CVE-2025-27477

CVE-2025-27477 is a heap-based buffer overflow in Windows Telephony Service that enables remote code execution over a network. The CVE is confirmed in multiple sources (NVD entry and Microsoft KB references) as affecting Windows Telephony Service with network-exposed vectors and total impact. The...

CVE-2025-33056

CVE-2025-33056 affects Microsoft Local Security Authority Server (lsasrv). The provided documents identify the issue as improper access control that enables a remote attacker to cause a denial of service over the network. The NCSC advisory explicitly lists this CVE under Windows LSASS with a CVSS...

CVE-2014-4118

CVE-2014-4118 affects Microsoft XML Core Services (MSXML) 3.0. The vulnerability arises when parsing crafted XML content, allowing remote code execution or system-state corruption on multiple Windows versions (MSXML 3.0 in Windows Server 2003 SP2; Vista SP2; Server 2008 SP2 and R2 SP1; Windows 7 ...

CVE-2015-2456

Summary from Project Zero (2016) : Windows kernel font handling (TTF/OTF) contained multiple vulnerabilities discovered via fuzzing (ATMFD.DLL, win32k.sys) with several CVEs (notably CVE-2015-2455 and CVE-2015-2456). Root cause highlighted: the IUP instruction handler in win32k!itrp_IUP failed to...

CVE-2016-3238

The CVE-2016-3238 vulnerability affects the Windows Print Spooler and allows remote code execution when a crafted print driver is provided during printer installation. Affected products include multiple Windows client/server editions (Vista SP2, Windows 7 SP1, Windows 8.1, Windows 10 RT/1511, Win...

CVE-2016-3375

The CVE-2016-3375 entry describes a memory-corruption vulnerability in the Microsoft OLE Automation mechanism and VBScript Scripting Engine used by Internet Explorer. A remote attacker can craft a website to trigger memory corruption, potentially executing arbitrary code in the context of the log...

CVE-2017-0112

The vulnerability CVE-2017-0112 affects Uniscribe in Windows Vista SP2, Windows Server 2008 SP2/R2 SP1, and Windows 7 SP1. It enables remote information disclosure by a crafted web site that causes Uniscribe to read process memory, exposing sensitive data. Exploitation is possible without user pr...

CVE-2017-0163

CVE-2017-0163 affects Windows Server Hyper-V Network Switch, allowing remote code execution when input from a guest OS is not properly validated. The underlying issue is improper validation of guest-supplied input, enabling an attacker with guest access to execute arbitrary code on the host. Publ...

CVE-2017-0192

The CVE-2017-0192 entry describes an information disclosure in the Microsoft Windows ATMFD.dll (Adobe Type Manager Font Driver). Affected products include Windows Vista SP2, Windows Server 2008 SP2/R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold/R2, Windows RT 8.1, and Windows 10 bui...

CVE-2017-0297

Technical details (affected products, root cause, impact, remediation) are not publicly available in the provided connected documents. Monitor for updates from official advisories.

CVE-2017-8531

CVE-2017-8531 : Affected are Windows graphics components including Uniscribe across Windows client/server lines (e.g., Windows 7 SP1, 8.1, 10 variants; Windows Server 2008-2016) and Microsoft Office; root cause is an information disclosure vulnerability caused by improper memory disclosure in the...

CVE-2017-8718

CVE-2017-8718 is a remote code execution vulnerability in the Microsoft JET Database Engine that affects Windows components across multiple OS versions (Windows Server 2008 SP2/R2 SP1, Windows 7 SP1, Windows 8.1/RT 8.1, Windows Server 2012/R2, Windows 10 1511–1703, Windows Server 2016). Root caus...

CVE-2019-0664

CVE-2019-0664 relates to an information disclosure in the Windows Graphics Device Interface (GDI). The connected advisories describe the issue as an information disclosure vulnerability due to improper handling of memory objects within GDI, allowing a remote attacker to obtain sensitive informati...

CVE-2019-1098

Technical details for CVE-2019-1098 (affected products, vulnerable component, root cause, impact, and fixes) are not publicly provided in the supplied documents. Please monitor for new information or updates.

CVE-2019-1408

Technical details for CVE-2019-1408 are not publicly available in the provided documents. Monitor for updates.

CVE-2019-1412

CVE-2019-1412 affects the Windows Adobe Type Manager Font Driver (ATMFD.dll). The vulnerability is an information-disclosure flaw caused by improper handling of objects in memory, leading to partial confidentiality impact. Exploitation is Local with low attack complexity; no explicit exploitation...

