CVE-2025-24064

CVE-2025-24064 is a use-after-free in DNS Server that enables remote code execution over the network. The issue is documented as a DNS Server vulnerability with CVSS 3.1/3.1 and a high impact (Execute Random Code) in the Windows DNS role, per NVD entry and CISA/NCSC consolidation. Microsoft has r...

CVE-2026-21525

CVE-2026-21525 is a Windows Remote Access Connection Manager (RasMan) Denial of Service vulnerability caused by a NULL pointer dereference. An unauthenticated, locally-initiated attacker can trigger a crash of RasMan, impacting availability. Connected sources confirm this as a local DoS issue, wi...

CVE-2026-58640

CVE-2026-58640 is a heap-based buffer overflow in Windows NTFS that enables an authorized local attacker to execute code. The vulnerability is tied to Windows NTFS logic and has a CVSS v3.1 score of 7.3 (HIGH) with local access required and user interaction. Affected component: Windows NTFS; root...

CVE-2017-8577

Technical details for CVE-2017-8577 are not provided in the supplied documents; no explicit affected product/version, root cause, impact, or fix is disclosed here. Monitor for updates.

CVE-2017-8681

Technical details about CVE-2017-8681 are not publicly provided in the connected documents. No specifics on affected versions, root cause, impact, or remediation are present. Monitor for updates.

CVE-2018-0887

CVE-2018-0887 describes an information-disclosure in the Windows kernel caused by improper initialization of a memory address. Affected products include multiple Windows versions (Windows 7, Windows 8.1, Windows 10 family and corresponding Server variants). The vulnerability exposes partial confi...

CVE-2018-0974

CVE-2018-0974 is a Windows kernel information disclosure vulnerability that could enable an attacker to obtain information facilitating a Kernel ASLR bypass. Affected are Windows client and server families including Windows 7, Server 2008/2008 R2, 8.1, 10 (and Server equivalents). The vulnerabili...

CVE-2024-38047

Technical details (affected product/component, root cause, impact, and patch specifics) are not publicly provided in the supplied documents. Monitor for updates from official advisories and connected sources for CVE-2024-38047.

CVE-2024-38079

Technical details about CVE-2024-38079 (affected component, root cause, impact, affected products/versions, and fixes) are not provided in the supplied documents; monitor for updates and disclosures from official sources.

CVE-2024-38231

Technical details about CVE-2024-38231 (Windows Remote Desktop Licensing Service Denial of Service) are not publicly provided in the supplied connected documents. Monitor official advisories and vendor patches for updates.

CVE-2025-21190

CVE-2025-21190 is listed by an EU NCSC advisory under Windows Telephony Service with a CVSS of 8.80 and impact described as executing random code. The Connected Documents do not provide vendor/product version details or a concrete patch/fix within the supplied materials; Microsoft MSRC guidance i...

CVE-2025-21255

Technical details about CVE-2025-21255 are not provided in the supplied documents. Public information is limited to a basic description and references. Monitor Microsoft KBs/NVD for affected products, root cause, and remediation as updates are published.

CVE-2025-27486

CVE-2025-27486 affects Windows Standards-Based Storage Management Service, causing Denial-of-Service through uncontrolled resource consumption over the network. The primary public description confirms the vulnerability class, and Microsoft has released updates to address it (e.g., KBs in the Apri...

CVE-2025-27740

CVE-2025-27740 affects Windows Active Directory Certificate Services and is described as a weakness in authentication that enables an authorized attacker to elevate privileges over the network. The connected documents confirm the affected component as Windows Active Directory Certificate Services...

CVE-2025-32720

CVE-2025-32720 is a Windows Storage Management Provider vulnerability described as an information disclosure via an out-of-bounds read. The connected NCSC advisory lists it under Windows Storage Management Provider with CVSS 5.50 (Impact: Access to sensitive data) and indicates a local attack vec...

CVE-2025-48807

CVE-2025-48807 affects Windows Hyper-V: improper restriction of communication to intended endpoints enables an authorized, local attacker to execute code. The CVE is tracked with a 3.1 3.1 CVSSv3.1 vector: Local, High impact on confidentiality, integrity, and availability; exploit requires Low pr...

CVE-2026-50369

CVE-2026-50369 is a Windows Remote Desktop Services vulnerability identified as a use-after-free that enables an authorized attacker to elevate privileges over the network. The initial entry and multiple connected sources describe the issue consistently and confirm the affected component as Windo...

