CVE-2023-35332

Technical details for CVE-2023-35332 are not publicly provided in the supplied documents. No affected products, root cause, impact, or fixes are stated here. Monitor for updates from the connected sources for concrete technical information.

CVE-2024-30039

CVE-2024-30039 affects the Windows Remote Access Connection Manager. The connected documents map this CVE to Windows components and indicate an information-disclosure risk with CVSS 3.1/3.5-like characteristics: local access required, low attack complexity, no user interaction, confidentiality im...

CVE-2024-37979

CVE-2024-37979 is described in connected sources as a Windows Kernel Elevation of Privilege vulnerability with an impact of obtaining elevated privileges . The NCSC entry lists the CVE under the Windows Kernel section with that impact. Beyond that, the provided documents do not specify the affect...

CVE-2024-38049

Technical details (affected components, exploit vectors, or patch specifics) for CVE-2024-38049 are not provided in the connected documents. No public details are present in the supplied sources; monitor for updates.

CVE-2024-38114

Technical details for CVE-2024-38114 are not provided in the connected documents. The initial description notes a Windows IP Routing Management Snapin Remote Code Execution vulnerability with CVSS 3.1/8.8, but no affected versions, root cause, or mitigations are included here.

CVE-2024-43626

CVE-2024-43626 is a Windows Telephony Service Elevation of Privilege vulnerability. Affected: Windows operating systems where the Telephony Service component is present. Nature: local, low-privilege user could potentially elevate privileges (high impact to confidentiality, integrity, and availabi...

CVE-2025-21197

CVE-2025-21197 is an information disclosure in Windows NTFS due to improper access control, enabling an authorized user to disclose file path information in folders they cannot list. Connected sources corroborate NTFS as affected and classify the impact as data exposure. Mitigation involves apply...

CVE-2025-21203

CVE-2025-21203 affects Windows Routing and Remote Access Service (RRAS). The connected data confirms a network-accessible vulnerability in RRAS that can cause an information disclosure via a buffer over-read. Affected component: RRAS on Windows; root cause: buffer over-read; impact: confidential ...

CVE-2025-21358

Technical details about CVE-2025-21358 are not provided in the supplied documents. No affected products, vectors, or fixes are specified here; monitor for updates from official advisories.

CVE-2025-21409

CVE-2025-21409 is a Windows Telephony Service Remote Code Execution vulnerability exploitable over the network (CVSS v3.1: AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H). Connected sources confirm this CVE entry and link it to Windows Telephony Service across Microsoft advisories; updates KB5050009, KB5050...

CVE-2025-27484

CVE-2025-27484 affects Windows Universal Plug and Play (UPnP) Device Host. The issue is described as sensitive data storage in improperly locked memory, enabling an authorized attacker to elevate privileges over the network. Public details in connected docs indicate the vulnerability impacts the ...

CVE-2025-29831

Technical details about CVE-2025-29831 (affected product, root cause, patch) are not provided in the supplied documents. Monitor for updates and refer to the official vulnerability entry for authoritative information.

CVE-2025-33071

CVE-2025-33071 is an RCE flaw affecting the Windows KDC Proxy Service (KPSSVC). The vulnerability arises from a use-after-free in KPSSVC, enabling a remote attacker to execute code over the network on affected Windows systems. The CVE is rated high severity (CVSS ~8.1/8.1–8.10, depending on sourc...

CVE-2017-0276

Technical details for CVE-2017-0276 are not publicly available in the provided documents. Monitor for updates; current sources in the set do not describe affected products/versions, root cause, or remediation specific to this CVE.

CVE-2017-8533

CVE-2017-8533 is an information‑disclosure vulnerability in Windows graphics handling, specifically the Uniscribe/GDI path, where memory contents can be exposed. The issue affects multiple Windows editions listed in the CVE entry (e.g., Windows 7 SP1, 8.1, various Windows 10 versions, Windows Ser...

CVE-2017-8682

CVE-2017-8682 is a Win32k Graphics Remote Code Execution issue where remote code could be executed by mis-handling embedded fonts. Affected products include multiple Windows versions (Server 2008 SP2/R2 SP1, Windows 7 SP1, 8.1, 10 1511/1607/1703, Server 2012/2016) and Office Word Viewer/Office 20...

CVE-2018-0885

CVE-2018-0885 : DoS in the Microsoft Hyper-V Network Switch triggered by unvalidated input from a guest OS. Affected: 64‑bit Windows Server 2008 SP2/ R2 SP1; Windows Server 2012/R2; Windows 10 (various builds); Windows Server 2016; and Windows Server version 1709. Root cause is described as impro...

