CVE-2024-43607

CVE-2024-43607 affects Windows Routing and Remote Access Service (RRAS). Vulnerability allows remote code execution over the network with no privileges and requires user interaction; CVSS v3.1 base score 8.8 (HIGH). Connected documents indicate RRAS-related fixes from Microsoft security updates (...

CVE-2024-43622

CVE-2024-43622 is a Windows Telephony Service remote code execution vulnerability. According to NCSC guidance, it is associated with an 8.8/High severity score (CVSS 3.1: AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H), indicating network access without authentication is sufficient and user interaction is r...

CVE-2025-21201

CVE-2025-21201 is cited by NCSC as a Windows Telephony Server remote code execution vulnerability with CVSS-like severity of 8.8 (high) andImpact described as executing random code. The connected NCSC advisory confirms the vulnerability exists in Windows Telephony Server and provides an explicit ...

CVE-2025-21223

Technical details about CVE-2025-21223 are not provided in the supplied connected documents. The initial entry notes a Windows Telephony Service RCE, but no vendor/version/impact specifics are disclosed here. Monitor for future updates.

CVE-2025-21272

CVE-2025-21272 affects Windows COM, specifically the COM Server component, described as an Information Disclosure vulnerability. The issue is exploitable locally with low privileges and low attack complexity, with confidentiality impact rated High. Connected sources corroborate Windows COM as aff...

CVE-2025-21278

CVE-2025-21278 is a Windows Remote Desktop Gateway (RD Gateway) Denial of Service vulnerability. The NVD entry lists a local attack vector with low attack complexity and a high availability impact (CVSS v3.1: AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H; base score 5.5; CNA score 6.2). Exploitation status...

CVE-2025-26641

CVE-2025-26641 affects Windows Cryptographic Services, causing Denial of Service via uncontrolled resource consumption over the network. Base score 7.5 (Network, High availability impact). Exploitation status not detailed in the provided connected documents; remediation per Microsoft security upd...

CVE-2025-29969

Technical details about CVE-2025-29969 (affected product/version, root cause, exploitability, and remediation) are not provided in the supplied documents; monitor for updates.

CVE-2026-50472

The CVE-2026-50472 entry refers to a heap-based buffer overflow in Windows LUA File Virtualization Filter Driver (LUAFV) that allows an authorized, local attacker to achieve privilege escalation. Affected software is Windows LUAFV; the underlying issue is a heap-based overflow, leading to local p...

CVE-2013-1345

CVE-2013-1345 affects the Windows kernel-mode driver component Win32k.sys across multiple Windows/Server editions (XP SP2/SP3, Server 2003 SP2, Vista SP2, Server 2008 SP2/R2, Windows 7, 8, Server 2012, Windows RT). The vulnerability arises from improper handling of objects in memory within Win32k...

CVE-2014-1817

CVE-2014-1817 concerns a vulnerability in usp10.dll (Uniscribe) that affects multiple Windows versions (Server 2003 SP2, Vista, Server 2008/2008 R2, Windows 7/8/8.1, Server 2012/R2) and related Office components. The issue arises from processing a crafted EMF+ record in a font file, enabling remo...

CVE-2014-1818

CVE-2014-1818 is a GDI+ image parsing vulnerability in Windows and Office components that allows remote code execution when a crafted EMF+ record is embedded in an image file. The affected products include multiple Windows versions (Server 2003 SP2, Vista SP2, Server 2008 SP2/R2 SP1, Windows 7 SP...

CVE-2014-6318

CVE-2014-6318 refers to a vulnerability in the Remote Desktop Protocol (RDP) audit logon feature across multiple Windows versions (Vista SP2, Server 2008 SP2/R2, 7 SP1, 8/8.1, Server 2012/2012 R2, RT/RT 8.1). The issue is that failed login attempts with valid credentials are not properly logged, ...

CVE-2015-2365

CVE-2015-2365 affects the Windows kernel component Win32k.sys (kernel-mode driver). A local attacker can gain privileges via a crafted application, leading to privilege escalation on multiple Windows platforms (Server 2003 SP2/R2 SP2, Vista SP2, Server 2008 SP2/R2, 7 SP1, 8/8.1, Server 2012/R2, R...

CVE-2015-2433

CVE-2015-2433 is described as a local kernel ASLR bypass vulnerability in Microsoft Windows (affecting Vista SP2/Server 2008 SP2 and R2, Windows 7 SP1, 8/8.1, Server 2012, RT/RT 8.1, Windows 10). Connected records confirm public exploitation activity and linkage to a separate MS15-080/graphics-fo...

CVE-2015-2514

CVE-2015-2514 pertains to Windows Journal remote code execution via a crafted .jnt file affecting Windows Vista SP2, Server 2008 SP2/R2 SP1, Windows 7 SP1, Windows 8/8.1, Windows Server 2012 Gold/R2, Windows RT Gold/8.1, and Windows 10. The connected records also reference CVE-2015-2513 and CVE-2...

