CVE-2018-0975

CVE-2018-0975 is an information-disclosure vulnerability in the Windows kernel that could enable an attacker to obtain information leading to a Kernel ASLR bypass. The Initial document lists affected Windows platforms (Windows 7, Windows Server 2008/2012/2016, Windows 8.1, Windows 10 and correspo...

CVE-2019-0968

CVE-2019-0968 is an information-disclosure vulnerability in the Windows GDI component where memory contents can be exposed due to incorrect handling of objects in memory. Exploitation could occur via user action (e.g., opening a crafted document or visiting a malicious page) to leak memory and en...

CVE-2019-1116

Technical details for CVE-2019-1116 are not publicly provided in the supplied documents; connected items discuss related CVEs but do not disclose affected product/version/root cause for this CVE. Monitor for updates.

CVE-2019-1424

CVE-2019-1424 is a Windows Netlogon security feature bypass vulnerability. Public data describe a vulnerability in how the Netlogon secure channel is handled, with a CVSS v3.1 base score of 8.1 (AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) and a NETWORK attack vector, no user interaction required. No exp...

CVE-2020-0664

Technical details about CVE-2020-0664 are not publicly provided in the supplied documents. This entry's information disclosure is described, and remediation is patching ADIDNS handling in memory, but no affected versions or exploit specifics are included here. Monitor for updates.

CVE-2020-0675

CVE-2020-0675 affects the Windows Cryptography Next Generation (CNG) service. The vulnerability arises from the service’s failure to properly handle objects in memory, enabling an information disclosure when a logged-on attacker runs a specially crafted application. The issue is addressed by a se...

CVE-2020-0772

CVE-2020-0772 is a Windows Error Reporting memory-handling bug causing local privilege escalation. The vulnerability requires local execution and has a CVSSv3.1 base score of 7.8 (HIGH) with local attack, low attack complexity, and no user interaction. The description does not provide a patch or ...

CVE-2020-0922

Technical details about CVE-2020-0922 are not provided in the connected documents. The Initial Description only notes a remote code execution in Microsoft COM for Windows with a fix in a security update; no product/version/root-cause/exploit details are included here. Monitor for official disclos...

CVE-2020-1007

CVE-2020-1007 is a Windows kernel information disclosure vulnerability. The issue arises from how the Windows kernel handles objects in memory, enabling information disclosure when exploited locally. The description, CVSS data, and references indicate a kernel-level memory handling flaw with part...

CVE-2020-1010

Technical details about CVE-2020-1010 (affected product wbengine, root cause, exploit specifics, mitigations) are not publicly available in the provided Connected documents; monitor for updates from Microsoft MSRC and NVD.

CVE-2020-1051

CVE-2020-1051 concerns the Windows Jet Database Engine and is described as a remote code execution vulnerability caused by improper handling of objects in memory. The connected KB4556799 entry references Windows security updates and notes that the Jet Database Engine is among updated components, ...

CVE-2020-1074

CVE-2020-1074 describes a remote code execution in the Windows Jet Database Engine caused by improper in-memory handling of objects. An attacker could trigger code execution by convincing a user to open a specially crafted file, leading to arbitrary code on the victim’s system. The vulnerability ...

CVE-2020-1263

CVE-2020-1263 describes an information disclosure vulnerability in Windows Error Reporting (WER). The issue arises from how memory objects are handled by WER, allowing an attacker to potentially access information they should not have. The affected component is Windows Error Reporting, and the ro...

CVE-2020-1287

CVE-2020-1287 is a Windows WalletService elevation of privilege vulnerability. The WalletService stores/handles objects in memory in a way that can be exploited to elevate privileges; both CNVD entries (CNVD-2021-27713, CNVD-2021-29542) describe this WalletService memory-object handling flaw with...

CVE-2020-1589

Technical details of CVE-2020-1589 are not publicly provided in the supplied documents. No affected products, versions, impact, or fixes are disclosed here. Monitor for updates from official sources.

CVE-2021-1679

Technical details for CVE-2021-1679 are not publicly provided in the supplied documents. Please monitor for updates; no product, impact, or remediation specifics are included here.

CVE-2021-27093

Technical details about CVE-2021-27093 are not publicly available in the provided connected documents; monitor for updates.

