CVE-2018-0900

Technical details are not publicly available in the provided connected documents; monitor for updates.

CVE-2024-30028

CVE-2024-30028 is a Windows Win32k elevation-of-privilege vulnerability. The NCSC advisory lists it under Windows Win32K with a CVSS v3.1 base score of 7.8 (HIGH) and impact: higher privileges, and notes the vulnerability is exploitable locally with low attack complexity (PR:L, AV:L) and no user ...

CVE-2024-38265

CVE-2024-38265 is a Windows RRAS remote code execution vulnerability. The connected documents confirm RRAS is affected and indicate this CVE can lead to remote code execution over the network, with a highly elevated impact (NCSC lists 8.80, Execute random code). The initial metrics show CVSSv3.1:...

CVE-2026-61368

CVE-2026-61368 is a Windows Hyper-V heap-based buffer overflow that enables a locally authenticated attacker (low privileges, user interaction required) to disclose information. Affected component: Hyper-V; root cause is a heap overflow leading to information disclosure. CVSS 3.1 base score 5.0 (...

CVE-2017-0078

Technical details for CVE-2017-0078 are not provided in the connected documents. Monitor for updates from official advisories; no exploit, impact, or remediation specifics are included here.

CVE-2018-8595

CVE-2018-8595 concerns an information-disclosure flaw in the Windows Graphics Device Interface (GDI) where memory contents are improperly disclosed. Affected are multiple Windows versions listed in the CVE (e.g., Windows 7, Windows 8.1, Windows 10 and corresponding server releases). The root caus...

CVE-2019-0603

CVE-2019-0603 impacts Windows Deployment Services TFTP Server. The vulnerability stems from improper handling of objects in memory within WDSTFTP, allowing a remote attacker to craft a request that executes arbitrary code with elevated privileges. The available connected documents confirm this re...

CVE-2019-0663

CVE-2019-0663 concerns a Windows kernel information-disclosure vulnerability. The Windows kernel improperly initializes objects in memory, enabling an authenticated, local attacker to obtain sensitive information by running a specially crafted application. Affects the Windows kernel (memory-objec...

CVE-2019-0718

Microsoft Hyper-V Denial of Service vulnerability CVE-2019-0718 arises when the Hyper-V Network Switch fails to validate input from a privileged user inside a guest VM, allowing a crafted application running on the guest to crash the host server. The vulnerability affects the Hyper-V Network Swit...

CVE-2019-0776

CVE-2019-0776 is a Windows win32k information disclosure vulnerability: the win32k component improperly provides kernel information, enabling local attackers with low privileges and no user interaction to potentially access confidential data. Affected software is Windows OS via the win32k subsyst...

CVE-2019-1122

Technical details for CVE-2019-1122 are not present in the provided connected documents. Public details about affected components/versions are not provided here; monitor for updates.

CVE-2019-1128

Technical details about CVE-2019-1128 (affected component, root cause, impact, or fix) are not provided in the connected documents. Monitor for updates from official advisories.

CVE-2019-1146

CVE-2019-1146 concerns a remote code execution that arises when the Windows Jet Database Engine mismanages in‑memory objects. An attacker could exploit this by convincing a user to open a specially crafted file, enabling arbitrary code on the system. The vulnerability is addressed by Microsoft in...

CVE-2019-1347

Technical details about CVE-2019-1347 are not provided in the connected documents. Public details (affected products, root cause, impact, or fixes) are not disclosed here. Monitor for updates and refer to the initial CVE entry for any forthcoming specifics.

CVE-2020-0657

CVE-2020-0657 is a Windows elevation-of-privilege vulnerability in the Common Log File System (CLFS) driver. The underlying issue is improper handling of memory objects by the CLFS driver, enabling a local attacker to elevate privileges. Connected documents reference this CVE within Microsoft upd...

CVE-2020-0788

Technical details for CVE-2020-0788 are not publicly available in the provided connected documents; no root cause, impact, or patch specifics are included. Monitor for updates.

CVE-2020-1408

Technical details for CVE-2020-1408 are not publicly provided in the connected documents. The Fedora/OpenVAS/Nessus entries reference this CVE only in passing or within list contexts. Monitor for updates from official advisories.

