CVE-2026-61918

CVE-2026-61918 is a Windows Remote Desktop Client vulnerability described as an out-of-bounds read that could allow an unauthenticated, remote attacker to disclose information over the network. The issue is confirmed in public CVE listings and is associated with the Remote Desktop Client componen...

CVE-2024-37975

Technical details for CVE-2024-37975 are not provided in the connected documents. The available materials only label it as a Secure Boot bypass without product, vector, impact, or remediation specifics. Monitor for updates for publicly disclosed details.

CVE-2024-38067

Technical details about CVE-2024-38067 (Windows OCSP Server DoS) are not provided in the supplied connected documents; no product/version/root-cause/impact/fix information is present. Monitor for updates.

CVE-2024-38091

Technical details for CVE-2024-38091 are not provided in the connected documents. Monitor for updates; no affected products, root cause, vectors, or fixes are stated here.

CVE-2024-38149

CVE-2024-38149 is a Windows BranchCache Denial of Service vulnerability. Documents indicate a network-exploitable issue (CVSS v3.1: 7.5, AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) affecting BranchCache components. Microsoft provides fixes via security updates (KB/MSRC guidance); no explicit root-cause ...

CVE-2024-38256

CVE-2024-38256 is a Windows kernel‑mode driver information disclosure vulnerability. The incident affects Windows kernel‑mode drivers and has a CVSSv3.1 base score of 5.5 (MEDIUM) with local attack vector, low attack complexity, and low privileges required; confidentiality impact is High, others ...

CVE-2025-21238

CVE-2025-21238 affects the Windows Telephony Service and is a remote code execution vulnerability. The initial data lists CVSS 3.1 with NETWORK attack vector, LOW attack complexity, no privileges required, and user interaction required; impact is high on confidentiality, integrity, and availabili...

CVE-2025-21243

CVE-2025-21243 affects Windows Telephony Service. The vulnerability is a remote code execution flaw caused by input validation in Windows Telephony Server, enabling network-based exploitation with required user interaction and no privileges. The CVSS v3.1 base score is 8.8 (HIGH) with network acc...

CVE-2025-21252

Technical details about CVE-2025-21252 are not publicly available in the provided documents. Monitor for updates from Microsoft and NVD for affected products, impact, and remediation.

CVE-2025-21265

Technical details about CVE-2025-21265 are not provided in the supplied documents. Public information on affected products, root cause, and fixes is missing here. Monitor for updates from Microsoft and NVD for concrete vulnerability specifics.

CVE-2025-21266

CVE-2025-21266 is a Windows Telephony Service remote code execution vulnerability. The linked data shows a network-exposed impact with CVSS v3.1 base score 8.8 (HIGH), requiring user interaction for exploitation and affecting confidentiality, integrity, and availability. Affected component is the...

CVE-2025-21277

CVE-2025-21277 affects Microsoft Message Queuing (MSMQ). A Denial of Service vulnerability exists in MSMQ, exploitable over the network without user interaction, with CVSSv3.1 base score 7.5 (HIGH). The affected component is MSMQ; the initial description confirms a DoS impact. Publicly available ...

CVE-2025-27472

CVE-2025-27472 corresponds to a Windows Mark of the Web (MOTW) security feature bypass. The initial description notes a protection mechanism failure that allows bypass over a network. Connected documents identify this CVE as an issue tracked by Microsoft with an official MSRC entry (MSRC CVE-2025...

CVE-2025-30388

Technical details about CVE-2025-30388 are not provided in the connected documents. Public information remains limited to the initial description. Monitor for updates from official advisories for affected products, impacts, and remediation.

CVE-2026-32202

CVE-2026-32202 is a Windows Shell vulnerability described as a protection mechanism failure that enables spoofing over a network. Connected sources label the issue under Windows Shell with the capability for an attacker to pretend to be another user (e.g., “Pretend to be another user”) and refere...

CVE-2015-0004

CVE-2015-0004 concerns a local privilege-escalation in the Windows User Profile Service (ProfSvc). According to the provided sources, the vulnerability is exploited by a junction attack that loads another user’s UsrClass.dat registry hive, enabling local users to gain privileges. Affected product...

CVE-2015-2458

CVE-2015-2458 (ATMFD.DLL OpenType parsing) affects the Windows Adobe Type Manager Library across multiple Windows versions. The connected ExploitPack/EDB entry details an out-of-bounds read in ATMFD.DLL triggered by processing a corrupted OpenType font, leading to a potential remote code executio...

