2583 matches found
CVE-2024-38065
Technical details about CVE-2024-38065 (affected product/component/impact) are not provided in the supplied documents. No concrete exploit or remediation information is available here. Monitor for official disclosures and updated advisories.
CVE-2024-38130
Technical details for CVE-2024-38130 are not publicly available in the provided documents. No vendor/dependent specifics (product version, root cause, impact, or fixes) are given here. Monitor for official disclosures and updated advisories.
CVE-2024-43556
CVE-2024-43556 is a Windows Graphics Component elevation-of-privilege vulnerability. Public sources confirm it affects the Windows Graphics Component and can yield elevated privileges (base CVSS v3.1 7.8). The issue is listed as a local, privilege-escalation risk; exploitation details are not pro...
CVE-2025-21236
CVE-2025-21236 is a Windows Telephony Service remote code execution vulnerability. The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) indicates network-based access with low complexity, requiring user interaction, and with high impact across confidentiality, integrity, and availability. Th...
CVE-2025-21244
Technical details for CVE-2025-21244 are not provided in the connected documents. They reference a Windows Telephony Service RCE but do not disclose affected versions, root cause, exploit methods, or fixes. Monitor official advisories for updates.
CVE-2025-21375
CVE-2025-21375 is a local elevation-of-privilege in the Windows Kernel Streaming WOW Thunk Service Driver. The vulnerability is identified as a Privilege Escalation with CVSS v3.1 base score 7.8 (HIGH), requiring LOCAL access, LOW attack complexity, and no user interaction; the impact is high to ...
CVE-2025-21406
CVE-2025-21406 is listed by NCSC as a Windows Telephony Service vulnerability with CVSS 8.80, enabling execution of arbitrary code. No affected product/version details or patch specifics are provided in the connected documents; Microsoft updates are referenced generally as fixing vulnerabilities....
CVE-2025-24056
CVE-2025-24056 is a heap-based buffer overflow in the Windows Telephony Server that allows a network-based attacker to execute arbitrary code on affected systems. The issue is described as remote code execution with network access (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) and a base score of 8.8 (HIG...
CVE-2025-24987
CVE-2025-24987 is a Windows USB Video Driver vulnerability described as an out-of-bounds read that can allow an authorized attacker to elevate privileges with physical access. The issue affects the Windows USB Video Driver component and is associated with high impact on confidentiality, integrity...
CVE-2025-26667
CVE-2025-26667 is a Windows RRAS information-disclosure vulnerability. The RRAS service can expose sensitive data to an unauthorized network actor, with the CVSSv3.1 base score listed as 6.5 (Network, Low attack complexity, Privileges None, No user interaction; Confidentiality impact High). The c...
CVE-2025-29831
Technical details about CVE-2025-29831 (affected product, root cause, patch) are not provided in the supplied documents. Monitor for updates and refer to the official vulnerability entry for authoritative information.
CVE-2025-49740
CVE-2025-49740 is a protection mechanism failure in Windows Defender SmartScreen that can allow an unauthenticated attacker to bypass the SmartScreen protection over the network. This vulnerability affects the SmartScreen security feature in Windows and can lead to executing or delivering untrust...
CVE-2026-32183
CVE-2026-32183 is a Windows Snipping Tool vulnerability that allows local execution of arbitrary code due to improper neutralization of special elements in a command (command injection). Affected component: Snipping Tool on Windows. Impact per sources: Executing (remote) code with high confidenti...
CVE-2026-42909
CVE-2026-42909 involves a heap-based buffer overflow in the Remote Desktop Client that enables a remote attacker to execute code over the network. The vulnerability arises from improper handling of data during remote desktop operations, leading to memory corruption. The CVSS-3.1 vector (AV:N/AC:H...
CVE-2026-77493
CVE-2026-77493 is a double free flaw in the Microsoft Windows Graphics Component that allows an unauthorized, remote attacker to achieve code execution over the network with no privileges or user interaction. The CNA-assigned CVSS 3.1 score is 9.8 (CRITICAL) , with high impact to confidentiality,...
CVE-2017-0076
Summary of CVE-2017-0076 and related entries : The vulnerability affects Hyper-V in multiple Windows platforms (Vista SP2; Server 2008 SP2/2008 R2; Windows 7 SP1; Windows 8.1; Server 2012/2012 R2; Windows 10 versions 1511/1607; and Windows Server 2016). The issue allows a guest OS user running in...