CVE-2023-35322

Technical details about CVE-2023-35322 are not publicly provided in the supplied documents; no affected products, root cause, or remediation details are listed. Monitor for updates in forthcoming connected sources.

CVE-2023-35641

CVE-2023-35641 is an Internet Connection Sharing (ICS) remote code execution in Windows. Connected sources confirm affected component (Windows ICS) and classify the impact as remote code execution with the attacker needing adjacent network access, no user interaction, and no privileges required (...

CVE-2024-38051

Technical details about CVE-2024-38051 (Windows Graphics Component RCE) are not provided in the connected documents. Monitor for updates from official advisories to obtain affected products, root cause, and remediation information.

CVE-2024-43449

CVE-2024-43449 is a Windows USB Video Class System Driver elevation-of-privilege vulnerability. The CVE entry lists a CVSSv3.1 base score of 6.8 (Medium) with attack vector as Physical, no user interaction required, and an impact profile of High on confidentiality, integrity, and availability. Mi...

CVE-2025-21294

CVE-2025-21294 refers to a Microsoft Digest Authentication Remote Code Execution vulnerability. Public documents indicate it affects Windows components and has high impact (RCE). Connected sources confirm updates exist to fix the vulnerabilities and recommend installing January 2025 security upda...

CVE-2025-26667

CVE-2025-26667 is a Windows RRAS information-disclosure vulnerability. The RRAS service can expose sensitive data to an unauthorized network actor, with the CVSSv3.1 base score listed as 6.5 (Network, Low attack complexity, Privileges None, No user interaction; Confidentiality impact High). The c...

CVE-2013-3129

CVE-2013-3129 concerns a TrueType Font (TTF) parsing vulnerability that allows remote code execution. Affected products include Microsoft .NET Framework 3.0 SP2, 3.5, 3.5.1, 4, 4.5; Silverlight 5 prior to 5.1.20513.0; and GDI+, DirectWrite, Journal in various Windows versions (XP through Windows ...

CVE-2015-6132

CVE-2015-6132 is the Windows library loading remote code execution vulnerability affecting multiple Windows versions. Root cause: mishandled library loading enabling local privilege escalation via a crafted application. The MS15-132 security update fixes this, with public exploits and a Metasploi...

CVE-2016-0195

Summary: CVE-2016-0195 is a remote code execution vulnerability in the Windows Imaging Component (WIC) affecting multiple Windows versions (Vista to Windows 10). The issue arises from improper handling of memory/objects in the Imaging Component, enabling remote attackers to run arbitrary code via...

CVE-2016-3335

CVE-2016-3335 concerns the Microsoft Windows Common Log File System (CLFS) driver elevation of privilege. The advisory notes local users can gain higher privileges via a crafted application on affected OSes: Windows Vista SP2; Windows Server 2008 SP2/R2; Windows 7 SP1; Windows 8.1; Windows Server...

CVE-2016-3348

CVE-2016-3348 is a local elevation-of-privilege vulnerability in the Windows kernel-mode driver Win32k.sys. The root cause is how the kernel-mode driver handles objects in memory, which an attacker can exploit by running a crafted application after logging in to gain kernel-level privileges. Affe...

CVE-2017-0090

CVE-2017-0090 is a real Uniscribe vulnerability in USP10 (Windows Uniscribe) where an invalid memory write in the MergeLigRecords function can be triggered by rendering text with a crafted font via API calls such as DrawText, leading to remote code execution. The connected Exploit-DB entries (e.g...

CVE-2017-8488

CVE-2017-8488 is a Windows kernel information disclosure vulnerability affecting multiple Windows versions (Windows Server 2008 SP2/R2 SP1, Windows 7 SP1, 8.1, Server 2012 Gold/R2, Windows RT 8.1, Windows 10 variants, Server 2016). The issue allows an authenticated attacker to obtain information ...

CVE-2018-8563

CVE-2018-8563 is a DirectX information-disclosure vulnerability arising from how objects are handled in memory. The NVD and CNVD entries document that it affects multiple Windows platforms (Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2012, Windows 8.1, Windows Server 2008 R2...

CVE-2019-1293

Technical details for CVE-2019-1293 are not publicly provided in the connected documents. No affected products, root cause, impact, or remediation are disclosed here. Monitor for updates in the CVE records and advisories.