CVE-2016-7210

CVE-2016-7210 affects atmfd.dll in multiple Windows editions (Vista through Windows 10 1511/1607 and corresponding Server releases). The vulnerability allows remote attackers to disclose memory contents of a victim process by delivering a crafted OpenType font on a web site, leading to informatio...

CVE-2017-0043

CVE-2017-0043 affects Active Directory Federation Services (ADFS) across Windows Server 2008 R2 SP1, Server 2012/2012 Gold, Server 2016, and Windows 10 1607. The vulnerability involves information disclosure due to processing XML (XML External Entity) handling in ADFS, enabling an authenticated, ...

CVE-2017-11817

The CVE-2017-11817 entry describes an information-disclosure vulnerability in the Windows kernel where objects in memory are improperly initialized, potentially exposing sensitive memory contents. Connected updates (e.g., KB4042895 and related October 2017 MS Windows security updates) address thi...

CVE-2017-11842

The CVE-2017-11842 entry concerns a Windows kernel information disclosure vulnerability that affects Windows 8.1/RT 8.1, Server 2012/R2, Windows 10 (initial to 1709), Windows Server 2016, and Windows Server version 1709. The root cause is the Windows kernel improperly initializing a memory addres...

CVE-2017-8463

CVE-2017-8463 is described as a remote code execution vulnerability in Windows Explorer, triggered when Explorer improperly handles executable files and shares during rename operations. The issue affects multiple Windows versions (e.g., Windows 7, 8.1, Server 2012/R2, Windows 10 variants) and cou...

CVE-2017-8486

CVE-2017-8486 is a local information-disclosure vulnerability in Windows due to how Win32k handles objects in memory. Affected products include Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 (various builds), and Windows S...

CVE-2017-8581

CVE-2017-8581 is a Win32k elevation of privilege vulnerability affecting multiple Windows platforms (Windows 7/8.1/10 and corresponding Server editions) where improper handling of objects in memory could allow an attacker to run code with elevated privileges. The provided documents identify the a...

CVE-2017-8717

CVE-2017-8717 affects the Microsoft JET Database Engine, with a buffer overflow in memory handling of objects that can allow remote code execution. The CPAI advisory notes a remote attacker could exploit this by enticing a user to open a specially crafted Excel file on affected Windows versions. ...

CVE-2019-0712

Technical details (affected products, components, root cause, fix) are not provided in the connected documents. The initial CVE description notes a Hyper-V Denial of Service vulnerability, but no public technical specifics are supplied here. Monitor for updates.

CVE-2020-0658

CVE-2020-0658 affects the Windows Common Log File System (CLFS) driver. The vulnerability stems from a flaw in how objects in memory are handled, allowing an information disclosure. According to the provided data, exploitation is local with low attack complexity, and confidentiality impact is lis...

CVE-2020-0698

Technical details for CVE-2020-0698 are not provided in the connected documents; the sources list the CVE but do not specify affected products, root cause, impact, or fixes. Monitor for updates from official advisories.

CVE-2020-0721

Technical details for CVE-2020-0721 are not publicly available in the provided documents . Monitor for updates in case further specifics on affected products, impact, or fixes are released.

CVE-2020-0723

Technical details for CVE-2020-0723 are not publicly provided in the provided documents; no affected products, root cause, or remediation are specified here. Monitor for updates from official advisories.

CVE-2020-0797

CVE-2020-0797 is a Windows Privilege Mobilization vulnerability in the Windows Work Folder Service. The issue arises from the service handling file operations improperly, enabling an attacker with a specially crafted application to run processes with elevated privileges. No exploit details, patch...

CVE-2020-0806

CVE-2020-0806 concerns an elevation of privilege in Windows Error Reporting (WER) related to how WER handles and executes files. The combination of affected component (WER) and the underlying memory handling issue yields a local, low-attack-surface vector with a high-impact outcome (CVE-2020-0806...

CVE-2020-0853

CVE-2020-0853 is a Windows Imaging Component information-disclosure vulnerability rooted in uninitialized memory in Windows image decoders. FireEye’s analysis shows uninitialized memory in windowscodecs!CFormatConverter::Initialize led to leaking pixel data during TIFF/image decoding; PoC output ...

CVE-2020-0993

Technical details about CVE-2020-0993 are not publicly provided in the supplied connected documents. The materials reference the Windows DNS DoS vulnerability but do not specify affected products/versions, root cause, exploitation status, or fixes. Monitor for updates.