CVE-2020-0666

CVE-2020-0666 is described in CNVD sources as an elevation of privilege affecting Microsoft Windows and Windows Server, stemming from the Windows Search Indexer mishandling objects in memory. The vulnerability enables code execution with elevated privileges on the affected system (local context)....

CVE-2020-0754

Technical details for CVE-2020-0754 are not provided in the connected documents; only high-level information is available.

CVE-2020-0770

CVE-2020-0770 is an elevation of privilege vulnerability in the Windows ActiveX Installer Service caused by improper handling of memory. The CNVD entry confirms the syndrome but provides no versioned product scope or patch details. Public documents indicate that exploitation requires local execut...

CVE-2020-0774

CVE-2020-0774 is a Windows GDI information-disclosure vulnerability. The Windows GDI component improperly handles memory objects, allowing an attacker to leak memory contents and potentially information needed for further compromise. The vulnerability can be exploited via social engineering (e.g....

CVE-2020-0781

The CVE-2020-0781 issue is an elevation of privilege in Windows by the Universal Plug and Play (UPnP) service, caused by improper handling of in-memory objects. Affected component: Windows UPnP service. Root cause: memory handling flaw in UPnP. Impact: attacker could gain elevated system privileg...

CVE-2020-0790

Technical details about CVE-2020-0790 are not publicly provided in the connected documents. Monitor official advisories for updates; these sources mention a splwow64 Elevation of Privilege but do not provide concrete technical specifics in the supplied materials.

CVE-2020-1250

Technical details about CVE-2020-1250, including affected products, root cause, impact, or patch specifics, are not provided in the connected documents. Monitor for updates from official advisories.

CVE-2020-1254

CVE-2020-1254 concerns an elevation of privilege in Windows Modules Installer Service. The vulnerability arises because the service improperly handles class object members, enabling a locally authenticated attacker to execute arbitrary code with system privileges. Affected: Windows Modules Instal...

CVE-2020-1437

CVE-2020-1437 is described in CNVD as an elevation-of-privilege vulnerability in the Windows Network Location Awareness Service. The flaw stems from how the service handles objects in memory, enabling an attacker to execute code with elevated privileges by running a specially crafted application....

CVE-2022-35793

Technical details about CVE-2022-35793 are not provided in the connected documents. The set contains only general MSKB updates; monitor official disclosures or vendor advisories for affected products, root cause, impact, and fixes.

CVE-2023-35299

CVE-2023-35299 affects the Windows Common Log File System Driver and is an Elevation of Privilege vulnerability. CVSSv3.1 base score 7.8 (Local, Privilege Required: Low, User Interaction: None, Scope: Unchanged; Impact: Confidentiality/Integrity/Availability High). The connected sources (includin...

CVE-2024-30093

Technical details about CVE-2024-30093 are not provided in the supplied documents; no affected products, root cause, impact, or fixes are specified.

CVE-2024-38050

Technical details about CVE-2024-38050 (affected software, root cause, impact, exploitability) are not provided in the supplied documents. Please monitor for updates from Microsoft or related security advisories.

CVE-2024-38151

Technical details (affected product/component/root cause/impact/fix) for CVE-2024-38151 are not provided in the connected documents. Only the label “Windows Kernel Information Disclosure” with CVSS 5.5 is given; monitor for updates.

CVE-2025-27741

CVE-2025-27741 describes an out-of-bounds read in Windows NTFS that allows a local attacker to elevate privileges. The issue is tied to NTFS handling and is mitigated by Microsoft security updates; affected users should apply the latest Windows security updates per MSRC guidance. The connected so...

CVE-2008-1454

Technical details about CVE-2008-1454 (affected product, vulnerable component, impact, patch) are not publicly provided in the connected documents. Monitor for updates.

CVE-2010-0024

The CVEs concern the Windows SMTP service (smtpsvc.dll) used by Microsoft Windows 2000 SP4, Windows XP SP3, Windows Server 2003 SP2, Windows Server 2008 SP2/R2, Exchange Server 2003 SP3, Exchange Server 2007 SP2, and Exchange Server 2010. CVE-2010-0024 describes a flaw in parsing DNS MX records t...

