CVE-2021-1671

CVE-2021-1671 corresponds to a Remote Procedure Call (RPC) Runtime Remote Code Execution vulnerability in Microsoft Windows/Windows Server. The connected documents confirm an RPC Runtime RCE with a network attack vector and a high-severity impact profile (CVSSv3.1 base score 8.8; Confidentiality/...

CVE-2022-29125

Technical details (affected product/version, root cause, exploit info, or patch specifics) are not provided in the connected documents for CVE-2022-29125. Monitor for updates.

CVE-2022-35770

CVE-2022-35770 is a Windows NTLM spoofing vulnerability. The connected records classify it under Windows NTLM with an impact described as “Pretend to be another user” and a CVSS v3.1 base score of 6.5 (Network attack, Low attack complexity, No privileges required, User interaction required; Confi...

CVE-2022-35831

CVE-2022-35831 affects the Windows Remote Access Connection Manager and is described as an Information Disclosure vulnerability. The connected data provides technical details: affected component is the Remote Access Connection Manager; root cause is an information disclosure fault; impact is Conf...

CVE-2024-30071

Technical details for CVE-2024-30071 are not provided in the connected documents. The Initial entry mentions Windows Remote Access Connection Manager information disclosure but lacks specific affected products/versions, root cause, impact, or remediation in the supplied materials. Monitor for upd...

CVE-2024-37983

Technical details (affected products, vulnerable components, root cause, exploit specifics) are not provided in the connected documents. The CVE entry references a Windows EFI security feature bypass; monitor official disclosures and updates for concrete information.

CVE-2024-49096

CVE-2024-49096 is a Denial-of-Service vulnerability in Microsoft Message Queuing (MSMQ). The connected NCSC advisory confirms MSMQ-related DoS as part of a Windows-vulnerability bundle, with the notable DoS impact described under the MSMQ entry in their consolidated list. The CVE entry itself spe...

CVE-2025-21251

CVE-2025-21251 is a Denial-of-Service vulnerability in Microsoft Message Queuing (MSMQ). It is network‑based (no user interaction, no privileges required) and impacts MSMQ; exploitation leads to DoS with high impact on availability. Several connected sources corroborate MSMQ DoS for CVE-2025-2125...

CVE-2025-27481

CVE-2025-27481 describes a stack-based buffer overflow in Windows Telephony Service that could allow a remote attacker to execute code over the network. The vulnerability affects the Windows Telephony Service component and is caused by a stack overflow in handling network input, with publicly pro...

CVE-2016-0169

CVE-2016-0169 is a Windows Graphics Component Information Disclosure vulnerability in GDI across Windows Vista through Windows 10 (various editions). The issue arises from improper disclosure of memory contents via a crafted document, enabling remote information leakage. Public evidence includes ...

CVE-2017-0193

CVE-2017-0193 affects Hyper-V instruction emulation in Microsoft Windows, enabling a local attacker to escalate privileges inside a guest VM due to insufficient enforcement of privilege levels in Hypervisor Code Integrity. Affected scope includes Windows Server 2008 R2/2012, Windows 7/8.1, Window...

CVE-2017-11779

CVE-2017-11779 concerns a vulnerability in the Windows DNSAPI.dll within the DNSAPI component of Microsoft Windows. A heap-based buffer overflow in the handling/validation of NSEC3 records (triggered by malicious DNS responses) could allow a remote attacker to execute arbitrary code in the contex...

CVE-2018-0820

CVE-2018-0820 affects the Windows kernel on Windows 7 SP1, Windows 8.1/RT 8.1, Windows Server 2008 SP2/R2 SP1, 2012/2012 R2, Windows 10 (various builds) and Windows Server (various). The vulnerability arises from how objects are handled in memory, enabling local privilege escalation from a low-pr...

CVE-2018-1008

CVE-2018-1008 describes a local elevation-of-privilege vulnerability in Windows Adobe Type Manager Font Driver (ATMFD.dll). The flaw stems from improper handling of objects in memory, enabling an attacker to execute arbitrary code with kernel or SYSTEM privileges on vulnerable Windows editions (W...

CVE-2018-8307

CVE-2018-8307 is a WordPad security feature bypass affecting multiple Windows versions (e.g., Windows 7, 8.1, 10, and corresponding Server editions) where embedded OLE objects are improperly handled. The vulnerability is described as a bypass of security features when WordPad processes OLE object...