CVE-2015-6100

Technical details about CVE-2015-6100 are not provided in the connected documents; the initial entry describes a Windows kernel privilege escalation affecting multiple OS versions but lacks concrete technical specifics. Monitor for updates.

CVE-2016-3262

CVE-2016-3262 and CVE-2016-3263 describe a Graphics Device Interface (GDI+/GDI) information-disclosure problem in multiple Windows versions. The description specifies that remote attackers can bypass ASLR through unspecified vectors. Affected products include Windows Vista SP2, Windows Server 200...

CVE-2017-8469

Technical details for CVE-2017-8469 are not publicly available in the provided documents; no affected products, impact or fixes are specified beyond the high-level description. Monitor for updates.

CVE-2017-8573

CVE-2017-8573 is the Microsoft Windows Graphics Component elevation-of-privilege vulnerability. Public details in CNVD-2017-16000 describe that the Graphics component fails to properly handle in-memory objects, allowing a local attacker to execute code in kernel mode with elevated privileges. The...

CVE-2018-1004

Technical details for CVE-2018-1004 (VBScript engine remote code execution) are not provided in the connected documents. Public details (affected versions, root cause, exploitability, fixes) are not available here. Monitor for updates and consult primary sources for specifics.

CVE-2020-0752

CVE-2020-0752 is a Windows privilege-escalation vulnerability in the Windows Search Indexer related to how it handles objects in memory. The issue is described as allowing an attacker with local access to potentially execute code with elevated permissions, with the CVSS provided by the primary en...

CVE-2020-0780

CVE-2020-0780 is described as an elevation of privilege affecting the Windows Network List Service, arising from how the service handles objects in memory. The CVE entry identifies a local attack vector with low complexity and no user interaction required; the exploit could grant at least partial...

CVE-2020-1076

Technical details (affected product/versions, root cause, exploitability or fixes) for CVE-2020-1076 are not provided in the connected documents. No public specifics are available here; monitor for updated disclosures from official sources.

CVE-2020-1078

Technical details about CVE-2020-1078 (Windows Installer Elevation of Privilege) are not provided in the connected documents. Monitor for updates.

CVE-2023-36012

CVE-2023-36012 is a Windows DHCP Server information-disclosure vulnerability. Connected sources confirm the affected product area as Windows DHCP Server and provide a CVSS v3.1 base score of 5.3 (Medium) with vectors AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N, indicating a confidentiality impact of Low....

CVE-2024-43515

CVE-2024-43515 is described in the provided documents as an Internet Small Computer Systems Interface (iSCSI) Denial of Service vulnerability with CVSS v3.1 base score 7.5. The NCSC advisory explicitly lists CVE-2024-43515 under Windows iSCSI as a 7.50 Denial-of-Service, indicating a DoS impact f...

CVE-2025-21240

CVE-2025-21240 is a Windows Telephony Service remote code execution vulnerability. The CIRCL sighting data lists Windows Telephony Service with CVSS 8.80 (High) and impact: Execute random code, consistent with the CVSS vector in the Initial Description (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H). Conne...

CVE-2025-21258

Technical details about CVE-2025-21258 are not publicly provided in the supplied documents. No affected product/version/root cause/exploit or remediation details are present here; please consult Microsoft advisories for updates.

CVE-2025-21321

CVE-2025-21321 refers to a Windows Kernel Memory Information Disclosure vulnerability. Documentation confirms it affects Windows kernel memory and was addressed by January 2025 security updates (e.g., KB5050009, KB5050021, KB5049984, KB5049981, KB5049993). The CVSS shows local access with low pri...

CVE-2025-21411

Technical details about CVE-2025-21411 are not provided in the connected documents. Public sources reference Windows Telephony Service Remote Code Execution, but this dataset contains no product/version/root-cause/fix specifics. Monitor for updates from MSRC and NVD.

CVE-2025-33075

CVE-2025-33075 affects Windows Installer and is tied to an improper link resolution before file access (a link following issue). The root cause enables a locally authenticated attacker to achieve privilege escalation (local, high impact). The NCSC advisory aggregates list CVE-2025-33075 under Win...

CVE-2026-20820

CVE-2026-20820 is a local privilege-escalation vulnerability caused by a heap-based buffer overflow in the Windows Common Log File System Driver. An authenticated, locally-adjacent attacker could trigger the overflow to obtain higher privileges on the host. The CVE is corroborated by multiple fee...

CVE-2026-61352

The CVE-2026-61352 entry describes a race condition in the Remote Desktop Client caused by concurrent execution with improper synchronization on a shared resource. This leads to remote code execution over the network, classified with a high impact (CVSS 3.1: 7.5) and network attack vector, requir...

