CVE-2023-28240

Technical details for CVE-2023-28240 are not publicly available in the provided documents; monitor for updates.

CVE-2023-35351

CVE-2023-35351: Windows Active Directory Certificate Services (AD CS) Remote Code Execution vulnerability. Affected: Windows AD CS; vulnerability type is remote code execution. CVSSv3.1 base score 6.6 (vector: CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H). Exploitation status and detailed root ca...

CVE-2024-43550

CVE-2024-43550 is described in connected sources as a Windows Secure Channel vulnerability with an impact described as impersonation of another user. The NCSC advisory groups it with other Windows CVEs and notes that Microsoft has released security updates to fix affected components (e.g., Octobe...

CVE-2024-49124

According to the connected NCSC advisory, CVE-2024-49124 is an LDAP-related vulnerability in Windows LDAP with an impact described as Execution of random code (CVSS 8.1/8.10 range in the table). The advisory notes that Microsoft has fixed vulnerabilities and recommends applying the security updat...

CVE-2024-49127

CVE-2024-49127 is a Windows LDAP Remote Code Execution vulnerability in the LDAP component of Domain Controllers. The CVSS shows high impact (C/H, I/H, A/H) with network access required and no user interaction. The exploitation path involves an attacker obtaining network access to the DC and issu...

CVE-2025-21210

CVE-2025-21210 concerns Windows BitLocker information disclosure. Reports indicate that in certain scenarios the hibernation image created when a laptop with an open Windows session is closed may not be fully encrypted, potentially allowing recovery of RAM contents in plain text. This vulnerabili...

CVE-2025-21222

CVE-2025-21222 is a remote-code-execution vulnerability in Windows Telephony Service characterized by a heap-based buffer overflow that an unauthenticated attacker can trigger over the network. Connected sources corroborate its association with Windows Telephony Service and document it as a netwo...

CVE-2025-21308

CVE-2025-21308 Windows Themes Spoofing affects the Windows Theme system. The vulnerability lets a malicious party impersonate the user and potentially execute code in the victim’s context, requiring the victim to open/edit a rogue file. The impact is described as impersonation with potential code...

CVE-2025-24067

CVE-2025-24067 is described in the connected documents as a heap-based buffer overflow in the Microsoft Streaming Service Driver that allows an authenticated, local attacker to elevate privileges. The vulnerability concerns the Windows kernel streaming service component and is listed with a high ...

CVE-2025-27479

CVE-2025-27479 appears in connected records as a Kerberos-related Denial-of-Service vulnerability described under the Kerberos Key Distribution Proxy Service. The available sources confirm an impact on Windows Kerberos with a network-based DoS potential due to an insufficient resource pool, but d...

CVE-2025-53766

CVE-2025-53766 is a heap-based buffer overflow in Windows GDI+ that enables a remote attacker to execute code over a network. Public details describe the vulnerability as a memory overflow in GDI+ triggered by processing specially crafted metafiles, potentially allowing arbitrary code execution w...

CVE-2017-0084

CVE-2017-0084 concerns a remote code execution in Microsoft Windows Uniscribe (USP10) via font processing. The vulnerability is triggered by a crafted font during text rendering, leading to an invalid memory operation in USP10 which can be exploited to execute arbitrary code. Exploit details in p...

CVE-2017-0268

CVE-2017-0268 is an SMBv1 information-disclosure vulnerability in Microsoft Windows SMB Server handling of certain requests. Connected entries corroborate an SMBv1 information-disclosure issue affecting Windows SMB Server and reference published advisories and mitigations. IBM API Connect advisor...

CVE-2017-11781

CVE-2017-11781 is a denial-of-service vulnerability in the Microsoft Windows SMB Server (SMBv1) where an authenticated attacker can send specially crafted SMB requests to crash the server. Affected products include Windows SMB Server implementations as described in the CVE entry (server role comp...

CVE-2017-8589

CVE-2017-8589 is a Windows Search Remote Code Execution vulnerability affecting Windows 7 SP1, Windows Server 2008 SP2/R2 SP1, Windows 8.1/RT 8.1, Windows Server 2012/R2, Windows 10 (gold and 1511–1703) and Windows Server 2016. The root cause is the way Windows Search handles objects in memory, e...

