CVE-2024-38231

Technical details about CVE-2024-38231 (Windows Remote Desktop Licensing Service Denial of Service) are not publicly provided in the supplied connected documents. Monitor official advisories and vendor patches for updates.

CVE-2025-21225

Technical details about CVE-2025-21225 (WindowsRD Gateway Denial-of-Service) are not provided in the connected documents. Public details appear only as vulnerability entries; monitor official advisories and patch guidance for remediation and impact updates.

CVE-2025-21233

CVE-2025-21233 is a Windows Telephony Service Remote Code Execution vulnerability. External exploit is mapped to a network attack with user interaction required, high impact (CVSS v3.1: 8.8; Privileges Required: None; User Interaction: Required; Confidentiality/Integrity/Availability: High). Conn...

CVE-2025-21281

CVE-2025-21281 is a Microsoft Windows COM elevation-of-privilege vulnerability. The CVE entry maps to Windows COM with a high CVSS v3.1 score (7.8, LOW_PRIVILEGES, LOCAL vector; no user interaction; confidentiality/integrity/availability impact: HIGH). The connected documents identify the affecte...

CVE-2025-21319

CVE-2025-21319 is a Windows kernel memory information disclosure vulnerability. The issue is tracked in multiple vulnerabilities and discussed by Microsoft, with a CVSSv3.1 base score of 5.5 (Local attack, Low attack complexity, Low privileges required, no user interaction, High confidentiality i...

CVE-2025-26676

CVE-2025-26676 is a Windows RRAS vulnerability described as a buffer over-read that allows an unauthenticated, network-connected attacker to disclose application/network data. The affected component is Windows Routing and Remote Access Service; root cause is a memory over-read in RRAS processing,...

CVE-2025-26677

CVE-2025-26677 affects Windows Remote Desktop Gateway Service and involves uncontrolled resource consumption leading to a denial of service. The provided documents do not include exploit details or exact root-cause; they indicate that Microsoft released May 2025 security updates addressing vulner...

CVE-2026-62792

Summary: CVE-2026-62792 is a stack-based buffer overflow in the Windows TCP/IP stack that enables a remote attacker to execute code over the network. The provided documents identify the affected component as Windows TCP/IP and confirm a RCE impact, with the exploit delivered remotely via network ...

CVE-2017-0296

CVE-2017-0296 affects Windows platforms (Windows 7 SP1 to Windows Server 2016) with a privilege-escalation via tdx.sys due to a missing length check when copying memory. The affected component is tdx.sys; root cause is inadequate buffer length validation. Impact per description: privilege escalat...

CVE-2018-0960

Technical details for CVE-2018-0960 are not publicly available in the provided documents. No product/version-specific impact or remediation is stated here; monitor for updates from official advisories.

CVE-2018-0968

CVE-2018-0968 is a Windows kernel information-disclosure vulnerability that could enable an attacker to bypass Kernel ASLR. It affects Windows Server 2012 R2, Windows RT 8.1, Windows Server 2016, Windows 8.1, Windows 10, and Windows Server 2019/10-family variants as listed. The connected CIRCL en...

CVE-2018-8142

CVE-2018-8142 describes a Windows local security feature bypass where Windows incorrectly validates kernel driver signatures, allowing loading of improperly signed drivers. Affected products include Windows 10 and Windows Server 2016 (and related Windows 10/server versions). The root cause is imp...

CVE-2018-8170

CVE-2018-8170 is a Windows kernel image elevation-of-privilege vulnerability affecting Windows 10 and Windows 10 Server builds. The issue arises from how the Windows kernel image handles objects in memory, enabling an attacker who can run a locally crafted application to execute code with elevate...

CVE-2019-1022

CVE-2019-1022 describes a local elevation-of-privilege in Windows Audio Service. The vulnerability arises from how the service handles certain process-related requests; a crafted, local application could enable an attacker to execute code with elevated privileges, potentially compromising the hos...

CVE-2019-1143

CVE-2019-1143 is a Windows GDI information-disclosure vulnerability. The issue arises when the GDI component improperly discloses memory contents, potentially allowing an attacker to obtain sensitive information to further compromise a system. Affected software is Windows with the Graphics Device...

