CVE-2025-21287

CVE-2025-21287 is a Windows Installer elevation of privilege vulnerability. The linked documents confirm this CVE affects the Windows Installer component in Windows OS, enabling a local attacker with low privileges and no user interaction to elevate privileges. Remediation is provided by Microsof...

CVE-2025-21378

Technical details about CVE-2025-21378 are not publicly available in the provided documents. The set includes only high-level summaries and advisories; monitor for updates from Microsoft and NVD for affected products, impact, and fixes.

CVE-2025-27738

CVE-2025-27738 affects Windows Resilient File System (ReFS). Description in NCSC advisory attributes an improper access control issue that could allow an authenticated attacker to disclose information over the network, with impact categorized as access to sensitive data. The NT/OS update guidance...

CVE-2025-29837

Technical details about CVE-2025-29837 (affected products, root cause, exploitability) are not publicly disclosed in the provided connected documents; no specifics on impact or remediation are available here.

CVE-2026-26151

CVE-2026-26151 describes insufficient UI warnings in Windows Remote Desktop that can enable a network attacker to spoof a remote session. The NVD entry lists a CVSS v3.1 base score of 7.1 (HIGH) with network access, no privileges required, user interaction required, and impact to confidentiality ...

CVE-2026-54984

Windows Imaging Component contains a heap-based buffer overflow that allows an unauthenticated user with local access to execute arbitrary code. This CVE-2026-54984 is described as a local, high-severity issue (CVSS 7.8). The documents provide no exploit details or remediation guidance; refer to ...

CVE-2026-54992

CVE-2026-54992 is a heap-based buffer overflow affecting the Windows Message Queuing Queue Manager that allows a local attacker to execute code. The vulnerability is described in NVD/MSRC references as enabling local arbitrary code execution. The public entries consistently describe the same unde...

CVE-2026-59130

AMD Zen CPUs are affected by CVE-2026-59130, described as an information disclosure vulnerability that allows an authorized user to disclose information locally. The NVD/CVE description notes no CWE mapping and that the attack vector is LOCAL with LOW privileges required and HIGH confidentiality ...

CVE-2014-0266

CVE-2014-0266 (MS14-005) affects Microsoft XML Core Services (MSXML) 3.0 used by Internet Explorer. The root cause is an information-disclosure vulnerability in the MSXML ActiveX controls that can be triggered when a user visits a specially crafted web page, allowing remote attackers to bypass th...

CVE-2014-0316

CVE-2014-0316 affects the Local RPC (LRPC) server in multiple Windows platforms, where the root cause is improper handling of malformed RPC messages (invalid data view) that can trigger a memory leak and bypass ASLR. This is documented as a remote code capability focusing on a memory exhaustion/D...

CVE-2014-6355

CVE-2014-6355 concerns a vulnerability in the Microsoft Graphics Component where JPEG decoding in memory is mishandled, enabling information disclosure when a user visits a crafted web site. Affected products include Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, ...

CVE-2015-0001

The CVE-2015-0001 entry concerns Microsoft Windows Windows Error Reporting (WER) and local bypass of Protected Process Light, enabling an administrator to read contents of arbitrary process memory. Affected OSes per the initial description include Windows 8, 8.1, Windows Server 2012 (Gold/R2), an...

CVE-2015-2362

CVE-2015-2362 affects Hyper-V in Microsoft Windows: the vulnerability arises because guest OS system data structures are not properly initialized, allowing a guest-OS user with privileges to execute arbitrary code on the host. The issue is tied to Hyper-V System Data Structure Vulnerability and i...

CVE-2016-3218

CVE-2016-3218 corresponds to a Win32k Elevation of Privilege vulnerability affecting multiple Windows releases (Vista SP2, Server 2008 SP2/R2, 7, 8.1, 2012, RT 8.1, 10) where kernel-mode drivers fail to handle objects in memory, enabling local privilege escalation via a crafted application. The i...

CVE-2016-3332

Technical details for CVE-2016-3332 are not publicly available in the provided connected documents. Monitor for updates from official advisories and vulnerability databases.

CVE-2017-0097

CVE-2017-0097 affects Hyper-V in multiple Windows platforms (Vista SP2, Server 2008 SP2/R2, Windows 7 SP1, 8.1, Server 2012/R2, Windows 10 up to 1607 and Server 2016). The vulnerability allows a guest OS user, running as a VM, to cause a denial of service on the host via a crafted application. Th...