CVE-2013-1300

CVE-2013-1300 maps to a Win32k memory handling vulnerability in win32k.sys affecting multiple Windows XP/Vista/7/8/2003/Server variants. The issue is a local privilege escalation via a crafted application that abuses kernel memory object handling, enabling an attacker to gain SYSTEM-level privile...

CVE-2014-0323

CVE-2014-0323 affects Microsoft Windows kernel-mode driver win32k.sys, enabling local attackers to disclose kernel memory contents or trigger a system hang via a crafted application. Affected products include Windows XP SP2/SP3, Server 2003 SP2, Vista SP2, Server 2008 SP2/R2, Windows 7 SP1, Windo...

CVE-2015-0081

CVE-2015-0081 affects Windows Text Services (WTS) and allows remote code execution when a user opens a crafted web site or file. Affected products include Windows Server 2003 SP2, Vista SP2, Server 2008 SP2/R2, Windows 7 SP1, Windows 8/8.1, Windows Server 2012/2012 R2, and Windows RT/8.1. Root ca...

CVE-2015-1725

CVE-2015-1725 is a local privilege-escalation vulnerability in Windows kernel-mode via a buffer overflow in Win32k.sys affecting Windows Server 2003 SP2/R2 SP2, Vista SP2, Server 2008 SP2/R2 SP1, Windows 7 SP1, Windows 8/8.1, Windows Server 2012 (Gold/R2) and Windows RT 8.x. Root cause: kernel-mo...

CVE-2015-2374

CVE-2015-2374 affects the Netlogon service in multiple Windows Server editions (2003 SP2/R2 SP2, 2008 SP2/R2 SP1, 2012) where improper domain-controller communication can let an attacker disclose credentials by forging a BDC with PDC access in a PDC channel, enabling privilege escalation. Root ca...

CVE-2016-3374

The CVE-2016-3374 entry describes an information-disclosure vulnerability in the PDF library used by Microsoft Edge on Windows 8.1, Windows Server 2012 R2/2012, Windows RT 8.1, and Windows 10 (versions 1511 and 1607). The underlying issue allows remote attackers to obtain sensitive information vi...

CVE-2017-0185

Technical details for CVE-2017-0185 are not provided in the supplied documents. No concrete product/version/impact information is available here; monitor for updates.

CVE-2017-11763

CVE-2017-11763 is a remote code execution vulnerability in the Microsoft Graphics Component exploited via specially crafted embedded fonts. Affected products include multiple Windows versions listed in the CVE description. Remediation is provided by security updates in the October 2017 rollups (e...

CVE-2017-11772

CVE-2017-11772 describes an information-disclosure vulnerability in the Microsoft Windows Search component where memory-handling flaws could allow an attacker to obtain sensitive data. The CVE applies to multiple Windows versions (including Windows client and server SKUs listed in the entry). Con...

CVE-2017-11785

CVE-2017-11785 is a Windows kernel information-disclosure vulnerability caused by improper handling of objects in memory, affecting multiple Windows client and server versions (from Windows 7 SP1 to Windows 10 builds including 1511/1607/1703 and Windows Server 2008 SP2/R2 SP1, 2012, 2016). The un...

CVE-2017-8471

Technical details for CVE-2017-8471 are not provided in the supplied documents. Connected sources reference Windows updates and malware notes but do not describe affected components, root cause, or remediation for this CVE.

CVE-2017-8531

CVE-2017-8531 : Affected are Windows graphics components including Uniscribe across Windows client/server lines (e.g., Windows 7 SP1, 8.1, 10 variants; Windows Server 2008-2016) and Microsoft Office; root cause is an information disclosure vulnerability caused by improper memory disclosure in the...

CVE-2017-8554

CVE-2017-8554 corresponds to a Windows kernel local information disclosure affecting Win32k.sys across multiple Windows versions. The CNVD-2017-12584 entry notes a local information disclosure in Win32k.sys exploitable via a crafted application to obtain memory contents. Microsoft security update...

CVE-2017-8561

CVE-2017-8561 is a Windows kernel elevation-of-privilege vulnerability described as: a local attacker can exploit through improper handling of objects in memory by the Windows kernel, allowing code execution with elevated privileges. Affected software per the initial document includes Windows 8.1...

CVE-2017-8720

CVE-2017-8720 is a local elevation-of-privilege flaw in the Windows graphics stack tied to the Win32k component. The vulnerability arises when Win32k fails to properly handle memory objects, allowing an attacker who can run code on a system to execute with kernel or higher privileges. Affected pr...

CVE-2019-1381

The CVE-2019-1381 entry describes an information-disclosure flaw in the Windows Servicing Stack, where unprivileged file locations can be accessed. Affected component: Windows Servicing Stack. Root cause: information disclosure due to improper access control to certain file locations. Impact: par...