CVE-2017-0294

CVE-2017-0294 is a Windows remote code execution vulnerability caused by improper handling of cabinet (.cab) files. The affected platforms include Windows 7 SP1, Windows Server 2008 SP2/R2 SP1, Windows 8.1, Windows RT 8.1, Windows Server 2012/R2, Windows 10 (various builds), and Windows Server 20...

CVE-2017-8534

The connected KLA11039 entry confirms CVE-2017-8534 as an information-disclosure vulnerability in Windows Uniscribe. It can be exploited remotely via specially crafted documents to disclose memory contents. Microsoft security updates from June 2017 (KB4022714/2717/2718/2719/2724/2725/2726 and rel...

CVE-2018-0973

Technical details for CVE-2018-0973 are not publicly available in the provided documents. The connected EUVD and CIRCL entries do not reveal affected products, impacts, or fixes for this CVE. Monitor sources for updates.

CVE-2019-0734

CVE-2019-0734 is a Windows elevation-of-privilege issue where a man-in-the-middle can decode and replace Kerberos authentication requests, enabling an attacker to be validated as Administrator. Affected: Microsoft Windows Kerberos authentication flow. Impact as documented: high severity with pote...

CVE-2019-1341

Technical details about CVE-2019-1341 are not provided in the connected documents. The current set does not reveal affected products, root cause, or fixes beyond the initial description. Monitor for updates.

CVE-2020-0722

Technical details for CVE-2020-0722 are not publicly available in the provided documents; no affected products, root cause, or remediation are specified here. Monitor for updates from official advisories.

CVE-2020-0735

Technical details for CVE-2020-0735 are not publicly available in the provided documents. Monitor for updates.

CVE-2020-0909

CVE-2020-0909 affects Microsoft Windows Hyper-V on Windows Server. The vulnerability arises when Hyper-V fails to properly handle specially crafted network packets, which could allow a denial-of-service condition. The connected documents confirm Hyper-V as the affected component and describe the ...

CVE-2020-1314

CVE-2020-1314: A Windows TSF Elevation of Privilege vulnerability exists where the TSF server mishandles messages from TSF clients, enabling an attacker with a crafted TSF client to execute arbitrary code with local privileges by exploiting the TSF messaging flow. No patch details are provided in...

CVE-2020-1333

CVE-2020-1333 is an elevation of privilege vulnerability in Microsoft Windows and Windows Server caused by Group Policy Services Policy Processing failing to properly handle reparse points. The CNVD-2020-52916 entry confirms the root cause as the policy processing re-resolution issue and lists Wi...

CVE-2020-1410

CVE-2020-1410 describes a remote code execution vulnerability in Windows Address Book (WAB) where processing of vcard files is flawed. The CNVD-2021-65603 entry corroborates a WAB-based RCE affecting Windows/Windows Server. Public descriptions state that an attacker could deliver a malicious vCar...

CVE-2020-1412

CNVD-2021-67490 identifies a Microsoft Windows/Windows Server remote code execution vulnerability stemming from how Graphics Components handles in-memory objects. Affected product scope is Windows/Windows Server with Graphics Components implicated; root cause is in-memory object handling in Graph...

CVE-2020-1485

CVE-2020-1485 is a Windows Information Disclosure vulnerability in the Windows Image Acquisition (WIA) Service. It allows an authenticated, local attacker who can connect an imaging device (camera/scanner/phone) and run a crafted app to disclose memory contents from WIA, potentially exposing info...

CVE-2021-28309

Technical details for CVE-2021-28309 (Windows Kernel Information Disclosure Vulnerability) are not publicly provided in the supplied documents. No affected products, versions, root cause, impact, or remediations are disclosed here. Monitor sources for updates.

CVE-2022-26797

Technical details about CVE-2022-26797 are not publicly available in the provided connected documents. Monitor for updates from official sources to obtain affected products, root cause, impact, and remediation.

CVE-2023-21701

CVE-2023-21701 is described as a Microsoft PEAP Denial of Service vulnerability with a CVSS v3.1 base score of 7.5 (Network attack, no user interaction, high impact to availability). The provided documents do not include concrete exploit details, affected product versions, root cause, or a confir...

