CVE-2021-24083

Technical details about CVE-2021-24083 are not provided in the connected documents. Public details are limited to the Windows Address Book RCE label; monitor for updates.

CVE-2021-28348

CVE-2021-28348 is described in the NVD entry as a Windows GDI+ Remote Code Execution Vulnerability. The NVD metrics show CVSSv3.1 base score 7.8 (HIGH) with LOCAL attack vector, LOW attacker complexity, PRIVILEGES REQUIRED: LOW, NONE user interaction, and impacts to Confidentiality, Integrity, an...

CVE-2021-28445

Technical details for CVE-2021-28445 are not publicly provided in the supplied documents. Monitor for updates from vendors and advisories to obtain affected products, impact, and remediation.

CVE-2022-26787

Technical details for CVE-2022-26787 are not provided in the supplied documents. Please monitor for updates from official sources for affected products, impact specifics, and remediations.

CVE-2022-34734

Technical details (affected product/version, root cause, exploit vector, impact, and fix) are not publicly provided in the supplied documents. Monitor for updates from official vulnerability feeds.

CVE-2022-35795

Technical details for CVE-2022-35795 are not provided in the connected documents; the materials here do not reveal affected products, root cause, or remediation. Monitor for updates from official sources.

CVE-2022-37994

Technical details about CVE-2022-37994—including affected product versions, root cause, exploitability, and remediation—are not disclosed in the provided connected documents. No concrete exploit information or fix is described here. Monitor official MSRC/NVD advisories for updates.

CVE-2023-32053

Technical details about CVE-2023-32053 (affected components, root cause, versions, exploit status) are not publicly provided in the supplied documents. Monitor for updates in connected sources to obtain concrete information.

CVE-2024-38031

Technical details, affected products/versions, and remediation for CVE-2024-38031 are not provided in the connected documents. Public specifics such as exploitability and fixes are not included; monitor for updates from official sources.

CVE-2024-38085

Technical details about CVE-2024-38085 are not provided in the supplied documents; no affected products, root cause, or mitigations are disclosed here. Monitor for updates from Microsoft and related CVE references.

CVE-2024-43628

According to the NCSC advisory, CVE-2024-43628 is a Windows Telephony Service Remote Code Execution vulnerability with a CVSS v3.1 base score of 8.8 (HIGH) and an impact described as Execute random code. The vulnerability is listed under Windows Telephony Service with a remediation path through M...

CVE-2024-49104

The connected NCSC advisory (EUVD/NCSC) lists CVE-2024-49104 under Windows Routing and Remote Access Service (RRAS) with a high impact: Execution of arbitrary code (CVSS 8.80). The RRAS entry is described as vulnerable to arbitrary code execution, but the document does not provide root cause spec...

CVE-2025-21200

CVE-2025-21200 is listed by ENISA/NCSC as a vulnerability affecting the Windows Telephony Service with high impact and the ability to execute arbitrary code. The linked material specifies a CVSSv3.1 base score of 8.8 (Network attack, No user privileges, User interaction required; High confidentia...

CVE-2025-21215

Technical details about CVE-2025-21215 are not provided in the connected documents. Public information here is limited to the vulnerability title and references; monitor for updates from Microsoft/NVD.

CVE-2025-21217

CVE-2025-21217 is a Windows NTLM spoofing vulnerability with a CVSS v3.1 base score of 6.5 (Network, low attack complexity, no privileges required, user interaction required; Confidentiality impact: High). Exploitation details, affected products/versions, and a fixed patch are not provided in the...

CVE-2025-21269

CVE-2025-21269 is described as a Windows HTML Platforms Security Feature Bypass vulnerability. Connected CNVD/NCSC/KB entries reference a Windows HTML Platforms security feature bypass without detailed exploit steps; the Initial metrics show CVSS 3.1 (4.3, Network, UI: Required). Exploitation spe...

CVE-2025-26670

CVE-2025-26670 is a Windows LDAP use-after-free vulnerability that enables remote code execution over the network. The available connected sources confirm the issue affects Windows LDAP and describe the underlying cause as a use-after-free condition, with the impact explicitly stated as remote co...

CVE-2009-2497

CVE-2009-2497 covers a Microsoft CLR vulnerability in .NET Framework 2.0–3.5 SP1 and Silverlight 2 where the CLR mishandles interfaces, enabling remote code execution via XBAPs, Silverlight, ASP.NET, or .NET applications. Connected docs confirm Microsoft issued MS09-061 to address three related v...

