CVE-2020-0716

Technical details for CVE-2020-0716 are not publicly provided in the connected documents. Monitor for updates; current sources do not specify affected products, root cause, impact, or remediation in this corpus.

CVE-2023-36005

CVE-2023-36005 is documented in connected sources as a Windows Telephony Server Elevation of Privilege vulnerability with a base impact of obtaining increased privileges. The NC SC advisory lists the CVE with a base CVSS-like rating of 7.5 (HIGH) and notes a network-associated context, but the pr...

CVE-2024-43547

CVE-2024-43547 is listed in the Windows Kerberos category as a Windows Kerberos Information Disclosure vulnerability with impact described as Access to sensitive data. The connected documents identify the CVE and its general risk context but do not provide concrete details on affected product ver...

CVE-2024-43564

CVE-2024-43564 is a Windows RRAS Remote Code Execution vulnerability affecting the Windows Routing and Remote Access Service. The vulnerability is described as a network-based issue with a high severity (CVSS v3.1: 8.8) involving network access, no privileges required, and user interaction requir...

CVE-2024-43593

CVE-2024-43593 is listed in the Windows RRAS category with high severity (CVSS v3.1 ~8.8) and is described as a remote code execution vulnerability. Connected sources (NCSC) indicate it affects Windows RRAS and assigns an 8.80 rating for Execute Random Code. The NVD entry confirms RRAS Remote Cod...

CVE-2025-29954

Technical details for CVE-2025-29954 are not publicly provided in the supplied documents. Monitor for official updates from Microsoft (MSRC) and vulnerability feeds as the connected sources are not detailed here.

CVE-2025-29962

Technical details about CVE-2025-29962 are not provided in the supplied documents; no affected products, root cause, or fixes are disclosed here. Monitor for updates.

CVE-2025-32718

CVE-2025-32718 : Integer overflow or wraparound in Windows SMB enables a locally authenticated attacker to elevate privileges. Connected sources confirm impact as local privilege escalation on Windows SMB, with CVSS v3.1 base score 7.8 (HIGH) and local attack vector. Public references in NVD/NCSC...

CVE-2026-33104

CVE-2026-33104 is a Windows Win32K - GRFX race condition vulnerability rated CVSS v3.1 7.0 (High) with local privilege escalation impact. The connected sources label this as a Win32K-GRFX issue enabling “Obtain increased privileges” and reference Microsoft Windows updates guidance, but the provid...

CVE-2026-62728

The vulnerability CVE-2026-62728 affects Windows systems via the Common Log File System (CLFS) Driver. It is a time-of-check time-of-use (TOCTOU) race condition that allows an authorized, local attacker to elevate privileges. The CVSSv3.1 metrics indicate a Local attack, High impact on confidenti...

CVE-2026-62732

CVE-2026-62732 is a heap-based buffer overflow in the Windows Telephony Service that enables a locally authenticated attacker to achieve privilege elevation. The vulnerability affects the Telephony Service component and is characterized by a local exploit path with low privileges required and no ...

CVE-2014-1814

CVE-2014-1814 is a local privilege-escalation vulnerability in the Windows Installer service. It affects Windows client/server platforms listed in the advisory (e.g., Windows Server 2003 SP2, Vista SP2, Server 2008 SP2/R2, 7, 8, 8.1, Server 2012/2012 R2, and Windows RT/8.1). The flaw arises from ...

CVE-2014-4074

CVE-2014-4074 concerns a privilege-escalation flaw in Windows Task Scheduler. The vulnerability exists in Task Scheduler across Windows 8/8.1, Windows Server 2012 (Gold/R2) and Windows RT/8.1, where a crafted task can be scheduled to abuse privileges. The issue is triggered locally by scheduling ...

CVE-2015-0006

The CVE-2015-0006 issue is a vulnerability in Microsoft Windows’ Network Location Awareness (NLA) service. The root cause is that NLA does not perform mutual authentication to verify domain connections, enabling a remote attacker to spoof DNS/LDAP responses on a local network and trigger an unint...

CVE-2015-0010

CVE-2015-0010 affects the Windows kernel-mode Cryptography Next Generation driver (cng.sys). The vulnerability occurs when using the CRYPTPROTECTMEMORY_SAME_LOGON option, where the code path does not validate the impersonation token’s level, permitting local users to bypass decryption restriction...

CVE-2015-1643

CVE-2015-1643 affects multiple Windows versions (Vista to Server 2012/R2, RT/RT 8.1, etc.). The root cause is NtCreateTransactionManager type confusion that fails to properly constrain impersonation levels, enabling a local unprivileged user to escalate to higher privileges via a crafted applicat...

CVE-2015-2516

CVE-2015-2516 affects Windows Journal across multiple Windows client/server editions (e.g., Vista SP2, Windows 7 SP1, Windows 8/8.1, Windows 10, and Windows Server 2008/2012 variants). The issue is a denial-of-service via a specially crafted Journal file (.jnt), caused by improper handling that c...

