2030 matches found
CVE-2026-62795
CVE-2026-62795 is a Windows LDAP (Lightweight Directory Access Protocol) use-after-free vulnerability that allows a remote attacker to execute code over the network. The issue is described as a remote code execution in Windows LDAP due to a use-after-free condition, enabling an unauthenticated, n...
CVE-2026-62820
CVE-2026-62820 concerns Windows DNS Server. The issue is a race condition caused by concurrent execution using a shared resource with improper synchronization, leading to remote code execution over a network. Affected product is Windows DNS Server; the vulnerability is triggered via network acces...
CVE-2024-30009
CVE-2024-30009 corresponds to a Windows RRAS remote code execution vulnerability. The RRAS service is affected, with the issue enabling execution of arbitrary code on a network-accessible target. The CVSS vector indicates network access, low attack complexity, no privileges required, user interac...
CVE-2024-30015
CVE-2024-30015 affects Windows Routing and Remote Access Service (RRAS). The connected NCSC advisory lists CVE-2024-30015 under RRAS with impact described as Execution of random code (CVSS v3.1: 7.5, Network attack vector, high complexity, no privileges required, user interaction required, impact...
CVE-2024-43634
CVE-2024-43634 (Windows USB Video Class System Driver Elevation of Privilege) affects Windows USB Video Driver. Connected sources corroborate a privilege-escalation vulnerability with CVSS v3.1 base score 6.8 (Vector: Privileges none, User interaction none, Attack vector physical, Scope unchanged...
CVE-2025-21332
CVE-2025-21332 corresponds to a MapUrlToZone Security Feature Bypass in Windows. The connected data shows a CVSS v3.1 base score of 4.3 (vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N) indicating a network-accessible issue with low integrity/availability impacts and user interaction require...
CVE-2026-62819
CVE-2026-62819 corresponds to a Remote Code Execution vulnerability in Windows Routing and Remote Access Service (RRAS). Available details indicate that the vulnerability resides in RRAS and could allow an attacker to gain unauthorized code execution on a victim’s machine via a network attack. Th...
CVE-2018-0971
CVE-2018-0971 is an information-disclosure vulnerability in the Windows kernel that could enable an attacker to bypass Kernel ASLR. The Initial description lists affected Windows versions (multiple client/server editions). Connected documents show exploitation references: CIRCL entries for CVE-20...
CVE-2024-30010
CVE-2024-30010 refers to a Windows Hyper-V Remote Code Execution vulnerability. Connected OpenVAS entries identify CVE-2024-30010 under Windows Hyper-V with impact described as "Executing Random Code". The CVE is linked to Microsoft advisories, and the CVE description in the initial document is h...
CVE-2024-38074
CVE-2024-38074 is described as a Remote Code Execution vulnerability in the Windows Remote Desktop Licensing Service. The provided CVSS 3.1 metrics indicate a network-accessible, no-authored-exploitation vector with HIGH impact to confidentiality, integrity, and availability (CVSS: 3.1: AV:N/AC:L...
CVE-2024-38265
CVE-2024-38265 is a Windows RRAS remote code execution vulnerability. The connected documents confirm RRAS is affected and indicate this CVE can lead to remote code execution over the network, with a highly elevated impact (NCSC lists 8.80, Execute random code). The initial metrics show CVSSv3.1:...
CVE-2024-43592
CVE-2024-43592 is a Windows RRAS remote code execution vulnerability. The connected sources indicate it affects Windows RRAS with an attack vector over the network, requiring low privileges and no user interaction, yielding a high impact on confidentiality, integrity, and availability (C/H/I/A). ...
CVE-2025-21303
Technical details are not publicly provided in the supplied documents for CVE-2025-21303 (Windows Telephony Service RCE). Monitor for updates from Microsoft; no specific vulnerable component/version or remediation is described here.
CVE-2025-27483
CVE-2025-27483 is an NTFS elevation-of-privilege issue described as an out-of-bounds read in Windows NTFS that could allow a local attacker to obtain elevated privileges. The CVE is tied to Windows NTFS and is rated HIGH (CVSS 3.1: AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H; base score 7.8). Public refe...
CVE-2026-40403
CVE-2026-40403 describes a heap-based buffer overflow in Windows Win32K GRFX that could allow a locally authenticated attacker to execute code. Affected component is Windows graphics subsystem (Win32K GRFX); cause is a heap-based overflow. Impact per available data is local code execution with hi...
CVE-2024-30017
CVE-2024-30017 affects Microsoft Windows Hyper-V. It is a remote code execution vulnerability in Hyper-V with CVSSv3.1 base score 8.8 (Network, Privileges Required: Low, User Interaction: None; Confidentiality/Integrity/Availability: High). Affected: Windows Hyper-V component; likely requires net...
