CVE-2024-38160

Technical details for CVE-2024-38160 are not publicly available in the provided documents. No concrete product/version/impact/fix information is given here. Monitor for updates from official advisories.

CVE-2017-0109

Hyper-V Remote Code Execution Vulnerability (CVE-2017-0109) affects Microsoft Windows with Hyper-V across multiple OS versions (from Windows Vista SP2 up to Windows Server 2016). The issue allows guest OS users to execute arbitrary code on the host OS via a crafted application, representing a pow...

CVE-2017-0118

CVE-2017-0118 is an information-disclosure vulnerability in Microsoft Windows Uniscribe (usp10.dll) that can be triggered by a crafted web site, allowing an attacker to read sensitive data from a target process’s memory. The issue affects a range of Windows versions listed in the description and ...

CVE-2017-0173

Technical details such as affected builds, vulnerable components, exploitability, and fixes are not provided in the attached documents. Monitor for updates from Microsoft/MSRC and ENISA EUVD entries for specifics.

CVE-2017-0287

CVE-2017-0287 relates to a Windows Uniscribe information disclosure vulnerability. The connected Kaspersky advisory explicitly notes an information disclosure in Windows Uniscribe that can be exploited remotely by a crafted document to obtain sensitive information. The provided documents do not s...

CVE-2017-0300

Technical details for CVE-2017-0300 are not publicly available in the provided documents. Monitor for updates.

CVE-2018-8435

CVE-2018-8435 is a Windows Hyper-V Security Feature Bypass vulnerability where the Hyper-V BIOS loader may fail to provide a high-entropy source. The issue can allow a remote attacker to bypass security restrictions by rebooting a guest VM, impacting Windows Server 2016 and Windows 10/Windows 10 ...

CVE-2019-1317

CVE-2019-1317 is a Windows DoS vulnerability caused by improper handling of hard links, as described in the initial entry and corroborated by Red Hat and NVD records. The connected documents confirm the issue and its Windows context but do not provide concrete details on affected versions, root-c...

CVE-2019-1398

CVE-2019-1398 is a Windows Hyper-V remote code execution vulnerability. The vulnerability arises from improper validation of input from an authenticated guest OS user, enabling an attacker to run arbitrary code on the host Hyper-V machine. The CNVD entry for Microsoft Windows Hyper-V Remote Code ...

CVE-2020-0718

CVE-2020-0718: Active Directory integrated DNS (ADIDNS) RCE is a remote code execution vulnerability that occurs when ADIDNS mishandles objects in memory. An authenticated attacker could send malicious requests to an ADIDNS server, potentially executing code in the Local System context. The conne...

CVE-2020-0722

Technical details for CVE-2020-0722 are not publicly available in the provided documents; no affected products, root cause, or remediation are specified here. Monitor for updates from official advisories.

CVE-2020-0754

Technical details for CVE-2020-0754 are not provided in the connected documents; only high-level information is available.

CVE-2020-0757

CVE-2020-0757 is a Windows local privilege-escalation vulnerability caused by Windows improperly handling Secure Shell (SSH) remote commands. An attacker who can log on and run a crafted SSH-related application could execute code with elevated privileges. Public docs provide CVSS:3.1 base score 7...

CVE-2020-0770

CVE-2020-0770 is an elevation of privilege vulnerability in the Windows ActiveX Installer Service caused by improper handling of memory. The CNVD entry confirms the syndrome but provides no versioned product scope or patch details. Public documents indicate that exploitation requires local execut...

CVE-2020-0792

Technical details about CVE-2020-0792 are not publicly provided in the supplied documents. Monitor for updates from official advisories.

CVE-2020-0843

CVE-2020-0843 is a local elevation-of-privilege vulnerability in Windows Installer. The issue arises from how Windows Installer handles certain filesystem operations, allowing an unprivileged attacker on the victim system to compromise the host. CVSSv3.1 base score is 7.8 (HIGH) with local exploi...

CVE-2020-0897

Technical details about CVE-2020-0897 (affected product, root cause, impacted versions, and fixes) are not publicly provided in the connected documents; monitor for updates.

CVE-2020-0907

CVE-2020-0907 is described as a remote code execution vulnerability in how Microsoft Graphics Components handles objects in memory. The connected MS KB and vendor feeds confirm this CVE is among a set of Windows updates (KB4549951 family) addressing multiple issues, but the provided documents do ...

