CVE-2017-8580

Technical details for CVE-2017-8580 are not publicly available in the provided connected documents. Monitor for updates from authoritative sources to confirm affected products, root cause, impact, and any available mitigations or patches.

CVE-2026-69491

CVE-2026-69491 is a heap-based buffer overflow in Windows Microsoft DirectMusic that allows an unauthorized, network-based attacker to achieve remote code execution without user interaction or prior privileges. The vulnerability is rated CVSS 9.8 (Critical) with high impact to confidentiality, in...

CVE-2016-7273

CVE-2016-7273 affects the Windows Graphics Component in Windows 10 (Gold/1511/1607) and Windows Server 2016. A remote code execution vulnerability arises from how the Graphics Component handles objects in memory, allowing an attacker to run arbitrary code when a user visits a crafted web site or ...

CVE-2017-0080

Technical details about CVE-2017-0080 are not publicly provided in the supplied documents; the connected EUVD/CIRCL entries mention sightings/malware but do not include affected products, root cause, or remediation. Monitor for updates.

CVE-2017-0215

CVE-2017-0215 affects Windows 10 version 1607 and Windows Server 2016, describing a security feature bypass in Device Guard Code Integrity Policy that could allow injection of code into a PowerShell session. Public exploitation exists per related advisories. The issue is addressed in June 2017 se...

CVE-2017-0293

CVE-2017-0293 : Microsoft Windows PDF Library improperly handles objects in memory, allowing remote code execution in multiple Windows versions. Root cause (as described) is memory handling that can lead to code execution in the context of the current user; attacker could gain user rights if expl...

CVE-2018-8437

CVE-2018-8437 describes a denial-of-service against the Microsoft Hyper-V Network Switch when input from a privileged user on a guest OS is not properly validated. Affected: Windows 10 and Windows 10 Servers. Cause: input validation failure in the Hyper-V Network Switch on the host. Impact: avail...

CVE-2020-0750

CVE-2020-0750 involves an elevation of privileges in Microsoft Windows/Windows Server related to the Connected Devices Platform Service . The root cause, as described in CNVD entries, is a flaw in how the service handles objects in memory, enabling an attacker to execute code with elevated privil...

CVE-2020-0871

CVE-2020-0871 is an information disclosure vulnerability in Windows Network Connections Service where objects in memory are not handled correctly, potentially exposing memory contents. The provided documents identify the vulnerability type and affected component but do not specify product version...

CVE-2020-0882

CVE-2020-0882 is an information-disclosure vulnerability in the Windows GDI component. The flaw arises from improper handling of memory contents, allowing an attacker to potentially obtain sensitive information from a targeted system. The CVSS metrics indicate a network-facing but low-exploitabil...

CVE-2020-1139

Technical details (affected products, vulnerable components, fixes) are not provided in the connected documents. Monitor for updates.

CVE-2020-1186

Public technical details about CVE-2020-1186 are not present in the provided documents. The connected EUVD entries mention malware named 'sbrugna' but do not describe affected products, vulnerable components, impact, or mitigations. Monitor for updates.

CVE-2020-1386

CVE-2020-1386 is an information-disclosure vulnerability in Windows Connected User Experiences and Telemetry Service where file information is disclosed improperly. The NVD data shows: Impact on confidentiality: PARTIAL ; attack vector: LOCAL ; authentication: NONE ; user interaction: NONE (CVSS2...

CVE-2021-26861

CVE-2021-26861 is a Windows Graphics Component remote code execution vulnerability. Public records identify the affected component as the Windows Graphics Component; the underlying issue is reflected in the CVSS3 metrics (base score 7.8 HIGH, LOCAL exploit, user interaction required, and high imp...

CVE-2025-21352

CVE-2025-21352 is a Windows Internet Connection Sharing (ICS) Denial of Service vulnerability. The NVD entry describes a DoS impact with an overall CVSS v3.1 base score of 6.5 (MEDIUM), attack vector Adjacent, attack complexity Low, privileges required None, user interaction None, and high availa...

CVE-2025-58726

CVE-2025-58726 affects Windows SMB Server with improper access control that enables an authenticated network attacker to elevate privileges. The issue is network-exploitable, requires low privileges, and has high impact on confidentiality, integrity, and availability. Microsoft and OS security up...

CVE-2025-59505

CVE-2025-59505 is a Windows Smart Card Reader privilege-escalation vulnerability described as a double-free issue that could allow an authenticated local attacker to gain elevated privileges. The connected material confirms the CVE is categorized as a high-severity (CVSS v3.1 base 7.8) local, use...

CVE-2026-40398

CVE-2026-40398 is a heap-based buffer overflow in Windows Remote Desktop Services that allows an authenticated attacker to perform local privilege escalation. The description across sources consistently identifies a local, authenticated exploit path with a high impact (C/H/I/A: High) and a CVSS v...

