CVE-2017-0162

Technical details for CVE-2017-0162 are not present in the connected documents. The Initial document provides a high-level vulnerability description only. Monitor for updates from official advisories for affected products and fixes.

CVE-2017-0180

Technical details for CVE-2017-0180 are not publicly provided in the connected documents. Available sources reference Hyper-V Network Switch input validation issues but do not disclose affected versions, root cause specifics, or exploit information. Monitor for updates.

CVE-2018-0974

CVE-2018-0974 is a Windows kernel information disclosure vulnerability that could enable an attacker to obtain information facilitating a Kernel ASLR bypass. Affected are Windows client and server families including Windows 7, Server 2008/2008 R2, 8.1, 10 (and Server equivalents). The vulnerabili...

CVE-2018-8333

CVE-2018-8333 is a local Elevation of Privilege in Windows Filter Manager caused by improper handling of memory objects. Affected: Windows 7, Windows 8.1, Windows 10 and various Windows Server editions listed in the CVE entry. Root cause is mismanagement of in-memory objects within Filter Manager...

CVE-2018-8424

CVE-2018-8424 describes an information-disclosure vulnerability in the Windows GDI component where memory contents may be leaked. Affected products include Windows 7, Windows Server 2008 R2, Windows Server 2012, Windows 8.1, Windows 10 and their Server counterparts (e.g., Windows Server 2008, 201...

CVE-2018-8439

CVE-2018-8439 describes a remote code execution vulnerability in Microsoft Windows Hyper‑V. The issue arises when Hyper‑V on a host fails to properly validate input coming from an authenticated user on a guest operating system. Affected products include Windows Server 2012 R2, Windows RT 8.1, Win...

CVE-2018-8472

CVE-2018-8472 is a Windows GDI information-disclosure vulnerability. The issue arises from how the Windows Graphics Device Interface handles objects in memory, enabling a local attacker to retrieve information from the target system. Affected software/hosts include multiple Windows platforms list...

CVE-2019-0723

Summary: CVE-2019-0723 is a denial-of-service vulnerability affecting Microsoft Hyper-V, specifically the Hyper-V Network Switch on a host server. The issue arises when input from a privileged user inside a guest OS is not properly validated, enabling an attacker who already has a privileged gues...

CVE-2019-1156

The CVE-2019-1156 entry concerns the Windows Jet Database Engine. It describes a remote code execution vulnerability caused by improper handling of memory objects, permitting an attacker to execute arbitrary code on a victim system. Exploitation involves enticing a user to open a specially crafte...

CVE-2019-1319

CVE-2019-1319 affects Windows Error Reporting (WER). The vulnerability stems from how WER handles and executes files, enabling elevation of privilege when exploited locally. Connected documents confirm the issue name and that it is a Windows WER elevation of privilege vulnerability, but do not pr...

CVE-2019-1395

CVE-2019-1395 denotes a Windows Win32k elevation-of-privilege vulnerability where the Win32k component mishandles objects in memory. Affects Windows with local access and low attack complexity, enabling complete confidentiality, integrity, and availability compromise for the attacker. The entry s...

CVE-2019-1466

CVE-2019-1466 corresponds to a Windows GDI information-disclosure vulnerability. Connected CNVD entries describe an information leakage in the Windows GDI component, with attacker methods such as tricking a user into opening crafted documents or visiting untrusted pages. The documents do not prov...

CVE-2020-0615

Technical details about CVE-2020-0615 are not publicly provided in the supplied documents. Monitor for updates from official advisories and CNVD/ENISA entries to confirm affected products, impact, and fixes.

CVE-2020-0648

CVE-2020-0648 : Elevation of privilege in the Windows RSoP Service Application occurs due to improper memory handling. Attack requires initial code execution on the target, after which an attacker could run a crafted application to elevate privileges. The update addresses the vulnerability by cor...

CVE-2020-0769

CVE-2020-0769 is an Elevation of Privilege vulnerability affecting the Windows CSC Service, arising from memory handling issues in the service. The CVE entry notes that exploitation requires initial code execution on the victim system, allowing an attacker to elevate privileges within the system....

CVE-2020-0992

CVE-2020-0992 corresponds to a remote code execution in the Windows Jet Database Engine caused by improper handling of memory objects. The connected CNVD entries describe a Microsoft Windows Jet Database Engine RCE vulnerability with the same root cause (memory object handling) and the impact bei...