CVE-2020-0989

CVE-2020-0989 affects Windows Mobile Device Management Diagnostics. Root cause: improper handling of junctions, causing information disclosure. Exploitation requires local authentication: an attacker logs on and runs a crafted app to read restricted files. Impact is read access to files due to a ...

CVE-2020-1053

CVE-2020-1053 affects DirectX where improper handling of objects in memory can lead to elevation of privilege, allowing an attacker to execute arbitrary code in kernel mode after logging on and running a crafted program. The vulnerability is triggered by object handling in DirectX, with impact de...

CVE-2020-1068

Technical details for CVE-2020-1068 are not publicly available in the provided documents. Monitor for updates; no explicit info on affected products, root cause, impact, or remediation is included here.

CVE-2020-1129

CVE-2020-1129 is a remote code execution vulnerability in Microsoft Windows Codecs Library. It stems from how the Codecs Library handles objects in memory, enabling an attacker to take control of an affected system by processing a specially crafted image file. The impact includes potential full s...

CVE-2020-1238

CVE-2020-1238 is a memory corruption vulnerability in Windows Media Foundation caused by improper handling of objects in memory. It affects Windows Media Foundation components; exploitation could allow memory corruption within the affected process, with CVSS indicating high impact (exploitability...

CVE-2020-1268

CVE-2020-1268 is a Windows information-disclosure vulnerability where a Windows service improperly handles objects in memory. Exploitation requires an attacker to log on to the affected system and run a crafted application; the flaw does not in itself enable code execution or privilege escalation...

CVE-2020-1280

CVE-2020-1280 is an elevation of privilege vulnerability in Windows Bluetooth Service where memory objects are mishandled. The CVE is documented in NVD as a local, user-initiated issue with potential high impact if exploited, though exploitation details or root-cause specifics are not provided in...

CVE-2020-1344

CVE-2020-1344 is a Windows WalletService elevation-of-privilege vulnerability rooted in how WalletService handles objects in memory, potentially allowing a crafted app to execute code with elevated privileges. Related entries (CVE-2020-1362/1369) describe the same WalletService memory-handling th...

CVE-2020-1401

CVE-2020-1401 is a Remote Code Execution vulnerability in Microsoft Windows/Windows Server arising from improper handling of objects in memory by the Jet Database Engine. The connected CNVD entries describe the root cause as a failure of the Jet Database Engine to properly handle in-memory object...

CVE-2020-1409

CVE-2020-1409 is a DirectWrite Remote Code Execution vulnerability in Windows where the attacker can trigger code execution by abusing how DirectWrite handles objects in memory. The connected material confirms the affected area (DirectWrite) and the root cause (memory object handling) and notes h...

CVE-2020-17013

CVE-2020-17013 is a Win32k information disclosure vulnerability in Windows. Available connected documents indicate the issue affects the Win32k subsystem and is associated with information disclosure (confidentiality impact), with CVSS metrics suggesting local access requirements and low to moder...

CVE-2020-17045

Technical details for CVE-2020-17045 are not publicly provided in the supplied documents. No affected product/version/exploit information is included here. Monitor for updates from authoritative sources to obtain concrete details and remediation guidance.

CVE-2021-24076

CVE-2021-24076 is listed in multiple open-source vulnerability feeds as a Microsoft Windows VMSwitch Information Disclosure Vulnerability. Connected sources confirm the affected component is Windows VMSwitch and classify the impact as information disclosure with a CVSS v3.1 base score of 5.5 (LOC...

CVE-2021-24082

Technical details for CVE-2021-24082 are not publicly available in the provided connected documents. The records list the vulnerability title but do not specify affected products, root cause, impact, or fixes. Monitor for updates.

CVE-2021-28311

CVE-2021-28311 is a Windows Application Compatibility Cache Denial of Service vulnerability. The connected documents confirm a Windows OS-level issue affecting the Application Compatibility Cache, with mitigation via March/April 2021 Windows security updates (e.g., KB5001330/KB5001337 and related...

CVE-2022-24486

Technical details for CVE-2022-24486 are not provided in the supplied documents. No affected product/version, root cause, or remediation is described here. Monitor for updates.

CVE-2022-33645

CVE-2022-33645 is a Windows TCP/IP driver denial-of-service vulnerability. Public sources (NVD/CNVD) describe it as a DoS in the Windows TCP/IP component caused by mishandling of incoming error messages, with the CVE listed as affecting Windows TCP/IP and assigned a CVSSv3 score of 7.5 (HIGH). Co...

