CVE-2017-8687

CVE-2017-8687 is a Windows kernel information-disclosure vulnerability in the Win32k subsystem where improper handling of memory objects allows leakage of kernel memory to user mode. Affected products include Windows 7 SP1, Windows 8.1, Windows Server 2008 SP2/R2 SP1, Windows Server 2012, Windows...

CVE-2017-8708

CVE-2017-8708 affects the Windows kernel information disclosure vulnerability caused by improper handling of objects in memory. Impact is information disclosure on a range of Windows desktop/server versions (Windows 7 SP1, Windows 8.1, Windows 10 various builds, Windows Server 2008 SP2/R2 SP1, 20...

CVE-2018-8434

CVE-2018-8434 is a Windows Hyper-V information disclosure vulnerability. It occurs when a host OS fails to properly validate input from an authenticated user on a guest OS, allowing potential disclosure of memory information. Affected platforms include Windows 7, Windows Server 2008/2012 families...

CVE-2024-30062

CVE-2024-30062 affects Windows Standards-Based Storage Management Service. The connected data documents confirm a local, user-interaction–required remote code execution vulnerability in Windows Storage components, with CVSSv3.1: AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H (base 7.8). The issue is tied to...

CVE-2024-38027

Technical details about CVE-2024-38027 (affected software, root cause, impact, or fixes) are not provided in the supplied documents. No public disclosure details available here. Monitor for updates.

CVE-2024-43635

Technical details for CVE-2024-43635 are not publicly provided in the connected documents. The materials only reference a Windows Telephony Service RCE vulnerability. Monitor Microsoft advisories and vulnerability feeds for affected versions, impact, and remediation when they are disclosed.

CVE-2025-21280

CVE-2025-21280 is a Windows Virtual Trusted Platform Module Denial of Service vulnerability. Connected documents identify the affected component as the Windows Virtual TPM and note an impact on availability. The NCSC advisory lists a CVSS v3.1 base score of 5.5 (LOCAL attack, LOW privileges requi...

CVE-2025-21316

Technical details for CVE-2025-21316 are not publicly available in the provided documents. Monitor for updates from Microsoft and threat intelligence sources.

CVE-2025-21358

Technical details about CVE-2025-21358 are not provided in the supplied documents. No affected products, vectors, or fixes are specified here; monitor for updates from official advisories.

CVE-2025-26677

CVE-2025-26677 affects Windows Remote Desktop Gateway Service and involves uncontrolled resource consumption leading to a denial of service. The provided documents do not include exploit details or exact root-cause; they indicate that Microsoft released May 2025 security updates addressing vulner...

CVE-2026-65775

CVE-2026-65775 maps to a local privilege escalation due to a use-after-free in Windows Win32K. The affected component is Win32k in Windows; the underlying flaw is use-after-free, enabling an authorized attacker to elevate privileges locally (CVSS v3.1: 7.8, HIGH). The impact stated includes high ...

CVE-2016-7274

CVE-2016-7274 concerns the Windows Uniscribe component (usp10.dll). The issue stems from an integer/heap-related vulnerability in the LoadUvsTable() function that could enable remote code execution when processing untrusted font data via a crafted web site. Public analyses (e.g., Google Project Z...

CVE-2017-0166

CVE-2017-0166: An LDAP elevation of privilege vulnerability in Windows occurs when LDAP request buffer lengths are improperly calculated. This enables a remote attacker to send malicious traffic to a Domain Controller to achieve elevated privileges. The initial description and connected documents...

CVE-2017-11781

CVE-2017-11781 is a denial-of-service vulnerability in the Microsoft Windows SMB Server (SMBv1) where an authenticated attacker can send specially crafted SMB requests to crash the server. Affected products include Windows SMB Server implementations as described in the CVE entry (server role comp...

CVE-2024-30093

Technical details about CVE-2024-30093 are not provided in the supplied documents; no affected products, root cause, impact, or fixes are specified.

CVE-2024-38114

Technical details for CVE-2024-38114 are not provided in the connected documents. The initial description notes a Windows IP Routing Management Snapin Remote Code Execution vulnerability with CVSS 3.1/8.8, but no affected versions, root cause, or mitigations are included here.

CVE-2024-38239

Microsoft Windows Kerberos CVE-2024-38239 is an Elevation of Privilege in the Windows Kerberos component. The connected Windows vulnerability listing assigns CVSS v3.1 base score 7.2 (HIGH) with network attack vector, low attack complexity, and privileges required: HIGH; impact is CONfidentiality...

