CVE-2023-32044

Technical details for CVE-2023-32044 are not provided in the connected documents; only the vulnerability name is cited. Monitor for updates.

CVE-2023-35639

CVE-2023-35639 — Microsoft ODBC Driver Remote Code Execution is documented in the CVE entry and corroborated by multiple sources in the connected set as a Windows component vulnerability. In NVD, the CVSSv3.1 base score is 8.8 (HIGH) with a network attack vector, requiring user interaction, and r...

CVE-2023-36907

Technical details about CVE-2023-36907 are not publicly available in the provided documents; no affected products, root cause, impact, or fixes are described here. Monitor official updates from NVD/Microsoft for remediation.

CVE-2024-38054

Technical details for CVE-2024-38054 are not provided in the connected documents. No affected product, component, version, root cause, or remediation specifics are available here; monitor for updates.

CVE-2024-43627

CVE-2024-43627 affects the Windows Telephony Service and enables Remote Code Execution. Affected component: Windows Telephony Service (Windows OS). Attack vector: network; prerequisites: none; user interaction required (UI: R). Impact per CVSS 3.1: Confidentiality, Integrity, and Availability are...

CVE-2025-21180

CVE-2025-21180 is a Windows exFAT File System vulnerability described as a heap-based buffer overflow that could allow local code execution. The connected documents identify the affected component as the Windows exFAT file system driver and confirm the root cause as a heap-based overflow, enablin...

CVE-2025-21232

CVE-2025-21232 is a Windows Digital Media Elevation of Privilege vulnerability. The linked data show a CVSS v3.1 base score of 6.6 (Medium) with a physical attack vector, requiring low privileges and no user interaction, and yielding high impact to confidentiality, integrity, and availability. Th...

CVE-2025-21276

CVE-2025-21276 is a Windows MapUrlToZone Denial of Service vulnerability. The CVE entry lists a NETWORK‑level attack with low complexity and no privileges required, resulting in a HIGH impact on availability (CVSS 3.1 base 7.5). Multiple connected sources corroborate a DoS condition in the MapUrl...

CVE-2025-21285

Technical details (affected products, root cause, impact or fixes for CVE-2025-21285 MSMQ DoS) are not included in the provided documents. Monitor updates from Microsoft and CVE/CIRCL references for remedies and exposure.

CVE-2026-62784

Microsoft Local Security Authority Server (lsasrv) is affected by CVE-2026-62784 due to a heap-based buffer overflow that allows an authorized attacker to execute code over the network. CVSS v3.1 score: 8.8 (High) with Network access, Low complexity, Privileges Required: Low, User Interaction: No...

CVE-2013-3182

The CVE-2013-3182 issue affects the Windows NAT Driver (winnat.sys) in Microsoft Windows Server 2012. The vulnerability stems from improper validation of memory addresses while processing ICMP packets, enabling remote attackers to cause a denial of service via memory corruption and a system hang....

CVE-2018-0972

CVE-2018-0972 is a Windows kernel information-disclosure vulnerability that could enable an ASLR bypass. The entry covers multiple Windows versions (desktop, server, and RT). Public details in the initial record include CVSS metrics from NVD (2.1/5.5, LOW to MEDIUM overall, LOCAL access with low ...

CVE-2018-8127

CVE-2018-8127 is a Windows kernel information-disclosure vulnerability affecting multiple Windows versions (e.g., Windows 7, 8.1, 10, and server editions). Root cause: the kernel improperly handles objects in memory, enabling information leakage. The connected records do not provide concrete expl...

CVE-2018-8207

The CVE-2018-8207 entry describes an information disclosure vulnerability in the Windows kernel caused by improper handling of memory objects. Affected products include Windows 7, Windows Server 2008/R2/2012/2012 R2, Windows 8.1, Windows 10 and corresponding server variants. The issue stems from ...

CVE-2018-8330

CVE-2018-8330 is a Windows kernel information-disclosure vulnerability where the kernel improperly handles objects in memory. Affected are multiple Windows client/server editions (e.g., Windows 7, 8.1, 10 and corresponding server releases such as Server 2008/2012/2016/2019). The underlying cause ...

CVE-2020-0916

Technical details for CVE-2020-0916 are not publicly available in the provided documents. No explicit affected product/version or root cause is given here. Monitor for updates.

CVE-2020-16889

CVE-2020-16889 describes an information disclosure vulnerability in Windows KernelStream where in-memory objects are not handled correctly. Exploitation requires an authenticated user to log on and run a crafted application; it does not directly enable code execution or privilege escalation, but ...