CVE-2026-62730

CVE-2026-62730 describes a buffer over-read in the Windows Wired AutoConfig Service that can disclose information locally. The issue is exploitable by an authorized, low-privilege local attacker (LOCAL attack vector, LOW privileges, no user interaction) with a CVSS v3.1 base score of 5.5 (HIGH co...

CVE-2026-62754

CVE-2026-62754 describes a heap-based buffer overflow in Windows Kerberos that allows an authorized attacker to achieve local privilege escalation. The flaw is triggered within the Kerberos-related code path, enabling elevation of privileges on the affected system. The available documents confirm...

CVE-2026-62758

CVE-2026-62758 is a heap-based buffer overflow in Windows Remote Access Connection Manager that permits a locally authenticated attacker to elevate privileges. Affected component: RASMAN service on Windows. Root cause: heap overflow enabling arbitrary code execution with HIGH impact on confidenti...

CVE-2026-62883

CVE-2026-62883 describes a numeric truncation error in Windows DNS that allows an authorized attacker to elevate privileges locally. Affected component: Windows DNS resolution logic. Root cause: numeric truncation leads to improper handling of DNS-related data, enabling local privilege escalation...

CVE-2026-65662

CVE-2026-65662 describes an out-of-bounds read in Windows GDI that allows an authorized local attacker to disclose information. The vulnerability impacts Windows GDI components and is rated with a CVSS v3.1 base score of 5.5 (Medium) , with local attack vector, low attack complexity, and low priv...

CVE-2026-69768

A heap-based buffer overflow in Windows RNDIS (Remote Network Driver Interface Specification) allows an unauthorized, network-based attacker to achieve remote code execution without user interaction or prior privileges. Microsoft assigned a CVSS 3.1 score of 9.8 (Critical) , reflecting high impac...

CVE-2017-0291

CVE-2017-0291 is a Windows PDF remote-code-execution vulnerability tied to the JPEG2000 parsing path in the Microsoft Windows PDF library. The KLA/Kaspersky entry explicitly lists a Windows PDF remote-code-execution vulnerability with CVE-2017-0291 and describes exploitation via specially crafted...

CVE-2017-8473

CVE-2017-8473 affects multiple Windows platforms (Windows 7 SP1, Windows Server 2008 SP2/R2, 2012/R2, Windows 10 1511/1607, 2016). The root cause is an information-disclosure condition arising when the Windows kernel (Win32k) improperly initializes memory objects, enabling an authenticated attack...

CVE-2017-8624

CVE-2017-8624 corresponds to the Windows CLFS Elevation of Privilege Vulnerability in the Common Log File System. The initial description states that CLFS on multiple Windows editions handles in-memory objects in an unsafe way, enabling local privilege escalation. The CVSS data supplied indicates...

CVE-2017-8704

CVE-2017-8704 concerns a Hyper-V Denial of Service in Windows 10 version 1607 and Windows Server 2016. The root cause is that Hyper-V fails to properly validate input received from an authenticated user inside a guest VM, which can cause a host crash/DoS. The vulnerability affects the Hyper-V com...

CVE-2017-8707

CVE-2017-8707 affects the Windows Hyper-V component across multiple Windows Server and client OS versions (Server 2008 SP2, R2 SP1; Windows 8.1; Server 2012 Gold/R2; Windows 10 variants 1511/1607/1703; Server 2016). The issue is an information-disclosure vulnerability caused by improper validatio...

CVE-2020-0743

CVE-2020-0743 is an elevation of privilege in Microsoft Windows/Windows Server arising from how the Connected Devices Platform Service handles objects in memory. The root cause is a memory handling flaw in that service, enabling an attacker to execute code with elevated privileges. No specific ex...

CVE-2020-0763

CVE-2020-0763 is a Windows Defender Security Center elevation-of-privilege vulnerability. According to CNVD-2020-18167/18165, an attacker who can log on could exploit Defender Security Center by manipulating in-memory objects to elevate privileges. The initial description aligns with a memory-obj...

CVE-2020-0820

CVE-2020-0820 is a Windows Media Foundation information-disclosure vulnerability, caused by improper handling of objects in memory. CVSSv3 base: 5.5 (MEDIUM), local access, low privileges required, no user interaction. Confidentiality impact is HIGH; integrity/availability unaffected per the avai...

CVE-2020-0844

CVE-2020-0844 is an elevation of privilege in Windows, tied to the Connected User Experiences and Telemetry Service. The underlying issue is improper handling of file operations by this service, which could allow a local attacker to run code with elevated privileges. Remediation text in connected...