CVE-2021-28437

Technical details for CVE-2021-28437 are not provided in the supplied documents. No concrete information on affected product versions, root cause, or fixes is present; monitor for updates as new disclosures or patches emerge.

CVE-2021-43230

CVE-2021-43230 is a Windows NTFS Elevation of Privilege vulnerability (local, low attack complexity) with no user interaction required, per the initial CVE entry. The connected documents primarily discuss NTFS-related CVEs in the 2021-4323x family and describe a pool/size calculation overflow in ...

CVE-2022-24498

CVE-2022-24498 is a Windows iSCSI Target Service Information Disclosure vulnerability. The available data show that it affects the Windows iSCSI Target Service and has a CVSS v3.1 base score of 6.5 (Network, Low attack complexity, Low privileges required, No user interaction, Confidentiality impa...

CVE-2022-29105

No technical details about CVE-2022-29105 are present in the provided connected documents; monitor for updates.

CVE-2022-35745

Technical details about CVE-2022-35745 are not publicly provided in the supplied documents. Please monitor official advisories for updates on affected products, vectors, impacts, and remediation.

CVE-2022-44678

Technical details for CVE-2022-44678 are not provided in the connected documents. No product/version/impact/fix details are present here. Monitor for official disclosures and vendor advisories for updates.

CVE-2023-28247

CVE-2023-28247 corresponds to a Windows Network File System Information Disclosure vulnerability. The provided data lists a CVSS v3.1 base score of 7.5 (HIGH) with network attack vector, low attack complexity, no privileges required, no user interaction, and an unchanged scope. Confidentiality im...

CVE-2023-35300

Technical details for CVE-2023-35300 are not provided in the supplied documents; no affected product/version/impact is specified here. Monitor for updates in connected sources.

CVE-2023-35303

CVE-2023-35303 concerns the USB Audio Class System Driver and is described as a Remote Code Execution vulnerability. The NVD entry lists a CVSS‑3.1 score of 8.8 (High) with Network attack vector, Low attack complexity, Low privileges required, and no user interaction. The impact is rated as High ...

CVE-2023-35366

Technical details for CVE-2023-35366 (RRAS RCE) are not provided in the connected documents. Monitor for updates; no specific products, vectors, exploit status, or remediations are described in the supplied materials.

CVE-2024-30066

Technical details about CVE-2024-30066 (affected product, root cause, impact, mitigations, and fixes) are not publicly provided in the supplied documents. Monitor for updates and refer to the MSRC/MS vulnerability guidance when available.

CVE-2024-38015

Technical details for CVE-2024-38015 (Windows RD Gateway DoS) are not publicly provided in the supplied documents. Monitor for updates and future disclosures; no actionable exploit, impact, or remediation details are present here.

CVE-2024-38079

Technical details about CVE-2024-38079 (affected component, root cause, impact, affected products/versions, and fixes) are not provided in the supplied documents; monitor for updates and disclosures from official sources.

CVE-2024-43644

Technical details about CVE-2024-43644 (affected product, root cause, impact, or fix) are not provided in the connected documents. Monitor for updates from official advisories.

CVE-2025-21190

CVE-2025-21190 is listed by an EU NCSC advisory under Windows Telephony Service with a CVSS of 8.80 and impact described as executing random code. The Connected Documents do not provide vendor/product version details or a concrete patch/fix within the supplied materials; Microsoft MSRC guidance i...

CVE-2025-21229

CVE-2025-21229 is listed as a Windows Digital Media Elevation of Privilege vulnerability. Connected documents indicate Microsoft updates exist to fix vulnerabilities in Windows, with MSRC guidance and KB articles available, but do not provide explicit technical details (vulnerable component versi...

CVE-2025-21242

CVE-2025-21242 is a Windows Kerberos information-disclosure vulnerability. Public sources (CNNVD/MSRC/NVD) identify it as a Kerberos-related information disclosure affecting multiple Windows builds (e.g., Windows 10/11 and Windows Server variants). The exact technical root cause and vulnerable su...

CVE-2025-21270

CVE-2025-21270 affects Microsoft Message Queuing (MSMQ) and is a Denial of Service vulnerability. Public data show an attack over the network with no authentication required, low attack complexity, and a high impact on availability (CVSS v3.1: 7.5). The connected documents indicate MSMQ-related e...

