CVE-2017-0278

CVE-2017-0278 corresponds to a remote code execution vulnerability in the Microsoft Windows SMBv1 server. The issue is triggered by how the SMBv1 server handles certain requests, affecting multiple Windows editions (e.g., Windows 7, Windows 8.1, Windows Server 2008/2012/2016, and related .NET env...

CVE-2017-11781

CVE-2017-11781 is a denial-of-service vulnerability in the Microsoft Windows SMB Server (SMBv1) where an authenticated attacker can send specially crafted SMB requests to crash the server. Affected products include Windows SMB Server implementations as described in the CVE entry (server role comp...

CVE-2017-8687

CVE-2017-8687 is a Windows kernel information-disclosure vulnerability in the Win32k subsystem where improper handling of memory objects allows leakage of kernel memory to user mode. Affected products include Windows 7 SP1, Windows 8.1, Windows Server 2008 SP2/R2 SP1, Windows Server 2012, Windows...

CVE-2018-0887

CVE-2018-0887 describes an information-disclosure in the Windows kernel caused by improper initialization of a memory address. Affected products include multiple Windows versions (Windows 7, Windows 8.1, Windows 10 family and corresponding Server variants). The vulnerability exposes partial confi...

CVE-2018-8486

CVE-2018-8486 is an information disclosure in DirectX caused by DirectX's improper handling of memory objects. Affected are Windows 7, Windows 8.1, Windows 10 and multiple Windows Server editions (e.g., 2008/R2, 2012, 2016, 2019). Root cause: memory objects not handled safely by DirectX. Impact: ...

CVE-2019-0961

The CVE-2019-0961 entry concerns Microsoft Windows GDI (Graphics Device Interface). The vulnerability arises from improper handling of memory objects, leading to information disclosure of memory contents in GDI. Affected component: Windows GDI in Microsoft Windows. Impact, as stated, is informati...

CVE-2019-1085

Technical details for CVE-2019-1085 are not provided in the connected documents. The initial description mentions a Windows WLAN Service elevation of privilege vulnerability but includes no vendor/product/version specifics, exploit info, or remediation details. Monitor for updates and refer to of...

CVE-2019-1097

Technical details about CVE-2019-1097 are not publicly provided in the connected documents. The initial entry notes a DirectWrite information disclosure but lacks vendor/affected products, versions, impact, or remediation in the supplied materials. Monitor for updates.

CVE-2019-1153

CVE-2019-1153 is a Windows Graphics Component information-disclosure vulnerability. It stems from improper handling of objects in memory, enabling an attacker who logs on and runs a specially crafted application to obtain information that could help further compromise the system. Mitigation is vi...

CVE-2019-1178

CVE-2019-1178 is an elevation-of-privilege vulnerability in the memory handling of ssdpsrv.dll. The NVD entry states that a locally authenticated attacker could execute code with elevated permissions by running a crafted application, and that a security update fixes the issue by ensuring ssdpsrv....

CVE-2019-1358

CVE-2019-1358 is a Windows Jet Database Engine Remote Code Execution vulnerability. The issue arises from improper handling of objects in memory within the JET Database Engine, enabling a remote attacker to potentially execute code. Connected Microsoft KB updates (e.g., KB4519990, KB4519998, KB45...

CVE-2020-0964

CVE-2020-0964 is a remote code execution vulnerability in Microsoft Windows GDI+ where memory objects are mishandled by the Graphics Device Interface. The issue affects GDI+ processing and can allow an attacker to run arbitrary code on a vulnerable system. Microsoft’s April 2020 Patch Tuesday upd...

CVE-2020-1008

CVE-2020-1008 describes a Remote Code Execution flaw in the Windows Jet Database Engine caused by improper handling of in-memory objects. The connected KB4549951 article references fixes related to the JET Database Engine within Windows 10 builds 18362.778/18363.778, but does not provide a produc...

CVE-2020-1030

Technical details about CVE-2020-1030 are not publicly provided in the connected documents. The initial entry describes a local elevation of privilege via the Windows Print Spooler but lacks explicit product/version/root cause specifics beyond that. Monitor for updates.

CVE-2020-1160

CVE-2020-1160 refers to an information-disclosure vulnerability in the Microsoft Windows Graphics Component caused by improper handling of objects in memory. The CVSS data from NVD indicates a local attack vector with low attack complexity and no user interaction, yielding a base score of 2.1 (NV...

CVE-2020-1208

CVE-2020-1208 is a remote code execution vulnerability in the Jet Database Engine when it improperly handles objects in memory. The connected updates indicate this issue is among Windows updates that address the Jet Database Engine (e.g., KB4560960) as part of multiple fixes, signaling a patch ex...

