CVE-2025-32715

CVE-2025-32715 is a vulnerability in the Windows Remote Desktop Client described as an out-of-bounds read that can lead to information disclosure . The connected NCSC advisory lists CVSS v3.1/6.50 with an impact of Access to sensitive data . Exploitation details, affected product versions, and sp...

CVE-2025-47955

CVE-2025-47955 involves improper privilege management in Windows Remote Access Connection Manager, enabling local privilege escalation for an authorized attacker. CVSS 3.1 base 7.8 (HIGH): Local, low complexity, no user interaction, with high impact on confidentiality, integrity, and availability...

CVE-2026-40378

CVE-2026-40378 affects Windows Local Security Authority Subsystem Service (LSASS). A memory allocation with an excessive size value can allow an unauthenticated attacker to cause a network-based denial of service. The CVSSv3.1 base score is 7.5 (HIGH). No exploitation details are provided in the ...

CVE-2026-42987

The CVE-2026-42987 entry concerns a use-after-free in Windows Deployment Services (WDS) that enables an unauthenticated attacker to achieve remote code execution over the network . The associated CVSS 3.1 vector indicates network access, high impact on confidentiality, integrity, and availability...

CVE-2026-50447

CVE-2026-50447 is a Windows Message Queuing (MSMQ) remote-code-execution vulnerability. The issue is a heap-based buffer overflow in MSMQ that could allow an unauthenticated attacker to execute code over the network. Public sources indicate high-severity impact (CVSS v3.1: 9.8, network attack, no...

CVE-2026-50472

The CVE-2026-50472 entry refers to a heap-based buffer overflow in Windows LUA File Virtualization Filter Driver (LUAFV) that allows an authorized, local attacker to achieve privilege escalation. Affected software is Windows LUAFV; the underlying issue is a heap-based overflow, leading to local p...

CVE-2026-54999

The CVE-2026-54999 entry concerns a race condition in Windows TCP/IP where concurrent access to a shared resource allows an unauthorized attacker on an adjacent network to execute code. Documented impact is remote code execution with high severity (CVSSv3.1: AV=A, AC=L, PR=N, UI=N, S=U, C=H, I=H,...

CVE-2016-3332

Technical details for CVE-2016-3332 are not publicly available in the provided connected documents. Monitor for updates from official advisories and vulnerability databases.

CVE-2017-0021

Technical details about CVE-2017-0021 are not publicly available in the provided connected documents. Monitor for updates; no specific affected builds, root cause, or fixes are described here.

CVE-2017-0259

CVE-2017-0259 is a Windows kernel local information-disclosure vulnerability affecting Windows 8.1, Windows Server 2012 R2, Windows RT 8.1, Windows 10 (Gold, 1511, 1607, 1703) and Windows Server 2016. A specially crafted document can cause leakage of sensitive information via the kernel. Public e...

CVE-2017-11824

The CVE-2017-11824 entry describes an Elevation of Privilege in the Windows Graphics Component due to improper handling of objects in memory, allowing code execution with elevated privileges. The Connected documents (KB/MS updates) indicate this vulnerability is among a broader set addressed by c...

CVE-2017-11831

CVE-2017-11831 is a Windows kernel information disclosure vulnerability affecting Windows 7 SP1, Windows 8.1/RT 8.1, Windows Server 2008 SP2/R2 SP1, 2012/R2, Windows 10 (various builds up to 1709) and Windows Server 2016. Root cause: kernel initializes memory in a way that can expose information;...

CVE-2017-11849

The CVE-2017-11849 entry concerns the Windows kernel information disclosure vulnerability. Affected software includes Windows kernel on Windows 7 SP1; Windows Server 2008 SP2/R2 SP1; Windows 8.1/RT 8.1; Windows Server 2012/R2; Windows 10 versions (Gold, 1511, 1607, 1703, 1709); and Windows Server...

CVE-2017-8564

CVE-2017-8564 is the Windows kernel information disclosure vulnerability where the kernel fails to properly initialize a memory address, potentially allowing an attacker to retrieve kernel base information and bypass KASLR. Affected products include Windows client and server families (Windows 7/8...

CVE-2018-0899

Technical details for CVE-2018-0899 are not publicly provided in the supplied documents. Monitor for updates from official advisories.

CVE-2018-8637

CVE-2018-8637 is a Windows kernel vulnerability (Win32k Information Disclosure) that can disclose memory addresses from kernel space, potentially bypassing KASLR. Affected: Windows kernel components (Win32k) on Windows 10/Windows Server 2019. Root cause: how the kernel handles memory addresses en...

