CVE-2017-11832

CVE-2017-11832/11835 relate to the Microsoft Windows Embedded OpenType (EOT) font engine. Affected products include Windows 7 SP1, Windows Server 2008 SP2/R2 SP1, and Windows Server 2012, where the EOT font engine parses specially crafted embedded fonts leading to information disclosure. The vuln...

CVE-2017-8578

CVE-2017-8578 is a Win32k elevation of privilege vulnerability in Windows where Win32k fails to properly handle objects in memory. Affected products include Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold/R2, Windows RT 8.1, Windows 10 (various builds 1511...

CVE-2017-8666

CVE-2017-8666 is described in the initial entry as an information disclosure in Win32k when handling objects in memory across multiple Windows versions (Windows 7/8.1/10, Server editions). Connected documents enumerate CVE-2017-8666 within Microsoft security update compilations (e.g., KB4034665/K...

CVE-2018-8621

CVE-2018-8621 is a Windows kernel information-disclosure vulnerability caused by improper handling of objects in memory. Affected products listed in the provided materials include Windows Server 2012, Windows 7, and Windows Server 2008 R2. The vulnerability results in partial confidentiality impa...

CVE-2019-1418

The CVE-2019-1418 entry describes an information-disclosure vulnerability in Windows where the Windows Modules Installer Service improperly discloses file information. The affected component is the Windows Modules Installer Service; the underlying issue is an information disclosure vulnerability ...

CVE-2020-0716

Technical details for CVE-2020-0716 are not publicly provided in the connected documents. Monitor for updates; current sources do not specify affected products, root cause, impact, or remediation in this corpus.

CVE-2023-36005

CVE-2023-36005 is documented in connected sources as a Windows Telephony Server Elevation of Privilege vulnerability with a base impact of obtaining increased privileges. The NC SC advisory lists the CVE with a base CVSS-like rating of 7.5 (HIGH) and notes a network-associated context, but the pr...

CVE-2024-43547

CVE-2024-43547 is listed in the Windows Kerberos category as a Windows Kerberos Information Disclosure vulnerability with impact described as Access to sensitive data. The connected documents identify the CVE and its general risk context but do not provide concrete details on affected product ver...

CVE-2024-43593

CVE-2024-43593 is listed in the Windows RRAS category with high severity (CVSS v3.1 ~8.8) and is described as a remote code execution vulnerability. Connected sources (NCSC) indicate it affects Windows RRAS and assigns an 8.80 rating for Execute Random Code. The NVD entry confirms RRAS Remote Cod...

CVE-2025-21218

CVE-2025-21218 is cataloged as a Windows Kerberos Denial of Service vulnerability with CVSS 3.1, base score 7.5 (HIGH). The description and connected sources confirm the issue is a DoS affecting Windows Kerberos, but the provided documents do not specify affected product versions, root cause deta...

CVE-2025-29954

Technical details for CVE-2025-29954 are not publicly provided in the supplied documents. Monitor for official updates from Microsoft (MSRC) and vulnerability feeds as the connected sources are not detailed here.

CVE-2025-29962

Technical details about CVE-2025-29962 are not provided in the supplied documents; no affected products, root cause, or fixes are disclosed here. Monitor for updates.

CVE-2025-32718

CVE-2025-32718 : Integer overflow or wraparound in Windows SMB enables a locally authenticated attacker to elevate privileges. Connected sources confirm impact as local privilege escalation on Windows SMB, with CVSS v3.1 base score 7.8 (HIGH) and local attack vector. Public references in NVD/NCSC...

CVE-2026-33104

CVE-2026-33104 is a Windows Win32K - GRFX race condition vulnerability rated CVSS v3.1 7.0 (High) with local privilege escalation impact. The connected sources label this as a Win32K-GRFX issue enabling “Obtain increased privileges” and reference Microsoft Windows updates guidance, but the provid...

CVE-2026-50387

CVE-2026-50387 — Windows GDI Elevation of Privilege Affects: Windows GDI subsystem. The vulnerability is a stack-based buffer overflow in GDI that can be triggered by an authorized attacker to achieve local privilege escalation. Impact: Local elevation of privileges with a CVSS v3.1 base score of...

CVE-2026-59130

AMD Zen CPUs are affected by CVE-2026-59130, described as an information disclosure vulnerability that allows an authorized user to disclose information locally. The NVD/CVE description notes no CWE mapping and that the attack vector is LOCAL with LOW privileges required and HIGH confidentiality ...

CVE-2014-1814

CVE-2014-1814 is a local privilege-escalation vulnerability in the Windows Installer service. It affects Windows client/server platforms listed in the advisory (e.g., Windows Server 2003 SP2, Vista SP2, Server 2008 SP2/R2, 7, 8, 8.1, Server 2012/2012 R2, and Windows RT/8.1). The flaw arises from ...

CVE-2014-4074

CVE-2014-4074 concerns a privilege-escalation flaw in Windows Task Scheduler. The vulnerability exists in Task Scheduler across Windows 8/8.1, Windows Server 2012 (Gold/R2) and Windows RT/8.1, where a crafted task can be scheduled to abuse privileges. The issue is triggered locally by scheduling ...

