CVE-2017-0180

Technical details for CVE-2017-0180 are not publicly provided in the connected documents. Available sources reference Hyper-V Network Switch input validation issues but do not disclose affected versions, root cause specifics, or exploit information. Monitor for updates.

CVE-2017-11779

CVE-2017-11779 concerns a vulnerability in the Windows DNSAPI.dll within the DNSAPI component of Microsoft Windows. A heap-based buffer overflow in the handling/validation of NSEC3 records (triggered by malicious DNS responses) could allow a remote attacker to execute arbitrary code in the contex...

CVE-2021-24093

Technical details about CVE-2021-24093 are not publicly provided in the supplied documents. Sources mention Windows Graphics Components and remote code execution at a high level but do not disclose affected versions, vectors, or fixes. Monitor for updates.

CVE-2024-49096

CVE-2024-49096 is a Denial-of-Service vulnerability in Microsoft Message Queuing (MSMQ). The connected NCSC advisory confirms MSMQ-related DoS as part of a Windows-vulnerability bundle, with the notable DoS impact described under the MSMQ entry in their consolidated list. The CVE entry itself spe...

CVE-2025-21197

CVE-2025-21197 is an information disclosure in Windows NTFS due to improper access control, enabling an authorized user to disclose file path information in folders they cannot list. Connected sources corroborate NTFS as affected and classify the impact as data exposure. Mitigation involves apply...

CVE-2025-21216

CVE-2025-21216 is a Windows Internet Connection Sharing (ICS) Denial of Service vulnerability. The available data show a CVSS v3.1 base score of 6.5 (Medium) with an impact on availability, requiring adjacent network access, low attack complexity, no privileges required, and no user interaction. ...

CVE-2025-21270

CVE-2025-21270 affects Microsoft Message Queuing (MSMQ) and is a Denial of Service vulnerability. Public data show an attack over the network with no authentication required, low attack complexity, and a high impact on availability (CVSS v3.1: 7.5). The connected documents indicate MSMQ-related e...

CVE-2025-21285

Technical details (affected products, root cause, impact or fixes for CVE-2025-21285 MSMQ DoS) are not included in the provided documents. Monitor updates from Microsoft and CVE/CIRCL references for remedies and exposure.

CVE-2025-21309

CVE-2025-21309 is a Windows Remote Desktop Services remote code execution vulnerability. The CVE entry indicates a NETWORK, HIGH-severity issue (CVSS v3.1: 8.1) affecting Windows Remote Desktop Services; no root-cause or affected version details are provided in the documents. Connected sources co...

CVE-2026-21530

CVE-2026-21530 : A double-free vulnerability in Windows Rich Text Edit is described as enabling an authorized attacker to perform local privilege escalation. The connected documents confirm the affected component and the local-privilege-elevation impact but do not provide exploit details, specifi...

CVE-2017-0162

Technical details for CVE-2017-0162 are not present in the connected documents. The Initial document provides a high-level vulnerability description only. Monitor for updates from official advisories for affected products and fixes.

CVE-2018-8127

CVE-2018-8127 is a Windows kernel information-disclosure vulnerability affecting multiple Windows versions (e.g., Windows 7, 8.1, 10, and server editions). Root cause: the kernel improperly handles objects in memory, enabling information leakage. The connected records do not provide concrete expl...

CVE-2024-30066

Technical details about CVE-2024-30066 (affected product, root cause, impact, mitigations, and fixes) are not publicly provided in the supplied documents. Monitor for updates and refer to the MSRC/MS vulnerability guidance when available.

CVE-2024-38101

Technical details about CVE-2024-38101 are not publicly provided in the supplied connected documents. Information about affected components, impact, and fixes is unavailable here. Monitor for updates from official sources to obtain confirmed technical specifics and remediation guidance.

CVE-2024-49085

CVE-2024-49085 corresponds to a Windows RRAS Remote Code Execution vulnerability. The vulnerability is rated CVSS v3.1: AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, base score 8.8 (HIGH). It affects Windows Routing and Remote Access Service and is exploitable over a network, requiring user interaction, w...

CVE-2025-21241

CVE-2025-21241 is a Windows Telephony Service Remote Code Execution vulnerability. The CVSS 3.1 score is 8.8 (Netwrk attack vector, Low attack complexity, No privileges required, User interaction required; Impact: Confidentiality, Integrity, Availability High). Public entries indicate a Windows c...

CVE-2025-21276

CVE-2025-21276 is a Windows MapUrlToZone Denial of Service vulnerability. The CVE entry lists a NETWORK‑level attack with low complexity and no privileges required, resulting in a HIGH impact on availability (CVSS 3.1 base 7.5). Multiple connected sources corroborate a DoS condition in the MapUrl...