CVE-2019-1325

Technical details for CVE-2019-1325 are not provided in the connected documents; no affected product/version/root cause or fix is described beyond the initial entry. Monitor for updates.

CVE-2019-1441

CVE-2019-1441 (Win32k Graphics Remote Code Execution) is a remote code execution vulnerability in the Windows font library that mishandles specially crafted embedded fonts. The flaw affects Windows components relying on the font/Win32k stack; an attacker could host malicious content or deliver a ...

CVE-2020-0691

Technical details about CVE-2020-0691 are not publicly provided in the supplied documents; no affected products, root cause, or remediation are specified here. Monitor for updates.

CVE-2020-0720

Technical details about CVE-2020-0720 are not publicly available in the provided documents. Monitor for updates from official sources; no specifics on affected products, root cause, or remediation are included here.

CVE-2020-0777

CVE-2020-0777 is described in CNVD-2020-23447 as a privilege escalation vulnerability in Microsoft Windows Work Folder Service, arising from improper handling of file operations. The CNVD entry states that an attacker could exploit this with a specially crafted application to run processes with e...

CVE-2020-0921

Technical details about CVE-2020-0921 are not provided in the connected documents; the materials reference the vulnerability in general terms related to Microsoft Graphics components but do not specify affected products/versions, root cause, or remediation. Monitor for updates.

CVE-2020-0955

Technical details for CVE-2020-0955 are not publicly provided in the supplied documents. Monitor official advisories for updates; current sources only describe an information-disclosure via CPU memory access without specifics.

CVE-2020-0963

The CVE-2020-0963 entry describes an information disclosure vulnerability in the Windows Graphics Device Interface (GDI) where memory contents may be exposed. The vulnerability is tied to the GDI component’s handling of objects in memory, enabling disclosure of memory contents by an attacker. The...

CVE-2020-1245

Technical details about CVE-2020-1245 are not provided in the supplied connected documents; public information in the initial description is high-level. Monitor for official security advisories for affected products, impact, and fixes.

CVE-2020-1311

CVE-2020-1311 is an elevation-of-privilege vulnerability in the Component Object Model (COM). Affected: Windows COM client using special case IIDs. Root cause cited as an elevation of privilege in COM. Connected documentRH: CVE-2020-1311 confirms the same issue; no explicit product/version patche...

CVE-2020-1351

CVE-2020-1351 is described in connected sources as an information disclosure vulnerability linked to the Windows Graphics Component. The root cause, as stated in CNVD-2021-63330, is that the Windows graphics component fails to properly handle objects in memory, enabling information disclosure on ...

CVE-2021-26875

CVE-2021-26875 is described as a Windows Win32k Elevation of Privilege Vulnerability. The provided connected documents do not reveal concrete technical details (affected component versions, specific root cause, exploit vectors, or explicit remediation) for this CVE; only high-level references to ...

CVE-2023-32045

Technical details about CVE-2023-32045 are not provided in the supplied documents. For updates and potential remediation, monitor official advisories (MSRC) and NVD entries.

CVE-2023-33173

Technical details about CVE-2023-33173 are not provided in the supplied documents. No specific affected products, root causes, or fixes are disclosed here. Monitor for updates from official advisories.

CVE-2024-38099

Technical details about CVE-2024-38099 (Windows Remote Desktop Licensing Service DoS) are not provided in the supplied documents. Monitor for official advisories for affected products, impact, and fixes.

CVE-2024-38191

Technical details for CVE-2024-38191 are not publicly provided in the supplied documents. Monitor for updates from Microsoft MSRC/NVD, NVD, or CVE listings as new information becomes available.

CVE-2024-43454

CVE-2024-43454 is a Windows vulnerability affecting the Windows Remote Desktop Licensing Service that enables a Remote Code Execution via network with low privileges and no user interaction. The connected materials confirm this CVE entry and associate it with Microsoft’s September 2024 security u...

CVE-2025-21268

CVE-2025-21268 is a Windows MapUrlToZone security feature bypass. Affected component: MapUrlToZone logic; impact is circumvention of security boundaries (CVSS v3.1: 4.3, NETWORK attack vector, user interaction required). Connected sources confirm it as a security feature bypass vulnerability and ...