CVE-2017-0294
CVE-2017-0294 is a Windows remote code execution vulnerability caused by improper handling of cabinet (.cab) files. The affected platforms include Windows 7 SP1, Windows Server 2008 SP2/R2 SP1, Windows 8.1, Windows RT 8.1, Windows Server 2012/R2, Windows 10 (various builds), and Windows Server 20...
CVE-2018-8142
CVE-2018-8142 describes a Windows local security feature bypass where Windows incorrectly validates kernel driver signatures, allowing loading of improperly signed drivers. Affected products include Windows 10 and Windows Server 2016 (and related Windows 10/server versions). The root cause is imp...
CVE-2024-30068
Technical details about CVE-2024-30068 are not provided in the supplied documents; no affected products, root cause, or fixes are disclosed here. Monitor for updates.
CVE-2024-37988
Technical details for CVE-2024-37988 are not publicly available in the provided documents. No information on affected products, root cause, impact, or fixes is present here. Monitor for updates from the referenced sources and connected advisories.
CVE-2024-38034
Public technical details for CVE-2024-38034 are not provided in the connected documents. The sources reference related updates and other CVEs but do not specify affected products, versions, root cause, or remediation for this CVE. Monitor for updates.
CVE-2024-38214
CVE-2024-38214 is a Windows RRAS Information Disclosure Vulnerability affecting RRAS in Windows. The provided data lists RRAS as the vulnerable component with an impact of accessing sensitive data, and references Microsoft security updates (e.g., KB5041773 and related August 2024 updates) as miti...
CVE-2025-21202
CVE-2025-21202 is a Windows Recovery Environment Agent elevation-of-privilege vulnerability. The consolidated sources show an impact of obtaining elevated privileges (CVE mapped under Windows Recovery Environment Agent) with a CVSS-like score around 6.1 (Medium) and physical access as a considera...
CVE-2025-21290
The CVE-2025-21290 vulnerability affects Microsoft Message Queuing (MSMQ) and is a Denial of Service issue exploitable over the network. The provided data show a CVSS v3.1 base score of 7.5 (HIGH) with attack vector Network and no user interaction required. The root cause detail is not explicitly...
CVE-2025-24073
CVE-2025-24073 affects the Windows DWM Core Library and stems from improper input validation, enabling a locally authorized attacker to elevate privileges. The vulnerability is described with a base CVSS v3.1 score of 7.8 (High) and local attack vector with low complexity, requiring low privilege...
CVE-2026-42987
The CVE-2026-42987 entry concerns a use-after-free in Windows Deployment Services (WDS) that enables an unauthenticated attacker to achieve remote code execution over the network . The associated CVSS 3.1 vector indicates network access, high impact on confidentiality, integrity, and availability...
CVE-2026-62757
Summary: CVE-2026-62757 involves Windows Schannel with improper verification of cryptographic signatures, allowing a network-borne attacker to bypass a security feature. The impact is described as a security feature bypass over the network, with a medium base score (CVSS 3.1: 5.3) and high confid...
CVE-2016-7238
CVE-2016-7238 is a local privilege-escalation vulnerability in Windows NTLM password-change caching across multiple Windows versions (Vista through Windows Server 2016). An attacker with local access could craft an application to trigger privilege escalation. The issue arises from incorrect cachi...
CVE-2017-11788
CVE-2017-11788 affects Windows Search in multiple Windows versions (7 SP1, 8.1, 10, Server SKUs) where unauthenticated attackers can remotely send crafted messages to trigger a denial-of-service by mismanaging in-memory objects. The vulnerability is documented across NVD and CNVD entries, with Op...
CVE-2018-0969
The CVE-2018-0969 entry describes an information-disclosure vulnerability in the Windows kernel that could enable retrieval of information to bypass Kernel ASLR. Affected products include Windows 7, Windows Server 2012 R2/2012, Windows RT 8.1, Windows 8.1, Windows 10 and various Windows Server ed...
CVE-2024-38028
Technical details for CVE-2024-38028 are not publicly available in the provided documents; no affected products, root cause, or remediation are specified. Monitor for updates.
CVE-2024-38061
Technical details for CVE-2024-38061 (affected products, root cause, impact, fixes) are not provided in the supplied documents. No remediation or exploitation specifics are available here. Monitor for updates.
CVE-2024-38236
Technical details about CVE-2024-38236 are not provided in the connected documents. Public details (affected product/version, exploit info, and fixes) are not available here; monitor for updates from official advisories.