CVE-2023-21797

Technical details about CVE-2023-21797 are not publicly provided in the supplied documents; no affected product/version or exploit information is present here. Monitor for updates from official sources.

CVE-2023-35312

The CVE-2023-35312 entry concerns Microsoft VOLSNAP.SYS with local access privilege escalation. Based on the provided metrics, the vulnerability supports LOCAL attack vector, requiring LOW privileges and no user interaction, with HIGH impact on confidentiality, integrity, and availability (CVSS 3...

CVE-2023-35318

Technical details about CVE-2023-35318 are not provided in the supplied documents; no affected products, root cause, or remediation are disclosed here. Monitor for updates.

CVE-2024-30074

Technical details for CVE-2024-30074 are not publicly available in the provided connected documents. Affected product/component/versions and remediation are not specified here. Monitor updates from Microsoft MSRC and CVE databases for confirmed exploitability, fixes, and affected configurations.

CVE-2024-38066

Technical details about CVE-2024-38066 (affected product, root cause, impact, or fix) are not publicly available in the provided connected documents. Monitor for updates from official advisories and vendor pages.

CVE-2024-38130

Technical details for CVE-2024-38130 are not publicly available in the provided documents. No vendor/dependent specifics (product version, root cause, impact, or fixes) are given here. Monitor for official disclosures and updated advisories.

CVE-2025-21228

CVE-2025-21228 is a Windows Digital Media Elevation of Privilege vulnerability. The initial and related documents identify the issue as a Windows Digital Media component risk that could allow an attacker to obtain elevated privileges (Impact: high; Privileges Required: low; Attack Vector: physica...

CVE-2025-21231

CVE-2025-21231 documents describe a Denial-of-Service vulnerability in the Windows IP Helper component. The CVE entry lists a network-based attack vector with low attack complexity and no privileges required, resulting in availability impact. Connected records corroborate IP Helper as the affecte...

CVE-2009-2494

Microsoft ATL (Active Template Library) in Windows platforms vulnerable to remote code execution due to an erroneous free operation after reading a variant from a stream and deleting it (ATL Object Type Mismatch). Affected products include Windows XP/2000/2003/Vista/Server editions as listed in M...

CVE-2009-2504

CVE-2009-2504 corresponds to MS09-062: multiple remote code execution vulnerabilities in Windows GDI+ exposed via GDI+ APIs used by .NET Framework and Office components. The issue stems from integer overflows/buffer handling in GDI+, enabling remote code execution when rendering crafted images in...

CVE-2015-0015

The CVE-2015-0015 issue affects Windows Server 2003 SP2, Server 2008 SP2 and R2 SP1, and Server 2012 Gold/R2, where crafted username strings sent to IAS/NPS trigger a remote denial of service (system hang/RADIUS outage). Root cause: improper parsing of username queries in NPS/IAS. Impact: DoS; ex...

CVE-2016-0152

CVE-2016-0152 is the Windows DLL Loading Remote Code Execution vulnerability affecting Internet Information Services (IIS) on Windows Vista SP2 and Windows Server 2008 SP2. It arises from improper handling of DLL loading, enabling local attackers to gain privileges by executing a crafted applicat...

CVE-2017-0056

Technical details for CVE-2017-0056 are not publicly available in the provided documents. Monitor for updates from official advisories.

CVE-2017-0171

CVE-2017-0171 is a Windows DNS Server denial-of-service vulnerability. The affected products include Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 Gold and R2, and Windows Server 2016, where the DNS service could be overwhelmed when answering version queries, leading to a denial of serv...

CVE-2017-0190

CVE-2017-0190 affects the GDI component in multiple Windows platforms (Windows Server 2008 SP2/R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold/R2, Windows RT 8.1, Windows 10 (Gold, 1511, 1607), and Windows Server 2016). The vulnerability allows remote attackers to obtain sensitive in...

CVE-2017-11788

CVE-2017-11788 affects Windows Search in multiple Windows versions (7 SP1, 8.1, 10, Server SKUs) where unauthenticated attackers can remotely send crafted messages to trigger a denial-of-service by mismanaging in-memory objects. The vulnerability is documented across NVD and CNVD entries, with Op...