CVE-2015-0006

The CVE-2015-0006 issue is a vulnerability in Microsoft Windows’ Network Location Awareness (NLA) service. The root cause is that NLA does not perform mutual authentication to verify domain connections, enabling a remote attacker to spoof DNS/LDAP responses on a local network and trigger an unint...

CVE-2015-0010

CVE-2015-0010 affects the Windows kernel-mode Cryptography Next Generation driver (cng.sys). The vulnerability occurs when using the CRYPTPROTECTMEMORY_SAME_LOGON option, where the code path does not validate the impersonation token’s level, permitting local users to bypass decryption restriction...

CVE-2015-1643

CVE-2015-1643 affects multiple Windows versions (Vista to Server 2012/R2, RT/RT 8.1, etc.). The root cause is NtCreateTransactionManager type confusion that fails to properly constrain impersonation levels, enabling a local unprivileged user to escalate to higher privileges via a crafted applicat...

CVE-2015-2516

CVE-2015-2516 affects Windows Journal across multiple Windows client/server editions (e.g., Vista SP2, Windows 7 SP1, Windows 8/8.1, Windows 10, and Windows Server 2008/2012 variants). The issue is a denial-of-service via a specially crafted Journal file (.jnt), caused by improper handling that c...

CVE-2016-0090

Summary: CVE-2016-0090 is a Windows Hyper-V Information Disclosure vulnerability. It affects Hyper-V on Windows 8.1, Windows Server 2012 R2, and Windows 10 where a guest OS user can cause the Hyper-V host to disclose memory contents via a crafted application. Root cause: inadequate validation of ...

CVE-2017-8466

CVE-2017-8466 is a Windows local elevation of privilege vulnerability described as a Windows Cursor Elevation of Privilege Vulnerability affecting Windows 8.1, Windows Server 2012 (Gold/R2), Windows RT 8.1, Windows 10 (1511, 1607) and Windows Server 2016. The connected KLA entry corroborates Wind...

CVE-2017-8675

The CVE-2017-8675 entry describes an elevation of privilege in Windows due to a flaw in the Win32k subsystem. Affects: Windows kernel-mode drivers component on Windows versions including Windows Server 2008 SP2/R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012, Windows RT 8.1, Windows 10 (1...

CVE-2017-8714

The CVE-2017-8714 entry affects the Windows Hyper-V component (Remote Desktop Virtual Host) on Windows 8.1, Windows Server 2012 (Gold/R2), Windows 10 1607, and Windows Server 2016. The vulnerability arises because the VM Host Agent Service fails to properly validate input from an authenticated us...

CVE-2023-33172

Technical details about CVE-2023-33172 are not publicly provided in the supplied documents; no affected products, versions, impact, or mitigations are specified. Monitor for updates.

CVE-2024-38234

CVE-2024-38234 is a Windows Network Virtualization vulnerability rated CVSS v3.1 base score 6.5 (Medium) with Adjacent attack vector, Low attack complexity, No privileges, No user interaction, and a High availability impact (Denial of Service). The connected documents confirm the CVE-ID and its D...

CVE-2024-38261

Technical details about CVE-2024-38261 are not provided in the connected documents. The RRAS RCE entry is described, but no exploit specifics, affected versions, or remediation steps are included here. Monitor for updates.

CVE-2024-43521

CVE-2024-43521 is a Windows Hyper-V Denial of Service vulnerability. Publicly available references confirm the issue affects Microsoft Windows Hyper-V and assigns a CVSS v3.1 base score of 7.5 (Network attack vector, low attack complexity, no privileges, no user interaction, availability impact)....

CVE-2025-29968

Technical details (affected product/versions, root cause, impact, exploit info, and fixes) are not provided in the connected documents. Based on the supplied sources, only the basic description and CVSS metrics are available. Monitor for updates.

CVE-2026-40398

CVE-2026-40398 is a heap-based buffer overflow in Windows Remote Desktop Services that allows an authenticated attacker to perform local privilege escalation. The description across sources consistently identifies a local, authenticated exploit path with a high impact (C/H/I/A: High) and a CVSS v...

CVE-2014-1819

CVE-2014-1819 affects Windows kernel-mode font handling (win32k.sys) where access to font-file objects is not properly controlled, enabling local privilege escalation via a crafted font file. Connected docs corroborate font-file handling as the root cause and map to MS14-045 kernel-mode driver up...

CVE-2015-0076

CVE-2015-0076 affects the Microsoft Windows Photo Decoder component across Windows Vista SP2, Server 2008 SP2/R2 SP1, Windows 7 SP1, Windows 8/8.1, Server 2012 (Gold/R2) and Windows RT/8.1. The vulnerability stems from not properly initializing memory when rendering JPEG XR (.JXR) images, allowin...