CVE-2019-0931

Technical details about CVE-2019-0931 are not publicly provided in the supplied documents; no concrete affected products, root cause, or fixes are present. Monitor for updates.

CVE-2019-1171

CVE-2019-1171 is an information-disclosure vulnerability in SymCrypt during OAEP decryption. The underlying issue is in OAEP decoding operations, allowing an attacker who can log on to an affected system to obtain information that could aid further compromise. The CVE does not enable code executi...

CVE-2019-1176

CVE-2019-1176 is a Windows DirectX elevation-of-privilege vulnerability. It occurs when DirectX mishandles objects in memory, potentially allowing a locally authenticated attacker to run kernel-mode code, install programs, view/change/delete data, or create full-privilege accounts by exploiting a...

CVE-2019-1336

CVE-2019-1336 describes an elevation-of-privilege vulnerability in the Microsoft Windows Update Client caused by improper handling of privileges. The issue is local and affects the Windows Update Client; the CVE is distinct from CVE-2019-1323. The provided documents do not specify affected versio...

CVE-2019-1399

Technical details beyond the high-level description (affected product, root cause, vulnerable component, specific versions, fixes) are not publicly provided in the connected documents. Monitor for updates.

CVE-2020-0714

CVE-2020-0714 corresponds to a DirectX Information Disclosure vulnerability in Windows. The root cause is DirectX failing to properly handle memory objects, which can lead to disclosure of information. An attacker who has authenticated access could exploit this by running a specially crafted appl...

CVE-2020-0797

CVE-2020-0797 is a Windows Privilege Mobilization vulnerability in the Windows Work Folder Service. The issue arises from the service handling file operations improperly, enabling an attacker with a specially crafted application to run processes with elevated privileges. No exploit details, patch...

CVE-2020-0800

CVE-2020-0800 corresponds to a Windows Work Folder Service privilege escalation vulnerability. CNVD-2020-23447 describes improper handling of file operations in the Work Folder Service that can be exploited by a specially crafted application to run code with elevated privileges. The vulnerability...

CVE-2020-0804

CVE-2020-0804 is an elevation-of-privilege vulnerability in the Windows Network Connections Service related to how in-memory objects are handled. The issue enables local privilege escalation with high impact (confidentiality, integrity, and availability), as evidenced by CVSS scores of 7.2 (2.0) ...

CVE-2020-0821

Technical details about CVE-2020-0821 are not publicly provided in the supplied documents; the connected records reference a general Windows kernel information disclosure vulnerability. Monitor for updates.

CVE-2020-0866

The CVE-2020-0866 entry maps to a Windows Work Folder Service elevation of privilege vulnerability. Connected CNVD-2020-23447 describes a privilege escalation via the service’s improper handling of file operations, enabling a specially crafted application to execute processes with elevated privil...

CVE-2020-0912

Technical details about CVE-2020-0912 are not provided in the supplied documents. No affected product/version is specified beyond a generic memory-handling issue. Monitor official sources for updates.

CVE-2020-0928

CVE-2020-0928 is a Windows kernel information-disclosure vulnerability. The root cause is the Windows kernel’s improper handling of memory objects, which could allow an attacker who logs on and runs a crafted application to obtain information that could help further compromise the system. The vul...

CVE-2020-1081

CVE-2020-1081 is an elevation-of-privilege issue in the Windows Printer Service caused by improper validation of file paths when loading printer drivers. Affected product: Windows Printer Service. Root cause details and specific vulnerable versions are not enumerated in the provided documents bey...

CVE-2020-1119

CNVD-2021-63316 describes a Windows information disclosure vulnerability (CVE-2020-1119) arising from StartTileData.dll improperly handling objects in memory, allowing an attacker who can log on to an affected system and run a crafted application to obtain information that could help compromise t...

CVE-2020-1123

CVE-2020-1123 is a denial-of-service vulnerability in Microsoft Windows Connected User Experiences and Telemetry Service, arising from improper handling of operations (e.g., file-related handling) and related to the CVE-2020-1084 distinction. Connected documents corroborate DoS impact from failur...

CVE-2020-1204

CVE-2020-1204 is an Elevation of Privilege in Windows Mobile Device Management Diagnostics caused by improper handling of junctions. The vulnerability could allow an attacker to bypass access restrictions and delete files after logging on and running a crafted app. Microsoft’s MSRC entry notes a ...

