CVE-2015-1676

Technical details about CVE-2015-1676 are not publicly provided in the connected documents. Monitor for updates; no concrete technical details (affected components, root cause, versions, exploit info) are available here.

CVE-2016-3270

CVE-2016-3270 is a Win32k local privilege-escalation vulnerability in the Windows kernel graphics subsystem. The flaw arises from improper handling of objects in memory within the Win32k graphics component, allowing a local user to gain SYSTEM privileges via a crafted application. Affected produc...

CVE-2017-0085

The CVE-2017-0085 issue is a Microsoft Windows Uniscribe information-disclosure vulnerability affecting Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1. The root cause is in Uniscribe’s handling of memory when processing fonts, allowing a remote attacker to obtain sensiti...

CVE-2017-0155

CVE-2017-0155 is a Windows Win32k kernel graphics component elevation of privilege vulnerability. The issue arises when the Win32k component fails to properly handle objects in memory, enabling a locally authenticated attacker with a crafted application to run arbitrary code in kernel mode and ga...

CVE-2017-0298

Technical details about CVE-2017-0298 are not publicly provided in the supplied documents. No specific affected products/versions or root cause are described here. Monitor official sources for updates.

CVE-2017-8462

Technical details about CVE-2017-8462 are not publicly available in the provided connected documents. Monitor for updates.

CVE-2017-8478

Technical details about CVE-2017-8478 are not publicly available in the provided documents. Monitor for updates.

CVE-2018-0741

CVE-2018-0741 is an information disclosure vulnerability in the Windows Color Management Module (ICM32.dll) affecting Windows 7 SP1 and Windows Server 2008 SP2 and R2 SP1. The issue arises from how objects are handled in memory, enabling an attacker to bypass ASLR and potentially facilitate explo...

CVE-2018-0750

CVE-2018-0750 affects the Win32k/Windows GDI component in Windows 7 SP1 and Windows Server 2008 SP2/R2 SP1. The vulnerability is a Win32k information disclosure caused by improper handling of objects in memory, allowing an attacker who logs on to obtain kernel memory addresses and potentially fur...

CVE-2019-1213

CVE-2019-1213 is a memory corruption vulnerability in the Windows Server DHCP service that could allow remote code execution when an attacker sends specially crafted DHCP packets to a DHCP server. The root cause is improper handling of network packets by the DHCP server, enabling arbitrary code e...

CVE-2019-1409

CVE-2019-1409 is an information disclosure vulnerability in the Windows Remote Procedure Call (RPC) runtime. The connected data confirms the root cause as improper initialization of objects in memory within RPC, enabling partial confidentiality impact. The CVE affects the Windows RPC component, w...

CVE-2019-1439

CVE-2019-1439 is described as a Windows GDI information disclosure vulnerability. Connected advisories provide concrete details: a heap-based buffer overflow in the MF3216 component of Microsoft Windows, with exploitation described as remote and triggered by the user opening a specially crafted f...

CVE-2020-0836

CVE-2020-0836 describes a denial-of-service vulnerability in Windows DNS where the DNS service can become nonresponsive if it fails to properly handle queries. An authenticated attacker could exploit this by sending crafted DNS queries, leading to resource exhaustion and service unavailability. T...

CVE-2020-0879

CVE-2020-0879 is a Windows GDI information-disclosure vulnerability in which memory objects within the Graphics Device Interface can be leveraged to retrieve information from the target system. Public documentation describes it as an information-disclosure issue arising from how GDI handles memor...

CVE-2020-1076

Technical details (affected product/versions, root cause, exploitability or fixes) for CVE-2020-1076 are not provided in the connected documents. No public specifics are available here; monitor for updated disclosures from official sources.

CVE-2020-1438

CVE-2020-1438 is an Elevation of Privilege vulnerability in Windows Network Connections Service. The issue arises from how in-memory objects are handled, enabling local attackers to potentially execute code with elevated privileges. Affected product: Windows Network Connections Service (per CVE-2...

CVE-2024-43501

CVE-2024-43501 affects the Windows Common Log File System Driver and is a local elevation-of-privilege vulnerability. Triggers could allow an attacker with low privileges to escalate to obtain high-level privileges, with the issue categorized as high severity (CVSS v3.1 base score 7.8). The CVE i...

CVE-2025-21300

CVE-2025-21300 affects Windows UPnP Device Host. Connected CNVD data ties the issue to the Windows upnphost.dll component and a Denial of Service impact. Microsoft has published January 2025 security updates to address this family of issues; applying KB5050021 (and related January 2025 updates) i...