CVE-2018-8320

Technical details (affected components, root cause, fixes) for CVE-2018-8320 are not provided in the connected documents. Initial description notes a Windows DNS Global Blocklist feature bypass but lacks version-specific impact or remediation information.

CVE-2018-8393

The connected advisory CPAI-2018-0959 confirms CVE-2018-8393: a remote code execution vulnerability in the Microsoft JET Database Engine (Jet) caused by a buffer overflow. An attacker could trigger it by convincing a user to open a specially crafted Excel file, enabling arbitrary code execution o...

CVE-2018-8489

The CVE-2018-8489 entry describes a Windows Hyper-V remote code execution vulnerability. The root cause is that Hyper-V on a host server fails to properly validate input from an authenticated user on a guest OS, allowing arbitrary code execution on the host. Affected platforms include multiple Wi...

CVE-2018-8493

CVE-2018-8493 describes an information-disclosure vulnerability in the Windows TCP/IP stack where fragmented IP packets are mishandled. Affected products include Windows Server 2012 R2, Windows RT 8.1, Windows Server 2016, Windows 8.1, Windows 10, and Windows 10 Servers. The underlying issue is i...

CVE-2019-0711

The CVE-2019-0711 vulnerability affects Microsoft Hyper-V and involves denial-of-service when a host server fails to properly validate input from a privileged guest OS user. An attacker with a privileged guest account can run a crafted application inside a VM to crash the host. The vulnerability ...

CVE-2019-0758

Technical details about CVE-2019-0758 are not publicly available in the provided documents. The connected advisories cover related CVEs but do not provide specifics for this entry. Monitor for updates.

CVE-2019-0908

The CVE-2019-0908 issue affects the Windows Jet Database Engine and is a remote code execution vulnerability caused by improper handling of objects in memory. An attacker could lure a user to open a specially crafted file, triggering arbitrary code execution on a vulnerable system. Microsoft addr...

CVE-2019-1093

Technical details about CVE-2019-1093 are not provided in the connected documents. Monitor for updates from Microsoft/MSRC and ENISA entries for affected components and remediation.

CVE-2019-1454

CVE-2019-1454 affects the Windows User Profile Service (ProfSvc). The root cause is improper handling of symlinks, enabling elevation of privilege. Impact is local, with partial confidentiality/integrity/availability concerns stated; exploitation details are not provided in the connected document...

CVE-2019-1469

CVE-2019-1469 is a Windows win32k information-disclosure vulnerability. The gained CVE details indicate the flaw resides in the win32k component exposing kernel information due to incorrect handling, enabling local attackers with logon rights to disclose information. Connected documents describe ...

CVE-2020-0631

Technical details are not publicly available in the provided documents for CVE-2020-0631; no affected products, impact, or remediation are specified beyond the initial description. Monitor for updates.

CVE-2020-0744

Technical details for CVE-2020-0744 are not publicly provided in the supplied documents. Monitor for updates.

CVE-2020-1000

Technical details for CVE-2020-1000 are not publicly provided in the connected documents you supplied. Monitor for updates.

CVE-2020-1253

Technical details about CVE-2020-1253 are not provided in the connected documents. The initial entry notes an elevation of privileges in the Windows kernel-mode driver, but no specifics (versions, impact, or fixes) are included here.

CVE-2020-1478

CVE-2020-1478 describes a memory-corruption vulnerability in Windows Media Foundation caused by improper handling of objects in memory. The weakness could allow an attacker to install programs, view/change/delete data, or create accounts with full user rights, with exploitation possible through s...

CVE-2021-1667

Technical details (affected product/version, exploit information, or remediation) are not publicly provided in the connected documents. Monitor updates from official advisories for CVE-2021-1667.

CVE-2021-1700

Technical details about CVE-2021-1700 are not provided in the given documents. No vendor/product/version specifics, root cause, impact, or fixes are disclosed here. Monitor for updates from official advisories.

CVE-2021-28318

Technical details about CVE-2021-28318 are not provided in the initial document or any connected items. No affected products, vulnerable components, impact, or remediation are specified. Monitor official advisories for updates.

