5098 matches found
CVE-2025-21233
CVE-2025-21233 is a Windows Telephony Service Remote Code Execution vulnerability. External exploit is mapped to a network attack with user interaction required, high impact (CVSS v3.1: 8.8; Privileges Required: None; User Interaction: Required; Confidentiality/Integrity/Availability: High). Conn...
CVE-2025-21281
CVE-2025-21281 is a Microsoft Windows COM elevation-of-privilege vulnerability. The CVE entry maps to Windows COM with a high CVSS v3.1 score (7.8, LOW_PRIVILEGES, LOCAL vector; no user interaction; confidentiality/integrity/availability impact: HIGH). The connected documents identify the affecte...
CVE-2025-21227
Technical details for CVE-2025-21227 are not publicly available in the provided documents. No root cause, affected products, or fixes are specified here. Monitor for updates from official advisories and CVE records.
CVE-2025-21375
CVE-2025-21375 is a local elevation-of-privilege in the Windows Kernel Streaming WOW Thunk Service Driver. The vulnerability is identified as a Privilege Escalation with CVSS v3.1 base score 7.8 (HIGH), requiring LOCAL access, LOW attack complexity, and no user interaction; the impact is high to ...
CVE-2025-26670
CVE-2025-26670 is a Windows LDAP use-after-free vulnerability that enables remote code execution over the network. The available connected sources confirm the issue affects Windows LDAP and describe the underlying cause as a use-after-free condition, with the impact explicitly stated as remote co...
CVE-2025-26676
CVE-2025-26676 is a Windows RRAS vulnerability described as a buffer over-read that allows an unauthenticated, network-connected attacker to disclose application/network data. The affected component is Windows Routing and Remote Access Service; root cause is a memory over-read in RRAS processing,...
CVE-2025-26677
CVE-2025-26677 affects Windows Remote Desktop Gateway Service and involves uncontrolled resource consumption leading to a denial of service. The provided documents do not include exploit details or exact root-cause; they indicate that Microsoft released May 2025 security updates addressing vulner...
CVE-2025-27740
CVE-2025-27740 affects Windows Active Directory Certificate Services and is described as a weakness in authentication that enables an authorized attacker to elevate privileges over the network. The connected documents confirm the affected component as Windows Active Directory Certificate Services...
CVE-2025-32707
CVE-2025-32707 is a localprivilege-escalation vulnerability in the Windows NTFS subsystem caused by an out-of-bounds read. The NCSC vulnerability listing confirms Windows NTFS involvement and classifies the impact as elevated privileges, with a CVSS v3.1 base score of 7.8 (HIGH) and a local attac...
CVE-2025-53778
CVE-2025-53778 is a Windows NTLM elevation-of-privilege flaw caused by improper authentication in NTLM that can enable a network-authenticated attacker with low privileges to elevate to SYSTEM. It is discussed in security reports (e.g., KREBS patch-tuesday coverage) and is addressed by August 202...
CVE-2026-33842
The CVE-2026-33842 entry describes a local information disclosure in Windows File Explorer. The vulnerability allows an authorized (low privileges) attacker to disclose sensitive information locally through the File Explorer component. Per the NVD entry, the impact is confined to confidentiality ...
CVE-2016-7295
Technical details about CVE-2016-7295 are not publicly provided in the supplied documents. The CLFS information-disclosure vulnerability details, affected products/versions, and fixes are not elaborated here. Monitor for updates from official advisories.
CVE-2017-8699
CVE-2017-8699 affects Windows Shell in Windows 7 SP1, Windows Server 2008/R2 SP1, Windows 8.1/RT 8.1, Windows Server 2012/R2, Windows 10 (Gold, 1511, 1607, 1703) and Windows Server 2016. Description: an attacker can run arbitrary code in the context of the current user due to how Windows Shell va...
CVE-2018-0904
The CVE-2018-0904 entry concerns a Windows kernel information disclosure vulnerability affecting Windows kernel in multiple client/server OS builds (Windows 7/8.1/10, Windows Server 2008 R2/2012/2016, etc.). Root cause: memory address handling in the kernel allows partial information disclosure w...
CVE-2018-1035
CVE-2018-1035 is a Windows security feature bypass affecting Windows 10/Windows Server (notably 1709 per related advisories). The vulnerability stems from how Windows validates User Mode Code Integrity (UMCI) policies, allowing a local attacker with access to bypass Device Guard. The issue is add...