CVE-2026-69603

CVE-2026-69603 is a heap-based buffer overflow in Windows Hyper-V that allows an authorized local attacker to achieve code execution . The CVSS 3.1 score is 8.8 (HIGH) , with a local attack vector, low privileges required, no user interaction, and changed scope leading to high impact on confident...

CVE-2017-0166

CVE-2017-0166: An LDAP elevation of privilege vulnerability in Windows occurs when LDAP request buffer lengths are improperly calculated. This enables a remote attacker to send malicious traffic to a Domain Controller to achieve elevated privileges. The initial description and connected documents...

CVE-2017-11781

CVE-2017-11781 is a denial-of-service vulnerability in the Microsoft Windows SMB Server (SMBv1) where an authenticated attacker can send specially crafted SMB requests to crash the server. Affected products include Windows SMB Server implementations as described in the CVE entry (server role comp...

CVE-2018-1008

CVE-2018-1008 describes a local elevation-of-privilege vulnerability in Windows Adobe Type Manager Font Driver (ATMFD.dll). The flaw stems from improper handling of objects in memory, enabling an attacker to execute arbitrary code with kernel or SYSTEM privileges on vulnerable Windows editions (W...

CVE-2022-35751

Technical details about CVE-2022-35751 are not publicly available in the provided documents. No information on affected products, root cause, impact, or fixes is provided here; monitor for updates.

CVE-2024-30039

CVE-2024-30039 affects the Windows Remote Access Connection Manager. The connected documents map this CVE to Windows components and indicate an information-disclosure risk with CVSS 3.1/3.5-like characteristics: local access required, low attack complexity, no user interaction, confidentiality im...

CVE-2024-37969

Technical details about CVE-2024-37969 (affected product, root cause, exploitability, and remediation) are not publicly provided in the supplied documents. Monitor for updates from official advisories.

CVE-2024-37982

Technical details about CVE-2024-37982 are not provided in the connected documents. No specifics on affected components, root cause, or fixes are available here. Monitor official advisories/updates for authoritative guidance.

CVE-2024-38015

Technical details for CVE-2024-38015 (Windows RD Gateway DoS) are not publicly provided in the supplied documents. Monitor for updates and future disclosures; no actionable exploit, impact, or remediation details are present here.

CVE-2024-38068

Technical details about CVE-2024-38068 are not provided in the supplied documents. No affected products, root cause, impact, or remediation are described here; monitor for updates from official advisories.

CVE-2024-38240

CVE-2024-38240 is a Windows vulnerability affecting the Windows Remote Access Connection Manager . The connected documents identify it as an elevation-of-privilege issue with a high/critical impact (listed as CVE-2024-38240 — Obtaining elevated privileges , CVSS weights shown as part of Windows s...

CVE-2024-43636

CVE-2024-43636 is a Win32k local elevation-of-privilege vulnerability with a CVSSv3.1 base score 7.8 (LOCAL, LOW PRIVILEGES, NO USER INTERACTION; impacts HIGH across confidentiality, integrity, and availability). CONNECTED documents confirm Windows OS components (Win32k) are affected and that Mic...

CVE-2025-21328

CVE-2025-21328 maps to a Windows MapUrlToZone security feature bypass vulnerability. Connected docs confirm affected component and root cause: bypassing security checks in MapUrlToZone, enabling circumvention of security measures. CVSS v3.1 base metrics shown as 4.3 (MEDIUM) with Network attack v...

CVE-2025-27491

CVE-2025-27491 is a Windows Hyper-V remote code execution vulnerability described in the initial document as a use-after-free that could allow an authenticated attacker to execute code over the network. Connected sources corroborate Hyper-V as the affected component and reference patch delivery i...

CVE-2025-33071

CVE-2025-33071 is an RCE flaw affecting the Windows KDC Proxy Service (KPSSVC). The vulnerability arises from a use-after-free in KPSSVC, enabling a remote attacker to execute code over the network on affected Windows systems. The CVE is rated high severity (CVSS ~8.1/8.1–8.10, depending on sourc...

CVE-2026-50472

The CVE-2026-50472 entry refers to a heap-based buffer overflow in Windows LUA File Virtualization Filter Driver (LUAFV) that allows an authorized, local attacker to achieve privilege escalation. Affected software is Windows LUAFV; the underlying issue is a heap-based overflow, leading to local p...

CVE-2018-0844

The CVE-2018-0844 entry describes an elevation-of-privilege vulnerability in the Windows Common Log File System (CLFS) driver, affecting multiple Windows versions (Windows 7 SP1, Windows 8.1/RT 8.1, Server 2008 SP2/R2 SP1, 2012/R2, 2016, and 1709). The root cause is how objects in memory are hand...