CVE-2025-21222

CVE-2025-21222 is a remote-code-execution vulnerability in Windows Telephony Service characterized by a heap-based buffer overflow that an unauthenticated attacker can trigger over the network. Connected sources corroborate its association with Windows Telephony Service and document it as a netwo...

CVE-2025-21349

CVE-2025-21349 is described by the connected NCSC advisory as a Windows vulnerability in Remote Desktop Services: a tampering flaw in the Windows Remote Desktop Configuration Service. The entry lists a CVSS v3.1 base score of 6.8 (Medium), with network access required (AV:N, UI:R, S:U) and high c...

CVE-2025-24067

CVE-2025-24067 is described in the connected documents as a heap-based buffer overflow in the Microsoft Streaming Service Driver that allows an authenticated, local attacker to elevate privileges. The vulnerability concerns the Windows kernel streaming service component and is listed with a high ...

CVE-2025-27479

CVE-2025-27479 appears in connected records as a Kerberos-related Denial-of-Service vulnerability described under the Kerberos Key Distribution Proxy Service. The available sources confirm an impact on Windows Kerberos with a network-based DoS potential due to an insufficient resource pool, but d...

CVE-2026-69496

CVE-2026-69496 is a heap-based buffer overflow in Windows Compressed Folder that enables an unauthorized, unauthenticated attacker to achieve remote code execution over a network . Microsoft rates it CVSS 9.8 (Critical) with high impact to confidentiality, integrity, and availability. CISA's SSVC...

CVE-2024-37979

CVE-2024-37979 is described in connected sources as a Windows Kernel Elevation of Privilege vulnerability with an impact of obtaining elevated privileges . The NCSC entry lists the CVE under the Windows Kernel section with that impact. Beyond that, the provided documents do not specify the affect...

CVE-2024-38017

Technical details about CVE-2024-38017 are not provided in the supplied documents. The dataset includes related Windows KBs and other CVEs, but no explicit affected product, root cause, impact, or fix for CVE-2024-38017.

CVE-2024-38053

Technical details for CVE-2024-38053 are not provided in the supplied documents; no affected products, root cause, impact, or remediation are specified here. Monitor for updates.

CVE-2024-38069

Technical details about CVE-2024-38069 (Windows Enroll Engine Security Feature Bypass) are not provided in the connected documents. The initial description is generic; no affected products/versions or remediation are disclosed here. Monitor for updates from official advisories.

CVE-2024-43512

CVE-2024-43512 affects Windows Standards-Based Storage Management Service and is described in the connected NCSC advisory as a Denial-of-Service vulnerability with CVSS 6.50. The advisory confirms Windows updates are available/needed, but the documents do not provide exploit details or paved reme...

CVE-2025-21269

CVE-2025-21269 is described as a Windows HTML Platforms Security Feature Bypass vulnerability. Connected CNVD/NCSC/KB entries reference a Windows HTML Platforms security feature bypass without detailed exploit steps; the Initial metrics show CVSS 3.1 (4.3, Network, UI: Required). Exploitation spe...

CVE-2025-24995

CVE-2025-24995 is a heap-based buffer overflow in the Kernel Streaming WOW Thunk Service Driver that allows a locally authorized attacker to elevate privileges. The NVD entry confirms the vulnerable component and impact (local privilege elevation; high severity). Public references point to Micros...

CVE-2026-42989

Winlogon Elevation of Privilege (CVE-2026-42989) is caused by improper link resolution before file access ("link following"). This vulnerability allows an authorized, local attacker to gain higher privileges. Affected: Winlogon component on Windows; impact is local privilege escalation with a CVS...

CVE-2026-50500

CVE-2026-50500 is a Windows Netlogon use-after-free vulnerability allowing an authenticated attacker to elevate privileges over the network. The affected component is Windows Netlogon; impact is elevation of privileges (CVE-2026-50500, CVSS 7.5). Connected sources reference Microsoft advisories a...

CVE-2026-54992

CVE-2026-54992 is a heap-based buffer overflow affecting the Windows Message Queuing Queue Manager that allows a local attacker to execute code. The vulnerability is described in NVD/MSRC references as enabling local arbitrary code execution. The public entries consistently describe the same unde...

CVE-2017-0058

CVE-2017-0058 is a Windows Win32k information-disclosure vulnerability where win32k.sys fails to properly provide kernel information, allowing a local attacker to obtain sensitive data to aid compromise. Affected: Microsoft Windows Win32k component. Root cause: improper kernel information exposur...

