CVE-2024-43509

CVE-2024-43509 is listed in connected advisories as affecting the Windows Graphics Component with an elevation of privilege impact. The ENISA/NCSC entries corroborate this CVE under Windows Graphics Component and assign an impact/score (7.80) and local, privilege‑required conditions. Concrete det...

CVE-2024-43589

Technical details about CVE-2024-43589 (affected RRAS, root cause, impact, fixes) are not publicly provided in the connected documents. Monitor for updates from Microsoft and CVE registries.

CVE-2025-32725

CVE-2025-32725 is a Windows DHCP Server vulnerability described as a protection‑mechanism failure that allows an attacker to cause a network DoS. Connected sources confirm this CVE is associated with the DHCP Server and note that remediation involves applying June 2025 Windows security updates (e...

CVE-2026-21530

CVE-2026-21530 : A double-free vulnerability in Windows Rich Text Edit is described as enabling an authorized attacker to perform local privilege escalation. The connected documents confirm the affected component and the local-privilege-elevation impact but do not provide exploit details, specifi...

CVE-2026-25187

CVE-2026-25187 is a Winlogon elevation-of-privilege vulnerability described as improper link resolution before file access (link following). It is a local vulnerability in Windows Winlogon that could allow an authorized attacker to elevate privileges to SYSTEM with no user interaction required. T...

CVE-2017-0121

CVE-2017-0121 is an information disclosure vulnerability in Microsoft Windows Uniscribe. The vulnerability allows a remote attacker to obtain sensitive information from the memory of a process by luring a user to a crafted web site. Affected are Windows Vista SP2, Windows Server 2008 SP2 and R2 S...

CVE-2017-8575

CVE-2017-8575 is a Windows kernel/Graphics component information disclosure vulnerability. An authenticated attacker could exploit memory handling flaws in the Windows Graphics Component to obtain information from memory via a specially crafted application. Affected products include Windows 10 (v...

CVE-2017-8727

CVE-2017-8727 is an RCE in the Windows Text Services Framework that can be triggered through memory handling in the Windows Text Services/IE edge scripting path. The connected KB entry confirms the flaw exists in Internet Explorer/Windows components and was addressed in Microsoft’s October 2017 p...

CVE-2018-0975

CVE-2018-0975 is an information-disclosure vulnerability in the Windows kernel that could enable an attacker to obtain information leading to a Kernel ASLR bypass. The Initial document lists affected Windows platforms (Windows 7, Windows Server 2008/2012/2016, Windows 8.1, Windows 10 and correspo...

CVE-2024-37989

Technical details and affected products for CVE-2024-37989 are not publicly provided in the supplied documents. Monitor for vendor advisories and CVE repositories for updates.

CVE-2024-38013

Technical details about CVE-2024-38013 are not disclosed in the provided connected documents. The CVE entry exists (Windows Server Backup elevation of privilege), but no affected product versions, root cause, exploitation, or remediation are described here. Monitor for updates.

CVE-2024-38258

Technical details (affected product, versions, root cause, exploit info) for CVE-2024-38258 are not provided in the connected documents. Monitor official advisories for fixes and remediation guidance.

CVE-2024-43567

CVE-2024-43567 is a Windows Hyper-V Denial-of-Service vulnerability. The CVSSv3.1 vector indicates a network-exposed flaw (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) that can be triggered remotely, resulting in an availability impact. The CVE is listed under Windows Hyper-V with confirmed Denial-of-Ser...

CVE-2025-21236

CVE-2025-21236 is a Windows Telephony Service remote code execution vulnerability. The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) indicates network-based access with low complexity, requiring user interaction, and with high impact across confidentiality, integrity, and availability. Th...

CVE-2025-21244

Technical details for CVE-2025-21244 are not provided in the connected documents. They reference a Windows Telephony Service RCE but do not disclose affected versions, root cause, exploit methods, or fixes. Monitor official advisories for updates.

CVE-2025-21406

CVE-2025-21406 is listed by NCSC as a Windows Telephony Service vulnerability with CVSS 8.80, enabling execution of arbitrary code. No affected product/version details or patch specifics are provided in the connected documents; Microsoft updates are referenced generally as fixing vulnerabilities....

CVE-2025-24051

Technical details about CVE-2025-24051 are not publicly provided in the connected documents. The initial entry notes a heap overflow in RRAS enabling remote code execution, but no affected versions, exploit specifics, or mitigations are present here. Monitor for updates.