CVE-2018-0844

The CVE-2018-0844 entry describes an elevation-of-privilege vulnerability in the Windows Common Log File System (CLFS) driver, affecting multiple Windows versions (Windows 7 SP1, Windows 8.1/RT 8.1, Server 2008 SP2/R2 SP1, 2012/R2, 2016, and 1709). The root cause is how objects in memory are hand...

CVE-2018-0887

CVE-2018-0887 describes an information-disclosure in the Windows kernel caused by improper initialization of a memory address. Affected products include multiple Windows versions (Windows 7, Windows 8.1, Windows 10 family and corresponding Server variants). The vulnerability exposes partial confi...

CVE-2019-0710

CVE-2019-0710 is a Windows Hyper-V denial-of-service vulnerability. A privileged guest-OS user can run a crafted application inside a VM that causes the host server to crash, due to Hyper-V failing to validate certain guest requests. The issue affects Hyper-V on the host and is exploitable by a g...

CVE-2019-0961

The CVE-2019-0961 entry concerns Microsoft Windows GDI (Graphics Device Interface). The vulnerability arises from improper handling of memory objects, leading to information disclosure of memory contents in GDI. Affected component: Windows GDI in Microsoft Windows. Impact, as stated, is informati...

CVE-2019-0984

The CVE-2019-0984 entry concerns a Windows Common Log File System (CLFS) driver elevation of privilege vulnerability. The issue arises from improper handling of memory objects in CLFS, enabling an attacker who can log on to the system to run a specially crafted application with elevated privilege...

CVE-2019-1027

The CVE-2019-1027 entry concerns a local elevation of privilege in Windows Audio Service. Affected component is the Windows Audio Service, with root cause described as improper handling of requests by the service that can be exploited to execute code with elevated privileges. Impact is local priv...

CVE-2019-1046

CVE-2019-1046 affects the Windows GDI component, where improper handling of memory allows information to be disclosed to an attacker. This vulnerability can be triggered by user actions such as opening a specially crafted document or visiting an untrusted webpage, leading to potential further com...

CVE-2019-1078

CVE-2019-1078 is a Windows Graphics Component information-disclosure vulnerability. It stems from the component improperly handling memory objects, allowing an attacker to obtain information that could help compromise the system. An authenticated attacker could exploit this by running a specially...

CVE-2019-1097

Technical details about CVE-2019-1097 are not publicly provided in the connected documents. The initial entry notes a DirectWrite information disclosure but lacks vendor/affected products, versions, impact, or remediation in the supplied materials. Monitor for updates.

CVE-2019-1153

CVE-2019-1153 is a Windows Graphics Component information-disclosure vulnerability. It stems from improper handling of objects in memory, enabling an attacker who logs on and runs a specially crafted application to obtain information that could help further compromise the system. Mitigation is vi...

CVE-2019-1248

CVE-2019-1248 is a remote code execution vulnerability in the Windows Jet Database Engine caused by improper handling of objects in memory. The provided documents do not specify exploitation vectors, affected versions, root cause details, or remediations for this CVE.

CVE-2019-1345

Technical details (affected product/version/patch) for CVE-2019-1345 are not publicly provided in the connected documents. The initial text notes a Windows kernel information disclosure but lacks specific vendor/product/version or mitigation details; monitor for updates.

CVE-2019-1358

CVE-2019-1358 is a Windows Jet Database Engine Remote Code Execution vulnerability. The issue arises from improper handling of objects in memory within the JET Database Engine, enabling a remote attacker to potentially execute code. Connected Microsoft KB updates (e.g., KB4519990, KB4519998, KB45...

CVE-2019-1483

CVE-2019-1483 affects Windows AppX Deployment Server (AppXSVC) and arises from improper handling of junctions, enabling elevation of privilege once an attacker gains execution on the target. The related CVE-2019-1476 entry describes a similar issue where AppXSVC mishandles hard links, allowing an...

CVE-2020-0849

Technical details for CVE-2020-0849 are not publicly available in the provided documents. Monitor for updates.

CVE-2020-0911

CVE-2020-0911 describes an elevation-of-privilege vulnerability in Windows where the Windows Modules Installer improperly handles objects in memory. An attacker could exploit this by running a specially crafted application on a victim system to execute arbitrary code in an elevated context. The u...

CVE-2020-0960

CVE-2020-0960 is a Windows Jet Database Engine remote code execution vulnerability caused by improper handling of memory objects. The connected Microsoft KB4549951 entry confirms that a security update addressing the JET Database Engine was released (OS builds 18362.778/18363.778) and notes guida...

