CVE-2015-2435

CVE-2015-2435 is a TrueType font parsing vulnerability impacting Microsoft Windows (multiple editions listed) and related components (e.g., Silverlight, Office) that allows remote code execution via a crafted font. The issue is documented with a CVSS v2 base score of 9.3 (high) and network attack...

CVE-2015-2463

CVE-2015-2463/2464 describe a TrueType font parsing vulnerability affecting multiple Windows variants (Vista SP2, 7 SP1, 8/8.1, Server 2008/2012, RT, Office 2007/2010, Silverlight, .NET Framework). The issue allows remote code execution via a crafted TrueType font, caused by a parsing flaw in the...

CVE-2016-0073

CVE-2016-0073 affects Windows kernel local elevation of privilege on Windows 8.1, Windows Server 2012 (Gold/R2), Windows RT 8.1, and Windows 10 (1511/1607). Root cause: crafted application triggers a kernel API pathway to access sensitive registry information, enabling local privilege escalation....

CVE-2016-0170

CVE-2016-0170 affects the Windows GDI component across multiple Windows versions (Vista SP2, Server 2008 SP2/R2, 7 SP1, 8.1, 2012/2012 R2, RT 8.1, 10). The vulnerability enables remote code execution when processing crafted documents, due to how the Graphics Component handles objects in memory. A...

CVE-2016-0171

CVE-2016-0171 is a Windows kernel‑mode elevation of privilege vulnerability affecting Win32k in several Windows releases (Vista SP2 to Windows 10 1511). The entry describes that a crafted user‑mode application can trigger a local privilege escalation via a flaw in the Win32k subsystem, with explo...

CVE-2016-3252

CVE-2016-3252 is a Windows kernel-mode privilege-escalation vulnerability affecting multiple Windows versions (Vista SP2 through Windows 10 1511) where a crafted application may exploit kernel-mode drivers to gain privileges. The root cause is insufficient handling of objects in memory within ker...

CVE-2016-3266

Technical details for CVE-2016-3266 are not publicly available in the provided documents. Monitor for updates from authoritative sources to determine affected products, root cause specifics, and remediation guidance.

CVE-2017-0220

CVE-2017-0220 affects the Windows kernel on Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, and Windows Server 2012 Gold. It is a local information-disclosure vulnerability where an authenticated attacker can obtain sensitive information via a specially crafted document. Exploitation reference...

CVE-2017-0245

CVE-2017-0245 is a local information-disclosure vulnerability in Windows kernel win32k.sys. The issue stems from the win32k component improperly providing kernel information, enabling a local authenticated attacker to obtain kernel data via a crafted application on affected systems (Windows 7 SP1...

CVE-2017-0296

CVE-2017-0296 affects Windows platforms (Windows 7 SP1 to Windows Server 2016) with a privilege-escalation via tdx.sys due to a missing length check when copying memory. The affected component is tdx.sys; root cause is inadequate buffer length validation. Impact per description: privilege escalat...

CVE-2017-8491

Technical details about CVE-2017-8491 are not publicly provided in the supplied documents; monitor for updates.

CVE-2018-0904

The CVE-2018-0904 entry concerns a Windows kernel information disclosure vulnerability affecting Windows kernel in multiple client/server OS builds (Windows 7/8.1/10, Windows Server 2008 R2/2012/2016, etc.). Root cause: memory address handling in the kernel allows partial information disclosure w...

CVE-2018-8433

Technical details about CVE-2018-8433 are not publicly provided in the connected documents. Monitor for updates.

CVE-2019-0811

Technical details about CVE-2019-0811 (affected products, root cause, impact, fixes) are not provided in the connected documents. Please monitor for updates.

CVE-2019-1045

CVE-2019-1045 describes an elevation of privilege in the Windows Network File System (NFS) due to how objects are handled in memory. A locally authenticated attacker could run a crafted application to execute code with elevated permissions. The vulnerability is addressed by a security update that...

CVE-2019-1177

CVE-2019-1177 is a Windows elevation-of-privilege vulnerability in how rpcss.dll handles objects in memory. A locally authenticated attacker could run a specially crafted application to execute code with elevated permissions. The issue stems from memory object handling within rpcss.dll, with miti...