CVE-2018-0881

CVE-2018-0881 concerns a privilege-elevation flaw in the Microsoft Video Control component. The vulnerability stems from how objects are handled in memory, enabling an attacker who can log on and run a crafted application to execute code with elevated/system privileges on affected Windows release...

CVE-2018-0899

Technical details for CVE-2018-0899 are not publicly provided in the supplied documents. Monitor for updates from official advisories.

CVE-2018-0960

Technical details for CVE-2018-0960 are not publicly available in the provided documents. No product/version-specific impact or remediation is stated here; monitor for updates from official advisories.

CVE-2019-1143

CVE-2019-1143 is a Windows GDI information-disclosure vulnerability. The issue arises when the GDI component improperly discloses memory contents, potentially allowing an attacker to obtain sensitive information to further compromise a system. Affected software is Windows with the Graphics Device...

CVE-2020-0737

CVE-2020-0737 is a Windows elevation-of-privilege vulnerability tied to how tapisrv.dll handles in-memory objects. The root cause is memory-objects handling in this DLL, enabling an attacker who can supply or manipulate objects to execute code with elevated privileges on affected Windows systems....

CVE-2020-0779

CVE-2020-0779 is described as an elevation of privilege vulnerability in Windows Installer, arising when MSI packages process symbolic links. The affected component is Windows Installer (MSI) handling of symbolic links, enabling a local attacker to escalate privileges by bypassing access restrict...

CVE-2020-0881

CVE-2020-0883 is a remote code execution vulnerability in Windows GDI (GDI+), caused by improper handling of memory objects. The CVE is documented as distinct from CVE-2020-0881. A working exploit PoC for CVE-2020-0883 exists in public GitHub material, indicating practical exploitability. Several...

CVE-2020-0994

The CVE-2020-0994 entry describes a Remote Code Execution in the Windows Jet Database Engine caused by improper handling of in-memory objects. Connected documents corroborate a Jet Database Engine memory-corruption vulnerability that could allow arbitrary code execution when a user opens a crafte...

CVE-2020-1091

Technical details about CVE-2020-1091 are not provided in the supplied documents. Monitor for updates from Microsoft and vulnerability databases for affected products, root cause, and fixes.

CVE-2020-17011

CVE-2020-17011 is a Windows Port Class Library elevation of privilege vulnerability. The NVD entry lists a local, low-complexity vector with no authentication required and a high impact on confidentiality, integrity, and availability (CVSS v3.1 base score 7.8). Connected documents identify the is...

CVE-2020-17036

CVE-2020-17036 corresponds to a Windows Function Discovery SSDP Provider Information Disclosure Vulnerability. The vulnerability affects Windows Function Discovery SSDP Provider and is described as an information disclosure issue. The provided documents do not include concrete technical details s...

CVE-2021-26893

Technical details for CVE-2021-26893 are not provided in the connected documents. Public disclosures, affected products, and fixes are not specified here. Monitor for updates.

CVE-2021-28439

Technical details for CVE-2021-28439 (Windows TCP/IP Driver DoS) are not present in the provided Connected documents. Public details, affected products/versions, impact, and fixes are not specified here—monitor for updates.

CVE-2021-43216

Technical details for CVE-2021-43216 are not publicly provided in the supplied documents. Monitor for updates from the referenced sources; no public specifics on affected products, versions, or impacts are included here.

CVE-2021-43238

CVE-2021-43238 is a Windows local elevation-of-privilege vulnerability. The NVD entry shows LOCAL vector, LOW attack complexity, and no authentication required (CVSS2: AV:L/AC:L/Au:N/C:P/I:P/A:P; CVSS3.1: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). However, the connected documents do not provi...

CVE-2023-21697

Technical details about CVE-2023-21697 are not publicly available in the provided documents. Monitor for updates from Microsoft/NVD and Vulners for affected products, exploit information, and remediation.

CVE-2023-33166

No public technical details for CVE-2023-33166 are provided in the connected documents. The initial description offers a generic RPC DoS label; monitor for updates for any affected products, versions, or fixes.

CVE-2024-30075

CVE-2024-30075 is a Windows LLTD (Link Layer Topology Discovery Protocol) Remote Code Execution vulnerability. The CVSSv3.1 base score is 8.0 with a vector of AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, indicating an adjacent-network exploit with required user interaction and high impact on confidential...