CVE-2025-21306

CVE-2025-21306 corresponds to a remote code execution vulnerability in Windows Telephony Service. The issue is mapped to Windows Telephony Service and is rated high (CVSSv3.1: 8.8, AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H). Connected sources confirm the affected component and vulnerability type; root ...

CVE-2025-21339

CVE-2025-21339 corresponds to a Windows Telephony Service remote code execution vulnerability. The NCSC listing confirms a high-severity impact (CVSS 3.1: AV Network, AC L, PR None, UI Required, S U, C/H/I/A H) with an overall score of 8.80 and notes that exploitation can lead to executing code i...

CVE-2025-26641

CVE-2025-26641 affects Windows Cryptographic Services, causing Denial of Service via uncontrolled resource consumption over the network. Base score 7.5 (Network, High availability impact). Exploitation status not detailed in the provided connected documents; remediation per Microsoft security upd...

CVE-2025-33057

CVE-2025-33057 is a Windows Local Security Authority (LSA) vulnerability where a null pointer dereference could allow an authorized attacker to cause a network-based Denial-of-Service. Affected component is LSA; impact is DoS over the network. Documented in NVD and corroborated by NC SC/NCSC entr...

CVE-2025-54109

CVE-2025-54109 affects Windows Defender Firewall Service. The vulnerability is described as a type confusion that can enable local privilege escalation by an authorized attacker. Connected sources (NCSC advisory) list CVE-2025-54109 with a base score of 6.7 (Medium) and attribute the impact to lo...

CVE-2026-20868

CVE-2026-20868 is a heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) that enables remote code execution over the network. Public disclosures and vendor advisories (RRAS context) indicate this vulnerability affects Windows RRAS; Microsoft has released January 2026 sec...

CVE-2009-0229

The CVE-2009-0229 vulnerability affects the Windows Print Spooler across multiple Windows variants (Windows 2000 SP4, XP SP2/SP3, Server 2003 SP2, Vista SP1/SP2, Server 2008 SP2). It is a local information-disclosure flaw where a crafted Separator Page enables local users to read arbitrary files ...

CVE-2009-0320

Microsoft Windows taskmgr.exe Information Disclosure Vulnerability (CVE-2009-0320) affects Windows XP, Server 2003/2008, and Vista. The issue exposes I/O activity measurements for all processes, enabling local users to infer sensitive information by reading the I/O Other Bytes column in Task Mana...

CVE-2009-0555

CVE-2009-0555 is a Windows Media Runtime issue affecting the ASF handling in DirectShow WMA Voice Codec, Windows Media Audio Voice Decoder, and ACM. The flaw allows remote code execution via a crafted ASF audio file that uses the Windows Media Speech codec, as described in multiple sources (MS09-...

CVE-2010-0252

CVE-2010-0252 describes a remote code execution risk in the Microsoft Data Analyzer ActiveX control (max3activex.dll) used in Office/Excel components. A crafted web page can corrupt the system state and run arbitrary code with the caller’s privileges. Microsoft addressed this via MS10-034, which ...

CVE-2010-2739

The CVE-2010-2739 issue is a buffer overflow in the Windows win32k.sys CreateDIBPalette() function. A crafted bitmap with a very large color palette, used via GetClipboardData, can crash the system and may allow arbitrary code execution locally on affected Windows versions: XP SP3, Server 2003 R2...

CVE-2011-1237

The CVE-2011-1237 issue affects Windows kernel-mode driver win32k.sys across multiple OS versions (XP SP2/SP3, Server 2003 SP2, Vista SP1/SP2, Server 2008 SP2/R2, Windows 7 SP1). Root cause: use-after-free in the win32k.sys driver object management, enabling a local attacker with crafted input to...

CVE-2013-1345

CVE-2013-1345 affects the Windows kernel-mode driver component Win32k.sys across multiple Windows/Server editions (XP SP2/SP3, Server 2003 SP2, Vista SP2, Server 2008 SP2/R2, Windows 7, 8, Server 2012, Windows RT). The vulnerability arises from improper handling of objects in memory within Win32k...

CVE-2014-0255

CVE-2014-0255 describes a denial-of-service vulnerability in Microsoft iSCSI on Windows Server 2008 SP2, R2 SP1, and Server 2012 (Gold and R2). The root cause is memory exhaustion when handling iSCSI packets, allowing a remote, unauthenticated attacker to cause iSCSI service outages by sending ma...

CVE-2015-2365

CVE-2015-2365 affects the Windows kernel component Win32k.sys (kernel-mode driver). A local attacker can gain privileges via a crafted application, leading to privilege escalation on multiple Windows platforms (Server 2003 SP2/R2 SP2, Vista SP2, Server 2008 SP2/R2, 7 SP1, 8/8.1, Server 2012/R2, R...

