CVE-2026-50502

CVE-2026-50502 corresponds to a Windows Event Logging Service remote code execution vulnerability. The issue is described as insufficient granularity of access control in the Event Logging Service, enabling an authenticated, network-accessing attacker to run code on the vulnerable system. For con...

CVE-2015-2512

CVE-2015-2512 is a local privilege escalation in the Adobe Type Manager Library (Font Driver) on Windows. The vulnerability arises from improper handling of objects in memory within the Font Driver, allowing a crafted application to execute with elevated privileges (SYSTEM) on affected Windows ve...

CVE-2015-6102

CVE-2015-6102 describes a Windows kernel information-disclosure vulnerability that allows local users to bypass KASLR and discover a driver base address. Affected are Windows Vista SP2, Server 2008 SP2/R2 SP1, Windows 7 SP1, Windows 8/8.1, Server 2012 (Gold/R2), Windows RT 8.1, and Windows 10 (in...

CVE-2016-0038

CVE-2016-0038 affects Windows Journal across multiple Windows releases (Vista SP2, Server 2008 SP2/R2 SP1, Windows 7 SP1, 8.1, Server 2012/2012 R2, Windows 10/1511). The vulnerability stems from improper handling/parsing of Journal files, enabling remote code execution when a user opens a crafted...

CVE-2017-11814

CVE-2017-11814 is a Windows kernel information disclosure vulnerability. It involves improper handling of objects in memory in the Windows kernel and affects multiple Windows editions (Server 2008 SP2/R2 SP1, Windows 7 SP1, Windows 8.1, Server 2012 Gold/R2, Windows RT 8.1, Windows 10 v1511/1607/1...

CVE-2017-8465

Technical details for CVE-2017-8465 are not publicly available in the provided documents. No specifics on affected products, root cause, or fixes are present here. Monitor for updates.

CVE-2017-8593

CVE-2017-8593 corresponds to an elevation-of-privilege flaw inMicrosoft Windows Win32k where objects in memory are not handled correctly. The exposed component is Win32k, and the affected OS family includes Windows 7 SP1, Windows 8.1, Windows 10 variants (including 1511, 1607, 1703), Windows Serv...

CVE-2020-0844

CVE-2020-0844 is an elevation of privilege in Windows, tied to the Connected User Experiences and Telemetry Service. The underlying issue is improper handling of file operations by this service, which could allow a local attacker to run code with elevated privileges. Remediation text in connected...

CVE-2025-32716

CVE-2025-32716 (Windows Media) is a Windows component vulnerability described as an out-of-bounds read that enables a locally authenticated attacker to elevate privileges. The NCSC advisory lists CVE-2025-32716 under Windows Media with a base impact of 7.80 (Obtaining elevated privileges). No exp...

CVE-2025-47971

CVE-2025-47971 describes a buffer over-read in the Virtual Hard Disk (VHDX) component that can allow a local attacker to elevate privileges. The publicly documented impact is local privilege elevation via a buffer over-read in VHDX; vendors have not provided version-specific affected products in ...

CVE-2025-49743

CVE-2025-49743 is a local privilege-escalation vulnerability in the Microsoft Graphics Component caused by a race condition due to improper synchronization when a shared resource is accessed concurrently. The issue affects Windows graphics-related code paths and can let an authorized, local attac...

CVE-2025-55230

CVE-2025-55230 is a local privilege-escalation in the Windows MBT Transport driver (netbt.sys) caused by an untrusted pointer dereference when handling a specific IOCTL. An authenticated local user can elevate to SYSTEM by dereferencing a kernel address via kernel memory access. A PoC exploit exi...

CVE-2026-23669

CVE-2026-23669 is a Windows Print Spooler remote code execution vulnerability with CVSS 3.1 base score 8.8 (Network, Low attack complexity, Low privileges required, No user interaction). It impacts confidentiality, integrity, and availability (all HIGH). Exploit code maturity is UNPROVEN. The Mic...

CVE-2026-24291

CVE-2026-24291 affects Windows Accessibility Infrastructure (ATBroker.exe). It is an Elevation of Privilege vulnerability with local attack vector, require low privileges and no user interaction, and it impacts confidentiality, integrity, and availability. Exploit code maturity is UNPROVEN; remed...

CVE-2026-34346

CVE-2026-34346 concerns the Windows Ancillary Function Driver for WinSock. The vulnerability enables an authorized, local attacker to disclose sensitive information due to cleartext transmission of data. The available records (NVD/NVD entry and CVE listing) describe the affected component and the...

CVE-2013-3200

CVE-2013-3200 concerns a local-privilege-escalation in Windows USB handling. The vulnerability exists in kernel-mode USB drivers across multiple Windows releases (XP SP2/SP3, Server 2003 SP2, Vista SP2, Server 2008 SP2/R2 SP1, Windows 7 SP1, Windows 8, Server 2012, Windows RT). A crafted USB devi...

CVE-2015-0059

CVE-2015-0059 is the Windows kernel-mode TrueType font parsing remote code execution vulnerability (win32k.sys) exposed via crafted TTF files. Affects multiple Windows versions including Windows 7, Windows 8/8.1, Windows Server 2008 R2 SP1, Windows Server 2012, and Windows RT/8.1; root cause is i...