CVE-2016-0090

Summary: CVE-2016-0090 is a Windows Hyper-V Information Disclosure vulnerability. It affects Hyper-V on Windows 8.1, Windows Server 2012 R2, and Windows 10 where a guest OS user can cause the Hyper-V host to disclose memory contents via a crafted application. Root cause: inadequate validation of ...

CVE-2016-7211

Technical details for CVE-2016-7211 are not publicly available in the provided documents. Monitor for updates.

CVE-2017-8466

CVE-2017-8466 is a Windows local elevation of privilege vulnerability described as a Windows Cursor Elevation of Privilege Vulnerability affecting Windows 8.1, Windows Server 2012 (Gold/R2), Windows RT 8.1, Windows 10 (1511, 1607) and Windows Server 2016. The connected KLA entry corroborates Wind...

CVE-2017-8578

CVE-2017-8578 is a Win32k elevation of privilege vulnerability in Windows where Win32k fails to properly handle objects in memory. Affected products include Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold/R2, Windows RT 8.1, Windows 10 (various builds 1511...

CVE-2017-8714

The CVE-2017-8714 entry affects the Windows Hyper-V component (Remote Desktop Virtual Host) on Windows 8.1, Windows Server 2012 (Gold/R2), Windows 10 1607, and Windows Server 2016. The vulnerability arises because the VM Host Agent Service fails to properly validate input from an authenticated us...

CVE-2023-33172

Technical details about CVE-2023-33172 are not publicly provided in the supplied documents; no affected products, versions, impact, or mitigations are specified. Monitor for updates.

CVE-2024-38234

CVE-2024-38234 is a Windows Network Virtualization vulnerability rated CVSS v3.1 base score 6.5 (Medium) with Adjacent attack vector, Low attack complexity, No privileges, No user interaction, and a High availability impact (Denial of Service). The connected documents confirm the CVE-ID and its D...

CVE-2024-38261

Technical details about CVE-2024-38261 are not provided in the connected documents. The RRAS RCE entry is described, but no exploit specifics, affected versions, or remediation steps are included here. Monitor for updates.

CVE-2024-43521

CVE-2024-43521 is a Windows Hyper-V Denial of Service vulnerability. Publicly available references confirm the issue affects Microsoft Windows Hyper-V and assigns a CVSS v3.1 base score of 7.5 (Network attack vector, low attack complexity, no privileges, no user interaction, availability impact)....

CVE-2025-21218

CVE-2025-21218 is cataloged as a Windows Kerberos Denial of Service vulnerability with CVSS 3.1, base score 7.5 (HIGH). The description and connected sources confirm the issue is a DoS affecting Windows Kerberos, but the provided documents do not specify affected product versions, root cause deta...

CVE-2026-40398

CVE-2026-40398 is a heap-based buffer overflow in Windows Remote Desktop Services that allows an authenticated attacker to perform local privilege escalation. The description across sources consistently identifies a local, authenticated exploit path with a high impact (C/H/I/A: High) and a CVSS v...

CVE-2026-50387

CVE-2026-50387 — Windows GDI Elevation of Privilege Affects: Windows GDI subsystem. The vulnerability is a stack-based buffer overflow in GDI that can be triggered by an authorized attacker to achieve local privilege escalation. Impact: Local elevation of privileges with a CVSS v3.1 base score of...

CVE-2026-59130

AMD Zen CPUs are affected by CVE-2026-59130, described as an information disclosure vulnerability that allows an authorized user to disclose information locally. The NVD/CVE description notes no CWE mapping and that the attack vector is LOCAL with LOW privileges required and HIGH confidentiality ...

CVE-2014-1819

CVE-2014-1819 affects Windows kernel-mode font handling (win32k.sys) where access to font-file objects is not properly controlled, enabling local privilege escalation via a crafted font file. Connected docs corroborate font-file handling as the root cause and map to MS14-045 kernel-mode driver up...

CVE-2015-0076

CVE-2015-0076 affects the Microsoft Windows Photo Decoder component across Windows Vista SP2, Server 2008 SP2/R2 SP1, Windows 7 SP1, Windows 8/8.1, Server 2012 (Gold/R2) and Windows RT/8.1. The vulnerability stems from not properly initializing memory when rendering JPEG XR (.JXR) images, allowin...

CVE-2015-0094

CVE-2015-0094 is a Windows kernel-mode driver information-disclosure vulnerability where the affected kernel components do not properly restrict address information during a function call, enabling local attackers to bypass ASLR. Affected products include multiple Windows versions listed in sourc...

CVE-2015-1727

CVE-2015-1727 is a local privilege-escalation vulnerability in Windows kernel-mode driver Win32k.sys (buffer overflow). A crafted/local attacker can gain SYSTEM privileges via the Win32k Pool Buffer Overflow vulnerability affecting multiple Windows versions (from Windows Server 2003 SP2/R2 SP2 to...