CVE-2021-1637

Technical details for CVE-2021-1637 are not publicly provided in the connected documents. Monitor official advisories for updates.

CVE-2021-1704

CVE-2021-1704 is documented as a Windows Hyper-V Elevation of Privilege vulnerability. The connected OpenVAS entries (KB4598** series) list CVE-2021-1704 among affected Windows vulnerabilities, indicating it is addressed across multiple Microsoft security updates. The provided documents do not in...

CVE-2021-28343

Technical details for CVE-2021-28343 are not provided in the supplied documents. Public information such as affected product/version, root cause, impact, or remediation is not present here; monitor for updates.

CVE-2021-31975

No technical details (affected products, root cause, or fixes) for CVE-2021-31975 are provided in the supplied documents. Monitor for updates from official advisories and vendor advisories.

CVE-2022-34730

Technical details about CVE-2022-34730 are not publicly provided in the supplied connected documents. No product/version/impact/fix details are present here; monitor for updates from official advisories.

CVE-2023-28254

Technical details about CVE-2023-28254 are not provided in the connected documents. The materials confirm a Windows DNS Server RCE vulnerability in description form only. Monitor for updates from Microsoft/NVD for affected versions, impact, and fixes.

CVE-2023-32054

CVE-2023-32054 is referenced in connected content as a local elevation-of-privilege vulnerability related to Shadow Copy restoration. The MagicDot tooling (GitHub: SafeBreach-Labs/MagicDot) includes a Shadow Copy restoration exploit specifically for CVE-2023-32054, described among a package of ro...

CVE-2023-35302

CVE-2023-35302 corresponds to a Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution vulnerability. The NVD entry specifies a CVSS v3.1 base score of 8.8 (Network attack vector, Low attack complexity, Privileges Required: Low, User Interaction: None, Scope: Unchanged) with hig...

CVE-2023-35632

CVE-2023-35632 corresponds to a Windows Elevation of Privilege issue in the Windows Ancillary Function Driver for WinSock. The CVE is listed across multiple feeds (NVD, OpenVAS) with a high base score (CVSSv3.1 7.8; LOCAL, LOW attack complexity, LOw privileges required, user interaction None; imp...

CVE-2023-36913

Technical details about CVE-2023-36913 are not publicly provided in the supplied documents. No specific affected products, root cause, or remediation are described here. Monitor for updates as new information may be released.

CVE-2024-38101

Technical details about CVE-2024-38101 are not publicly provided in the supplied connected documents. Information about affected components, impact, and fixes is unavailable here. Monitor for updates from official sources to obtain confirmed technical specifics and remediation guidance.

CVE-2024-49089

Technical details about CVE-2024-49089 are not provided in the supplied documents; RRAS RCE is referenced but no affected versions, exploit, or remediation details are included. Monitor for updates.

CVE-2025-26686

CVE-2025-26686 is a Windows TCP/IP remote code execution vulnerability caused by sensitive data stored in improperly locked memory. It is network-based with high impact (total compromise potential) and requires user interaction according to the CVSS: network exposure, high complexity, no privileg...

CVE-2026-32157

CVE-2026-32157 affects the Remote Desktop Client and enables remote code execution over the network. The CVSSv3.1 score is 8.8 (HIGH), with confidentiality, integrity, and availability all rated High. Attack requires network access and user interaction, with privilegesN/A and exploitation current...

CVE-2026-62732

CVE-2026-62732 is a heap-based buffer overflow in the Windows Telephony Service that enables a locally authenticated attacker to achieve privilege elevation. The vulnerability affects the Telephony Service component and is characterized by a local exploit path with low privileges required and no ...

CVE-2013-3174

CVE-2013-3174 corresponds to a remote code execution in Microsoft DirectShow via specially crafted GIF files. Affected: DirectShow in Windows XP SP2/SP3, Server 2003 SP2, Vista SP2, Server 2008 SP2/R2 SP1, Windows 7 SP1, Windows 8, Server 2012. Root cause: faulty GIF image parsing leads to arbitr...

CVE-2014-1767

CVE-2014-1767 is a local privilege-escalation vulnerability in the Windows Ancillary Function Driver (afd.sys) leveraged via a dangling/double-free condition in kernel-mode code (AFD). Public materials indicate Microsoft MS14-040 addressed this flaw, affecting multiple Windows versions from Windo...