CVE-2015-2433

CVE-2015-2433 is described as a local kernel ASLR bypass vulnerability in Microsoft Windows (affecting Vista SP2/Server 2008 SP2 and R2, Windows 7 SP1, 8/8.1, Server 2012, RT/RT 8.1, Windows 10). Connected records confirm public exploitation activity and linkage to a separate MS15-080/graphics-fo...

CVE-2015-6100

Technical details about CVE-2015-6100 are not provided in the connected documents; the initial entry describes a Windows kernel privilege escalation affecting multiple OS versions but lacks concrete technical specifics. Monitor for updates.

CVE-2016-3262

CVE-2016-3262 and CVE-2016-3263 describe a Graphics Device Interface (GDI+/GDI) information-disclosure problem in multiple Windows versions. The description specifies that remote attackers can bypass ASLR through unspecified vectors. Affected products include Windows Vista SP2, Windows Server 200...

CVE-2017-0117

CVE-2017-0117 concerns a vulnerability in Windows Uniscribe (usp10.dll) that can disclose memory contents when rendering Unicode text via a crafted web site. Connected sources indicate exploitation in the wild (e.g., exploit-db entry 41655) and show that the issue manifests through user32/glyph r...

CVE-2017-0125

CVE-2017-0125 affects the Uniscribe component in Windows Vista SP2, Server 2008 SP2/R2 SP1, and Windows 7 SP1. The vulnerability allows a remote attacker to obtain sensitive information from a process’s memory via a crafted web site. Connected documents corroborate Uniscribe issues and exploitati...

CVE-2017-8485

Technical details about CVE-2017-8485 are not provided in the connected documents. The available materials do not specify affected versions, root cause, impact, or fixes. Monitor for updates.

CVE-2017-8573

CVE-2017-8573 is the Microsoft Windows Graphics Component elevation-of-privilege vulnerability. Public details in CNVD-2017-16000 describe that the Graphics component fails to properly handle in-memory objects, allowing a local attacker to execute code in kernel mode with elevated privileges. The...

CVE-2017-8679

CVE-2017-8679 pertains to a Windows kernel information disclosure vulnerability. The affected platform set includes Windows Server 2008 SP2/R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold/R2, Windows RT 8.1, Windows 10 (various builds), and Windows Server 2016. The root cause is impr...

CVE-2017-8720

CVE-2017-8720 is a local elevation-of-privilege flaw in the Windows graphics stack tied to the Win32k component. The vulnerability arises when Win32k fails to properly handle memory objects, allowing an attacker who can run code on a system to execute with kernel or higher privileges. Affected pr...

CVE-2020-0752

CVE-2020-0752 is a Windows privilege-escalation vulnerability in the Windows Search Indexer related to how it handles objects in memory. The issue is described as allowing an attacker with local access to potentially execute code with elevated permissions, with the CVSS provided by the primary en...

CVE-2020-0880

CVE-2020-0880 describes an information disclosure vulnerability in the Windows GDI component where memory contents can be improperly disclosed. The vulnerability affects Windows GDI memory handling; exploitation could allow an attacker to obtain information to further compromise the target system...

CVE-2020-0885

CVE-2020-0885 concerns the Windows GDI component, where memory contents can be improperly disclosed (information disclosure vulnerability). The vulnerability arises from how GDI handles objects in memory, enabling potential leakage of memory contents. The public documentation consistently describ...

CVE-2020-1078

Technical details about CVE-2020-1078 (Windows Installer Elevation of Privilege) are not provided in the connected documents. Monitor for updates.

CVE-2020-1228

CVE-2020-1228 is a DoS vulnerability in the Windows DNS service. An authenticated attacker can send crafted DNS queries that cause the DNS server to become nonresponsive. Affected component: Windows DNS processing of queries. Root cause: improper handling of DNS queries leading to resource exhaus...

CVE-2020-1396

CVE-2020-1396 affects Microsoft Windows ALPC Elevation of Privilege. CNVD-2020-45187 describes a vulnerability where Windows ALPC is not correctly handling calls, allowing an attacker who logs on and runs a crafted application to execute arbitrary code with local system privileges. The connected ...

CVE-2025-21258

Technical details about CVE-2025-21258 are not publicly provided in the supplied documents. No affected product/version/root cause/exploit or remediation details are present here; please consult Microsoft advisories for updates.

CVE-2025-21305

CVE-2025-21305 is documented as a Windows Telephony Service Remote Code Execution vulnerability. The connected CIRCL source explicitly lists CVE-2025-21305 under Windows Telephony Service with an impact described as Execute random code, indicating a code-execution vector in the Telephony service....