CVE-2025-21312

CVE-2025-21312 is described as a Windows Smart Card Reader Information Disclosure vulnerability. The core technical details available across connected sources are limited to the CVE label, a CVSSv3.1 base score of 2.4 (PHYSICAL attack, low impact on confidentiality, no impact on integrity/availab...

CVE-2025-32720

CVE-2025-32720 is a Windows Storage Management Provider vulnerability described as an information disclosure via an out-of-bounds read. The connected NCSC advisory lists it under Windows Storage Management Provider with CVSS 5.50 (Impact: Access to sensitive data) and indicates a local attack vec...

CVE-2025-53766

CVE-2025-53766 is a heap-based buffer overflow in Windows GDI+ that enables a remote attacker to execute code over a network. Public details describe the vulnerability as a memory overflow in GDI+ triggered by processing specially crafted metafiles, potentially allowing arbitrary code execution w...

CVE-2014-0301

CVE-2014-0301 is a DirectShow memory corruption (double-free) in qedit.dll used when processing JPEGs, enabling remote code execution on Windows XP/Server 2003/Vista/Server 2008/Windows 7/8/8.1/Server 2012. Affected components include DirectShow JPEG handling; root cause is a double-free in JPEG ...

CVE-2016-0070

Technical details of CVE-2016-0070 are not publicly provided in the Connected Documents. Monitor for updates.

CVE-2016-3302

CVE-2016-3302 is a Windows lock screen elevation-of-privilege vulnerability. Affected products include Windows 8.1, Windows Server 2012 R2, Windows RT 8.1, and Windows 10 (Gold, 1511, 1607). The issue arises when the Windows lock screen improperly loads web content, enabling a physically proximat...

CVE-2016-7205

CVE-2016-7205 is a Windows memory corruption vulnerability in the Animation Manager that can be triggered by visiting a crafted web site, enabling remote code execution. Affected products include Windows 7 SP1, Windows 8.1, Windows 10 (various builds), Windows Server 2008 R2 SP1, Windows Server 2...

CVE-2017-0050

Technical details about CVE-2017-0050 are not publicly provided in the connected documents. The sources reference the vulnerability generally; monitor for updates on affected products, root cause, and fixes.

CVE-2017-0275

CVE-2017-0275 is an SMBv1 information-disclosure vulnerability in Microsoft Windows SMB server handling of certain requests. The initial description lists affected products as Windows platforms including Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and ...

CVE-2018-8434

CVE-2018-8434 is a Windows Hyper-V information disclosure vulnerability. It occurs when a host OS fails to properly validate input from an authenticated user on a guest OS, allowing potential disclosure of memory information. Affected platforms include Windows 7, Windows Server 2008/2012 families...

CVE-2019-0715

The CVE-2019-0715 entry affects Microsoft Hyper-V Network Switch and is described as a denial-of-service vulnerability. A privileged attacker on a guest OS can run a crafted application to crash the host server, indicating that input validation in the Hyper-V Network Switch path is inadequate. Th...

CVE-2019-0893

The connected CNVD entries describe Microsoft Windows Jet Database Engine Buffer Overflow vulnerabilities in Windows and Windows Server. The flaw arises when the engine performs memory operations without proper data-boundary validation, leading to buffer/heap overflows. Concrete exploit details, ...

CVE-2019-0895

The connected CNVD entries describe a Windows Jet Database Engine vulnerability as a buffer overflow/heap overflow issue arising when memory boundaries are not properly validated. They state an attacker could exploit this condition to cause memory corruption, affecting Windows/Windows Server envi...

CVE-2019-0936

CVE-2019-0936 is a Windows elevation-of-privilege vulnerability arising from improper handling of certain symbolic links. The root cause is an inadequate check of symbolic link handling that can enable a local attacker to escalate privileges to Administrator. Affected software is Windows (per des...

CVE-2019-0972

CVE-2019-0972 affects the Local Security Authority Subsystem Service (LSASS) where an authenticated attacker can trigger a denial of service by sending specially crafted authentication requests. Exploitation could cause the LSASS service to reboot the target system. Microsoft’s security update mi...

CVE-2019-1025

CVE-2019-1025 describes a Windows denial-of-service vulnerability caused by improper handling of objects in memory. An attacker who can log on or convince a user to open a crafted file on a network share could make the target stop responding. It does not enable code execution or direct privilege ...