CVE-2015-2515

CVE-2015-2515 is a remote code execution vulnerability in Windows Shell caused by a use-after-free when handling crafted toolbar objects. Affected products include Windows Vista SP2, Windows Server 2008 SP2/R2 SP1, Windows 7 SP1, Windows 8/8.1, Windows Server 2012/2012 R2, Windows RT/RT 8.1, and ...

CVE-2015-6107

CVE-2015-6107 concerns a remote-code-execution vulnerability in the Windows font library. The issue arises when parsing specially crafted embedded fonts, enabling arbitrary code execution on affected systems. Public references indicate this affects a broad set of Windows versions (Vista through W...

CVE-2016-3263

CVE-2016-3263 concerns a GDI+/Graphics Device Interface information-disclosure issue across multiple Windows platforms (Vista SP2 through Windows 10 1607, Windows Server equivalents) that allows remote attackers to bypass ASLR via unspecified vectors. Affected components are GDI/GDI+ in Windows a...

CVE-2017-0118

CVE-2017-0118 is an information-disclosure vulnerability in Microsoft Windows Uniscribe (usp10.dll) that can be triggered by a crafted web site, allowing an attacker to read sensitive data from a target process’s memory. The issue affects a range of Windows versions listed in the description and ...

CVE-2017-0168

CVE-2017-0168 is a vulnerability in the Windows Hyper-V Network Switch where input from a guest OS is not properly validated on hosts running Windows 8.1, Windows Server 2008/2008 R2/2012/2012 R2. The underlying issue is improper input validation in the Hyper-V Network Switch, leading to informat...

CVE-2017-8470

Technical details for CVE-2017-8470 are not publicly available in the provided documents; monitor for updates from Microsoft/MSRC and security vendors.

CVE-2017-8544

CVE-2017-8544 describes a Windows Search Information Disclosure vulnerability in the Windows Search service caused by how objects are handled in memory. Affected systems span multiple Windows versions: Windows 7 SP1, Windows Server 2008 SP2/R2 SP1, Windows 8.1/RT 8.1, Windows Server 2012/R2, Wind...

CVE-2018-0926

Technical details are not publicly available in the provided connected documents; monitor for updates.

CVE-2020-0718

CVE-2020-0718: Active Directory integrated DNS (ADIDNS) RCE is a remote code execution vulnerability that occurs when ADIDNS mishandles objects in memory. An authenticated attacker could send malicious requests to an ADIDNS server, potentially executing code in the Local System context. The conne...

CVE-2020-0730

CVE-2020-0730 concerns Windows User Profile Service (ProfSvc) elevation of privilege due to improper handling of symbolic links. The CNVD-2020-14305 entry describes that an attacker could delete files and folders in an elevated context by exploiting this symlink handling issue. The provided conne...

CVE-2020-0843

CVE-2020-0843 is a local elevation-of-privilege vulnerability in Windows Installer. The issue arises from how Windows Installer handles certain filesystem operations, allowing an unprivileged attacker on the victim system to compromise the host. CVSSv3.1 base score is 7.8 (HIGH) with local exploi...

CVE-2020-0860

Technical details for CVE-2020-0860 are not publicly provided in the connected documents. Available sources mention the vulnerability in general terms; monitor for updates and additional technical disclosures.

CVE-2020-0907

CVE-2020-0907 is described as a remote code execution vulnerability in how Microsoft Graphics Components handles objects in memory. The connected MS KB and vendor feeds confirm this CVE is among a set of Windows updates (KB4549951 family) addressing multiple issues, but the provided documents do ...

CVE-2020-1061

CVE-2020-1061 is a remote code execution vulnerability described as affecting the Microsoft Script Runtime, stemming from how it handles objects in memory. The available connected docs reiterate this in the CVE description and identify the component as the Microsoft Script Runtime, with no explic...

CVE-2020-1245

Technical details about CVE-2020-1245 are not provided in the supplied connected documents; public information in the initial description is high-level. Monitor for official security advisories for affected products, impact, and fixes.

CVE-2020-1397

CVE-2020-1397 is an information-disclosure flaw in Windows Imaging Component (WIC) related to how WindowsCodecs handles image decoding, particularly TIFF/CCITT paths. FireEye’s analysis identifies the root cause as uninitialized memory flowing through the image decoding pipeline (TIFFReadBufferSe...

CVE-2020-1401

CVE-2020-1401 is a Remote Code Execution vulnerability in Microsoft Windows/Windows Server arising from improper handling of objects in memory by the Jet Database Engine. The connected CNVD entries describe the root cause as a failure of the Jet Database Engine to properly handle in-memory object...