CVE-2025-33070

CVE-2025-33070 is reported in EU/NCSC context as affecting Windows Netlogon, caused by use of an uninitialized resource, enabling an unauthenticated attacker to obtain elevated privileges. The CVSS vector indicates network access is required with high impact on confidentiality, integrity, and ava...

CVE-2018-0820

CVE-2018-0820 affects the Windows kernel on Windows 7 SP1, Windows 8.1/RT 8.1, Windows Server 2008 SP2/R2 SP1, 2012/2012 R2, Windows 10 (various builds) and Windows Server (various). The vulnerability arises from how objects are handled in memory, enabling local privilege escalation from a low-pr...

CVE-2024-30094

Technical details about CVE-2024-30094 (RRAS remote code execution) are not publicly provided in the supplied connected documents. No affected products/versions, exploit information, root cause, or remediation details are present. Monitor for updates.

CVE-2024-30097

Technical details for CVE-2024-30097 are not provided in the supplied connected documents. Public information in these sources is limited to update references; monitor for official advisories and technical details as they become available.

CVE-2024-38185

Technical details about CVE-2024-38185 are not publicly available in the provided documents. No affected products, root cause, impact, or remediation details are specified here. Monitor for updates in the connected sources.

CVE-2024-43550

CVE-2024-43550 is described in connected sources as a Windows Secure Channel vulnerability with an impact described as impersonation of another user. The NCSC advisory groups it with other Windows CVEs and notes that Microsoft has released security updates to fix affected components (e.g., Octobe...

CVE-2024-43644

Technical details about CVE-2024-43644 (affected product, root cause, impact, or fix) are not provided in the connected documents. Monitor for updates from official advisories.

CVE-2024-49089

Technical details about CVE-2024-49089 are not provided in the supplied documents; RRAS RCE is referenced but no affected versions, exploit, or remediation details are included. Monitor for updates.

CVE-2025-21229

CVE-2025-21229 is listed as a Windows Digital Media Elevation of Privilege vulnerability. Connected documents indicate Microsoft updates exist to fix vulnerabilities in Windows, with MSRC guidance and KB articles available, but do not provide explicit technical details (vulnerable component versi...

CVE-2025-21251

CVE-2025-21251 is a Denial-of-Service vulnerability in Microsoft Message Queuing (MSMQ). It is network‑based (no user interaction, no privileges required) and impacts MSMQ; exploitation leads to DoS with high impact on availability. Several connected sources corroborate MSMQ DoS for CVE-2025-2125...

CVE-2025-21312

CVE-2025-21312 is described as a Windows Smart Card Reader Information Disclosure vulnerability. The core technical details available across connected sources are limited to the CVE label, a CVSSv3.1 base score of 2.4 (PHYSICAL attack, low impact on confidentiality, no impact on integrity/availab...

CVE-2025-26687

CVE-2025-26687 is a use-after-free in Windows Win32K - GRFX that enables a network-based privilege escalation. The affected component is the Win32K GRFX graphics subsystem; the underlying issue is a use-after-free in that path, leading to total impact (CVE-2025-26687 shows a base score of 7.5/10 ...

CVE-2026-54999

The CVE-2026-54999 entry concerns a race condition in Windows TCP/IP where concurrent access to a shared resource allows an unauthorized attacker on an adjacent network to execute code. Documented impact is remote code execution with high severity (CVSSv3.1: AV=A, AC=L, PR=N, UI=N, S=U, C=H, I=H,...

CVE-2026-62728

The vulnerability CVE-2026-62728 affects Windows systems via the Common Log File System (CLFS) Driver. It is a time-of-check time-of-use (TOCTOU) race condition that allows an authorized, local attacker to elevate privileges. The CVSSv3.1 metrics indicate a Local attack, High impact on confidenti...

CVE-2017-0275

CVE-2017-0275 is an SMBv1 information-disclosure vulnerability in Microsoft Windows SMB server handling of certain requests. The initial description lists affected products as Windows platforms including Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and ...

CVE-2018-0972

CVE-2018-0972 is a Windows kernel information-disclosure vulnerability that could enable an ASLR bypass. The entry covers multiple Windows versions (desktop, server, and RT). Public details in the initial record include CVSS metrics from NVD (2.1/5.5, LOW to MEDIUM overall, LOCAL access with low ...

CVE-2018-8424

CVE-2018-8424 describes an information-disclosure vulnerability in the Windows GDI component where memory contents may be leaked. Affected products include Windows 7, Windows Server 2008 R2, Windows Server 2012, Windows 8.1, Windows 10 and their Server counterparts (e.g., Windows Server 2008, 201...