CVE-2024-30087
Technical details are not provided in the connected documents. CVE-2024-30087 is a Win32k Elevation of Privilege vulnerability with CVSS 3.1 base score 7.8, vector LOCAL, exploit complexity LOW, privileges required LOW, user interaction NONE.
CVE-2024-38184
CVE-2024-38184 is a Windows kernel-mode driver elevation of privilege vulnerability. The CVE affects Windows kernel-mode drivers and is exploitable locally with LOW privileges required and no user interaction, with a HIGH impact on confidentiality, integrity, and availability per the CVSS 3.1 met...
CVE-2024-43520
CVE-2024-43520 is a Windows Kernel Denial-of-Service vulnerability. The initial records classify it as a Windows kernel issue affecting availability, with a CVSS v3.1 base score of 5.0 (LOCAL, LOW privileges, LOW attack complexity, UI: REQUIRED, S: U, C/N/I with A:H). Connected sources indicate t...
CVE-2025-21297
CVE-2025-21297 is a Windows Remote Desktop Services remote code execution vulnerability with CVSS v3.1 base score 8.1 (HIGH). The initial document indicates a network attack vector with no user interaction and high impact on confidentiality, integrity, and availability. Connected sources confirm ...
CVE-2025-26648
CVE-2025-26648 affects the Windows Kernel. Description: sensitive data stored in memory that is not properly locked can allow an authorized locally authenticated attacker to elevate privileges. The issue is listed under Windows Kernel vulnerabilities (CVE-2025-26648) with high impact (local Privi...
CVE-2026-33834
Technical details are not publicly available in the provided documents. No affected products/versions or remediation specifics are included here. Monitor for updates from official CVE/NVD entries to obtain concrete exploit info, mitigations, and fixes.
CVE-2026-57089
Summary : CVE-2026-57089 affects the Windows SMB Server Network Transport Driver (srvnet.sys). The issue is a use-after-free memory corruption bug that can be triggered by an unauthenticated attacker over the network to achieve remote code execution. The vulnerability is listed with high to criti...
CVE-2026-58608
CVE-2026-58608 affects Windows Print Spooler components, where a race condition from improper synchronization on a shared resource enables remote code execution over a network. The vulnerability allows an authenticated attacker with low privileges to execute code with high impact (C/H; I/H; A/H) ...
CVE-2016-7237
CVE-2016-7237 affects Local Security Authority Subsystem Service (LSASS) in Windows between Vista SP2 and Windows Server 2016. The vulnerability allows remote authenticated users to cause a denial of service (system hang) by sending a crafted request, via the LSASS handling path (notably connecte...
CVE-2017-0269
CVE-2017-0269 is a Windows SMBv1 denial-of-service vulnerability: the SMBv1 server may stop responding when it receives specially crafted requests. The issue is tied to handling of SMBv1 traffic (no explicit exploit details in the provided docs). Affected context is Windows SMBv1 processing; pote...
CVE-2023-29370
Technical details about CVE-2023-29370 are not publicly provided in the supplied documents. No affected products, root cause, impact, or remediation specifics are disclosed here. Monitor for updates in connected sources.
CVE-2024-30028
CVE-2024-30028 is a Windows Win32k elevation-of-privilege vulnerability. The NCSC advisory lists it under Windows Win32K with a CVSS v3.1 base score of 7.8 (HIGH) and impact: higher privileges, and notes the vulnerability is exploitable locally with low attack complexity (PR:L, AV:L) and no user ...
CVE-2024-37972
Technical details for CVE-2024-37972 are not publicly provided in the supplied documents. No affected products, root cause, impact, or remediation are disclosed here. Monitor for updates from authoritative sources.
CVE-2025-26647
CVE-2025-26647 describes an elevation-of-privilege vulnerability in Windows Kerberos caused by improper input validation, allowing network-based privilege escalation. Affected component: Windows Kerberos in Windows client/server environments. Impact is high (CVSS 3.1: 8.8, Network exploit, Privil...
CVE-2025-47981
CVE-2025-47981 is a heap-based buffer overflow in Windows SPNEGO Extended Negotiation that enables pre-auth remote code execution over the network. It affects Windows clients (e.g., Windows 10 1607+) and Windows Server platforms. The initial doc provides a 9.8 CVSSv3.1 score (NETWORK, NONE/LOW/NO...
CVE-2017-11771
CVE-2017-11771 is a remote code execution vulnerability in the Microsoft Windows Search component. The issue arises from improper handling of DNS responses by the Windows Search service, allowing an unauthenticated, remote attacker to execute code on affected systems. The CVE is referenced alongs...
