CVE-2025-26669

CVE-2025-26669 is listed in RRAS (Windows Routing and Remote Access Service) with the impact described as Access to sensitive data and a severity score of 8.80. The RRAS entry indicates an information-disclosure risk via an out-of-bounds read, attributed to a vulnerability in RRAS. Connected sour...

CVE-2025-27738

CVE-2025-27738 affects Windows Resilient File System (ReFS). Description in NCSC advisory attributes an improper access control issue that could allow an authenticated attacker to disclose information over the network, with impact categorized as access to sensitive data. The NT/OS update guidance...

CVE-2025-29837

Technical details about CVE-2025-29837 (affected products, root cause, exploitability) are not publicly disclosed in the provided connected documents; no specifics on impact or remediation are available here.

CVE-2026-61353

CVE-2026-61353 describes a heap-based buffer overflow in the Windows Telephony Service that enables a locally authenticated attacker to achieve privilege escalation . The vulnerability arises from a heap overflow in the Telephony Service component, leading to potential unauthorized system access....

CVE-2017-0075

CVE-2017-0075 (Hyper‑V RCE) affects Microsoft Windows Hyper‑V, with vulnerable scope including Windows Vista SP2, Windows Server 2008 SP2/R2, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold/R2, Windows 10 (Gold, 1511, 1607), and Windows Server 2016. The connected sources describe a remote co...

CVE-2017-0118

CVE-2017-0118 is an information-disclosure vulnerability in Microsoft Windows Uniscribe (usp10.dll) that can be triggered by a crafted web site, allowing an attacker to read sensitive data from a target process’s memory. The issue affects a range of Windows versions listed in the description and ...

CVE-2017-0188

CVE-2017-0188 concerns a Win32k information-disclosure vulnerability in Windows 8.1/RT 8.1, Windows Server 2012/2012 R2, Windows 10, and Windows Server 2016. The win32k component improperly provides kernel information, enabling an attacker who can exploit the issue to obtain information that coul...

CVE-2017-0192

The CVE-2017-0192 entry describes an information disclosure in the Microsoft Windows ATMFD.dll (Adobe Type Manager Font Driver). Affected products include Windows Vista SP2, Windows Server 2008 SP2/R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold/R2, Windows RT 8.1, and Windows 10 bui...

CVE-2017-0300

Technical details for CVE-2017-0300 are not publicly available in the provided documents. Monitor for updates.

CVE-2017-8677

CVE-2017-8677 is a Win32k/GDI+-related information-disclosure vulnerability in Windows that exposes kernel memory addresses when handling GDI+ objects. Affected products include Windows kernel/UI components on Windows Server 2008 SP2/R2 SP1, Windows 7 SP1, Windows 8.1, Windows 10 (various builds)...

CVE-2017-8694

CVE-2017-8694 is a local privilege escalation in the Windows kernel-mode driver (Win32k) caused by improper handling of memory objects. Affects Windows versions listed in the description (Windows 7 SP1, Windows 8.1, Windows Server 2008 SP2/R2 SP1, Windows Server 2012, Windows RT 8.1, Windows 10 v...

CVE-2024-38050

Technical details about CVE-2024-38050 (affected software, root cause, impact, exploitability) are not provided in the supplied documents. Please monitor for updates from Microsoft or related security advisories.

CVE-2024-38052

Technical details for CVE-2024-38052 are not publicly available in the provided documents. No affected products, root cause, impact, or remediation are specified here. Monitor official sources for updates.

CVE-2024-38151

Technical details (affected product/component/root cause/impact/fix) for CVE-2024-38151 are not provided in the connected documents. Only the label “Windows Kernel Information Disclosure” with CVSS 5.5 is given; monitor for updates.

CVE-2024-38160

Technical details for CVE-2024-38160 are not publicly available in the provided documents. No concrete product/version/impact/fix information is given here. Monitor for updates from official advisories.

CVE-2024-38238

CVE-2024-38238 is listed in the Windows Streaming Service category as a local elevation-of-privileges vulnerability affecting the Windows kernel streaming service. The connected documents corroborate an elevated-privilege risk for this CVE within Windows components, without providing full exploit...

CVE-2025-21212

CVE-2025-21212 corresponds to an Internet Connection Sharing (ICS) Denial of Service vulnerability in Windows. Reported impact is DoS, with an adjacent attack vector, low attack complexity, no user interaction required, and no confidentiality/integrity impact, but availability is affected (CVSS 3...

CVE-2025-21277

CVE-2025-21277 affects Microsoft Message Queuing (MSMQ). A Denial of Service vulnerability exists in MSMQ, exploitable over the network without user interaction, with CVSSv3.1 base score 7.5 (HIGH). The affected component is MSMQ; the initial description confirms a DoS impact. Publicly available ...

CVE-2025-21284

Technical details about CVE-2025-21284 are not provided in the connected documents. Public references exist (NVD, CVE listings) but there are no specifics in these sources about affected products, root cause, impact details, or fixes; monitor for updates.

CVE-2026-49177

CVE-2026-49177 is a Windows TCP/IP vulnerability described as an out-of-bounds read that allows an authenticated, local attacker to disclose information. The CVE is supported by multiple sources in the Connected documents (NVD/NCSC/EUVD), which identify the affected component as Windows TCP/IP an...

CVE-2026-59138

CVE-2026-59138 is a null pointer dereference in Microsoft Remote Registry Service that allows an authorized attacker to cause a denial of service over a network. The vulnerability has a CVSS v3.1 base score of 6.5 (MEDIUM) with Network attack vector, Low attack complexity, Privileges Required: Lo...