CVE-2019-1411

CVE-2019-1411 is a DirectWrite information disclosure vulnerability. The issue arises when DirectWrite improperly discloses memory contents. The CVSS v3.1 vector indicates NETWORK attack, LOW complexity, no privileges required, UI interaction is REQUIRED, with a HIGH impact on confidentiality and...

CVE-2020-0708

CVE-2020-0708 is a Windows Imaging Library remote code execution vulnerability caused by improper memory handling. An attacker must coerce a victim to open a specially crafted file, leading to arbitrary code execution with the user’s privileges. Microsoft released a security update to fix the mem...

CVE-2020-0753

Technical details for CVE-2020-0753 are not provided in the connected documents. The Initial Description only notes an Elevation of Privilege in Windows Error Reporting. Monitor for updates from Microsoft/MSRC for full specifics (affected products, root cause, and remediation).

CVE-2020-0838

CVE-2020-0838 describes an elevation-of-privilege vulnerability in Windows NTFS where access checks are insufficiently performed. An attacker who can log on locally and run a specially crafted application could execute code in an elevated context, potentially gaining full control of the affected ...

CVE-2020-1194

Technical details about CVE-2020-1194 are not publicly provided in the connected documents. The material confirms a Windows Registry DoS vulnerability but lacks product/version context or fixes. Monitor for official updates from Microsoft/NVD to obtain concrete details.

CVE-2020-1196

CVE-2020-1196 is described as an elevation of privilege vulnerability in Windows Print Configuration, caused by how printconfig.dll handles objects in memory. The CVE entry notes local access is required with low attack complexity, and the impact is high on confidentiality, integrity, and availab...

CVE-2020-1282

Technical details for CVE-2020-1282 are not provided in the connected documents. Based on the initial entry, no explicit exploit vectors, impacted products, or remediation are disclosed here; monitor for official updates.

CVE-2020-17004

According to CNVD-2021-63301, CVE-2020-17004 is a Windows/Windows Server graphics component information-disclosure vulnerability. It allows an attacker to read kernel memory contents from a user-mode process. The affected product is Microsoft Windows/Windows Server; the exact root cause, vulnerab...

CVE-2021-43248

Technical details for CVE-2021-43248 are not publicly available in the provided documents; monitor for updates.

CVE-2023-28278

Technical details about CVE-2023-28278 (affected product, root cause, versions, exploit info, or remediation) are not provided in the connected documents. Please monitor for official disclosures or patches.

CVE-2023-33169

Technical details about CVE-2023-33169 are not publicly provided in the supplied documents. Monitor for updates from official sources; no product/vendor/version/impact information or fixes are included here.

CVE-2023-35360

Technical details are not publicly available in the provided documents. No specific affected product/versions, root cause, impact, or fix is described here; monitor for updates.

CVE-2023-35642

CVE-2023-35642 corresponds to a Denial-of-Service vulnerability in Windows’ Internet Connection Sharing (ICS) feature. The NVD entry explicitly labels this as an ICS DoS issue, with CVSS 3.1 indicating Adjacent attack vector, no privileges required, no user interaction, and high impact on availab...

CVE-2024-38019

Technical details about CVE-2024-38019 are not provided in the supplied documents. Public sources in Connected documents do not specify affected products, root cause, exploit status or remediation. Monitor for official advisories and Microsoft update notes for confirmation.

CVE-2024-38027

Technical details about CVE-2024-38027 (affected software, root cause, impact, or fixes) are not provided in the supplied documents. No public disclosure details available here. Monitor for updates.

CVE-2024-38028

Technical details for CVE-2024-38028 are not publicly available in the provided documents; no affected products, root cause, or remediation are specified. Monitor for updates.

CVE-2024-38057

Technical details about CVE-2024-38057 (affected product/version, root cause, exploitability, and fix) are not provided in the connected documents. Monitor for updates from vendor/security advisories.

CVE-2024-38071

Technical details about CVE-2024-38071 (Windows Remote Desktop Licensing Service DoS) are not provided in the connected documents. The materials reference OS updates and general fixes but do not specify affected products/versions, exploit vectors, impact, or remediation. Monitor for updates.

CVE-2024-38073

Technical specifics for CVE-2024-38073 (Windows Remote Desktop Licensing Service DoS) are not disclosed in the provided connected documents. Affected products, vulnerable components, and fixes are not present here; monitor for official disclosures and updates.