CVE-2015-0094

CVE-2015-0094 is a Windows kernel-mode driver information-disclosure vulnerability where the affected kernel components do not properly restrict address information during a function call, enabling local attackers to bypass ASLR. Affected products include multiple Windows versions listed in sourc...

CVE-2015-1727

CVE-2015-1727 is a local privilege-escalation vulnerability in Windows kernel-mode driver Win32k.sys (buffer overflow). A crafted/local attacker can gain SYSTEM privileges via the Win32k Pool Buffer Overflow vulnerability affecting multiple Windows versions (from Windows Server 2003 SP2/R2 SP2 to...

CVE-2015-2361

CVE-2015-2361 affects Microsoft Windows 8.1 and Windows Server 2012 R2 Hyper-V. The vulnerability arises from improper initialization of guest OS system data structures in Hyper-V, enabling a guest OS user to execute arbitrary code on the host or cause a denial of service (buffer overflow) when e...

CVE-2015-2430

CVE-2015-2430 describes a Windows sandbox-elevation vulnerability affecting multiple OS versions (Vista SP2, Windows 7 SP1, Windows 8/8.1, Server 2008/2012 variants, RT). The initial report notes a sandbox bypass enabling unspecified filesystem actions via a crafted application. Connected documen...

CVE-2016-0014

CVE-2016-0014 is a DLL-loading Elevation of Privilege vulnerability affecting multiple Windows versions (Vista through Windows 10 thresholds) where improper DLL loading allows a local attacker to gain complete control via a crafted application. Root cause: mishandling of DLL loading. Affected com...

CVE-2016-0093

CVE-2016-0093 is a Windows kernel Win32k elevation-of-privilege vulnerability (local). The initial description lists affected OSes (Vista SP2, Server 2008 SP2/R2, 7 SP1, 8.1, Server 2012 Gold/R2, RT 8.1, Windows 10 Gold/1511) and notes a crafted application can gain privileges via the kernel-mode...

CVE-2016-0095

CVE-2016-0095 is a local privilege-escalation in the Windows kernel Win32k driver. The flaw affects multiple Windows platforms (Vista SP2; Server 2008 SP2/R2; Windows 7 SP1; Windows 8.1; Server 2012 Gold/R2; Windows RT 8.1; Windows 10 Gold & 1511) and is triggered by a crafted user-space applicat...

CVE-2016-3250

CVE-2016-3250 is a Windows kernel-mode elevation-of-privilege vulnerability in Win32k. The issue affects kernel-mode drivers in Microsoft Windows Server 2012 and Windows 10 (Gold/1511), where a crafted application could cause memory-object handling flaws to escalate privileges locally. The NVD en...

CVE-2016-3300

The CVE-2016-3300 Netlogon Elevation of Privilege vulnerability affects Windows 8.1, Windows Server 2012 (Gold/R2) and Windows RT 8.1, where Netlogon improperly establishes secure channels to a domain controller, enabling local privilege escalation on domain-joined machines. The root cause is in ...

CVE-2017-0156

CVE-2017-0156 is an elevation-of-privilege vulnerability in the Microsoft Graphics component affecting Windows 7, 8.1, RT 8.1, 10, and Windows Server 2008 R2/2012/2012 R2/2016. The issue arises when the Graphics Component fails to properly handle memory objects, allowing a local attacker to gain ...

CVE-2017-0291

CVE-2017-0291 is a Windows PDF remote-code-execution vulnerability tied to the JPEG2000 parsing path in the Microsoft Windows PDF library. The KLA/Kaspersky entry explicitly lists a Windows PDF remote-code-execution vulnerability with CVE-2017-0291 and describes exploitation via specially crafted...

CVE-2017-8553

Technical details about CVE-2017-8553 (affected products, root cause, impact, fixes) are not provided in the supplied documents. Connected items discuss other updates/CVEs; no explicit details for this CVE are present. Monitor for updates.

CVE-2017-8580

Technical details for CVE-2017-8580 are not publicly available in the provided connected documents. Monitor for updates from authoritative sources to confirm affected products, root cause, impact, and any available mitigations or patches.

CVE-2018-0760

Summary: CVE-2018-0760 affects the Windows Embedded OpenType (EOT) font engine in Windows 7 SP1, Windows Server 2008 R2, and Windows Server 2012. The vulnerability arises from the EOT font engine’s handling of embedded fonts, leading to information disclosure. What’s vulnerable: Windows EOT Font ...

CVE-2021-26886

CVE-2021-26886 is a Microsoft Windows User Profile Service Denial of Service vulnerability affecting the User Profile Service component. CVSS v3.1 base score 6.1 (Medium): attack vector LOCAL, privileges required LOW, user interaction NONE, with high impact on availability and low impact on integ...

CVE-2024-38262

CVE-2024-38262 is a Windows Remote Desktop Licensing Service Remote Code Execution vulnerability. The CVE entry lists a 3.1.1 CVSSv3.1 base score of 7.5 (High) with network as the attack vector, requiring low privileges and no user interaction, and resulting in high confidentiality, integrity, an...