CVE-2020-1557

CVE-2020-1557: A remote code execution vulnerability in the Windows Jet Database Engine occurs due to improper handling of objects in memory. An attacker could trigger code execution by persuading a user to open a specially crafted file. The update fixes the issue by correcting how the Jet Engine...

CVE-2020-1596

Technical details for CVE-2020-1596 are not provided in the connected documents. The initial description lacks product/version/root-cause specifics; monitor for updates.

CVE-2020-16902

CVE-2020-16902 is a Windows Installer elevation-of-privilege vulnerability. The Windows Installer fails to properly sanitize input, causing insecure library loading. A locally authenticated attacker could execute arbitrary code with elevated privileges and gain full control (install/modify data, ...

CVE-2020-16909

CVE-2020-16909 describes a local privilege-escalation flaw in Windows Error Reporting (WER) that arises when WER handles and executes files. An attacker could exploit a crafted application to gain higher privileges and access sensitive information and system functionality. The NVD entry notes a s...

CVE-2021-24077

CVE-2021-24077 is a Windows Fax Service Remote Code Execution vulnerability. The NVD entry lists it with CVSSv3.1 base score 9.8 (CRITICAL) and CVSSv2 base score 7.5, indicating a NETWORK attack vector, no authentication, and no user interaction required; impact is high on Confidentiality, Integr...

CVE-2021-26891

CVE-2021-26891 is a Windows Container Execution Agent Elevation of Privilege vulnerability affecting Windows Server Containers. Project Zero analysis details multiple silo/registry/object-manager weaknesses that can be chained to escape a container from a non‑administrator. Core issues include: (...

CVE-2021-33745

CVE-2021-33745 is documented as a Windows DNS Server Denial of Service vulnerability. Connected CNVD-2021-76469 explicitly references a Windows Server DNS Server DoS issue, confirming the target as Windows Server DNS Server. The NVD entry provides CVSS data (v3.1 base score 6.5, Network vector, L...

CVE-2021-33763

CVE-2021-33763 affects Windows Remote Access Connection Manager (RasMan) and is an information disclosure vulnerability in the Windows Remote Access Connection Manager service for Windows/Windows Server. It allows a local attacker to disclose information (confidentiality impact high per CVSS), wi...

CVE-2021-34476

CVE-2021-34476 : Bowser.sys Denial of Service vulnerability. Connected data provide CVSS v3.1 metrics: NETWORK exploit, LOW attack complexity, NONE privileges, NONE user interaction, and HIGH availability impact (base score 7.5). No explicit remediation or patch details are provided in the suppli...

CVE-2021-36959

Technical details for CVE-2021-36959 are not publicly available in the provided documents. Monitor for updates from connected sources; existing entries reference the vulnerability but do not specify affected products, root cause, impact, or fixes.

CVE-2021-38663

CVE-2021-38663 concerns a Windows exFAT File System Information Disclosure vulnerability. The entry lists impact as PARTIAL confidentiality loss (CVSS2) with LOCAL access and no authentication, and HIGH confidentiality impact (CVSS3) with LOCAL access, no exploitation details provided. The connec...

CVE-2021-40455

Public technical details for CVE-2021-40455 are not present in the provided documents; monitor for updates from official advisories.

CVE-2021-41332

Technical details for CVE-2021-41332 are not publicly provided in the connected documents; no specifics on affected products, root cause, impact, or remediation are present. Monitor for updates.

CVE-2022-21838

Technical details about CVE-2022-21838 are not provided in the supplied documents. No affected products, root cause, impact, or remediation are specified here. Monitor for updates from official sources.

CVE-2022-21866

Technical details for CVE-2022-21866 are not provided in the supplied documents; affected products, root cause, exploit info, and fixes are not specified here. Monitor for updates.

CVE-2022-21875

CVE-2022-21875 is documented as a Windows Storage Elevation of Privilege vulnerability. The NVD entry lists LOCAL attack vector, LOW attack complexity, and no user interaction required, with high impact on confidentiality, integrity, and availability. The CVE is also included in multiple OpenVAS/...

CVE-2022-24484

CVE-2022-24484 is a Windows CSV Denial of Service vulnerability. The CVE entry records a LOW/MEDIUM combined severity (CVSS2/3) with LOCAL access and no authentication required, and a HIGH availability impact. Related connected updates (KB5012596/KB5012599/KB5012596 family) describe fixes that ad...