CVE-2020-1265

Technical details about CVE-2020-1265 are not present in the connected documents; the provided sources do not specify affected products, root cause, or remediation. Monitor for updates.

CVE-2020-1394

CVE-2020-1394 relates to an elevation-of-privilege in the Windows Geolocation Framework. Connected CNVD/EUVD entries describe the root cause as improper handling of memory objects within the Geolocation Framework, allowing a local attacker to elevate privileges and execute arbitrary code by runni...

CVE-2020-16973

Technical details for CVE-2020-16973 are not publicly available in the provided connected documents. The initial description notes an elevation of privilege via Windows Backup Service file operations with local access. Monitor for updates.

CVE-2020-17094

CVE-2020-17094 is described as a Windows Error Reporting Information Disclosure Vulnerability. The connected sources provide a CVSS 3.1 base vector (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) with a Medium severity and High confidentiality impact, plus a CVSS2 base score of 5.5. The documents do not sp...

CVE-2021-26898

CVE-2021-26898 is described as a Windows Event Tracing Elevation of Privilege Vulnerability. The provided documents do not specify affected products, components, versions, root cause, exploit details, or remediation specific to this CVE. Public references confirm the vulnerability name and CVSS m...

CVE-2021-28347

CVE-2021-28347 is a Windows Speech Runtime Elevation of Privilege vulnerability. It affects Windows Speech Runtime with local attack vector, low privileges required, and no user interaction, with potential HIGH impact on confidentiality, integrity, and availability per CVSS3. public sources list ...

CVE-2021-43219

CVE-2021-43219 corresponds to a DirectX Graphics Kernel File Denial of Service vulnerability affecting Windows DXGK file handling. The primary concrete details in the available documents are: (1) affected component: DirectX Graphics Kernel File (DXGK) within Windows, (2) impact as indicated by CV...

CVE-2021-43236

Technical details for CVE-2021-43236 are not publicly available in the provided documents. Monitor for updates from official advisories to confirm affected products, impact, and remediation.

CVE-2022-37993

Technical details for CVE-2022-37993 are not publicly provided in the supplied documents. No concrete affected products, root cause, or remediation are present here. Monitor for updates from official sources.

CVE-2024-37970

Technical details about CVE-2024-37970 are not provided in the connected documents. The initial description notes a Secure Boot security feature bypass, but no affected product/version/root cause/fix is disclosed here. Monitor for updates.

CVE-2024-38072

CVE-2024-38072 is associated with Windows Remote Desktop Licensing Service and is described as a Denial of Service vulnerability. The provided Connected documents mention the vulnerability generically (DoS impact) and reference a Microsoft security update page, but do not supply detailed root-cau...

CVE-2024-38237

CVE-2024-38237 is a local privilege-escalation in Windows Kernel Streaming WOW Thunk Service Driver. Affected component is a Windows kernel-mode driver used by streaming services; vulnerability exploited locally with low privileges and no user interaction, leading to elevated privileges and poten...

CVE-2024-38243

CVE-2024-38243 is a Windows Streaming Service elevation of privilege vulnerability. The connected NCSC entry classifies it as impacting Windows Streaming Service with the effect of obtaining elevated privileges, consistent with a local-exploit scenario (CVSS: Local, Privileges Required Low, User ...

CVE-2025-21287

CVE-2025-21287 is a Windows Installer elevation of privilege vulnerability. The linked documents confirm this CVE affects the Windows Installer component in Windows OS, enabling a local attacker with low privileges and no user interaction to elevate privileges. Remediation is provided by Microsof...

CVE-2025-21347

CVE-2025-21347 is linked to the Windows Update Stack and is described in the connected NCSC advisory as a Denial-of-Service vulnerability. The CVE entry in that document assigns a base CVSS-like severity of 6.0 and notes that Microsoft has updates available to fix the issue. The mode of the vulne...

CVE-2025-24046

Technical details enabling exploitation of CVE-2025-24046 (Kernel Streaming Service Driver elevation) are not publicly provided in the connected documents. The initial entry states a use-after-free leading to local privilege elevation; no confirmed exploit vectors or patches are described here. M...

CVE-2025-24073

CVE-2025-24073 affects the Windows DWM Core Library and stems from improper input validation, enabling a locally authorized attacker to elevate privileges. The vulnerability is described with a base CVSS v3.1 score of 7.8 (High) and local attack vector with low complexity, requiring low privilege...