CVE-2021-40478

CVE-2021-40478 is described in the connected NVD entry as a Storage Spaces Controller Elevation of Privilege vulnerability. The CVSSv3.1 base score is 7.8 (HIGH), with attack vector LOCAL, attack complexity LOW, privileges required LOW, and no user interaction. The impact is listed as high confid...

CVE-2022-21876

Technical details for CVE-2022-21876 are not publicly available in the provided documents. Monitor for updates from the sources listed in the NVD entry and associated advisories.

CVE-2022-34732

CVE-2022-34732 corresponds to a Microsoft ODBC Driver Remote Code Execution vulnerability. According to the provided data, it has a CVSS v3.1 base score of 8.8 (HIGH) with network attack, no privileges required, user interaction needed, and impacts to confidentiality, integrity, and availability....

CVE-2022-35832

CVE-2022-35832 is documented as a Windows Event Tracing Denial of Service vulnerability. The connected sources provide no explicit product/version information or fix details; the NVD entry lists a CVSSv3.1 base score of 5.5 (Medium) with LOCAL attack vector, LOW privileges required, no user inter...

CVE-2022-37989

CSRSS Elevation of Privilege (CVE-2022-37989) is a Windows local privilege escalation vulnerability in the Client Server Run-time Subsystem. The issue permits a local attacker to elevate privileges (to SYSTEM) on vulnerable Windows versions. Public details describe CSRSS as the Windows user-mode ...

CVE-2023-24857

Technical details for CVE-2023-24857 are not present in the provided connected documents. The materials reference the vulnerability name and Microsoft advisory, but no product/version/impact/fix specifics are included. Monitor for updates.

CVE-2023-28255

CVE-2023-28255 is a Windows DNS Server Remote Code Execution vulnerability. The CVSS metrics indicate a network-based attack that requires high privileges and no user interaction, with high impact to confidentiality, integrity, and availability. Connected sources confirm DNS-related updates were ...

CVE-2023-29367

Technical details for CVE-2023-29367 are not publicly provided in the connected documents you supplied. Monitor for updates.

CVE-2023-32042

Technical details about CVE-2023-32042 are not publicly provided in the supplied documents. No affected products, root cause, or remediation are specified here. Monitor for updates as connected sources do not elaborate.

CVE-2023-35383

Technical details (affected component, root cause, affected versions, impact, or fixes) for CVE-2023-35383 are not provided in the supplied documents. Monitor for updates from official sources.

CVE-2025-21210

CVE-2025-21210 concerns Windows BitLocker information disclosure. Reports indicate that in certain scenarios the hibernation image created when a laptop with an open Windows session is closed may not be fully encrypted, potentially allowing recovery of RAM contents in plain text. This vulnerabili...

CVE-2025-24064

CVE-2025-24064 is a use-after-free in DNS Server that enables remote code execution over the network. The issue is documented as a DNS Server vulnerability with CVSS 3.1/3.1 and a high impact (Execute Random Code) in the Windows DNS role, per NVD entry and CISA/NCSC consolidation. Microsoft has r...

CVE-2025-27486

CVE-2025-27486 affects Windows Standards-Based Storage Management Service, causing Denial-of-Service through uncontrolled resource consumption over the network. The primary public description confirms the vulnerability class, and Microsoft has released updates to address it (e.g., KBs in the Apri...

CVE-2025-29966

Technical details about CVE-2025-29966 (affected software/components, root cause, impact, or fixes) are not provided in the connected documents. Monitor for updates and sources in the feed for any concrete information.

CVE-2026-59132

CVE-2026-59132 describes a null pointer dereference in Windows TCP/IP that enables a network-based denial of service by an unauthenticated attacker. Affected component is Windows TCP/IP; root cause is a null pointer dereference leading to denial of service. CVSSv3.1 base score is 7.5 (HIGH) with ...

CVE-2026-85880

CVE-2026-85880 is a heap-based buffer overflow in Windows ALPC (Advanced Local Procedure Call) that enables a locally authorized attacker to escalate privileges with full impact on confidentiality, integrity, and availability (CVSS 7.8 HIGH). CISA added this CVE to the Known Exploited Vulnerabili...

CVE-2017-0162

Technical details for CVE-2017-0162 are not present in the connected documents. The Initial document provides a high-level vulnerability description only. Monitor for updates from official advisories for affected products and fixes.