CVE-2017-8475

Technical details about CVE-2017-8475 are not publicly available in the provided connected documents. The EUVD entries mention malware unrelated to concrete exploit details. Monitor for updates.

CVE-2024-43620

CVE-2024-43620 corresponds to a Windows Telephony Service remote code execution vulnerability with a high impact (base CVSS 8.8; network access; user interaction required). In the connected documents, it is listed under Windows Telephony Service with an impact described as Execute arbitrary code ...

CVE-2025-21289

CVE-2025-21289 is a denial-of-service vulnerability in Microsoft Message Queuing (MSMQ). Public details in the provided documents show a network‑accessible issue with a CVSS 3.1 base score of 7.5 (HIGH) where no user interaction is required and no privileges are needed to trigger the impact of de...

CVE-2025-24072

CVE-2025-24072 is a use-after-free vulnerability in Microsoft Local Security Authority Server (lsasrv) that can allow an authorized attacker to locally elevate privileges. The affected component is lsasrv; impact is elevated privileges (local). Connected sources (including NCSC/KB advisories) con...

CVE-2025-33067

CVE-2025-33067 — Windows Kernel local privilege escalation due to improper privilege management. Affects the Windows Kernel; attacker can gain elevated rights locally with no user interaction. CVSSv3.1 base score 8.4 (AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). Connected sources confirm the impact as l...

CVE-2025-33068

CVE-2025-33068 is a denial-of-service vulnerability in Windows Standards-Based Storage Management Service caused by uncontrolled resource consumption. The issue can be triggered over the network to degrade or disrupt service. Microsoft has released security updates addressing this family of issue...

CVE-2025-48822

CVE-2025-48822 is an out-of-bounds read vulnerability in Windows Hyper-V that could enable local code execution. The connected NCSC entry explicitly lists the impact as Execution of arbitrary code on Windows Hyper‑V, with CVSS base score 8.6 (LOCAL, HIGH). The documents do not provide additional ...

CVE-2026-26182

CVE-2026-26182 is a Windows elevation-of-privilege vulnerability caused by a use-after-free in the Windows Ancillary Function Driver for WinSock. The impact is local privilege escalation for an authorized user, as described by multiple sources. Public notices confirm the issue affects Windows com...

CVE-2026-34339

Technical details about CVE-2026-34339 (Windows LDAP denial of service) are not publicly available in the provided connected documents. Monitor for updates from Microsoft/NVD for affected products, vectors, and fixes.

CVE-2026-54992

CVE-2026-54992 is a heap-based buffer overflow affecting the Windows Message Queuing Queue Manager that allows a local attacker to execute code. The vulnerability is described in NVD/MSRC references as enabling local arbitrary code execution. The public entries consistently describe the same unde...

CVE-2026-62712

CVE-2026-62712 is a Windows Win32K heap-based buffer overflow that enables local privilege escalation by an authorized attacker. Affected component: Windows kernel user-mode win32k; root cause is a heap overflow in Win32K handling. Impact per provided metrics: Confidentiality, Integrity, and Avai...

CVE-2017-0057

CVE-2017-0057 is a Windows DNS client information-disclosure vulnerability. The DNS client in affected Windows versions (Windows 8.1, Windows Server 2012 R2, Windows RT 8.1, Windows 10 1511/1607, Windows Server 2016) may mishandle DNS queries, enabling an attacker to obtain sensitive information....

CVE-2017-0186

CVE-2017-0186 describes a denial-of-service vulnerability in Microsoft Hyper-V Network Switch when a privileged user on a guest OS can cause input validation to fail on supported Windows hosts (Windows 10, 8.1, Server 2012, 2012 R2, 2016). The underlying impact is host availability disruption. No...

CVE-2017-0298

Technical details about CVE-2017-0298 are not publicly provided in the supplied documents. No specific affected products/versions or root cause are described here. Monitor official sources for updates.

CVE-2017-8493

CVE-2017-8493 affects Windows 8.1/RT 8.1, Windows Server 2012 R2, Windows 10 (Gold, 1511, 1607, 1703) and Windows Server 2016. The issue is a Windows security feature bypass where an attacker can set variables that are read‑only or require authentication due to a failure to enforce case sensitivi...

CVE-2018-1004

Technical details for CVE-2018-1004 (VBScript engine remote code execution) are not provided in the connected documents. Public details (affected versions, root cause, exploitability, fixes) are not available here. Monitor for updates and consult primary sources for specifics.