CVE-2015-2361

CVE-2015-2361 affects Microsoft Windows 8.1 and Windows Server 2012 R2 Hyper-V. The vulnerability arises from improper initialization of guest OS system data structures in Hyper-V, enabling a guest OS user to execute arbitrary code on the host or cause a denial of service (buffer overflow) when e...

CVE-2015-2430

CVE-2015-2430 describes a Windows sandbox-elevation vulnerability affecting multiple OS versions (Vista SP2, Windows 7 SP1, Windows 8/8.1, Server 2008/2012 variants, RT). The initial report notes a sandbox bypass enabling unspecified filesystem actions via a crafted application. Connected documen...

CVE-2016-0014

CVE-2016-0014 is a DLL-loading Elevation of Privilege vulnerability affecting multiple Windows versions (Vista through Windows 10 thresholds) where improper DLL loading allows a local attacker to gain complete control via a crafted application. Root cause: mishandling of DLL loading. Affected com...

CVE-2016-0093

CVE-2016-0093 is a Windows kernel Win32k elevation-of-privilege vulnerability (local). The initial description lists affected OSes (Vista SP2, Server 2008 SP2/R2, 7 SP1, 8.1, Server 2012 Gold/R2, RT 8.1, Windows 10 Gold/1511) and notes a crafted application can gain privileges via the kernel-mode...

CVE-2016-0095

CVE-2016-0095 is a local privilege-escalation in the Windows kernel Win32k driver. The flaw affects multiple Windows platforms (Vista SP2; Server 2008 SP2/R2; Windows 7 SP1; Windows 8.1; Server 2012 Gold/R2; Windows RT 8.1; Windows 10 Gold & 1511) and is triggered by a crafted user-space applicat...

CVE-2017-0156

CVE-2017-0156 is an elevation-of-privilege vulnerability in the Microsoft Graphics component affecting Windows 7, 8.1, RT 8.1, 10, and Windows Server 2008 R2/2012/2012 R2/2016. The issue arises when the Graphics Component fails to properly handle memory objects, allowing a local attacker to gain ...

CVE-2017-0291

CVE-2017-0291 is a Windows PDF remote-code-execution vulnerability tied to the JPEG2000 parsing path in the Microsoft Windows PDF library. The KLA/Kaspersky entry explicitly lists a Windows PDF remote-code-execution vulnerability with CVE-2017-0291 and describes exploitation via specially crafted...

CVE-2017-8553

Technical details about CVE-2017-8553 (affected products, root cause, impact, fixes) are not provided in the supplied documents. Connected items discuss other updates/CVEs; no explicit details for this CVE are present. Monitor for updates.

CVE-2017-8580

Technical details for CVE-2017-8580 are not publicly available in the provided connected documents. Monitor for updates from authoritative sources to confirm affected products, root cause, impact, and any available mitigations or patches.

CVE-2017-8675

The CVE-2017-8675 entry describes an elevation of privilege in Windows due to a flaw in the Win32k subsystem. Affects: Windows kernel-mode drivers component on Windows versions including Windows Server 2008 SP2/R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012, Windows RT 8.1, Windows 10 (1...

CVE-2018-0760

Summary: CVE-2018-0760 affects the Windows Embedded OpenType (EOT) font engine in Windows 7 SP1, Windows Server 2008 R2, and Windows Server 2012. The vulnerability arises from the EOT font engine’s handling of embedded fonts, leading to information disclosure. What’s vulnerable: Windows EOT Font ...

CVE-2024-38262

CVE-2024-38262 is a Windows Remote Desktop Licensing Service Remote Code Execution vulnerability. The CVE entry lists a 3.1.1 CVSSv3.1 base score of 7.5 (High) with network as the attack vector, requiring low privileges and no user interaction, and resulting in high confidentiality, integrity, an...

CVE-2024-43545

CVE-2024-43545 is a Windows OCSP (Online Certificate Status Protocol) Server Denial of Service vulnerability. The available documents identify the affected component as the Windows OCSP service and classify the impact as Denial of Service with a CVSS v3.1 base score of 7.5 (Network attack, low at...

CVE-2025-29835

CVE-2025-29835 describes an out-of-bounds read in Windows Routing and Remote Access Service (RRAS) that could allow an unauthenticated attacker to disclose information over the network. The initial description does not provide concrete remediation guidance, and the connected documents do not spec...

CVE-2025-29968

Technical details (affected product/versions, root cause, impact, exploit info, and fixes) are not provided in the connected documents. Based on the supplied sources, only the basic description and CVSS metrics are available. Monitor for updates.

CVE-2025-32713

CVE-2025-32713 corresponds to a heap-based buffer overflow in Windows Common Log File System Driver that enables local privilege escalation for an authorized attacker. The connected sources identify the affected component as the Windows Common Log File System Driver and list the impact as obtaini...