CVE-2020-1400

CVE-2020-1400 is a Jet Database Engine RCE in Windows: the Jet DB Engine improperly handles in-memory objects, enabling remote code execution. Exploitation requires a user to open a specially crafted file or visit a malicious website. Connected coverage notes this CVE under Jet DB Engine RCEs but...

CVE-2020-1486

The CVE-2020-1486 entry describes a Windows kernel Elevation of Privilege vulnerability caused by the kernel’s improper handling of objects in memory. An attacker who can log on could run arbitrary code in kernel mode, potentially installing programs, stealing data, or creating accounts with full...

CVE-2021-1659

No public technical details for CVE-2021-1659 are provided in the supplied documents. Monitor for updates.

CVE-2021-1664

Technical details about CVE-2021-1664 are not provided in the supplied documents. Public details exist (NVD/Microsoft) but this citation set lacks product/version/root cause/impact info beyond the generic RPC RCE description. Monitor for updates.

CVE-2022-22717

CVE-2022-22717 is a Windows Print Spooler elevation-of-privilege vulnerability. Affected: Windows OS with Print Spooler; the provided docs do not specify the exact root cause. CVSSv3.1 base score 7.0 (HIGH), vector LOCAL, Privileges Required LOW, User Interaction NONE, and impacts to confidential...

CVE-2022-26916

CVE-2022-26916 describes a remote code execution vulnerability in the Windows Fax Compose Form. The entry lists a CVSSv3.1 base score of 7.8 (HIGH) with a LOCAL exploit vector, meaning exploitation requires local access, and the vector indicates user interaction is required. The risk and scope ar...

CVE-2023-32035

Technical details for CVE-2023-32035 (affected product/component/version/root cause/mitigation) are not provided in the connected documents. The initial description only notes a Remote Procedure Call Runtime Denial of Service vulnerability without concrete details. Monitor updates from official s...

CVE-2023-32040

CVE-2023-32040 corresponds to a Microsoft PostScript and PCL6 Class Printer Driver information disclosure vulnerability. The NVD entry indicates a CONFIDENTIALITY impact of High with a Local attack vector and Low privileges required, and no user interaction. The documentation does not provide exp...

CVE-2023-35342

Technical details for CVE-2023-35342 are not provided in the supplied documents; no affected product/version/root-cause/mitigation is specified here. Monitor for updates in the connected sources.

CVE-2023-35633

CVE-2023-35633 is a Windows kernel/registry vulnerability where a local attacker with binary control over a hive could trigger an unintended redirection of handles. Specifically, an attacker could cause RegOpenKeyExW to return a predefined pseudo-handle (e.g., HKEY_LOCAL_MACHINE or HKEY_CURRENT_U...

CVE-2024-30094

Technical details about CVE-2024-30094 (RRAS remote code execution) are not publicly provided in the supplied connected documents. No affected products/versions, exploit information, root cause, or remediation details are present. Monitor for updates.

CVE-2024-37969

Technical details about CVE-2024-37969 (affected product, root cause, exploitability, and remediation) are not publicly provided in the supplied documents. Monitor for updates from official advisories.

CVE-2024-43512

CVE-2024-43512 affects Windows Standards-Based Storage Management Service and is described in the connected NCSC advisory as a Denial-of-Service vulnerability with CVSS 6.50. The advisory confirms Windows updates are available/needed, but the documents do not provide exploit details or paved reme...

CVE-2024-43636

CVE-2024-43636 is a Win32k local elevation-of-privilege vulnerability with a CVSSv3.1 base score 7.8 (LOCAL, LOW PRIVILEGES, NO USER INTERACTION; impacts HIGH across confidentiality, integrity, and availability). CONNECTED documents confirm Windows OS components (Win32k) are affected and that Mic...

CVE-2025-27479

CVE-2025-27479 appears in connected records as a Kerberos-related Denial-of-Service vulnerability described under the Kerberos Key Distribution Proxy Service. The available sources confirm an impact on Windows Kerberos with a network-based DoS potential due to an insufficient resource pool, but d...

CVE-2026-25187

CVE-2026-25187 is a Winlogon elevation-of-privilege vulnerability described as improper link resolution before file access (link following). It is a local vulnerability in Windows Winlogon that could allow an authorized attacker to elevate privileges to SYSTEM with no user interaction required. T...

CVE-2026-61352

The CVE-2026-61352 entry describes a race condition in the Remote Desktop Client caused by concurrent execution with improper synchronization on a shared resource. This leads to remote code execution over the network, classified with a high impact (CVSS 3.1: 7.5) and network attack vector, requir...

CVE-2015-0002

CVE-2015-0002 (AppCompat Cache Elevation of Privilege) affects Windows via AhcVerifyAdminContext in ahcache.sys, introduced with Windows 8/8.1 era. The root cause is improper validation of the caller’s impersonation token: the code retrieves the token and checks for LocalSystem or Administrators,...

