CVE-2020-1284

CVE-2020-1284 is a denial-of-service vulnerability in the SMBv3 protocol (SMBv3 Client/Server) for Microsoft Windows. The issue arises from how SMBv3 handles certain requests, allowing an authenticated SMB server attacker to cause the target system to crash, and an unauthenticated attacker to cra...

CVE-2026-61350

Windows NTFS contains a buffer over-read that can disclose information when an attacker performs a physical attack. Affected component: NTFS; root cause: buffer over-read. CVSSv3.1 metrics indicate AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N with base score 4.6 (Medium). Impact is limited to confidential...

CVE-2026-62714

CVE-2026-62714 describes an integer underflow (wrap/wraparound) in Windows DHCP Server that allows an unauthorized attacker on an adjacent network to disclose information. The NVD entry confirms an ADJACENT network attack vector with LOW complexity, NONE privileges, and NONE user interaction, and...

CVE-2026-62746

CVE-2026-62746 is a Windows Win32k information-disclosure vulnerability described as a buffer over-read that allows an authorized, local attacker to disclose information. Affected component: Win32k (Windows). Impact per provided metrics: confidentiality impact High; attack vector Local; attack co...

CVE-2026-72979

CVE-2026-72979 is a use after free vulnerability in Windows DHCP Server that allows an unauthorized attacker to execute code over a network . The flaw is rated CVSS 9.8 (Critical) with a network attack vector, low complexity, and no privileges or user interaction required, resulting in high impac...

CVE-2017-0057

CVE-2017-0057 is a Windows DNS client information-disclosure vulnerability. The DNS client in affected Windows versions (Windows 8.1, Windows Server 2012 R2, Windows RT 8.1, Windows 10 1511/1607, Windows Server 2016) may mishandle DNS queries, enabling an attacker to obtain sensitive information....

CVE-2017-0186

CVE-2017-0186 describes a denial-of-service vulnerability in Microsoft Hyper-V Network Switch when a privileged user on a guest OS can cause input validation to fail on supported Windows hosts (Windows 10, 8.1, Server 2012, 2012 R2, 2016). The underlying impact is host availability disruption. No...

CVE-2017-0292

CVE-2017-0292 describes a Windows PDF remote code execution vulnerability in the Windows PDF handler. A specially crafted PDF file can cause arbitrary code execution on affected Windows versions (Windows 8.1; Windows Server 2012 Gold/R2; Windows RT 8.1; Windows 10 1511, 1607, 1703; Windows Server...

CVE-2017-11772

CVE-2017-11772 describes an information-disclosure vulnerability in the Microsoft Windows Search component where memory-handling flaws could allow an attacker to obtain sensitive data. The CVE applies to multiple Windows versions (including Windows client and server SKUs listed in the entry). Con...

CVE-2017-8474

Technical details about CVE-2017-8474 are not publicly provided in the supplied connected documents. Monitor EUVD entries for updates; no concrete affected products, root cause, impact, or remediation are stated in the available sources.

CVE-2017-8709

The CVE-2017-8709 entry concerns a Windows kernel information disclosure vulnerability in which the Windows kernel component improperly handles objects in memory. Affected products include Windows Server 2008 SP2/R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold/R2, Windows RT 8.1, Win...

CVE-2017-8720

CVE-2017-8720 is a local elevation-of-privilege flaw in the Windows graphics stack tied to the Win32k component. The vulnerability arises when Win32k fails to properly handle memory objects, allowing an attacker who can run code on a system to execute with kernel or higher privileges. Affected pr...

CVE-2019-1374

An information disclosure vulnerability exists in how Windows Error Reporting (WER) handles objects in memory. Multiple sources (NVD and Red Hat/SUSE advisories) identify it as a Windows in-memory handling issue that can expose sensitive information to an attacker with local access and user inter...

CVE-2019-1383

Technical details about CVE-2019-1383 are not publicly provided in the supplied documents. Monitor for updates in connected feeds for affected products, versions, impact, and fixes.

CVE-2019-1409

CVE-2019-1409 is an information disclosure vulnerability in the Windows Remote Procedure Call (RPC) runtime. The connected data confirms the root cause as improper initialization of objects in memory within RPC, enabling partial confidentiality impact. The CVE affects the Windows RPC component, w...