CVE-2018-8462
CVE-2018-8462 is a local elevation-of-privilege vulnerability in the DirectX Graphics Kernel (DXGKRNL) driver. The CNVD entry states that the DXGKRNL driver’s handling of memory objects is vulnerable, enabling privilege escalation on Windows platforms (Windows Server 2016 and Windows 10 family). ...
CVE-2019-0726
CVE-2019-0726 affects the Windows DHCP Client. The connected advisories describe a remote code execution vulnerability caused by improper processing of DHCP responses, leading to memory corruption. Exploitation is described as remote code execution with administrative privileges in the advisories...
CVE-2019-1389
CVE-2019-1389 is a Windows Hyper-V remote code execution vulnerability where input from a guest OS is not properly validated on the host, allowing an authenticated guest user to run arbitrary code on the host. Affected software is Windows Hyper-V; the root cause is improper input validation. Impa...
CVE-2020-0709
CVE-2020-0709 / CVE-2020-0732 describe an elevation of privilege in Microsoft DirectX due to improper handling of in-memory objects. Affected component is DirectX (Windows platform); root cause cited as memory handling issues that can allow code execution with kernel-level or high-privilege conte...
CVE-2020-0753
Technical details for CVE-2020-0753 are not provided in the connected documents. The Initial Description only notes an Elevation of Privilege in Windows Error Reporting. Monitor for updates from Microsoft/MSRC for full specifics (affected products, root cause, and remediation).
CVE-2020-0987
Technical details (affected product/version, root cause, impact, fixes) are not publicly available in the provided Connected Documents; cross‑references exist (CVE-2020-0982, CVE-2020-0987, CVE-2020-1005) but no specifics are given.
CVE-2020-1116
CVE-2020-1116 is described as a Windows CSRSS Information Disclosure Vulnerability, arising from CSRSS failing to properly handle objects in memory. The affected component is Windows CSRSS; the vulnerability enables information disclosure via local access (CVSSv3.1: 5.5 MEDIUM, AV:L/AC:L/PR:L/UI:...
CVE-2020-1212
Technical details about CVE-2020-1212 are not publicly provided in the supplied connected documents; no vendor/product/impact specifics beyond the initial description are present. Monitor for updates.
CVE-2020-1255
CVE-2020-1255 refers to an elevation of privilege vulnerability in the Windows Background Intelligent Transfer Service (BITS) IIS module. Connected data (CNVD-2021-27705) states the flaw arises from the module’s failure to properly handle uploads, enabling an attacker to exploit a specially craft...
CVE-2020-1296
Windows Diagnostics & feedback Information Disclosure Vulnerability (CVE-2020-1296) exists in the way the Diagnostics & feedback Settings app handles memory objects. An attacker would need to log on to an affected system and interact with the app to cause diagnostic data to be sent to Microsoft. ...
CVE-2020-1354
CVE-2020-1354 affects the Windows UPnP Device Host; root cause is improper memory handling leading to Elevation of Privilege. Exploitation requires local execution on the victim system, with impact described as elevated privileges. This CVE is related to CVE-2020-1430 and appears in NVD and CVE r...
CVE-2020-16895
CVE-2020-16895 corresponds to a Windows elevation-of-privilege flaw in the Windows Error Reporting manager that occurs when handling a process crash. A local attacker who can log on and run a crafted application could delete a targeted file, achieving elevated permissions. The vulnerability is ad...
CVE-2020-17004
According to CNVD-2021-63301, CVE-2020-17004 is a Windows/Windows Server graphics component information-disclosure vulnerability. It allows an attacker to read kernel memory contents from a user-mode process. The affected product is Microsoft Windows/Windows Server; the exact root cause, vulnerab...
CVE-2020-17162
Technical details about CVE-2020-17162 are not publicly provided in the connected documents; only a general description and CVSS metrics are present. Monitor official advisories for updates.
CVE-2021-1662
CVE-2021-1662 is a Windows Event Tracing Elevation of Privilege vulnerability (local, low complexity, high impact per CVSS 3.1). The available connected documents indicate Windows event tracing is the affected component and classify the issue as a local privilege escalation; no specific exploit d...
CVE-2021-1688
Technical details for CVE-2021-1688 are not publicly available in the provided connected documents. Monitor for updates from official advisories.