CVE-2019-1163

Technical details (affected products, components, versions, root cause, impact or fixes) are not publicly provided in the supplied documents. Monitor for updates from official advisories and CVE records.

CVE-2019-1177

CVE-2019-1177 is a Windows elevation-of-privilege vulnerability in how rpcss.dll handles objects in memory. A locally authenticated attacker could run a specially crafted application to execute code with elevated permissions. The issue stems from memory object handling within rpcss.dll, with miti...

CVE-2019-1247

Technical details about CVE-2019-1247 are not publicly provided in the supplied documents. The materials reference the Jet Database Engine RCE generally but do not specify affected products, versions, impact, or fixes. Monitor for updates.

CVE-2020-0617

CVE-2020-0617 relates to a Microsoft Hyper-V Denial of Service vulnerability. The CNVD entry describes that the vulnerability stems from Hyper-V Virtual PCI on the host failing to properly validate input submitted by privileged users from a guest OS, allowing an attacker with privileged access an...

CVE-2020-0633

Technical details about CVE-2020-0633 are not publicly available in the provided connected documents. Monitor for updates as new information becomes accessible.

CVE-2020-0708

CVE-2020-0708 is a Windows Imaging Library remote code execution vulnerability caused by improper memory handling. An attacker must coerce a victim to open a specially crafted file, leading to arbitrary code execution with the user’s privileges. Microsoft released a security update to fix the mem...

CVE-2020-0784

CVE-2020-0784 is described as a DirectX Elevation of Privilege vulnerability where DirectX improperly handles memory objects. Affected component: DirectX in Windows graphics stack. Root cause stated: memory object handling issues in DirectX. Impact: local privilege escalation (high/complete confi...

CVE-2020-0802

Technical details for CVE-2020-0802 are not publicly provided in the supplied documents. Monitor for updates from official advisories; no affected products, root cause, or fixes are described here.

CVE-2020-0883

CVE-2020-0883 is a remote code execution flaw in Windows GDI+ involving memory handling of GDI objects. A working exploit PoC exists (CVE-2020-0883) showing a reverse shell workflow; patch availability is indicated by March 2020 updates (KB4541500/KB4541506) addressing GDI memory-related flaws, t...

CVE-2020-0934

Technical details about CVE-2020-0934 are not publicly provided in the supplied documents. Monitor for updates from official advisories.

CVE-2020-1174

Technical details about CVE-2020-1174/1175/1176 are not provided in the connected documents. Public details are not included in the supplied material. Monitor for updates from Microsoft and CVE feeds.

CVE-2020-1194

Technical details about CVE-2020-1194 are not publicly provided in the connected documents. The material confirms a Windows Registry DoS vulnerability but lacks product/version context or fixes. Monitor for official updates from Microsoft/NVD to obtain concrete details.

CVE-2020-1232

CVE-2020-1232 is an information-disclosure vulnerability in Windows Media Foundation caused by improper handling of objects in memory. The core component is Windows Media Foundation; affected behavior is the disclosure of memory contents, as described in the CVE entry and corroborated by related ...

CVE-2020-1370

Technical details about CVE-2020-1370 are not publicly available in the provided documents. Monitor for updates from official advisories (e.g., MSRC, ENISA EUVD) for affected products, impact, and fixes.

CVE-2020-1371

Technical details about CVE-2020-1371 are not publicly provided in the connected documents. Please monitor for updates from official sources for affected products, impact, and remediation.

CVE-2020-1390

CVE-2020-1390 — Windows Network Connections Service elevation of privilege vulnerability. Root cause: the service mishandles objects in memory, enabling code execution with elevated privileges on a locally accessible Windows host. Affected: Windows Network Connections Service (Windows). Exploitat...

CVE-2020-1430

Technical details about CVE-2020-1430 are not publicly provided in the connected documents. Please monitor for official advisories or vendor advisories for affected products, exposure, and fixes.

CVE-2020-1466

CVE-2020-1466 is a Windows RD Gateway DoS vulnerability. The RD Gateway service can be forced to stop responding when an attacker uses RDP to connect and sends specially crafted requests, or when a specially crafted file is used to exploit the issue. The vulnerability stems from how the RD Gatewa...