CVE-2017-0078
Technical details for CVE-2017-0078 are not provided in the connected documents. Monitor for updates from official advisories; no exploit, impact, or remediation specifics are included here.
CVE-2018-8136
CVE-2018-8136 is described as a remote code execution vulnerability in how Windows handles objects in memory, affecting Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008/2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10 and Windows 10 servers. The con...
CVE-2024-30029
According to the NCSC advisory (NCSC-2024-0210), CVE-2024-30029 affects Microsoft Windows RRAS and is rated with CVSSv3.1 base score 7.5 (HIGH). The RRAS vulnerability enables remote code execution via network access, with the advisory indicating the impact as executing random code on the target....
CVE-2024-38100
CVE-2024-38100 is a Windows File Explorer elevation-of-privilege vulnerability. The provided documents identify it as a Windows File Explorer issue with a CVSS v3.1 base score of 7.8 (Local access, Privilege escalation, no user interaction). Connected sources corroborate Windows-vulnerability con...
CVE-2017-0181
CVE-2017-0181 affects the Windows Hyper-V Network Switch on Windows 10/Windows Server 2016 hosts. The vulnerability is a remote code execution caused by improper validation of input from the guest OS, requiring an authenticated user on the guest. Connected sources confirm Hyper-V input validation...
CVE-2024-30024
CVE-2024-30024 is listed by ENISA NCSC as a Windows RRAS vulnerability with a CVSS v3.1 score of 7.5 (HIGH) and a base impact of executing random code. It is part of the Windows Routing and Remote Access Service (RRAS) family and is described in the connected document as a network-exposed issue t...
CVE-2024-30077
Technical details are not provided in the supplied documents; no public specifics are included here. Monitor for updates from official advisories.
CVE-2025-21205
CVE-2025-21205 is a Windows Telephony Service vulnerability: a heap-based buffer overflow that allows a network-based attacker to achieve remote code execution. The CVSS details show a HIGH base score with NETWORK access, LOW attack complexity, and PR:N, UI:R. Successful exploitation would impact...
CVE-2023-29346
Technical details about CVE-2023-29346 are not publicly available in the provided documents. No affected product/version/impact is specified here. Monitor for updates in the connected sources.
CVE-2023-32008
CVE-2023-32008: Windows Resilient File System (ReFS) Remote Code Execution vulnerability. Affects Windows with ReFS; exploitation is LOCAL with user interaction and no privileges required. CVSS v3.1 base score 7.8 (HIGH); impact on confidentiality, integrity, and availability is HIGH. Remediation...
CVE-2024-30016
CVE-2024-30016 affects Windows Cryptographic Services . The vulnerability is described as an information disclosure with impact to confidentiality (high) and is listed in sources as a Windows component issue with a CVSS v3.1 base score of 5.5 (attack vector: local; privileges required: low; user ...
CVE-2024-30025
CVE-2024-30025 affects the Windows Common Log File System Driver. The Windows/KB guidance mappings list CVE-2024-30025 with a CVSS v3.1 base score of 7.8 (LOCAL attack, LOW complexity, LOW privileges required, HIGH confidentiality/integrity/availability impact) and categorize it as an privilege e...
CVE-2024-49116
CVE-2024-49116 is a Windows Remote Desktop Services remote code execution vulnerability. Public details in connected documents note an RDS entry that is exploitable over a network with no user interaction and high impact (CVSS v3.1 base score 8.1). The root cause and affected versions are not exp...
CVE-2025-25008
CVE-2025-25008 describes an elevation-of-privilege in Windows due to improper link resolution before file access (link following). An authorized, local attacker could exploit this to gain higher privileges. CVSSv3.1 base score is 7.1 (High); attack vector LOCAL; privileges required LOW; user inte...
CVE-2025-27742
CVE-2025-27742 corresponds to an out-of-bounds read in Windows NTFS that can allow a local attacker to disclose information. The NVD entry lists a CVSS v3.1 base score of 5.5 (LOCAL, LOW attack complexity, NONE privileges, UI REQUIRED) with High confidentiality impact and no impact to integrity/a...
CVE-2026-21513
CVE-2026-21513 is a security feature bypass vulnerability in the MSHTML Framework. Affected component: MSHTML/MSHTML Framework used by Windows’ browsing/rendering stack. Root cause details are described in vendor advisories and security blogs as a protection mechanism bypass that can be triggered...
CVE-2017-0182
The connected Nessus plugin confirms a Hyper-V Denial of Service issue tied to CVE-2017-0182 family: a DoS affecting Microsoft Windows Hyper-V when input from a privileged guest OS is not properly validated, potentially crashing the host. Affected platforms include Windows client/server variants ...