CVE-2020-0917

Technical details are not publicly available in the provided connected documents for CVE-2020-0917. Monitor for updates.

CVE-2020-1142

CVE-2020-1142 is a Windows GDI Elevation of Privilege vulnerability in which the Graphics Device Interface mishandles objects in memory, enabling local attackers to run code in kernel mode after logging on. The NVD/MS advisories describe a high-impact, local, privilege-escalation flaw with 7.2/7....

CVE-2020-1364

CVE-2020-1364 affects Windows WalletService. Description: a denial-of-service vulnerability arising from how WalletService handles files, allowing an attacker to craft an application that corrupts system files to trigger DoS. Connected CNVD entry confirms WalletService DoS with file handling as r...

CVE-2024-43534

CVE-2024-43534 is a Windows Graphics Component Information Disclosure vulnerability. The affected product is Windows Graphics Component; the entry indicates an information disclosure impact (confidentiality) with network attack vector, no integrity/availability impact, and user interaction requir...

CVE-2024-43608

CVE-2024-43608 is a Windows RRAS remote code execution vulnerability with network access (AV:N, AC:L, PR:N, UI:R, S:U, C/H/I/H/A:H) and high impact across confidentiality, integrity, and availability. Connected sources corroborate RRAS involvement and classify the exploit as a remote code executi...

CVE-2024-43646

Technical details are not publicly provided in the supplied documents. Monitor for updates from Microsoft/Microsoft Security Update Guide and NVD.

CVE-2024-49107

Technical details, affected components, and remediation specifics for CVE-2024-49107 are not provided in the supplied connected documents. Monitor for official updates from Microsoft and CVE listings for concrete technical description, impact, and fixes.

CVE-2025-21257

CVE-2025-21257 corresponds to Windows WLAN AutoConfig Service Information Disclosure Vulnerability. The connected documents identify the affected component as the Windows WLAN AutoConfig Service and describe the issue as an information disclosure vulnerability, with local attack requirements (Loc...

CVE-2025-30385

Technical details about CVE-2025-30385 are not provided in the connected documents. The initial description mentions a Windows use-after-free in the CLFS driver that could elevate privileges, but no vendor/version specifics or fixes are disclosed here. Monitor for authoritative updates.

CVE-2026-21248

CVE-2026-21248 describes a heap-based buffer overflow in Windows Hyper-V. The vulnerability allows an authorized, locally-privileged attacker to execute code on the affected host. The CVSS v3.1 metrics indicate LOCAL attack vector, LOW attack complexity and LOW privileges required, with UI access...

CVE-2026-21265

CVE-2026-21265 describes a Secure Boot bypass tied to expiration of Microsoft root certificates in the UEFI KEK/DB chain. Affected certificates include KEK CA 2011 (expires 2026-06-24), UEFI CA 2011 (expires 2026-06-27), and Windows Production PCA 2011 (expires 2026-10-19). The vulnerability aris...

CVE-2026-49794

CVE-2026-49794 concerns the Windows USB Audio Class driver (usbaudio.sys). The vulnerability is an out-of-bounds read in the driver that enables an unauthorized attacker to disclose information when a physical access scenario is present. Attacker class: physical access with low attack complexity ...

CVE-2026-50304

CVE-2026-50304 is a confirmed vulnerability affecting Microsoft Windows Active Directory Federation Services (AD FS). The issue is a stack-based buffer overflow in AD FS that could allow an unauthenticated network attacker to cause a denial of service. Connected sources corroborate the nature of ...

CVE-2026-62747

CVE-2026-62747 is a heap-based buffer overflow in Windows Device Association Service that enables a locally authenticated attacker to elevate privileges. Exploit details are not provided in the connected documents, and no specific patch/version is listed here; CVSS v3.1 base score is 7.8 ( HIGH )...

CVE-2026-62782

CVE-2026-62782 is a Windows SMB Client vulnerability described as an out-of-bounds read that could allow an unauthenticated, remote attacker to disclose information over the network. The description and multiple sources (NVD, MSRC, CIRCL, ENISA/NCSC advisory references) confirm the affected compo...

CVE-2026-70307

CVE-2026-70307 describes a use-after-free flaw in the Windows Ancillary Function Driver for WinSock that can allow an authorized local attacker to elevate privileges. Affected component is the Windows network stack’s Ancillary Function Driver used by WinSock; root cause is a use-after-free bug in...

CVE-2017-8460

CVE-2017-8460 is a Windows PDF information disclosure vulnerability affecting Windows 8.1, Windows Server 2012 R2/2016 and related Windows 10 versions. Connected sources confirm a Windows PDF vulnerability surface and indicate that June 2017 security updates (e.g., KB4022724/KB4022725/KB4022717/K...