CVE-2021-24091
CVE-2021-24091 corresponds to a remote code execution in the Windows Camera Codec Pack. Connected CNVD data attributes the issue to the Windows camera codec package on Windows/Windows Server. The vulnerability is described as enabling remote code execution; no remediation details are provided in ...
CVE-2021-26864
CVE-2021-26864 is described as a Windows Virtual Registry Provider Elevation of Privilege vulnerability. Connected details outline a chain where container isolation through Windows Server/Silo mechanisms (registry overlays, object manager root directories, and silo handling) can be bypassed. A no...
CVE-2021-26901
CVE-2021-26901 is a Windows Event Tracing Elevation of Privilege vulnerability. The entry is active with a local, low-attack-complexity vector and high impact (confidentiality, integrity, and availability) per CVSS v3.1 and CVSS v2.0 metrics. Connected docs show Windows updates (e.g., KB5000802/K...
CVE-2021-28319
CVE-2021-28319 is a Windows TCP/IP Driver Denial of Service vulnerability. The NVD entry notes a network-exposed issue with a high impact on availability (CVSS v3.1 base score 7.5) and a lower attack complexity, with no authentication required. Connected documents indicate the vulnerability is am...
CVE-2021-28320
Technical details about CVE-2021-28320 (affected components, exploitability, or fixes) are not provided in the supplied documents. Monitor for updates from official advisories (MSRC/Microsoft security guides) for specifics and remediation.
CVE-2021-28326
Technical details about CVE-2021-28326 are not provided in the supplied documents. The connected items mention advisories but do not describe affected components, root cause, impact, or fixes.
CVE-2021-43232
CVE-2021-43232 corresponds to a Windows Event Tracing (ETW) remote code execution vulnerability. The CNVD entry explicitly identifies ETW as the affected component and states the vulnerability enables remote code execution on Windows. The CVE record itself notes Windows Event Tracing RCE with a m...
CVE-2022-44670
CVE-2022-44670 affects Windows SSTP and allows remote code execution via a race condition in the SSTP/RAS handshake. An unauthenticated attacker could send a crafted SSTP connection request to a RAS server to achieve RCE. Public details in connected sources describe exploit path and patch context...
CVE-2023-28278
Technical details about CVE-2023-28278 (affected product, root cause, versions, exploit info, or remediation) are not provided in the connected documents. Please monitor for official disclosures or patches.
CVE-2023-32033
CVE-2023-32033: Microsoft Failover Cluster Remote Code Execution vulnerability with CVSS v3.1 base score 7.2 (HIGH). Attack vector is NETWORK, no user interaction, with confidentiality, integrity, and availability impacts all HIGH. Initial description confirms the affected vector but does not spe...
CVE-2023-33167
Technical details about CVE-2023-33167 are not publicly provided in the supplied documents. No explicit affected products, root cause, or fixes are described here. Monitor for updates.
CVE-2023-33174
Technical details about CVE-2023-33174 are not publicly provided in the connected documents. The materials mention a Windows cryptographic information disclosure vulnerability but do not specify affected components, root cause, versions, impact, or fixes. Monitor for updates.
CVE-2023-35308
Technical details for CVE-2023-35308 are not publicly available in the provided documents. Monitor for updates from official sources to learn affected products, impact, and mitigations.
CVE-2023-35345
Technical details (affected component, root cause, CVSS, exploit status) are not publicly available in the provided documents. Monitor for updates from official advisories.
CVE-2023-35361
CVE-2023-35361 is a Windows Kernel Elevation of Privilege vulnerability. The provided documents identify the flaw as a local-privilege escalation with high impact (confidentiality, integrity, and availability) but do not supply concrete technical details, affected versions, root cause specifics, ...
CVE-2024-37971
Technical details about CVE-2024-37971 are not publicly available in the provided connected documents. Monitor for updates from Microsoft and NVD for affected products, impact, and remediation; current sources do not specify affected components or fixes within this dataset.
CVE-2024-38013
Technical details about CVE-2024-38013 are not disclosed in the provided connected documents. The CVE entry exists (Windows Server Backup elevation of privilege), but no affected product versions, root cause, exploitation, or remediation are described here. Monitor for updates.
CVE-2024-38019
Technical details about CVE-2024-38019 are not provided in the supplied documents. Public sources in Connected documents do not specify affected products, root cause, exploit status or remediation. Monitor for official advisories and Microsoft update notes for confirmation.