CVE-2016-0176

CVE-2016-0176 is a Windows privilege-escalation flaw in the DirectX Graphics Kernel Subsystem (dxgkrnl.sys). It affects multiple Windows versions (7 SP1, Server 2008 R2 SP1, 8.1, Server 2012 R2/Gold, RT 8.1, 10 variants). Root cause: improper handling of memory objects in the DirectX kernel subsy...

CVE-2016-3225

The CVE-2016-3225 issue affects the SMB server component in multiple Windows releases (e.g., Vista/Server 2008/7/8.1/2012/RT 8.1/10). The root cause is credential-forwarding by the Windows SMB server to an unintended service, enabling a local attacker to gain elevated privileges via a crafted app...

CVE-2018-8282

CVE-2018-8282 is a Win32k Elevation of Privilege vulnerability in Windows, caused by the Windows kernel-mode driver failing to properly handle objects in memory. It affects Windows 7, Server 2012 R2, RT 8.1, Server 2008/2012, 8.1, Server 2016, Server 2008 R2, 10 and Server 10 servers. Impact is l...

CVE-2019-1014

CVE-2019-1014 is a Windows Win32k elevation-of-privilege vulnerability. The issue arises when Win32k fails to properly handle memory objects, allowing a locally authenticated attacker to run arbitrary code in kernel mode, install programs, and gain full user rights. Exploitation requires logon an...

CVE-2019-1043

The CVE-2019-1043 entry concerns a remote code execution in the Windows comctl32.dll memory handling. The issue allows an attacker to execute arbitrary code in the caller’s context, with the attacker gaining the current user’s rights; administrative context could lead to full control of the syste...

CVE-2019-1164

CVE-2019-1164 is a Windows kernel elevation-of-privilege vulnerability. The security flaw arises when the Windows kernel mishandles objects in memory, allowing a logged-on attacker to run arbitrary code in kernel mode and potentially install programs, view/change/delete data, or create privileged...

CVE-2019-1245

CVE-2019-1245 is a DirectWrite information disclosure vulnerability. The provided documents confirm a memory disclosure issue in DirectWrite, but do not specify affected product versions, root cause details beyond a memory disclosure, or concrete remediation steps. A CIRCL sighting notes exploita...

CVE-2019-1248

CVE-2019-1248 is a remote code execution vulnerability in the Windows Jet Database Engine caused by improper handling of objects in memory. The provided documents do not specify exploitation vectors, affected versions, root cause details, or remediations for this CVE.

CVE-2020-0707

CVE-2020-0707 is a Windows IME privilege-elevation vulnerability arising from improper memory handling in Windows IME. The issue enables local privilege escalation when an attacker gains execution on the target system and runs a specially crafted application. Connected sources corroborate the Win...

CVE-2020-0956

Technical details for CVE-2020-0956 are not publicly available in the provided connected documents; monitor for updates.

CVE-2020-1270

CVE-2020-1270 is documented as a Windows WLAN Service Privilege Elevation Vulnerability. The connected CNVD entry describes a privilege escalation in the way memory objects are handled by the Windows WLAN Service, enabling code execution with elevated privileges via a crafted application. Other c...

CVE-2020-1515

CVE-2020-1515 is an Elevation of Privilege vulnerability in Windows Telephony Server caused by improper memory handling. An attacker who already has code execution on the target could escalate privileges locally by running a crafted application. Microsoft’s security update fixes memory handling i...

CVE-2020-16892

CVE-2020-16892 is a Windows kernel image elevation-of-privilege vulnerability. It arises from how the Windows kernel handles objects in memory, enabling a locally authenticated attacker to execute code with elevated permissions. The described exploitation path requires a locally run crafted appli...

CVE-2020-17043

Technical details for CVE-2020-17043 are not provided in the supplied documents. Public information is limited to a general vulnerability description; no product/version/root-cause/exploit details are included. Monitor for updates from official advisories.

CVE-2020-17044

CVE-2020-17044 corresponds to a Windows vulnerability described as a Remote Access Elevation of Privilege. The provided records (NVD/NVD-based sources) list it with a CVSS-3.1 base score of 7.8 (HIGH) and CVSS‑2 base score of 6.8 (MEDIUM). According to CVSS‑3.1 details, the vulnerability is local...

CVE-2021-1656

CVE-2021-1656 is a TPM device driver information disclosure vulnerability affecting Windows TPM drivers. It yields a confidentiality impact (HIGH per CVSS v3.1 and PARTIAL per CVSS v2) with LOCAL attack vector and LOW privileges required; exploitation status is not detailed in the provided docume...