CVE-2022-34712

Technical details about CVE-2022-34712 are not publicly provided in the connected documents. Based on the supplied sources, we cannot determine affected products, root cause, or remediation. Monitor for updates from official advisories and CVE records.

CVE-2022-38003

The CVE-2022-38003 issue is described in connected CNVD as a Windows Resilient File System (ReFS) Elevation of Privilege vulnerability stemming from improper privilege assignment in an application. This means local attackers could escalate privileges on affected Windows systems. The vulnerability...

CVE-2023-32043

CVE-2023-32043 is a Windows Remote Desktop Security Feature Bypass vulnerability. The available document set confirms the issue as a remote-network vulnerability with no user impact on availability, but with high confidentiality and integrity impact per CVSS v3.1 (score 6.8). The connected source...

CVE-2023-35322

Technical details about CVE-2023-35322 are not publicly provided in the supplied documents; no affected products, root cause, or remediation details are listed. Monitor for updates in forthcoming connected sources.

CVE-2023-35643

CVE-2023-35643 affects Windows DHCP Server and is classified as a network-based information disclosure with CVSSv3.1 score 7.5 (C:H/I:N/A:N). The vulnerability resides in the DHCP Server Service and is capable of exposing sensitive data. Public sources in the connected set confirm the DHCP Server...

CVE-2024-37986

Technical details for CVE-2024-37986 are not publicly provided in the supplied documents. No affected products, versions, root cause, or remediation are specified here. Monitor for updates.

CVE-2024-38126

CVE-2024-38126 affects Windows Network Address Translation (NAT). The provided table lists it under Windows NAT with a CVSS v3.1 score of 7.5 (HIGH) and impact as Denial-of-Service. Other connected documents reference general Microsoft Windows fixes but do not provide concrete technical details (...

CVE-2024-43454

CVE-2024-43454 is a Windows vulnerability affecting the Windows Remote Desktop Licensing Service that enables a Remote Code Execution via network with low privileges and no user interaction. The connected materials confirm this CVE entry and associate it with Microsoft’s September 2024 security u...

CVE-2024-43487

CVE-2024-43487 corresponds to a Windows Mark of the Web (MOTW) security feature bypass. The MOTW component itself is identified as the vulnerable area, enabling bypass of the MOTW protection. Public materials in the connected documents indicate the vulnerability is addressed by Microsoft security...

CVE-2024-49108

CVE-2024-49108 is a Windows Remote Desktop Services remote code execution vulnerability. According to the connected advisories, it is rated high severity (CVSSv3.1 base 8.1) with network access required and no user interaction, and the impact is execution of arbitrary code with high confidentiali...

CVE-2025-33064

CVE-2025-33064 affects Windows Routing and Remote Access Service (RRAS). It is a heap-based buffer overflow that allows an authenticated attacker to execute code over the network. CVSS v3.1 base score 8.8 (HIGH). Affected component: RRAS on Windows. Root cause: heap-based overflow in RRAS handlin...

CVE-2017-0081

CVE-2017-0081 affects Windows kernel-mode drivers in Windows 8.1, Windows Server 2012 (Gold/R2), Windows RT 8.1, Windows 10 (Gold, 1511, 1607) and Windows Server 2016, enabling local privilege escalation via a crafted application in Win32k. Impact is described as complete confidentiality, integri...

CVE-2017-0097

CVE-2017-0097 affects Hyper-V in multiple Windows platforms (Vista SP2, Server 2008 SP2/R2, Windows 7 SP1, 8.1, Server 2012/R2, Windows 10 up to 1607 and Server 2016). The vulnerability allows a guest OS user, running as a VM, to cause a denial of service on the host via a crafted application. Th...

CVE-2017-11815

CVE-2017-11815 is an information-disclosure vulnerability in the Windows SMB Server, caused by how SMB requests are handled. An authenticated attacker could craft a packet to trigger disclosure from the SMB server. Affected platforms include Windows SMB Server implementations referenced in the CV...

CVE-2017-8544

CVE-2017-8544 describes a Windows Search Information Disclosure vulnerability in the Windows Search service caused by how objects are handled in memory. Affected systems span multiple Windows versions: Windows 7 SP1, Windows Server 2008 SP2/R2 SP1, Windows 8.1/RT 8.1, Windows Server 2012/R2, Wind...