CVE-2010-2554

CVE-2010-2554 affects the Tracing Feature for Services in Windows Vista SP1/ SP2, Windows Server 2008 SP2/R2, and Windows 7. The vulnerability arises from incorrect ACLs on registry keys used by the tracing feature, enabling local users to gain elevated privileges via a named pipe and impersonati...

CVE-2015-2506

The CVE-2015-2506 issue is a remote DoS in the Windows Adobe Type Manager Library (atmfd.dll) triggered by specially crafted OpenType fonts. The vulnerable component is the Adobe Type Manager Library integrated in Windows (atmfd.dll). Underlying cause is improper parsing/handling of OpenType font...

CVE-2017-0042

CVE-2017-0042 is a Windows DirectShow information disclosure vulnerability affecting Windows Media Player and related Windows versions (Windows 7/8.x/Server variants). The underlying issue is improper handling of objects in memory during media processing, which allows an unauthenticated, remote a...

CVE-2017-0058

CVE-2017-0058 is a Windows Win32k information-disclosure vulnerability where win32k.sys fails to properly provide kernel information, allowing a local attacker to obtain sensitive data to aid compromise. Affected: Microsoft Windows Win32k component. Root cause: improper kernel information exposur...

CVE-2017-0111

CVE-2017-0111 covers Uniscribe memory disclosure in Microsoft Windows (Vista SP2, Server 2008 SP2/R2 SP1, Windows 7 SP1). Connected docs show that Uniscribe’s usp10.dll code path can be reached via DrawText/Unicode text rendering, enabling an attacker-controlled font to read process memory and po...

CVE-2017-0273

CVE-2017-0273 is a Windows SMBv1 vulnerability described as a denial-of-service issue in the SMBv1 server. The affected component is the Microsoft Windows Server Message Block 1.0 (SMBv1) server; the root cause is improper handling of crafted SMB requests that can cause the server to stop respond...

CVE-2017-0285

CVSS context : CVE-2017-0285 is an information-disclosure vulnerability in Windows Uniscribe. The connected document KLA11039 lists an information-disclosure vulnerability in Windows Uniscribe that can be exploited remotely via specially crafted documents to obtain sensitive information. What is ...

CVE-2017-0299

The CVE-2017-0299 entry describes a Windows kernel information disclosure vulnerability in the NT kernel affecting multiple Windows versions (Windows 7 SP1, Windows 8.1, Windows Server 2012/2016, Windows 10 various builds, and more). The issue allows an authenticated attacker to obtain informatio...

CVE-2018-0888

CVE-2018-0888 corresponds to a vulnerability in the Microsoft Hyper-V Network Switch where 64-bit Windows clients/servers (Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012/R2; Windows 10 versions 1511–1709; Windows Server 2016) are exposed to information disclos...

CVE-2019-1166

CVE-2019-1166 describes a Windows NTLM tampering vulnerability: a man-in-the-middle attacker could bypass NTLM Message Integrity Check protection. The provided documents reiterate the same description and do not specify the affected Windows versions, patches, or remediation steps. No explicit exp...

CVE-2019-1474

Technical details for CVE-2019-1474 are not publicly provided in the connected documents. The CVE entry lacks explicit product/version/impact/fix mapping in the supplied materials; monitor for updates.

CVE-2019-1488

Technical details about CVE-2019-1488 are not available in the provided documents. Monitor for updates from ENISA/RH and OpenVAS references for any concrete exposures or fixes.

CVE-2020-0734

CVE-2020-0734 affects the Windows Remote Desktop Client. The connected Nessus entries describe a remote code execution vulnerability when a user connects to a malicious RDP server, enabling arbitrary code on the client. The issue is addressed by February 2020 Windows security updates (KB4537820 /...

CVE-2020-1004

Technical details (affected products/versions, root cause, exploit information, fixes) for CVE-2020-1004 are not publicly provided in the supplied documents. Monitor for updates as new details may be published.

CVE-2020-1176

The CVE-2020-1176 entry concerns a remote code execution in the Windows Jet Database Engine caused by improper handling of objects in memory. The connected document indicates that the Jet Database Engine is referenced within a May 2020 Windows security update (KB4556799) affecting OS builds 18362...