CVE-2020-1592

CVE-2020-1592 : Windows kernel information disclosure vulnerability. The kernel improperly initializes objects in memory; an authenticated attacker can run a crafted application to glean information to facilitate further compromise. The update fixes how memory is initialized by the kernel. Source...

CVE-2020-16961

CVE-2020-16961 is reported as a Windows Backup Engine Elevation of Privilege vulnerability. The entry lists affected software as Windows Backup Engine with a CVSS v3.1 base score of 7.8 (LOCAL access, LOW privileges required, no user interaction, Privileges required: LOW; confidentiality, integri...

CVE-2020-17010

CVE-2020-17010 is a local Win32k elevation-of-privilege vulnerability in Microsoft Windows. It affects Win32k/Windows components and could allow an attacker to obtain SYSTEM-level privileges on a vulnerable host, with CVSS indicating LOCAL access, LOW attack complexity, and HIGH impact to confide...

CVE-2020-17032

Technical details about CVE-2020-17032 are not publicly provided in the supplied documents. Monitor for updates from authoritative sources for affected products, impact, and remediation.

CVE-2021-1689

CVE-2021-1689 is a Windows Multipoint Management Elevation of Privilege vulnerability. The available data from the connected sources (NVD entry) states a base CVSS v3.1 score of 7.8 (HIGH) with LOCAL attack vector, LOW privileges required, and no user interaction. The impact is HIGH for Confident...

CVE-2021-26863

CVE-2021-26863 is a Windows Win32k elevation-of-privilege vulnerability in win32kfull.sys (BLTRECORD::bRotate) that can allow a local attacker to gain SYSTEM-level privileges by triggering a NULL-page-execution scenario when a mapped NULL page is accessible and HOOK_PLGBLT is set, leading to call...

CVE-2021-26893

Technical details for CVE-2021-26893 are not provided in the connected documents. Public disclosures, affected products, and fixes are not specified here. Monitor for updates.

CVE-2021-28438

Technical details (affected component, root cause, impacted versions, or exploit info) are not publicly provided in the supplied documents. Monitor for updates from official advisories.

CVE-2021-28439

Technical details for CVE-2021-28439 (Windows TCP/IP Driver DoS) are not present in the provided Connected documents. Public details, affected products/versions, impact, and fixes are not specified here—monitor for updates.

CVE-2021-40468

CVE-2021-40468 corresponds to a Windows Bind Filter Driver Information Disclosure vulnerability. The connected data confirms affected component as Windows Bind Filter Driver and assigns CVSS v3.1 base metrics of 5.5 (Medium) with LOCAL attack vector, LOW attack complexity, and LOW privileges requ...

CVE-2022-29114

Technical details about CVE-2022-29114 are not provided in the supplied documents. No affected products, root cause, impact, or fixes are specified here. Monitor for updates from the provided references as needed.

CVE-2022-35753

Technical details (affected products/versions, impact, root cause, or fixes) for CVE-2022-35753 are not provided in the connected documents. Monitor official sources (MSRC/NVD) for concrete details and remediation guidance.

CVE-2022-38034

CVE-2022-38034 is a Windows Workstation Service Elevation of Privilege vulnerability. Connected documents confirm the affected component is Windows Workstation Service and that the root cause is improper privilege assignment, enabling an attacker to obtain increased privileges (described as privi...

CVE-2023-32035

Technical details for CVE-2023-32035 (affected product/component/version/root cause/mitigation) are not provided in the connected documents. The initial description only notes a Remote Procedure Call Runtime Denial of Service vulnerability without concrete details. Monitor updates from official s...

CVE-2023-35319

CVE-2023-35319 is a Remote Procedure Call (RPC) Runtime Denial of Service vulnerability. The NVD entry lists a network attack vector with low attack complexity, requiring low privileges and no user interaction, leading to an availability impact (C:A) of High and no confidentiality or integrity im...

CVE-2023-35360

Technical details are not publicly available in the provided documents. No specific affected product/versions, root cause, impact, or fix is described here; monitor for updates.

CVE-2023-35642

CVE-2023-35642 corresponds to a Denial-of-Service vulnerability in Windows’ Internet Connection Sharing (ICS) feature. The NVD entry explicitly labels this as an ICS DoS issue, with CVSS 3.1 indicating Adjacent attack vector, no privileges required, no user interaction, and high impact on availab...