CVE-2025-24056

CVE-2025-24056 is a heap-based buffer overflow in the Windows Telephony Server that allows a network-based attacker to execute arbitrary code on affected systems. The issue is described as remote code execution with network access (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) and a base score of 8.8 (HIG...

CVE-2025-27740

CVE-2025-27740 affects Windows Active Directory Certificate Services and is described as a weakness in authentication that enables an authorized attacker to elevate privileges over the network. The connected documents confirm the affected component as Windows Active Directory Certificate Services...

CVE-2016-7259

CVE-2016-7259 affects the Windows Graphics Component in kernel-mode drivers (Win32k) across multiple Windows platforms, allowing local privilege escalation via a crafted application. The root cause is improper handling of memory objects by the Graphics component, enabling privilege elevation (loc...

CVE-2017-0007

CVE-2017-0007 is a Device Guard security feature bypass in Windows 10 (Gold/1511/1607) and Windows Server 2016 where sign-checked PowerShell scripts could be modified without breaking the signature, allowing execution of unsigned/malicious code. Root cause: Device Guard’s validation of certain el...

CVE-2017-0096

CVE-2017-0096 affects Microsoft Hyper-V across Windows Vista SP2/Server 2008 SP2 R2, Windows 7 SP1, Windows 8.1, Windows Server 2012/R2, Windows 10 1511/1607, and Windows Server 2016. The vulnerability allows guest OS users to disclose sensitive information from the host memory through a crafted ...

CVE-2017-0167

CVE-2017-0167 is a Windows kernel information disclosure vulnerability affecting Windows 8.1, Windows RT 8.1, Windows Server 2012 R2, Windows 10, and Windows Server 2016, caused by the kernel improperly handling objects in memory. Successful exploitation could let an attacker obtain information f...

CVE-2017-11783

CVE-2017-11783 is an Elevation of Privilege in Windows via ALPC/RPC handling. Public details in connected docs show the SvcMoveFileInheritSecurity method can be abused to impersonate a user and move a file, enabling arbitrary file creation and privilege escalation on Windows 10 v1709, attributed ...

CVE-2024-37973

Technical details about CVE-2024-37973 are not provided in the connected documents. The supplied materials reference related items (e.g., CVE-2024-38058) but do not disclose affected products, root cause, impact, or fixes for CVE-2024-37973. Monitor for updates.

CVE-2024-38010

Technical details (affected product, root cause, impact, fixes) for CVE-2024-38010 are not provided in the supplied documents. Monitor for updates from official advisories.

CVE-2024-38025

Technical details about CVE-2024-38025 are not provided in the supplied connected documents; no vendor/product/version/root-cause/impact/fix details are visible. Monitor for updates in case additional information becomes available.

CVE-2024-38146

CVE-2024-38146 affects the Windows Layer-2 Bridge Network Driver. The CVSS 3.1 base score is 7.5 (HIGH) with Network attack, low complexity, no privileges, no user interaction, and high availability impact. Descriptions in connected OpenVAS items corroborate a DoS impact on Windows Layer-2 Bridge...

CVE-2024-38212

Technical details for CVE-2024-38212 are not publicly available in the provided documents. Monitor for updates from Microsoft/NVD and follow their vulnerability guidance.

CVE-2024-43621

CVE-2024-43621 affects Windows Telephony Service (a Windows OS component). The vulnerability is a Remote Code Execution flaw in the Windows Telephony Service, with CVSS 3.1 base metrics indicating Network attack vector, no privileges required, and user interaction needed; impact is High/High/High...

CVE-2024-49091

Technical details for CVE-2024-49091 are not publicly provided in the supplied documents; no affected products, root cause, or remediation are stated. Monitor for updates.

CVE-2025-21202

CVE-2025-21202 is a Windows Recovery Environment Agent elevation-of-privilege vulnerability. The consolidated sources show an impact of obtaining elevated privileges (CVE mapped under Windows Recovery Environment Agent) with a CVSS-like score around 6.1 (Medium) and physical access as a considera...

CVE-2025-21231

CVE-2025-21231 documents describe a Denial-of-Service vulnerability in the Windows IP Helper component. The CVE entry lists a network-based attack vector with low attack complexity and no privileges required, resulting in availability impact. Connected records corroborate IP Helper as the affecte...