CVE-2017-0276

Technical details for CVE-2017-0276 are not publicly available in the provided documents. Monitor for updates; current sources in the set do not describe affected products/versions, root cause, or remediation specific to this CVE.

CVE-2017-8495

CVE-2017-8495 is a Kerberos security feature bypass in which Extended Protection for Authentication can be circumvented by tampering with the SNAME field during ticket exchange (Orpheus’ Lyre). Affected Windows family includes Windows 7 SP1, Windows Server 2008 SP2/R2, Windows 8.1, Windows RT 8.1...

CVE-2018-0973

Technical details for CVE-2018-0973 are not publicly available in the provided documents. The connected EUVD and CIRCL entries do not reveal affected products, impacts, or fixes for this CVE. Monitor sources for updates.

CVE-2018-8132

Technical details about CVE-2018-8132 are not publicly provided in the supplied documents. Monitor for updates.

CVE-2024-30008

CVE-2024-30008 is a Windows DWM Core Library information-disclosure vulnerability. Affected component: Windows DWM Core Library. Root cause: information disclosure (no specifics provided). Impact per sources: confidentiality impact high; CVSS 3.1 base 5.5 (LOCAL, low attack complexity and privile...

CVE-2024-30082

Technical details about CVE-2024-30082 are not provided in the connected documents. The supplied materials contain no concrete product/version/root-cause/impact/fix information. Monitor official advisories for updates and remediation guidance.

CVE-2024-38011

Technical details about CVE-2024-38011 (affected products, vulnerable components, root cause, impact, fixes) are not provided in the supplied documents. Monitor for updates from the vendor and security advisories for confirmation and remediation guidance.

CVE-2024-38048

Technical details for CVE-2024-38048 are not publicly provided in the connected documents. Please monitor for updates; the supplied sources do not include affected products, root cause, impact, or remediation specifics.

CVE-2024-38141

CVE-2024-38141 is a Windows vulnerability in the Ancillary Function Driver for WinSock that enables local privilege escalation to SYSTEM. Connected sources indicate the issue is tied to the WinSock AF Dvr and that exploitation would require local access with low privileges and no user interaction...

CVE-2024-38143

CVE-2024-38143 is a Windows WLAN AutoConfig Service elevation of privilege vulnerability. The CVSS 3.1 vector indicates an attacker must have physical access (AV:P) and exploit with high complexity, no user interaction, and local access (PR:N, UI:N). The vulnerability could yield elevated privile...

CVE-2024-43450

CVE-2024-43450 is a Windows DNS spoofing vulnerability affecting Windows DNS/NTLM; the CVSS v3.1 base score is 7.5 (Network, High impact, User interaction required). Connected sources place this CVE in Microsoft Windows DNS with impact described as “Pretend to be another user.” Microsoft has rele...

CVE-2024-43541

CVE-2024-43541 is a Microsoft Windows vulnerability in the Simple Certificate Enrollment Protocol that enables a network-based Denial of Service. The NCSC advisory lists a CVSS v3.1 base score of 7.5 (HIGH), with network access required and no user interaction, and specifies the impact as Denial ...

CVE-2024-49086

Technical details (affected product, vulnerable component, exploit specifics, remediation) are not provided in the supplied documents. Monitor for updates from Microsoft and security advisories.

CVE-2024-49104

The connected NCSC advisory (EUVD/NCSC) lists CVE-2024-49104 under Windows Routing and Remote Access Service (RRAS) with a high impact: Execution of arbitrary code (CVSS 8.80). The RRAS entry is described as vulnerable to arbitrary code execution, but the document does not provide root cause spec...

CVE-2025-21233

CVE-2025-21233 is a Windows Telephony Service Remote Code Execution vulnerability. External exploit is mapped to a network attack with user interaction required, high impact (CVSS v3.1: 8.8; Privileges Required: None; User Interaction: Required; Confidentiality/Integrity/Availability: High). Conn...

CVE-2025-21373

Technical details for CVE-2025-21373 are not provided in the supplied documents. Monitor for updates from Microsoft and the KB/MSRC references for affected product, impact and fixes.

CVE-2025-27473

CVE-2025-27473 affects Windows HTTP.sys. Description in the connected sources confirms an uncontrolled resource consumption condition that enables a network-based Denial of Service, exploitable by an unauthorized attacker. The vulnerability impact is denial of service over the network; no exploit...