CVE-2024-43638
CVE-2024-43638 is a Windows USB Video Class System Driver Elevation of Privilege vulnerability. The connected sources corroborate a Windows USB Video Driver component as the affected area and indicate that mitigations are released via Microsoft security updates (e.g., November 2024 updates/KBs). ...
CVE-2025-21225
Technical details about CVE-2025-21225 (WindowsRD Gateway Denial-of-Service) are not provided in the connected documents. Public details appear only as vulnerability entries; monitor official advisories and patch guidance for remediation and impact updates.
CVE-2025-21227
Technical details for CVE-2025-21227 are not publicly available in the provided documents. No root cause, affected products, or fixes are specified here. Monitor for updates from official advisories and CVE records.
CVE-2025-21319
CVE-2025-21319 is a Windows kernel memory information disclosure vulnerability. The issue is tracked in multiple vulnerabilities and discussed by Microsoft, with a CVSSv3.1 base score of 5.5 (Local attack, Low attack complexity, Low privileges required, no user interaction, High confidentiality i...
CVE-2025-21347
CVE-2025-21347 is linked to the Windows Update Stack and is described in the connected NCSC advisory as a Denial-of-Service vulnerability. The CVE entry in that document assigns a base CVSS-like severity of 6.0 and notes that Microsoft has updates available to fix the issue. The mode of the vulne...
CVE-2025-26664
CVE-2025-26664 is a Windows RRAS vulnerability described as a buffer over-read in Routing and Remote Access Service that can allow an unauthenticated attacker to disclose information over the network. The CVE is listed with a network attack vector, low attack complexity, and no privileges require...
CVE-2025-26665
CVE-2025-26665 affects Windows UPnP Device Host (upnphost.dll). The issue is described as sensitive data stored in memory that is not properly locked, enabling a local attacker with authorized access to obtain increased entitlements (privilege escalation). Connected sources corroborate the impact...
CVE-2025-26688
CVE-2025-26688 is a stack-based buffer overflow in Microsoft Virtual Hard Disk that enables a locally authenticated attacker to elevate privileges. The vulnerability is labeled as “Obtaining Increased Entitlements” (CVSS v3.1 base score 7.8). Connected sources corroborate the affected product (Mi...
CVE-2026-34345
CVE-2026-34345 describes a race condition in the Windows Ancillary Function Driver for WinSock that allows local privilege escalation when a shared resource is improperly synchronized. Connected sources confirm the vulnerability affects Windows components and has been addressed by the May 2026 up...
CVE-2026-59125
Use-after-free in the Virtual Hard Disk (VHD) Miniport Driver can allow an authorized local attacker to elevate privileges. The vulnerability is described as a local privilege escalation with high impact to confidentiality, integrity, and availability. The CVSS vector indicates LOCAL access, user...
CVE-2017-0250
CVE-2017-0250 corresponds to a remote code execution vulnerability in the Microsoft JET Database Engine present in Windows components (e.g., older Office/Jet usage). The issue is a buffer overflow that could allow an attacker to take control of the affected system. Connected updates (KBxxxx-Oct 2...
CVE-2024-38010
Technical details (affected product, root cause, impact, fixes) for CVE-2024-38010 are not provided in the supplied documents. Monitor for updates from official advisories.
CVE-2024-38019
Technical details about CVE-2024-38019 are not provided in the supplied documents. Public sources in Connected documents do not specify affected products, root cause, exploit status or remediation. Monitor for official advisories and Microsoft update notes for confirmation.
CVE-2024-38046
CVE-2024-38046 is described as a local privilege-escalation vulnerability in PowerShell. The primary public documentation (NVD/NCSC) confirms a local attacker with low privileges could elevate privileges on affected Windows components, with a CVSS v3.1 base score of 7.8 (LOCAL, Privileges Require...
CVE-2024-38056
Technical details about CVE-2024-38056 are not publicly provided in the connected documents. The entry is listed, but no affected products, root cause, impact, or fixes are described here.
CVE-2024-38244
CVE-2024-38244 is a Windows Kernel Streaming Service Driver elevation-of-privilege flaw. The CVE is rated CVSSv3.1 base score 7.8 (HIGH) with LOCAL attack vector, LOW attack complexity, and LOW privileges required; exploitation grants total compromise of confidentiality, integrity, and availabili...