CVE-2025-21237

CVE-2025-21237 is a Windows Telephony Service Remote Code Execution vulnerability. Exploitation could allow remote code execution via the Telephony Service; CVSS v3.1 base score 8.8 (HIGH) with network access, user interaction required. Affected products are Windows components where Telephony Ser...

CVE-2025-21406

CVE-2025-21406 is listed by NCSC as a Windows Telephony Service vulnerability with CVSS 8.80, enabling execution of arbitrary code. No affected product/version details or patch specifics are provided in the connected documents; Microsoft updates are referenced generally as fixing vulnerabilities....

CVE-2025-24051

Technical details about CVE-2025-24051 are not publicly provided in the connected documents. The initial entry notes a heap overflow in RRAS enabling remote code execution, but no affected versions, exploit specifics, or mitigations are present here. Monitor for updates.

CVE-2025-24056

CVE-2025-24056 is a heap-based buffer overflow in the Windows Telephony Server that allows a network-based attacker to execute arbitrary code on affected systems. The issue is described as remote code execution with network access (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) and a base score of 8.8 (HIG...

CVE-2025-24987

CVE-2025-24987 is a Windows USB Video Driver vulnerability described as an out-of-bounds read that can allow an authorized attacker to elevate privileges with physical access. The issue affects the Windows USB Video Driver component and is associated with high impact on confidentiality, integrity...

CVE-2026-33842

The CVE-2026-33842 entry describes a local information disclosure in Windows File Explorer. The vulnerability allows an authorized (low privileges) attacker to disclose sensitive information locally through the File Explorer component. Per the NVD entry, the impact is confined to confidentiality ...

CVE-2026-42976

This CVE concerns Windows RPC API: missing authentication for a critical function allows an authorized attacker to escalate privileges locally. Affected component: Windows RPC server/remote procedure call surface; root cause: lack of authentication on a sensitive function. Impact described as loc...

CVE-2026-70347

CVE-2026-70347 describes a heap-based buffer overflow in Windows Installer that can enable an authenticated, local attacker to elevate privileges. Affected component is Windows Installer; the vulnerability is a local, privilege-escalation flaw with high impact (C:H/I:H/A:H) and CVSSv3.1 score 7.8...

CVE-2016-3228

CVE-2016-3228 affects Microsoft Windows Netlogon: remote authenticated attackers could cause memory corruption and execute arbitrary code on domain controllers via a crafted NetLogon request. Affected products include Windows Server 2008 SP2, R2 SP1, and Windows Server 2012 (Gold/R2). Root cause ...

CVE-2016-7295

Technical details about CVE-2016-7295 are not publicly provided in the supplied documents. The CLFS information-disclosure vulnerability details, affected products/versions, and fixes are not elaborated here. Monitor for updates from official advisories.

CVE-2017-0076

Summary of CVE-2017-0076 and related entries : The vulnerability affects Hyper-V in multiple Windows platforms (Vista SP2; Server 2008 SP2/2008 R2; Windows 7 SP1; Windows 8.1; Server 2012/2012 R2; Windows 10 versions 1511/1607; and Windows Server 2016). The issue allows a guest OS user running in...

CVE-2017-8699

CVE-2017-8699 affects Windows Shell in Windows 7 SP1, Windows Server 2008/R2 SP1, Windows 8.1/RT 8.1, Windows Server 2012/R2, Windows 10 (Gold, 1511, 1607, 1703) and Windows Server 2016. Description: an attacker can run arbitrary code in the context of the current user due to how Windows Shell va...

CVE-2018-0968

CVE-2018-0968 is a Windows kernel information-disclosure vulnerability that could enable an attacker to bypass Kernel ASLR. It affects Windows Server 2012 R2, Windows RT 8.1, Windows Server 2016, Windows 8.1, Windows 10, and Windows Server 2019/10-family variants as listed. The connected CIRCL en...

CVE-2019-1267

CVE-2019-1267 describes an elevation of privilege in Microsoft Compatibility Appraiser. A local attacker can exploit a vulnerable configuration file through symbolic/link attacks to gain higher privileges. Documented impact is elevation of privilege with local access required; CVSS scores indicat...

CVE-2019-1389

CVE-2019-1389 is a Windows Hyper-V remote code execution vulnerability where input from a guest OS is not properly validated on the host, allowing an authenticated guest user to run arbitrary code on the host. Affected software is Windows Hyper-V; the root cause is improper input validation. Impa...