CVE-2015-2554

CVE-2015-2554 is a Windows kernel elevation-of-privilege vulnerability (Windows 8/8.1, Windows Server 2012 RT/R2, Windows RT 8.1, Windows 10). The issue allows local attackers to gain privileges via a crafted application and is addressed by MS15-111 (KB3096447). Public exploits exist (per Exploit...

CVE-2016-3373

CVE-2016-3373 is a Windows kernel local elevation-of-privilege vulnerability. The Windows Kernel API improperly restricts access to registry information, enabling a locally authenticated attacker to obtain sensitive user account data via a crafted application. Affected products include Windows Vi...

CVE-2016-7218

Bowser.sys Information Disclosure Vulnerability (CVE-2016-7218) affects multiple Windows versions (Vista SP2, Server 2008 SP2/R2, 7 SP1, 8.1, 2012, 2016, RT 8.1, 1511/1607; kernel-mode driver Bowser.sys). A local attacker could exploit a crafted executable to obtain sensitive information via Bows...

CVE-2017-0104

CVE-2017-0104 is a memory corruption vulnerability in the Windows iSNS Server service. The issue arises from incorrect input validation of malformed attributes in iSNS packets, allowing an unauthenticated, remote attacker to issue crafted requests and execute arbitrary code in the context of the ...

CVE-2017-11783

CVE-2017-11783 is an Elevation of Privilege in Windows via ALPC/RPC handling. Public details in connected docs show the SvcMoveFileInheritSecurity method can be abused to impersonate a user and move a file, enabling arbitrary file creation and privilege escalation on Windows 10 v1709, attributed ...

CVE-2017-8682

CVE-2017-8682 is a Win32k Graphics Remote Code Execution issue where remote code could be executed by mis-handling embedded fonts. Affected products include multiple Windows versions (Server 2008 SP2/R2 SP1, Windows 7 SP1, 8.1, 10 1511/1607/1703, Server 2012/2016) and Office Word Viewer/Office 20...

CVE-2018-0844

The CVE-2018-0844 entry describes an elevation-of-privilege vulnerability in the Windows Common Log File System (CLFS) driver, affecting multiple Windows versions (Windows 7 SP1, Windows 8.1/RT 8.1, Server 2008 SP2/R2 SP1, 2012/R2, 2016, and 1709). The root cause is how objects in memory are hand...

CVE-2018-0885

CVE-2018-0885 : DoS in the Microsoft Hyper-V Network Switch triggered by unvalidated input from a guest OS. Affected: 64‑bit Windows Server 2008 SP2/ R2 SP1; Windows Server 2012/R2; Windows 10 (various builds); Windows Server 2016; and Windows Server version 1709. Root cause is described as impro...

CVE-2018-1003

CVE-2018-1003 is a buffer overflow vulnerability in the Microsoft JET Database Engine that could enable remote code execution on affected Windows systems (e.g., Windows 7, Windows 10, Windows Server variants). The connected OSV entry confirms the same description; no concrete exploit details or s...

CVE-2018-8484

CVE-2018-8484 is an elevation of privilege vulnerability in the DirectX Graphics Kernel (DXGKRNL) driver where objects in memory are improperly handled. Affected products/versions (as per documents): Windows 10 and Windows Server editions listed (Windows 8.1, Windows 10, Windows 10 Servers, Windo...

CVE-2019-0984

The CVE-2019-0984 entry concerns a Windows Common Log File System (CLFS) driver elevation of privilege vulnerability. The issue arises from improper handling of memory objects in CLFS, enabling an attacker who can log on to the system to run a specially crafted application with elevated privilege...

CVE-2019-1046

CVE-2019-1046 affects the Windows GDI component, where improper handling of memory allows information to be disclosed to an attacker. This vulnerability can be triggered by user actions such as opening a specially crafted document or visiting an untrusted webpage, leading to potential further com...

CVE-2019-1050

CVE-2019-1050 affects the Windows GDI component and is an information-disclosure vulnerability where memory objects may be improperly disclosed. An attacker could exploit this by convincing a user to open a specially crafted document or visit an untrusted webpage, potentially enabling access to m...

CVE-2019-1158

The CVE-2019-1158 entry corresponds to a Windows Graphics Device Interface (GDI) information disclosure vulnerability. Connected sources describe it as an issue in GDI’s handling of memory, specifically involving EMF file parsing, which can allow an attacker to obtain sensitive information. Explo...

CVE-2019-1407

Technical details for CVE-2019-1407 are not publicly available in the provided Connected documents. Monitor for updates; no specifics on affected products/versions, root cause, impact, or fixes are included here.

CVE-2019-1456

The CVE-2019-1456 entry describes a remote code execution vulnerability in Microsoft Windows where the Windows Adobe Type Manager Library fails to properly handle specially crafted OpenType fonts. Affected component: Windows Adobe Type Manager Library; root cause: improper handling of OpenType fo...