CVE-2020-0752

CVE-2020-0752 is a Windows privilege-escalation vulnerability in the Windows Search Indexer related to how it handles objects in memory. The issue is described as allowing an attacker with local access to potentially execute code with elevated permissions, with the CVSS provided by the primary en...

CVE-2020-0885

CVE-2020-0885 concerns the Windows GDI component, where memory contents can be improperly disclosed (information disclosure vulnerability). The vulnerability arises from how GDI handles objects in memory, enabling potential leakage of memory contents. The public documentation consistently describ...

CVE-2020-1169

CVE-2020-1169 is a Windows Runtime Elevation of Privilege vulnerability. The root cause is the Windows Runtime improperly handling objects in memory, which could allow an attacker to run arbitrary code in an elevated context by executing a specially crafted application. The vulnerability is addre...

CVE-2020-1396

CVE-2020-1396 affects Microsoft Windows ALPC Elevation of Privilege. CNVD-2020-45187 describes a vulnerability where Windows ALPC is not correctly handling calls, allowing an attacker who logs on and runs a crafted application to execute arbitrary code with local system privileges. The connected ...

CVE-2023-35331

Technical details about CVE-2023-35331 are not provided in the connected documents. The initial entry mentions an LSA Denial of Service vulnerability in Windows, but no affected product versions, root cause, impact specifics, exploitation status, or remediation are included here. Monitor for upda...

CVE-2023-36012

CVE-2023-36012 is a Windows DHCP Server information-disclosure vulnerability. Connected sources confirm the affected product area as Windows DHCP Server and provide a CVSS v3.1 base score of 5.3 (Medium) with vectors AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N, indicating a confidentiality impact of Low....

CVE-2024-38252

Technical details about CVE-2024-38252 are not publicly provided in the supplied documents. The records reference a Windows kernel privilege-elevation issue but do not disclose affected components, root cause, or fixes. Monitor for updates.

CVE-2024-43516

Technical details about CVE-2024-43516 are not provided in the connected documents. Public details appear limited in the supplied sources. Monitor for updates.

CVE-2025-21350

CVE-2025-21350 is a Windows Kerberos Denial-of-Service vulnerability. Connected sources indicate the issue affects Windows Kerberos with a CVSSv3.1 base score of 5.9 (Network, High impact on availability; no confidentiality/integrity impact). The connected documents confirm Microsoft has released...

CVE-2025-21389

Technical details about CVE-2025-21389 are not publicly provided in the connected documents. Monitor for updates from Microsoft and CVE repositories for affected products, exploitability, and remediation.

CVE-2025-29829

Technical details about CVE-2025-29829 are not provided in the supplied documents. Monitor official updates from Microsoft/NVD for affected products, impact, and mitigations.

CVE-2025-32724

CVE-2025-32724 affects Windows Local Security Authority Subsystem Service (LSASS). The connected NC SC advisory and MS security-update artifacts identify this as a Denial-of-Service vulnerability with CVSS v3.1 base score 7.5 (NETWORK, LOW complexity, NONE privileges, NONE user interaction) and s...

CVE-2025-47973

Technical details about CVE-2025-47973 are not publicly disclosed in the provided documents. No affected products, root cause, or remediation are described here. Monitor for updates from the sources.

CVE-2026-34346

CVE-2026-34346 concerns the Windows Ancillary Function Driver for WinSock. The vulnerability enables an authorized, local attacker to disclose sensitive information due to cleartext transmission of data. The available records (NVD/NVD entry and CVE listing) describe the affected component and the...

CVE-2026-50324

CVE-2026-50324 affects Windows Active Directory Federation Services (AD FS). The description identifies a loop condition described as an infinite loop that enables a network-based Denial of Service against AD FS. The CVE entry lists a Medium severity (AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H) with Ava...

CVE-2020-0732

CVE-2020-0732 is an elevation-of-privilege vulnerability affecting Microsoft DirectX, arising from improper handling of objects in memory. The CVE entry and CNVD CNVD-2020-14701 describe a memory-corruption/ misreference issue in DirectX that could enable code execution with kernel privileges if ...

CVE-2020-0780

CVE-2020-0780 is described as an elevation of privilege affecting the Windows Network List Service, arising from how the service handles objects in memory. The CVE entry identifies a local attack vector with low complexity and no user interaction required; the exploit could grant at least partial...