CVE-2020-1390

CVE-2020-1390 — Windows Network Connections Service elevation of privilege vulnerability. Root cause: the service mishandles objects in memory, enabling code execution with elevated privileges on a locally accessible Windows host. Affected: Windows Network Connections Service (Windows). Exploitat...

CVE-2020-1598

Technical details for CVE-2020-1598 are not provided in the connected documents; the sources here pertain to other Microsoft advisories and general updates. Monitor for public disclosures or vendor mitigations to confirm affected products, root cause, and fixes.

CVE-2020-17069

Technical details about CVE-2020-17069 are not publicly available in the supplied documents. Monitor for updates from official sources for affected products, root cause, and remediation.

CVE-2021-43233

CVE-2021-43233 is a Windows Remote Desktop Client remote code execution vulnerability. Public data (NVD) rates it as CVSS v3.1 7.5 (HIGH) with NETWORK access, high attack complexity, and no privileges required, but user interaction is required. A connected document notes an additional assessment:...

CVE-2022-26820

Technical details about CVE-2022-26820 are not publicly available in the provided documents. Monitor for updates.

CVE-2022-35758

Technical details about CVE-2022-35758 (affected product/component, root cause, impact, or remediation) are not publicly provided in the supplied connected documents. Monitor for updates from official sources.

CVE-2022-38034

CVE-2022-38034 is a Windows Workstation Service Elevation of Privilege vulnerability. Connected documents confirm the affected component is Windows Workstation Service and that the root cause is improper privilege assignment, enabling an attacker to obtain increased privileges (described as privi...

CVE-2024-38048

Technical details for CVE-2024-38048 are not publicly provided in the connected documents. Please monitor for updates; the supplied sources do not include affected products, root cause, impact, or remediation specifics.

CVE-2024-38231

Technical details about CVE-2024-38231 (Windows Remote Desktop Licensing Service Denial of Service) are not publicly provided in the supplied connected documents. Monitor official advisories and vendor patches for updates.

CVE-2024-43589

Technical details about CVE-2024-43589 (affected RRAS, root cause, impact, fixes) are not publicly provided in the connected documents. Monitor for updates from Microsoft and CVE registries.

CVE-2025-21247

CVE-2025-21247 is a MapUrlToZone security bypass in Windows. Description: Improper resolution of path equivalence allows a network attacker to bypass a security feature. CVSS: 3.1, Network attack, Low complexity, No privileges required, User interaction required, Confidentiality impact Low; Integ...

CVE-2025-21319

CVE-2025-21319 is a Windows kernel memory information disclosure vulnerability. The issue is tracked in multiple vulnerabilities and discussed by Microsoft, with a CVSSv3.1 base score of 5.5 (Local attack, Low attack complexity, Low privileges required, no user interaction, High confidentiality i...

CVE-2017-0039

CVE-2017-0039 is a local privilege escalation in Windows where loading of DLLs is mishandled, allowing a crafted application to gain elevated privileges on Windows Vista SP2 and Windows Server 2008 SP2 (as described by the CVE entry and corroborated by MSRC/MSKB/MS17-012 references). The vulnerab...

CVE-2017-0184

Microsoft Hyper-V remote Denial of Service vulnerability (CVE-2017-0184) arises from improper validation of input from a privileged user on a guest OS, potentially allowing a guest to crash the host. Affected component: Hyper-V on Windows Server. Consequence: denial of service impacting host avai...

CVE-2017-0294

CVE-2017-0294 is a Windows remote code execution vulnerability caused by improper handling of cabinet (.cab) files. The affected platforms include Windows 7 SP1, Windows Server 2008 SP2/R2 SP1, Windows 8.1, Windows RT 8.1, Windows Server 2012/R2, Windows 10 (various builds), and Windows Server 20...

CVE-2017-8534

The connected KLA11039 entry confirms CVE-2017-8534 as an information-disclosure vulnerability in Windows Uniscribe. It can be exploited remotely via specially crafted documents to disclose memory contents. Microsoft security updates from June 2017 (KB4022714/2717/2718/2719/2724/2725/2726 and rel...

CVE-2018-0973

Technical details for CVE-2018-0973 are not publicly available in the provided documents. The connected EUVD and CIRCL entries do not reveal affected products, impacts, or fixes for this CVE. Monitor sources for updates.