CVE-2018-0966

CVE-2018-0966 is a Device Guard Security Feature Bypass in Microsoft Windows. The vulnerability arises when Device Guard inadequately validates an untrusted file, enabling a security feature bypass on affected platforms. Affected products include Windows 10 and Windows Server 2016/Windows Server ...

CVE-2018-8134

CVE-2018-8134 is an elevation of privilege vulnerability in the Windows Kernel API that affects Windows 8.1, Windows 10 (including Windows Server variants) and related OSes. The faulty enforcement of permissions is the root cause. The connected CIRCL entry indicates a public exploit is available ...

CVE-2018-8490

CVE-2018-8490 is a remote code execution vulnerability in Windows Hyper-V where a host fails to properly validate input from a guest OS user. Affected: Windows Server 2016, Windows 10, Windows Server 2019, Windows 10 Server variants. Root cause (as described): improper input validation in Hyper-V...

CVE-2018-8492

CVE-2018-8492 is a Device Guard Code Integrity Policy Security Feature Bypass vulnerability in Windows. Affected products include Windows Server 2016, Windows 10, Windows Server 2019, and Windows 10 Server editions. The root cause is a security feature bypass in Device Guard that could allow an a...

CVE-2018-8612

CVE-2018-8612 is a Denial of Service vulnerability in the Connected User Experiences and Telemetry Service of Windows. The issue arises when the service fails to validate certain function values, enabling a local attacker to cause an availability impact on affected systems. Affected products incl...

CVE-2019-0965

The CVE-2019-0965 issue affects Microsoft Windows Hyper-V on a host server, where the host fails to properly validate input from a guest OS. According to connected records, a specially crafted application running on a guest could trigger Hyper-V to execute arbitrary code on the host. The vulnerab...

CVE-2019-1050

CVE-2019-1050 affects the Windows GDI component and is an information-disclosure vulnerability where memory objects may be improperly disclosed. An attacker could exploit this by convincing a user to open a specially crafted document or visit an untrusted webpage, potentially enabling access to m...

CVE-2019-1085

Technical details for CVE-2019-1085 are not provided in the connected documents. The initial description mentions a Windows WLAN Service elevation of privilege vulnerability but includes no vendor/product/version specifics, exploit info, or remediation details. Monitor for updates and refer to of...

CVE-2019-1158

The CVE-2019-1158 entry corresponds to a Windows Graphics Device Interface (GDI) information disclosure vulnerability. Connected sources describe it as an issue in GDI’s handling of memory, specifically involving EMF file parsing, which can allow an attacker to obtain sensitive information. Explo...

CVE-2019-1178

CVE-2019-1178 is an elevation-of-privilege vulnerability in the memory handling of ssdpsrv.dll. The NVD entry states that a locally authenticated attacker could execute code with elevated permissions by running a crafted application, and that a security update fixes the issue by ensuring ssdpsrv....

CVE-2019-1190

CVE-2019-1190 is a Windows kernel image elevation of privilege vulnerability. The issue arises from how the kernel image handles objects in memory, allowing a locally authenticated attacker to run code with elevated privileges via a crafted application. Public exploits exist for this vulnerabilit...

CVE-2019-1249

CVE-2019-1249 describes a remote code execution vulnerability in the Windows Jet Database Engine caused by improper handling of in-memory objects. An attacker could trigger arbitrary code execution by convincing a user to open a specially crafted file, with the impact described as remote code exe...

CVE-2019-1270

This CVE (CVE-2019-1270) describes an elevation-of-privilege vulnerability in the Windows Store Installer. The root cause is a symbolic-link attack on the WindowsApps directory, allowing misuse of the Windows Store Installer to escalate privileges locally. The issue is tied to the Windows Store I...

CVE-2019-1294

CVE-2019-1294 is a Windows Secure Boot security feature bypass vulnerability that allows access to debugging functionality. The connected records corroborate that the issue enables bypass of Secure Boot protections, with the primary impact described as compromising confidentiality (C High) while ...

CVE-2019-1456

The CVE-2019-1456 entry describes a remote code execution vulnerability in Microsoft Windows where the Windows Adobe Type Manager Library fails to properly handle specially crafted OpenType fonts. Affected component: Windows Adobe Type Manager Library; root cause: improper handling of OpenType fo...