CVE-2020-0808

CVE-2020-0808 describes an elevation of privilege vulnerability in the way the Provisioning Runtime validates certain file operations. The connected documents reiterate this description but do not specify affected products, versions, root cause details, impact metrics, exploit status, or availabl...

CVE-2020-0918

CVE-2020-0918 corresponds to a Windows Hyper-V Elevation of Privilege vulnerability. Affected component: Hyper-V on Windows Server hosts. Root cause: vulnerability exists when the Hyper-V memory-handling of objects is faulty, allowing an attacker to elevate privileges on the host. Impact: high fo...

CVE-2020-1076

Technical details (affected product/versions, root cause, exploitability or fixes) for CVE-2020-1076 are not provided in the connected documents. No public specifics are available here; monitor for updated disclosures from official sources.

CVE-2020-1090

Technical details for CVE-2020-1090 are not publicly available in the provided documents. Monitor for updates from official advisories."

CVE-2020-1151

Technical details for CVE-2020-1151 are not publicly provided in the supplied documents. No concrete exploit, affected product/version, or remediation information is present. Monitor for updates from official advisories and vendor bulletins.

CVE-2020-1184

Technical details for CVE-2020-1184 are not publicly provided in the supplied documents; monitor for updates from official advisories.

CVE-2020-1375

CVE-2020-1375 is an elevation of privilege vulnerability in Windows, caused by improper handling of COM object creation in the Windows COM Server. The affected component is described as Windows COM Server, with exploitation requiring local access and the ability to run a specially crafted applica...

CVE-2020-16879

CVE-2020-16879 is a Windows Projected Filesystem information-disclosure vulnerability. The issue arises when the Projected Filesystem improperly handles file redirections, enabling a user who is logged on to the system to run a crafted application that could disclose sensitive information and fur...

CVE-2020-17076

CVE-2020-17076 affects Windows using the Update Orchestrator Service. The connected NVD entry confirms an Elevation of Privilege vulnerability in the Update Orchestrator Service, with local attack vector, low privileges required, and high impact on confidentiality, integrity, and availability (CV...

CVE-2021-26889

Technical details about CVE-2021-26889 are not publicly provided in the supplied documents. Monitor for updates from vendors and security advisories to obtain affected products, impact, and remediation.

CVE-2023-32083

CVE-2023-32083 is described in the documents as a Windows Failover Cluster Information Disclosure vulnerability, with impact stated as access to sensitive data. The connected sources do not provide explicit technical root cause details or a specific remediation patch/version for this CVE. Action:...

CVE-2025-21249

Technical details for CVE-2025-21249 are not publicly available in the provided documents; no affected products, root cause, or remediation are stated here. Monitor for official updates from Microsoft and CVE databases.

CVE-2025-21278

CVE-2025-21278 is a Windows Remote Desktop Gateway (RD Gateway) Denial of Service vulnerability. The NVD entry lists a local attack vector with low attack complexity and a high availability impact (CVSS v3.1: AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H; base score 5.5; CNA score 6.2). Exploitation status...

CVE-2025-21321

CVE-2025-21321 refers to a Windows Kernel Memory Information Disclosure vulnerability. Documentation confirms it affects Windows kernel memory and was addressed by January 2025 security updates (e.g., KB5050009, KB5050021, KB5049984, KB5049981, KB5049993). The CVSS shows local access with low pri...

CVE-2025-21323

Technical details about CVE-2025-21323 are not publicly available in provided connected documents. Records confirm the CVE exists and is linked to Windows Kernel Memory Information Disclosure, but no affected products, versions, root cause, or fixes are described here. Monitor updates.

CVE-2025-29968

Technical details (affected product/versions, root cause, impact, exploit info, and fixes) are not provided in the connected documents. Based on the supplied sources, only the basic description and CVSS metrics are available. Monitor for updates.

CVE-2025-33062

CVE-2025-33062 affects the Windows Storage Management Provider and is characterized as an out-of-bounds read that can allow an attacker with local access to disclose information. The NVD entry notes a CVSS v3.1 base score of 5.5 (Local, Low exploit complexity, Privileges Required: Low, Confidenti...

CVE-2025-33075

CVE-2025-33075 affects Windows Installer and is tied to an improper link resolution before file access (a link following issue). The root cause enables a locally authenticated attacker to achieve privilege escalation (local, high impact). The NCSC advisory aggregates list CVE-2025-33075 under Win...