CVE-2019-1223

The CVE-2019-1223 entry describes a denial-of-service in Remote Desktop Protocol (RDP) where an attacker can cause the RDP service to stop responding by sending specially crafted connection requests. The vulnerability arises in how RDP handles connection requests, enabling network-based DoS when ...

CVE-2019-1439

CVE-2019-1439 is described as a Windows GDI information disclosure vulnerability. Connected advisories provide concrete details: a heap-based buffer overflow in the MF3216 component of Microsoft Windows, with exploitation described as remote and triggered by the user opening a specially crafted f...

CVE-2020-0798

CVE-2020-0798 is a Windows Installer elevation-of-privilege vulnerability. The issue arises when Windows Installer does not properly sanitize input, causing insecure library loading. A locally authenticated attacker could execute arbitrary code with elevated system privileges. The CVE is tied to ...

CVE-2020-0801

Technical details for CVE-2020-0801 are not publicly available in the provided documents. Monitor for updates.

CVE-2020-0836

CVE-2020-0836 describes a denial-of-service vulnerability in Windows DNS where the DNS service can become nonresponsive if it fails to properly handle queries. An authenticated attacker could exploit this by sending crafted DNS queries, leading to resource exhaustion and service unavailability. T...

CVE-2020-0879

CVE-2020-0879 is a Windows GDI information-disclosure vulnerability in which memory objects within the Graphics Device Interface can be leveraged to retrieve information from the target system. Public documentation describes it as an information-disclosure issue arising from how GDI handles memor...

CVE-2020-0942

CVE-2020-0942 is an Elevation of Privilege vulnerability in the Windows Connected User Experiences and Telemetry Service caused by improper handling of file operations. According to CNVD/NVD entries, exploitation would allow a locally authenticated attacker to execute code with elevated privilege...

CVE-2020-1055

CVE-2020-1055 is a Microsoft Active Directory Federation Services Cross‑Site Scripting vulnerability. The root cause is improper sanitization of user inputs in ADFS, enabling an attacker to perform cross‑site scripting on affected servers. The MSRC advisory describes an unauthenticated attacker e...

CVE-2020-1124

CVE-2020-1124 is a Windows vulnerability affecting the Windows State Repository Service, where an elevation of privilege occurs due to improper handling of objects in memory. The issue can allow a local attacker to gain higher privileges, with CVSS-3.1 indicating a HIGH base score (local exploit,...

CVE-2020-1132

CVE-2020-1132 is described as an Elevation of Privilege in Windows Error Reporting Manager caused by improper handling of file/folder links. The connected CNVD entry expands this to a condition where an attacker could exploit the issue by using a specially crafted application to overwrite a targe...

CVE-2020-1141

Technical details for CVE-2020-1141 are not publicly available in the provided documents. No explicit affected components, root cause, or fixes are stated here. Monitor for updates from official advisories.

CVE-2020-1149

Technical details for CVE-2020-1149 are not publicly available in the provided documents. Monitor for updates from official sources.

CVE-2020-1151

Technical details for CVE-2020-1151 are not publicly provided in the supplied documents. No concrete exploit, affected product/version, or remediation information is present. Monitor for updates from official advisories and vendor bulletins.

CVE-2020-1267

CVE-2020-1267 is a Windows Local Security Authority Subsystem Service (LSASS) denial-of-service vulnerability. According to CNVD-2020-52913, an attacker could trigger a DoS by sending a specially crafted authentication request, potentially causing the target system to reboot. The connected docume...

CVE-2020-1388

The CVE-2020-1388 entry describes an Elevation of Privilege vulnerability in Windows, triggered by how psmsrv.dll handles objects in memory. The CNVD-2020-43110 record confirms a Windows psmsrv.dll EoP flaw (local attacker could run a crafted app to execute code with elevated privileges). No expl...

CVE-2020-1438

CVE-2020-1438 is an Elevation of Privilege vulnerability in Windows Network Connections Service. The issue arises from how in-memory objects are handled, enabling local attackers to potentially execute code with elevated privileges. Affected product: Windows Network Connections Service (per CVE-2...

CVE-2021-26869

CVE-2021-26869 affects Windows via the ActiveX Installer Service, described as an Information Disclosure Vulnerability. The available documentation (NVD/NVD entry) indicates a LOCAL attack vector with LOW attack complexity and no user interaction, impacting confidentiality (partial to high depend...