CVE-2020-0962

CVE-2020-0962 is a Windows win32k information-disclosure vulnerability. The connected sources describe an information-disclosure flaw in the win32k component that may reveal kernel information when a specially crafted application is run. The vulnerability affects the win32k kernel subsystem and i...

CVE-2020-1052

Technical details for CVE-2020-1052 (ssdpsrv.dll memory handling vulnerability) are not provided in the connected documents. Monitor for updates; no public exploit specifics, affected versions, root cause, or remediation details are given here.

CVE-2020-1117

CVE-2020-1117 affects the Color Management Module in Windows (ICM32.dll). FireEye’s analysis documents a heap-based overflow in icm32 occurring during InitNamedColorProfileData while parsing the ‘ncl2’ color-profile element, due to using an incorrect offset (0x51) for verification and advancing t...

CVE-2020-1160

CVE-2020-1160 refers to an information-disclosure vulnerability in the Microsoft Windows Graphics Component caused by improper handling of objects in memory. The CVSS data from NVD indicates a local attack vector with low attack complexity and no user interaction, yielding a base score of 2.1 (NV...

CVE-2020-1521

CVE-2020-1521 corresponds to an Elevation of Privilege in Windows Speech Runtime caused by improper memory handling. The initial and connected sources consistently state that an attacker must first gain execution on the target to run a crafted application and elevate privileges, with a security u...

CVE-2020-17038

Technical details for CVE-2020-17038 are not publicly available in the provided documents. No affected products, root cause, or remediation information are included. Monitor for updates.

CVE-2020-17043

Technical details for CVE-2020-17043 are not provided in the supplied documents. Public information is limited to a general vulnerability description; no product/version/root-cause/exploit details are included. Monitor for updates from official advisories.

CVE-2020-17139

CVE-2020-17139 affects Windows file-system mini-filter drivers (notably the Windows Overlay Filter, WOF). The vulnerability arose from OS-added IO control/FSCTL handling changes (FSCTL_SET_REPARSE_POINT_EX) that WOF did not handle, enabling an application to attach or remove WOF IO tags and there...

CVE-2021-1664

Technical details about CVE-2021-1664 are not provided in the supplied documents. Public details exist (NVD/Microsoft) but this citation set lacks product/version/root cause/impact info beyond the generic RPC RCE description. Monitor for updates.

CVE-2021-26415

CVE-2021-26415 affects the Windows Installer component and is described as a Windows privilege-elevation vulnerability. The connected documents confirm a local, low-privilege escalation path with no user interaction required, leveraging improper handling in Windows Installer. The CVE is associate...

CVE-2021-31972

Technical details about CVE-2021-31972 are not publicly available in the provided connected documents. Monitor for updates from official sources for affected products, vulnerability scope, and fixes.

CVE-2021-43228

CVE-2021-43228 is a SymCrypt Denial of Service vulnerability with a CVSS v3.1 base score of 7.5 (HIGH), vector AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H. The issue is described in multiple sources as a Denial of Service vulnerability and is associated with Microsoft’s SymCrypt component. The connected ...

CVE-2022-26916

CVE-2022-26916 describes a remote code execution vulnerability in the Windows Fax Compose Form. The entry lists a CVSSv3.1 base score of 7.8 (HIGH) with a LOCAL exploit vector, meaning exploitation requires local access, and the vector indicates user interaction is required. The risk and scope ar...

CVE-2022-35767

Technical details are not provided in the supplied connected documents for CVE-2022-35767. Public disclosure, affected products, exploit status, and fixes are not specified here; monitor for updates.

CVE-2023-21756

Technical details for CVE-2023-21756 are not publicly provided in the supplied documents. Monitor for updates to obtain affected products, root cause, impact, and fixes.

CVE-2023-28241

Technical details on CVE-2023-28241 are not publicly provided in the supplied documents; monitor for updates.

CVE-2023-28276

Technical details for CVE-2023-28276 are not publicly provided in the connected documents; only the NVD entry description is visible. Monitor for updates.

CVE-2023-33163

Technical details (affected products/versions, root cause, exploit information, or remediation) for CVE-2023-33163 are not provided in the connected documents. Monitor for future advisories from Microsoft and security bulletins.