CVE-2020-0724

Technical details for CVE-2020-0724 are not provided in the connected documents; the supplied records do not reveal affected product/version, root cause, impact, or remediation beyond the generic description.

CVE-2020-0794

CVE-2020-0794 is a Windows denial-of-service vulnerability caused by improper handling of memory objects. The CVE entry indicates local attack vector with low complexity and no authentication, resulting in availability impact (DoS). Public records in the connected documents reference Windows secu...

CVE-2020-0896

Technical details about CVE-2020-0896 are not provided in the connected documents. Public information in these sources does not specify affected products, root cause, or fixes. Monitor for updates.

CVE-2020-0964

CVE-2020-0964 is a remote code execution vulnerability in Microsoft Windows GDI+ where memory objects are mishandled by the Graphics Device Interface. The issue affects GDI+ processing and can allow an attacker to run arbitrary code on a vulnerable system. Microsoft’s April 2020 Patch Tuesday upd...

CVE-2020-0965

CVE-2020-0965 corresponds to a remote code execution vulnerability in the Microsoft Windows Codecs Library. The CNVD entry describes a memory-handling flaw in Windows Codecs Library that can be exploited to execute arbitrary code via specially crafted image files. Public details in CNVD/NVD confi...

CVE-2020-0999

Technical details about CVE-2020-0999 are not publicly provided in the connected documents. The CVE entry mentions Jet Database Engine RCE, but no specifics on vulnerable versions, root cause, or remediation are included here. Monitor for updates.

CVE-2020-1008

CVE-2020-1008 describes a Remote Code Execution flaw in the Windows Jet Database Engine caused by improper handling of in-memory objects. The connected KB4549951 article references fixes related to the JET Database Engine within Windows 10 builds 18362.778/18363.778, but does not provide a produc...

CVE-2020-1030

Technical details about CVE-2020-1030 are not publicly provided in the connected documents. The initial entry describes a local elevation of privilege via the Windows Print Spooler but lacks explicit product/version/root cause specifics beyond that. Monitor for updates.

CVE-2020-1080

Windows Hyper-V Elevation of Privilege (CVE-2020-1080) is documented as an elevation of privilege in Hyper-V when handling objects in memory on a host server. Exploitation is described as local (requires access to the host), with the flaw not by itself enabling arbitrary code execution but potent...

CVE-2020-1115

The CVE-2020-1115 entry concerns the Windows Common Log File System (CLFS) driver, where improper in-memory handling creates an elevation of privilege vulnerability. Exploitation would require the attacker to log on locally and run a specially crafted application to gain control of the affected s...

CVE-2020-1211

CVE-2020-1211 is confirmed in OSV as an elevation of privilege in the Connected Devices Platform Service. The description states the vulnerability stems from how the service handles objects in memory, enabling an attacker to gain elevated code execution privileges. The Connected Devices Platform ...

CVE-2020-16901

CVE-2020-16901 – Windows Kernel Information Disclosure : An information-disclosure vulnerability occurs when the Windows kernel improperly initializes objects in memory. An authenticated attacker could run a specially crafted application to obtain information that could aid further compromise. Th...

CVE-2020-16997

Technical details about CVE-2020-16997 are not provided in the connected documents. The Initial Description is generic; no affected products, root cause, impact, or remediation are present. Monitor for updates.

CVE-2020-16998

Technical details about CVE-2020-16998 are not publicly provided in the supplied documents. Monitor for updates from official advisories to obtain affected products, root causes, and remediation guidance.

CVE-2020-17055

Technical details about CVE-2020-17055 are not provided in the connected documents; public specifics (affected products, root cause, exploitability) are not disclosed here. Monitor for updates.

CVE-2021-28349

Technical details (affected products/versions, root cause, exploit specifics, remediation) for CVE-2021-28349 are not provided in the connected documents. Monitor official advisories and vulnerability feeds for updates.

CVE-2021-31960

CVE-2021-31960 affects the Windows Bind Filter Driver and is an information-disclosure vulnerability that can be exploited locally (attack vector: local) to obtain sensitive data. Reported details show low privileges required (PR:L) with no user interaction, confidentiality impact high. Public ex...

CVE-2022-37997

CVE-2022-37997 is a local-elevation-of-privilege vulnerability in the Windows Graphics Component. It is documented as affecting the Microsoft Windows Graphics Component with a CVSS v3.1 base score of 7.8 (High) and an attack vector of LOCAL with LOW attack complexity, requiring LOW privileges and...