CVE-2021-43246

CVE-2021-43246 is a Windows Hyper-V Denial of Service vulnerability. Public records identify it with local attack vector and availability impact, with CVSS 3.1 base score 5.6 (medium) and CVSS 2.0 base score 4.9 (medium). Affected context is Windows Hyper-V; exact vulnerable component/versions ar...

CVE-2023-32083

CVE-2023-32083 is described in the documents as a Windows Failover Cluster Information Disclosure vulnerability, with impact stated as access to sensitive data. The connected sources do not provide explicit technical root cause details or a specific remediation patch/version for this CVE. Action:...

CVE-2024-30079

Technical details about CVE-2024-30079 are not provided in the connected documents. No affected product/version, root cause, or remediation details are disclosed here. Monitor for updates.

CVE-2024-43622

CVE-2024-43622 is a Windows Telephony Service remote code execution vulnerability. According to NCSC guidance, it is associated with an 8.8/High severity score (CVSS 3.1: AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H), indicating network access without authentication is sufficient and user interaction is r...

CVE-2025-21201

CVE-2025-21201 is cited by NCSC as a Windows Telephony Server remote code execution vulnerability with CVSS-like severity of 8.8 (high) andImpact described as executing random code. The connected NCSC advisory confirms the vulnerability exists in Windows Telephony Server and provides an explicit ...

CVE-2025-32722

CVE-2025-32722 causes improper access control in the Windows Storage Port Driver . The vulnerability could allow an authorized local attacker to disclose information, per the CVE description. CVSSv3.1: Local attack, Low privileges required, no user interaction, Confidentiality impact High, others...

CVE-2025-33075

CVE-2025-33075 affects Windows Installer and is tied to an improper link resolution before file access (a link following issue). The root cause enables a locally authenticated attacker to achieve privilege escalation (local, high impact). The NCSC advisory aggregates list CVE-2025-33075 under Win...

CVE-2025-49744

CVE-2025-49744 — Microsoft Graphics Component heap-based buffer overflow can allow an authorized, local attacker to escalate privileges. Connected sources confirm this as an elevation-of-privilege vulnerability in the Microsoft Graphics Component (a graphics driver component). The provided docume...

CVE-2026-62732

CVE-2026-62732 is a heap-based buffer overflow in the Windows Telephony Service that enables a locally authenticated attacker to achieve privilege elevation. The vulnerability affects the Telephony Service component and is characterized by a local exploit path with low privileges required and no ...

CVE-2017-0024

Technical details for CVE-2017-0024 are not publicly available in the provided connected documents. Monitor for updates to confirm affected products, root cause, impact, and remediations.

CVE-2017-11763

CVE-2017-11763 is a remote code execution vulnerability in the Microsoft Graphics Component exploited via specially crafted embedded fonts. Affected products include multiple Windows versions listed in the CVE description. Remediation is provided by security updates in the October 2017 rollups (e...

CVE-2017-8474

Technical details about CVE-2017-8474 are not publicly provided in the supplied connected documents. Monitor EUVD entries for updates; no concrete affected products, root cause, impact, or remediation are stated in the available sources.

CVE-2017-8478

Technical details about CVE-2017-8478 are not publicly available in the provided documents. Monitor for updates.

CVE-2017-8485

Technical details about CVE-2017-8485 are not provided in the connected documents. The available materials do not specify affected versions, root cause, impact, or fixes. Monitor for updates.

CVE-2017-8531

CVE-2017-8531 : Affected are Windows graphics components including Uniscribe across Windows client/server lines (e.g., Windows 7 SP1, 8.1, 10 variants; Windows Server 2008-2016) and Microsoft Office; root cause is an information disclosure vulnerability caused by improper memory disclosure in the...

CVE-2017-8573

CVE-2017-8573 is the Microsoft Windows Graphics Component elevation-of-privilege vulnerability. Public details in CNVD-2017-16000 describe that the Graphics component fails to properly handle in-memory objects, allowing a local attacker to execute code in kernel mode with elevated privileges. The...

CVE-2017-8679

CVE-2017-8679 pertains to a Windows kernel information disclosure vulnerability. The affected platform set includes Windows Server 2008 SP2/R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold/R2, Windows RT 8.1, Windows 10 (various builds), and Windows Server 2016. The root cause is impr...