the font subsystem. Impact: remote code execution on affected Windows versions (excluding Windows 10 per the description). Connected sources confirm the vulnerability exists; no...

CVE-2021-1696

CVE-2021-1696 is a Windows Graphics Component Information Disclosure Vulnerability. The initial entry provides the vulnerability type but no detailed product/version/affected component beyond that. Connected sources (OpenVAS entries and a Xerox advisory) reference CVE-2021-1696 among broader Wind...