CVE-2017-0109

Hyper-V Remote Code Execution Vulnerability (CVE-2017-0109) affects Microsoft Windows with Hyper-V across multiple OS versions (from Windows Vista SP2 up to Windows Server 2016). The issue allows guest OS users to execute arbitrary code on the host OS via a crafted application, representing a pow...

CVE-2017-0287

CVE-2017-0287 relates to a Windows Uniscribe information disclosure vulnerability. The connected Kaspersky advisory explicitly notes an information disclosure in Windows Uniscribe that can be exploited remotely by a crafted document to obtain sensitive information. The provided documents do not s...

CVE-2017-0300

Technical details for CVE-2017-0300 are not publicly available in the provided documents. Monitor for updates.

CVE-2017-11815

CVE-2017-11815 is an information-disclosure vulnerability in the Windows SMB Server, caused by how SMB requests are handled. An authenticated attacker could craft a packet to trigger disclosure from the SMB server. Affected platforms include Windows SMB Server implementations referenced in the CV...

CVE-2017-8564

CVE-2017-8564 is the Windows kernel information disclosure vulnerability where the kernel fails to properly initialize a memory address, potentially allowing an attacker to retrieve kernel base information and bypass KASLR. Affected products include Windows client and server families (Windows 7/8...

CVE-2019-1399

Technical details beyond the high-level description (affected product, root cause, vulnerable component, specific versions, fixes) are not publicly provided in the connected documents. Monitor for updates.

CVE-2020-0678

Technical details for CVE-2020-0678 are not publicly available in the provided documents. Monitor for updates from official advisories.

CVE-2020-0804

CVE-2020-0804 is an elevation-of-privilege vulnerability in the Windows Network Connections Service related to how in-memory objects are handled. The issue enables local privilege escalation with high impact (confidentiality, integrity, and availability), as evidenced by CVSS scores of 7.2 (2.0) ...

CVE-2020-0912

Technical details about CVE-2020-0912 are not provided in the supplied documents. No affected product/version is specified beyond a generic memory-handling issue. Monitor official sources for updates.

CVE-2020-1360

CVE-2020-1360 affects the Windows Profile Service. The vulnerability arises from improper handling of file operations within the service, enabling local elevation of privilege if an attacker can run a crafted application on a vulnerable system. The issue is mapped to Windows Profile Service (Wind...

CVE-2020-16980

CVE-2020-16980 is an elevation-of-privilege vulnerability in the Windows iSCSI Target Service caused by improper handling of file operations. An attacker who can achieve code execution on a victim system could run a crafted application to gain elevated privileges. The entry notes the vulnerabilit...

CVE-2020-17045

Technical details for CVE-2020-17045 are not publicly provided in the supplied documents. No affected product/version/exploit information is included here. Monitor for updates from authoritative sources to obtain concrete details and remediation guidance.

CVE-2021-1693

Technical details about CVE-2021-1693 are not provided in the connected documents. The initial description remains high‑level; monitor official advisories for updates to obtain affected products, impact, and fixes.

CVE-2021-27063

CVE-2021-27063 is a Windows DNS Server Denial of Service vulnerability. The NVD entry lists a NETWORK attack vector with LOW complexity and NO authentication, causing a PARTIAL availability impact (CVSS v2 base score 5.0; CVSS v3.1 base score 7.5, HIGH impact on availability). The connected recor...

CVE-2023-35341

Technical details for CVE-2023-35341 are not publicly available in the provided documents. Monitor for updates from official sources (e.g., vendor advisories, CVE records) to obtain affected products, impact, and remediation information.

CVE-2023-36011

CVE-2023-36011 is a Windows Win32k elevation-of-privilege vulnerability. Affected: Windows Win32K component (kernel-related). Nature: local exploit with low attack complexity and no user interaction; enables total impact on confidentiality, integrity, and availability. CVSSv3.1 base score 7.8 (HI...

CVE-2024-38052

Technical details for CVE-2024-38052 are not publicly available in the provided documents. No affected products, root cause, impact, or remediation are specified here. Monitor official sources for updates.

CVE-2024-38102

Technical details for CVE-2024-38102 are not provided in the Connected documents. Monitor for updates.

CVE-2024-38126

CVE-2024-38126 affects Windows Network Address Translation (NAT). The provided table lists it under Windows NAT with a CVSS v3.1 score of 7.5 (HIGH) and impact as Denial-of-Service. Other connected documents reference general Microsoft Windows fixes but do not provide concrete technical details (...