CVE-2018-8434

CVE-2018-8434 is a Windows Hyper-V information disclosure vulnerability. It occurs when a host OS fails to properly validate input from an authenticated user on a guest OS, allowing potential disclosure of memory information. Affected platforms include Windows 7, Windows Server 2008/2012 families...

CVE-2024-30076

Technical details for CVE-2024-30076 are not publicly available in the provided documents; no affected products, root cause, or remediation are specified here. Monitor for updates from official vulnerability databases.

CVE-2024-30086

Technical details about CVE-2024-30086 (affected component, root cause, impact, and fixes) are not provided in the supplied documents. Monitor for updates from Microsoft and official CVE disclosures.

CVE-2024-43532

CVE-2024-43532 is a Remote Registry Service Elevation of Privilege vulnerability with a documented exploit path in a private GitHub post, alleging interception of NTLM data via RPC_A uthon level CONNECT and a Machine‑in‑the‑Middle attack against advapi32.dll behavior. Affected: Windows 10/11 and ...

CVE-2025-21228

CVE-2025-21228 is a Windows Digital Media Elevation of Privilege vulnerability. The initial and related documents identify the issue as a Windows Digital Media component risk that could allow an attacker to obtain elevated privileges (Impact: high; Privileges Required: low; Attack Vector: physica...

CVE-2025-21308

CVE-2025-21308 Windows Themes Spoofing affects the Windows Theme system. The vulnerability lets a malicious party impersonate the user and potentially execute code in the victim’s context, requiring the victim to open/edit a rogue file. The impact is described as impersonation with potential code...

CVE-2025-26676

CVE-2025-26676 is a Windows RRAS vulnerability described as a buffer over-read that allows an unauthenticated, network-connected attacker to disclose application/network data. The affected component is Windows Routing and Remote Access Service; root cause is a memory over-read in RRAS processing,...

CVE-2026-69819

CVE-2026-69819 is a CRITICAL (CVSS 3.1: 9.8) vulnerability in the Microsoft RPC Runtime Library , caused by an out-of-bounds write that allows an unauthenticated, remote attacker to execute arbitrary code over a network with no user interaction required. The attack vector is network-based with lo...

CVE-2016-7274

CVE-2016-7274 concerns the Windows Uniscribe component (usp10.dll). The issue stems from an integer/heap-related vulnerability in the LoadUvsTable() function that could enable remote code execution when processing untrusted font data via a crafted web site. Public analyses (e.g., Google Project Z...

CVE-2017-8589

CVE-2017-8589 is a Windows Search Remote Code Execution vulnerability affecting Windows 7 SP1, Windows Server 2008 SP2/R2 SP1, Windows 8.1/RT 8.1, Windows Server 2012/R2, Windows 10 (gold and 1511–1703) and Windows Server 2016. The root cause is the way Windows Search handles objects in memory, e...

CVE-2017-8687

CVE-2017-8687 is a Windows kernel information-disclosure vulnerability in the Win32k subsystem where improper handling of memory objects allows leakage of kernel memory to user mode. Affected products include Windows 7 SP1, Windows 8.1, Windows Server 2008 SP2/R2 SP1, Windows Server 2012, Windows...

CVE-2017-8708

CVE-2017-8708 affects the Windows kernel information disclosure vulnerability caused by improper handling of objects in memory. Impact is information disclosure on a range of Windows desktop/server versions (Windows 7 SP1, Windows 8.1, Windows 10 various builds, Windows Server 2008 SP2/R2 SP1, 20...

CVE-2024-38027

Technical details about CVE-2024-38027 (affected software, root cause, impact, or fixes) are not provided in the supplied documents. No public disclosure details available here. Monitor for updates.

CVE-2024-38242

CVE-2024-38242: Kernel Streaming Service Driver Elevation of Privilege. A local attacker with low privileges can exploit this to gain SYSTEM-level access without user interaction (per CVSS 3.1: AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H; base 7.8). Microsoft has released updates to fix the issue (e.g., ...

CVE-2024-43589

Technical details about CVE-2024-43589 (affected RRAS, root cause, impact, fixes) are not publicly provided in the connected documents. Monitor for updates from Microsoft and CVE registries.

CVE-2024-43626

CVE-2024-43626 is a Windows Telephony Service Elevation of Privilege vulnerability. Affected: Windows operating systems where the Telephony Service component is present. Nature: local, low-privilege user could potentially elevate privileges (high impact to confidentiality, integrity, and availabi...