CVE-2015-0092

CVE-2015-0092 is described in connected documents as a pool-based buffer underflow (≤64 bytes) affecting the Windows Adobe Type Manager Font Driver (ATMFD.DLL). The vulnerability is linked to the font rendering stack (Charstring-related components) and involves a memory underflow on an arbitraril...

CVE-2015-1638

CVE-2015-1638 affects Active Directory Federation Services (AD FS) 3.0 on Windows Server 2012 R2. The vulnerability stems from improper logoff handling, enabling an attacker with an unattended workstation to reopen an application and access information from the AD FS server. This leads to informa...

CVE-2015-1680

Technical details about CVE-2015-1680 are not publicly available in the provided connected documents; monitor for updates.

CVE-2015-2461

The CVE-2015-2461 entry is supported by connected documentation describing an ATMFD.DLL OpenType font parsing vulnerability in the Windows Adobe Type Manager Library. The exploitable condition is an out-of-bounds read in ATMFD.DLL when handling a crafted OpenType font, specifically triggered by a...

CVE-2015-6103

CVE-2015-6103 affects the Adobe Type Manager Library in Windows Vista SP2, Server 2008 SP2/R2, Windows 7/8/8.1, Server 2012 (and RT) and Windows 10 1511. It allows remote code execution via a crafted embedded font. Public exploits exist (Exploit-DB entries 38714/38714), indicating observed exploi...

CVE-2016-0007

CVE-2016-0007 is a local privilege escalation in the Windows sandbox: the sandbox implementation mishandles reparse points across multiple Windows versions (Vista SP2, Server 2008 SP2/R2, Windows 7 SP1, 8/8.1, Server 2012, RT, and Windows 10 1511). A crafted application could exploit this to gain...

CVE-2016-0048

CVE-2016-0048 is a Windows kernel-mode elevation-of-privilege vulnerability (Win32k) affecting multiple Windows versions (Vista SP2, 2008 SP2/R2, 7 SP1, 8.1, 2012, RT 8.1, 10, and 1511). Root cause: kernel-mode Win32k.sys memory handling bug that allows a crafted local application to gain full pr...

CVE-2016-0094

The CVE-2016-0094 entry concerns a local elevation-of-privilege vulnerability in Windows kernel-mode Win32k driver affecting Windows Vista SP2, Server 2008 SP2/R2, Windows 7 SP1, Windows 8.1, Server 2012 Gold/R2, Windows RT 8.1, and Windows 10 (Gold and 1511). The root cause is a flaw in the kern...

CVE-2021-26861

CVE-2021-26861 is a Windows Graphics Component remote code execution vulnerability. Public records identify the affected component as the Windows Graphics Component; the underlying issue is reflected in the CVSS3 metrics (base score 7.8 HIGH, LOCAL exploit, user interaction required, and high imp...

CVE-2025-29836

Technical details for CVE-2025-29836 (e.g., affected product, root cause, impact, or remediation) are not provided in the supplied connected documents. Please monitor for updates from official advisories.

CVE-2025-29839

Technical details about CVE-2025-29839 (affected product/version/root cause/impact/fix) are not publicly provided in the supplied connected documents. Monitor for updates.

CVE-2026-50328

CVE-2026-50328 pertains to Windows Server Update Services (WSUS). An uncaught exception in WSUS could allow an unauthenticated attacker to tamper over the network, as reflected by a CVSS v3.1 base score of 7.5 (Network, high impact on availability, no confidentiality/integrity impact). Multiple c...

CVE-2026-54113

The CVE-2026-54113 entry pertains to resource allocation without limits or throttling in the Windows Kernel accessible over a network, enabling a remote attacker to cause a denial of service. Documents indicate the affected component is the Windows Kernel involved in network-resource handling; ro...

CVE-2013-0075

CVE-2013-0075 is a remote DoS in the Windows TCP/IP stack: a crafted packet terminating a TCP connection can reboot affected hosts. Affected: Windows Vista SP2; Windows Server 2008 SP2/R2/R2 SP1; Windows 7 SP1/Gold; Windows 8; Windows Server 2012; Windows RT. Root cause: improper handling of a co...

CVE-2014-6317

CVE-2014-6317 is a denial-of-service vulnerability in Windows kernel-mode driver code (win32k.sys) caused by an array index error when loading TrueType font files. The issue affects multiple Windows client and server SKUs (e.g., Windows 7, 8/8.1, Vista, Windows Server 2003/2008/2012 and RT varian...

CVE-2014-6322

CVE-2014-6322 is a Windows Audio Service elevation-of-privilege vulnerability (MS14-071). Affects Windows Vista SP2, Server 2008 SP2/R2, Windows 7 SP1, Windows 8/8.1, Server 2012/2012 R2, and Windows RT. Root cause involves the Windows Audio service components (audiosrv.dll, audioses.dll, audioks...

CVE-2015-1697

CVE-2015-1697 relates to a Windows Journal remote code execution vulnerability. Current sources confirm affected platforms include Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8/8.1, Windows Server 2012 Gold/R2, and Windows RT Gold/8.1, where processing a crafted ...