CVE-2024-38263

CVE-2024-38263 corresponds to a Windows Remote Desktop Licensing Service vulnerability capable of executing arbitrary code. Connected sources explicitely identify this CVE under Windows Remote Desktop Licensing Service with an impact described as “Execution of random code.” Affected product/compo...

CVE-2025-27469

CVE-2025-27469 affects Windows LDAP (Lightweight Directory Access Protocol) and describes an uncontrolled resource consumption that enables an unauthenticated attacker to cause network-denied service. The issue is categorized as a Denial-of-Service via LDAP on the network. Microsoft has released ...

CVE-2025-27474

CVE-2025-27474 is a Windows RRAS vulnerability described as the use of an uninitialized resource that enables an unauthorized attacker to disclose information over a network. The connected sources corroborate that this CVE affects Windows Routing and Remote Access Service (RRAS) and result in inf...

CVE-2025-47955

CVE-2025-47955 involves improper privilege management in Windows Remote Access Connection Manager, enabling local privilege escalation for an authorized attacker. CVSS 3.1 base 7.8 (HIGH): Local, low complexity, no user interaction, with high impact on confidentiality, integrity, and availability...

CVE-2026-50369

CVE-2026-50369 is a Windows Remote Desktop Services vulnerability identified as a use-after-free that enables an authorized attacker to elevate privileges over the network. The initial entry and multiple connected sources describe the issue consistently and confirm the affected component as Windo...

CVE-2015-6174

CVE-2015-6174 concerns a local privilege-escalation in the Windows kernel affecting Windows Vista SP2, Server 2008 SP2/R2 SP1, Windows 7 SP1, Windows 8/8.1, Server 2012 (Gold/R2), Windows RT/8.1, and Windows 10 1511. The vulnerability description states that a crafted application can allow local ...

CVE-2016-3220

ATMFD.dll Elevation of Privilege vulnerability (CVE-2016-3220) affects the Adobe Type Manager Font Driver in Windows Vista SP2, Server 2008 SP2/R2 SP1, Windows 7 SP1, 8.1, Server 2012, RT 8.1, and Windows 10 1511/1607. Root cause: ATMFD.dll fails to properly handle objects in memory, enabling loc...

CVE-2016-3299

Summary: CVE-2016-3299 is a NetBIOS spoofing vulnerability in multiple Windows platforms where NetBIOS responses can be validated incorrectly, allowing remote attackers to hijack network traffic or bypass Enhanced Protected Mode/application container protections and render untrusted browser conte...

CVE-2017-0063

CVE-2017-0063 concerns the Color Management Module (ICM32.dll) in Windows, where memory handling in ICM32.dll across multiple Windows versions (Vista SP2, Server 2008 SP2/R2, 7 SP1, 8.1, 2012/RT 8.1, 10 versions, 2016 Server) can be leveraged by a crafted website to bypass ASLR and execute code w...

CVE-2017-11824

The CVE-2017-11824 entry describes an Elevation of Privilege in the Windows Graphics Component due to improper handling of objects in memory, allowing code execution with elevated privileges. The Connected documents (KB/MS updates) indicate this vulnerability is among a broader set addressed by c...

CVE-2017-8557

CVE-2017-8557 is a information- disclosure (XXE) vulnerability in Microsoft Windows System Information Console where XML input containing an external entity reference can cause reading arbitrary files. The issue affects Windows versions listed in the CVE description. Exploitation details are not ...

CVE-2017-8587

CVE-2017-8587 corresponds to a Denial of Service in Windows Explorer when attempting to open a non-existent file. It affects Windows client/server platforms listed in the CVE description and is addressed by the Windows update KB4025674 (and related KBs in 2017 rollups). The CVSSv3 base score is 6...

CVE-2017-8588

CVE-2017-8588 is a WordPad remote code execution vulnerability in Windows where parsing specially crafted WordPad files can execute code. Connected sources identify WordPad vulnerability (KB4026061) affecting WordPad across affected Windows versions and indicate the CVE entry is linked to a mitig...

CVE-2018-0788

CVE-2018-0788 affects the Windows Adobe Type Manager Font Driver (ATMFD.dll) on Windows 7 SP1, Windows 8.1/RT 8.1, Windows Server 2008 SP2/R2 SP1, and Windows Server 2012/R2. The vulnerability stems from how ATMFD.dll handles objects in memory, allowing local elevation of privilege. Impact is ele...

CVE-2020-0680

CVE-2020-0680 is a Windows elevation-of-privilege vulnerability in the Windows Function Discovery Service related to how objects in memory are handled. The description states an elevation of privilege via memory handling in this service, indicating a local attack path with partial confidentiality...