CVE-2025-21250

CVE-2025-21250 is a Windows Telephony Service Remote Code Execution vulnerability with CVSS 3.1 base score 8.8 (Network, Low attack complexity, No privileges, User interaction required). Connected sources reference the Windows Telephony Service as the affected component and indicate in CIRCL that...

CVE-2025-26687

CVE-2025-26687 is a use-after-free in Windows Win32K - GRFX that enables a network-based privilege escalation. The affected component is the Win32K GRFX graphics subsystem; the underlying issue is a use-after-free in that path, leading to total impact (CVE-2025-26687 shows a base score of 7.5/10 ...

CVE-2026-32183

CVE-2026-32183 is a Windows Snipping Tool vulnerability that allows local execution of arbitrary code due to improper neutralization of special elements in a command (command injection). Affected component: Snipping Tool on Windows. Impact per sources: Executing (remote) code with high confidenti...

CVE-2026-59132

CVE-2026-59132 describes a null pointer dereference in Windows TCP/IP that enables a network-based denial of service by an unauthenticated attacker. Affected component is Windows TCP/IP; root cause is a null pointer dereference leading to denial of service. CVSSv3.1 base score is 7.5 (HIGH) with ...

CVE-2017-0163

CVE-2017-0163 affects Windows Server Hyper-V Network Switch, allowing remote code execution when input from a guest OS is not properly validated. The underlying issue is improper validation of guest-supplied input, enabling an attacker with guest access to execute arbitrary code on the host. Publ...

CVE-2017-0188

CVE-2017-0188 concerns a Win32k information-disclosure vulnerability in Windows 8.1/RT 8.1, Windows Server 2012/2012 R2, Windows 10, and Windows Server 2016. The win32k component improperly provides kernel information, enabling an attacker who can exploit the issue to obtain information that coul...

CVE-2017-8718

CVE-2017-8718 is a remote code execution vulnerability in the Microsoft JET Database Engine that affects Windows components across multiple OS versions (Windows Server 2008 SP2/R2 SP1, Windows 7 SP1, Windows 8.1/RT 8.1, Windows Server 2012/R2, Windows 10 1511–1703, Windows Server 2016). Root caus...

CVE-2024-37974

Technical details about CVE-2024-37974 are not provided in the given documents. The connected items mention related issues (e.g., BitLocker / Secure Boot references) but do not reveal affected products, root cause, or remediation for this CVE. Monitor for updates.

CVE-2024-38051

Technical details about CVE-2024-38051 (Windows Graphics Component RCE) are not provided in the connected documents. Monitor for updates from official advisories to obtain affected products, root cause, and remediation information.

CVE-2024-38065

Technical details about CVE-2024-38065 (affected product/component/impact) are not provided in the supplied documents. No concrete exploit or remediation information is available here. Monitor for official disclosures and updated advisories.

CVE-2024-38099

Technical details about CVE-2024-38099 (Windows Remote Desktop Licensing Service DoS) are not provided in the supplied documents. Monitor for official advisories for affected products, impact, and fixes.

CVE-2024-38191

Technical details for CVE-2024-38191 are not publicly provided in the supplied documents. Monitor for updates from Microsoft MSRC/NVD, NVD, or CVE listings as new information becomes available.

CVE-2024-43511

Technical details about CVE-2024-43511 are not provided in the supplied documents. Public information beyond basic CVSS data is not included here; monitor for updates.

CVE-2024-43549

CVE-2024-43549 is documented as a Windows RRAS (Routing and Remote Access Service) Remote Code Execution vulnerability. Connected sources label the impact as running arbitrary code on the affected RRAS component when exposed over the network, with a base CVSS v3.1 score of 8.8 (HIGH) and network ...

CVE-2024-49125

Technical details about CVE-2024-49125 are not publicly available in the provided connected documents. Monitor for updates from official sources for affected products, impact, and fixes.

CVE-2025-21217

CVE-2025-21217 is a Windows NTLM spoofing vulnerability with a CVSS v3.1 base score of 6.5 (Network, low attack complexity, no privileges required, user interaction required; Confidentiality impact: High). Exploitation details, affected products/versions, and a fixed patch are not provided in the...

CVE-2025-21290

The CVE-2025-21290 vulnerability affects Microsoft Message Queuing (MSMQ) and is a Denial of Service issue exploitable over the network. The provided data show a CVSS v3.1 base score of 7.5 (HIGH) with attack vector Network and no user interaction required. The root cause detail is not explicitly...