CVE-2020-1114

Technical details about CVE-2020-1114 are not present in the provided Connected documents. Public details appear limited to the Initial description. Monitor for updates.

CVE-2020-1356

CVE-2020-1356 affects the Windows iSCSI Target Service and is described as an Elevation of Privilege vulnerability caused by improper handling of file operations. The NVD entry notes local access Vector with Low complexity and that exploitation could grant Partial confidentiality/integrity/availa...

CVE-2020-1406

The CVE-2020-1406 entry describes a local Elevation of Privilege in Windows Network List Service related to in-memory object handling. The provided connected documents do not include concrete technical details (no affected product versions, root-cause specifics, exploit info, or remediation guida...

CVE-2021-26898

CVE-2021-26898 is described as a Windows Event Tracing Elevation of Privilege Vulnerability. The provided documents do not specify affected products, components, versions, root cause, exploit details, or remediation specific to this CVE. Public references confirm the vulnerability name and CVSS m...

CVE-2023-35310

Technical details about CVE-2023-35310 (affected components, impact, exploitability, and mitigations) are not publicly provided in the supplied connected documents. Monitor official disclosures and Microsoft advisories for updates.

CVE-2024-38245

CVE-2024-38245 is a Windows Kernel Streaming Service Driver elevation-of-privilege flaw. A local attacker could exploit it with low privileges and no user interaction to gain SYSTEM-level access; CVSS v3.1/3.1 vector indicates local access, low complexity, with high impact to confidentiality, int...

CVE-2024-38260

CVE-2024-38260 is a Windows Remote Desktop Licensing Service RCE vulnerability. Affected: Windows systems with the Remote Desktop Licensing Service. Impact per sources: execution of arbitrary code with the attacker’s privileges; CVSSv3.1 base score 8.8 (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). Conne...

CVE-2025-21214

Technical details about CVE-2025-21214 (Windows BitLocker information disclosure) are not publicly provided in the supplied connected documents. The sources reference updates but do not specify affected versions, root cause, exploitability, or mitigation beyond patch availability. Monitor for upd...

CVE-2025-21256

Technical details for CVE-2025-21256 are not provided in the connected documents. Public information here is limited to general Windows updates references; no product, exploit, or root-cause specifics are disclosed. Monitor for updates and additional disclosures.

CVE-2025-21282

Technical details about CVE-2025-21282 are not publicly provided in the supplied documents. No affected product/version or exploit information is disclosed here. Monitor for updates from official advisories and CVE/NVD entries.

CVE-2025-26673

CVE-2025-26673 is Windows LDAP (LDAP) Denial-of-Service. The connected data confirms that the LDAP service can be abused to exhaust resources and disable service over the network (DoS). Remediation, where provided, points to Microsoft security updates; update Windows to the April 2025 bundle (KB5...

CVE-2015-2371

CVE-2015-2371 corresponds to a Windows Installer Service elevation-of-privilege issue. A local attacker can escalate privileges by abusing a custom action script within an MSI package, affecting multiple Windows editions (Server 2003 SP2/R2 SP2, Vista SP2, Server 2008 SP2/R2 SP1, Windows 7 SP1, W...

CVE-2015-2373

CVE-2015-2373 is the RDP remote code execution vulnerability affecting Windows 7 SP1, Windows 8, and Windows Server 2012, caused by improper handling of crafted RDP packets in the RDP server. It can allow remote attackers to execute arbitrary code without authentication; public exploits exist. Mi...

CVE-2015-6171

CVE-2015-6171 concerns the Windows kernel vulnerability affecting Vista SP2, Server 2008 SP2/R2 SP1, Windows 7 SP1, 8/8.1, Server 2012 Gold/R2, RT/8.1, and 10 1511, enabling local privilege elevation via a crafted application. The issue is a separate vulnerability from CVE-2015-6173 and CVE-2015-...

CVE-2016-0049

CVE-2016-0049 describes a Windows Kerberos vulnerability where password changes could bypass authentication via a crafted KDC. Microsoft’s MS16-014 (KB3126041) patches this issue across affected Windows versions (Vista SP2, 2008 SP2, 2008 R2, 7 SP1, 8.1, 2012, 2012 R2, 10 RTM/1511). The advisory ...

CVE-2016-3254

CVE-2016-3254 is a Win32k Elevation of Privilege vulnerability affecting multiple Windows releases (Vista to Windows 10) where a crafted user-mode application can cause a kernel-mode elevation via Windows kernel drivers. The description specifies local privileges escalation but the documents do n...