CVE-2015-1721

CVE-2015-1721 is the Windows kernel-mode driver null-pointer dereference in Win32k.sys that can allow local privilege escalation or denial of service. Affected products span Windows Server 2003/2008/2012 families, Windows Vista/7/8/8.1, and Windows RT/Server variants (Win32k.sys). Root cause: NUL...

CVE-2015-1726

CVE-2015-1726 is a local privilege-escalation use-after-free vulnerability in Windows kernel-mode drivers (the kernel brush object) affecting Windows Server 2003 SP2/R2 SP2, Vista SP2, Server 2008 SP2/R2 SP1, Windows 7 SP1, Windows 8/8.1, Server 2012 (including R2) and RT 8.1. The underlying issu...

CVE-2015-2519

CVE-2015-2519 is a Windows Journal remote code execution vulnerability caused by an integer overflow when handling Journal (.jnt) files. Affected Windows versions span Vista SP2, Server 2008 SP2/R2, Windows 7 SP1, 8/8.1, Server 2012/2012 R2, RT/RT 8.1, and Windows 10. The issue enables arbitrary ...

CVE-2015-2530

CVE-2015-2530 affects Windows Journal across Windows Vista SP2, Server 2008 SP2/R2 SP1, Windows 7 SP1, 8/8.1, Server 2012, RT, and Windows 10. The vulnerability enables remote code execution via a crafted .jnt file (Windows Journal RCE Vulnerability), a distinct issue from CVE-2015-2513 and CVE-2...

CVE-2015-6113

Mode C: CVE-2015-6113 is a Windows kernel security feature bypass where a local attacker could bypass filesystem permissions via FileLinkInformation hard-links in sandboxed processes. The root cause is that ZwSetInformationFile accepted a link operation with 0 desired access for the file handle, ...

CVE-2016-0016

CVE-2016-0016 is a Windows DLL loading vulnerability that enables local privilege escalation via a crafted application. Affected products include Windows Vista SP2, Windows 7 SP1, Windows 8/8.1, Windows 10, and Windows Server 2008/2012 families (as listed in the CVE entry). Root cause: mishandlin...

CVE-2016-0120

CVE-2016-0120 (OpenType Font Parsing Vulnerability) and CVE-2016-0121 affect the Adobe Type Manager Library in Windows across a broad set of versions (Vista SP2, Server 2008 SP2/R2, 7, 8.1, 2012, RT 8.1, 10 and 1511). The issues arise from improper handling of specially crafted OpenType fonts: 01...

CVE-2024-43534

CVE-2024-43534 is a Windows Graphics Component Information Disclosure vulnerability. The affected product is Windows Graphics Component; the entry indicates an information disclosure impact (confidentiality) with network attack vector, no integrity/availability impact, and user interaction requir...

CVE-2025-33060

CVE-2025-33060 affects the Windows Storage Management Provider and is described as an out-of-bounds read that can allow an authorized, locally authenticated attacker to disclose information. The NCSC advisory confirms it under Windows Storage Management Provider with CVSS 5.5 (LOCAL, Privileges L...

CVE-2025-55234

CVE-2025-55234 (Windows SMB Relay Elevation of Privilege) : The vulnerability relates to SMB Server relay attacks that can escalate privileges when signing and EPA protections are not enabled. Public docs indicate SMB Server signing and Extended Protection for Authentication (EPA) exist as harden...

CVE-2026-34335

Use-after-free in the Windows Ancillary Function Driver for WinSock is the root cause of CVE-2026-34335. The vulnerability can allow an authenticated, local attacker to elevate privileges. The CVSSv3.1 score is 7.0 (High) with local attack vector, high complexity, and requires low privileges and ...

CVE-2026-35420

CVE-2026-35420 is described in the provided sources as a heap-based buffer overflow in the Windows kernel that enables a locally authenticated attacker to achieve privilege escalation. The CVE entry itself cites an elevation of privileges without detailing exploit vectors beyond local access, and...

CVE-2026-40377

Technical details (affected components, root cause, impact specifics, or fixes) are not publicly provided in the connected documents. Monitor vendor advisories for patch information and affected products; no additional specifics are available here.

CVE-2026-49177

CVE-2026-49177 is a Windows TCP/IP vulnerability described as an out-of-bounds read that allows an authenticated, local attacker to disclose information. The CVE is supported by multiple sources in the Connected documents (NVD/NCSC/EUVD), which identify the affected component as Windows TCP/IP an...

CVE-2026-50667

CVE-2026-50667 is a Windows NTFS/Windows Common Log File System Driver elevation-of-privilege vulnerability caused by a race condition in a shared resource. The CVE affects Windows NTFS and is identified by Microsoft as a privilege-escalation issue; updates have been released (July 2026 monthly r...

CVE-2026-61367

The CVE-2026-61367 entry describes a local Privilege Escalation in Windows Remote Desktop Services caused by missing authentication for a critical function. An authorized attacker can elevate privileges locally (ATT&CK-style: Privilege Escalation) with a CVSSv3.1 base score of 7.8 (HIGH) and LOCA...