CVE-2022-26790

Technical details for CVE-2022-26790 are not publicly provided in the supplied documents. Monitor for updates.

CVE-2022-30212

CVE-2022-30212: A Windows Connected Devices Platform Service information-disclosure vulnerability. Affected product: Windows Connected Devices Platform Service. Underlying issue enables information disclosure; some sources describe it as exploitable remotely to obtain sensitive data. Remediation ...

CVE-2023-28306

Technical details about CVE-2023-28306 (Windows DNS Server RCE) are not publicly disclosed in the provided documents. Monitor for updates from official advisories and vendor notices.

CVE-2023-36889

Technical details about CVE-2023-36889 are not publicly available in the provided documents. Monitor for updates from vendors and vulnerability feeds for affected products, impact, and remediation.

CVE-2023-38172

Technical details about CVE-2023-38172 are not present in the provided connected documents. The MSMQ DoS vulnerability is listed, but no affected versions, root cause, exploit information, or remediation are included. Monitor for updates.

CVE-2024-38184

CVE-2024-38184 is a Windows kernel-mode driver elevation of privilege vulnerability. The CVE affects Windows kernel-mode drivers and is exploitable locally with LOW privileges required and no user interaction, with a HIGH impact on confidentiality, integrity, and availability per the CVSS 3.1 met...

CVE-2025-25008

CVE-2025-25008 describes an elevation-of-privilege in Windows due to improper link resolution before file access (link following). An authorized, local attacker could exploit this to gain higher privileges. CVSSv3.1 base score is 7.1 (High); attack vector LOCAL; privileges required LOW; user inte...

CVE-2026-27913

Technical details of CVE-2026-27913 are not provided in the supplied documents. Monitor for updates from Microsoft and CVE records for affected components, impact, and mitigations.

CVE-2026-62735

CVE-2026-62735 is a Windows HTTP.sys vulnerability described as a heap-based buffer overflow that enables an authorized, locally interacting attacker to elevate privileges. Evidence across sources confirms a local-exploit path with high impact (C/H/I/A), CVSS 3.1 vector: LOCAL, LOW complexity, LO...

CVE-2026-62787

CVE-2026-62787 is a remote code execution vulnerability in Windows DNS Server caused by a use-after-free condition. An authenticated attacker could execute code over the network on a targeted host. CVSS v3.1 base score 7.5 (HIGH): AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H. The connected sources confirm...

CVE-2026-62890

CVE-2026-62890 is a heap-based buffer overflow in Windows GDI+ that allows an authorized attacker to execute code locally. CVSS v3.1 base score 7.8 (HIGH) with LOCAL attack vector, requiring LOW privileges and no user interaction; impact to confidentiality, integrity, and availability is HIGH. No...

CVE-2017-0182

The connected Nessus plugin confirms a Hyper-V Denial of Service issue tied to CVE-2017-0182 family: a DoS affecting Microsoft Windows Hyper-V when input from a privileged guest OS is not properly validated, potentially crashing the host. Affected platforms include Windows client/server variants ...

CVE-2017-11771

CVE-2017-11771 is a remote code execution vulnerability in the Microsoft Windows Search component. The issue arises from improper handling of DNS responses by the Windows Search service, allowing an unauthenticated, remote attacker to execute code on affected systems. The CVE is referenced alongs...

CVE-2018-0956

CVE-2018-0956 is a DoS vulnerability in Windows HTTP.sys’s HTTP/2 stack caused by improper parsing of crafted HTTP/2 requests. The affected product surface is Windows Server 2016 and Windows 10/Windows Server 2016-era builds that include HTTP.sys. The impact is denial of service (availability) wi...

CVE-2018-0976

The CVE-2018-0976 entry describes a denial-of-service vulnerability in Windows RDP that can be triggered by specially crafted RDP requests, reportedly affecting Windows 7, Windows Server 2008/2012 families, Windows 8.1, and Windows 10/Server 2016+ clients. The connected documents do not provide c...

CVE-2018-8553

CVE-2018-8553 is a remote code execution vulnerability in how Microsoft Graphics Components handle memory objects. The flaw, affecting multiple Windows versions (Windows 7, Windows Server 2008/2012 family, Windows 8.1, Windows 10, Windows RT 8.1, and Windows Server 2016/2012 R2), stems from memor...