CVE-2024-30065

Technical details (affected product, root cause, impact, and fix) are not provided in the supplied documents. Monitor for updates from Microsoft/MSRC as more information becomes available.

CVE-2024-38062

Affected software: Windows Kernel-Mode Drivers. CVE-2024-38062 is described in the OpenVAS entries as a local privilege escalation vulnerability with an impact of obtaining elevated privileges (CVSS 7.80). Root cause is not detailed in the provided documents beyond the general kernel-mode driver ...

CVE-2025-21180

CVE-2025-21180 is a Windows exFAT File System vulnerability described as a heap-based buffer overflow that could allow local code execution. The connected documents identify the affected component as the Windows exFAT file system driver and confirm the root cause as a heap-based overflow, enablin...

CVE-2025-21203

CVE-2025-21203 affects Windows Routing and Remote Access Service (RRAS). The connected data confirms a network-accessible vulnerability in RRAS that can cause an information disclosure via a buffer over-read. Affected component: RRAS on Windows; root cause: buffer over-read; impact: confidential ...

CVE-2025-21242

CVE-2025-21242 is a Windows Kerberos information-disclosure vulnerability. Public sources (CNNVD/MSRC/NVD) identify it as a Kerberos-related information disclosure affecting multiple Windows builds (e.g., Windows 10/11 and Windows Server variants). The exact technical root cause and vulnerable su...

CVE-2025-24064

CVE-2025-24064 is a use-after-free in DNS Server that enables remote code execution over the network. The issue is documented as a DNS Server vulnerability with CVSS 3.1/3.1 and a high impact (Execute Random Code) in the Windows DNS role, per NVD entry and CISA/NCSC consolidation. Microsoft has r...

CVE-2025-26668

CVE-2025-26668 is a heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) that allows a network-authenticated attacker to execute code remotely. Affected component is RRAS (Windows Routing and Remote Access Service); root cause is a heap-based overflow that can lead to ar...

CVE-2026-25187

CVE-2026-25187 is a Winlogon elevation-of-privilege vulnerability described as improper link resolution before file access (link following). It is a local vulnerability in Windows Winlogon that could allow an authorized attacker to elevate privileges to SYSTEM with no user interaction required. T...

CVE-2026-50387

CVE-2026-50387 — Windows GDI Elevation of Privilege Affects: Windows GDI subsystem. The vulnerability is a stack-based buffer overflow in GDI that can be triggered by an authorized attacker to achieve local privilege escalation. Impact: Local elevation of privileges with a CVSS v3.1 base score of...

CVE-2026-58640

CVE-2026-58640 is a heap-based buffer overflow in Windows NTFS that enables an authorized local attacker to execute code. The vulnerability is tied to Windows NTFS logic and has a CVSS v3.1 score of 7.3 (HIGH) with local access required and user interaction. Affected component: Windows NTFS; root...

CVE-2017-11847

CVE-2017-11847 affects the Windows kernel across multiple Windows client/server versions (Windows 7 SP1; Windows 8.1/RT; Windows 10 1511–1709; Windows Server 2008/2012/2016, etc.). The root cause is improper handling of objects in memory, enabling a local attacker to escalate privileges and run a...

CVE-2018-0960

Technical details for CVE-2018-0960 are not publicly available in the provided documents. No product/version-specific impact or remediation is stated here; monitor for updates from official advisories.

CVE-2024-38047

Technical details (affected product/component, root cause, impact, and patch specifics) are not publicly provided in the supplied documents. Monitor for updates from official advisories and connected sources for CVE-2024-38047.

CVE-2024-38125

CVE-2024-38125 affects the Windows Kernel Streaming WOW Thunk Service Driver and enables local elevation of privileges. The vulnerability is associated with the Kernel Streaming WOW Thunk Service Driver and can lead to obtaining elevated privileges (SYSTEM). Microsoft has issued fixes in August 2...

CVE-2024-49124

According to the connected NCSC advisory, CVE-2024-49124 is an LDAP-related vulnerability in Windows LDAP with an impact described as Execution of random code (CVSS 8.1/8.10 range in the table). The advisory notes that Microsoft has fixed vulnerabilities and recommends applying the security updat...

CVE-2025-21190

CVE-2025-21190 is listed by an EU NCSC advisory under Windows Telephony Service with a CVSS of 8.80 and impact described as executing random code. The Connected Documents do not provide vendor/product version details or a concrete patch/fix within the supplied materials; Microsoft MSRC guidance i...