CVE-2026-62753

CVE-2026-62753 is a heap-based buffer overflow in Windows HTTP.sys that allows local privilege escalation by an authorized attacker. Affected: Windows HTTP.sys; Impact: local high-severity compromise of confidentiality, integrity, and availability. CVSS: 7.0 (3.1) with LOCAL, LOW privileges requi...

CVE-2017-0021

Technical details about CVE-2017-0021 are not publicly available in the provided connected documents. Monitor for updates; no specific affected builds, root cause, or fixes are described here.

CVE-2017-0043

CVE-2017-0043 affects Active Directory Federation Services (ADFS) across Windows Server 2008 R2 SP1, Server 2012/2012 Gold, Server 2016, and Windows 10 1607. The vulnerability involves information disclosure due to processing XML (XML External Entity) handling in ADFS, enabling an authenticated, ...

CVE-2017-0081

CVE-2017-0081 affects Windows kernel-mode drivers in Windows 8.1, Windows Server 2012 (Gold/R2), Windows RT 8.1, Windows 10 (Gold, 1511, 1607) and Windows Server 2016, enabling local privilege escalation via a crafted application in Win32k. Impact is described as complete confidentiality, integri...

CVE-2017-11829

CVE-2017-11829 affects Windows 10 via the Windows Update Delivery Optimization service which does not properly enforce file share permissions. The root cause is an elevation of privilege vulnerability that could allow a local attacker to overwrite files by abusing Delivery Optimization; exploitat...

CVE-2017-8463

CVE-2017-8463 is described as a remote code execution vulnerability in Windows Explorer, triggered when Explorer improperly handles executable files and shares during rename operations. The issue affects multiple Windows versions (e.g., Windows 7, 8.1, Server 2012/R2, Windows 10 variants) and cou...

CVE-2017-8544

CVE-2017-8544 describes a Windows Search Information Disclosure vulnerability in the Windows Search service caused by how objects are handled in memory. Affected systems span multiple Windows versions: Windows 7 SP1, Windows Server 2008 SP2/R2 SP1, Windows 8.1/RT 8.1, Windows Server 2012/R2, Wind...

CVE-2017-8592

CVE-2017-8592 is a browser security feature bypass in Microsoft browsers (Internet Explorer/Edge) caused by improper handling of redirect requests. This leads to bypassing CORS redirect restrictions and following redirects that should be ignored, potentially exposing data to an attacker. In the c...

CVE-2017-8717

CVE-2017-8717 affects the Microsoft JET Database Engine, with a buffer overflow in memory handling of objects that can allow remote code execution. The CPAI advisory notes a remote attacker could exploit this by enticing a user to open a specially crafted Excel file on affected Windows versions. ...

CVE-2024-37986

Technical details for CVE-2024-37986 are not publicly provided in the supplied documents. No affected products, versions, root cause, or remediation are specified here. Monitor for updates.

CVE-2024-38102

Technical details for CVE-2024-38102 are not provided in the Connected documents. Monitor for updates.

CVE-2024-38145

CVE-2024-38145 affects the Windows Layer-2 Bridge Network Driver. The available data shows a Denial-of-Service impact with CVSS v3.1 base score 7.5 (Network attack, Low attack complexity, No privileges, No user interaction). Root cause, affected software versions, and remediation are not provided...

CVE-2024-38230

CVE-2024-38230 is associated with Windows Standards-Based Storage Management Service and is described in the connected materials as a Denial of Service against that Windows component. The primary technical details available: affected software/component (Windows Standards-Based Storage Management ...

CVE-2025-21238

CVE-2025-21238 affects the Windows Telephony Service and is a remote code execution vulnerability. The initial data lists CVSS 3.1 with NETWORK attack vector, LOW attack complexity, no privileges required, and user interaction required; impact is high on confidentiality, integrity, and availabili...

CVE-2025-21243

CVE-2025-21243 affects Windows Telephony Service. The vulnerability is a remote code execution flaw caused by input validation in Windows Telephony Server, enabling network-based exploitation with required user interaction and no privileges. The CVSS v3.1 base score is 8.8 (HIGH) with network acc...

CVE-2025-21265

Technical details about CVE-2025-21265 are not provided in the supplied documents. Public information on affected products, root cause, and fixes is missing here. Monitor for updates from Microsoft and NVD for concrete vulnerability specifics.

CVE-2025-21268

CVE-2025-21268 is a Windows MapUrlToZone security feature bypass. Affected component: MapUrlToZone logic; impact is circumvention of security boundaries (CVSS v3.1: 4.3, NETWORK attack vector, user interaction required). Connected sources confirm it as a security feature bypass vulnerability and ...

CVE-2025-21287

CVE-2025-21287 is a Windows Installer elevation of privilege vulnerability. The linked documents confirm this CVE affects the Windows Installer component in Windows OS, enabling a local attacker with low privileges and no user interaction to elevate privileges. Remediation is provided by Microsof...

CVE-2025-21336

Technical details about CVE-2025-21336 are not publicly provided in the supplied documents. The materials reference a Windows cryptographic information disclosure vulnerability but do not specify affected products/versions or fixes.

CVE-2025-21359

Technical details (affected product, root cause, impact, or fix) for CVE-2025-21359 are not provided in the supplied documents. Please monitor official advisories (Microsoft/MSRC updates) for concrete vulnerability specifics and remediation guidance.

CVE-2026-0390

Technical details about CVE-2026-0390 are not publicly provided in the available documents. No information on affected product versions, root cause, exploitability, or remediation is included. Monitor for updates from official sources.

CVE-2026-32202

CVE-2026-32202 is a Windows Shell vulnerability described as a protection mechanism failure that enables spoofing over a network. Connected sources label the issue under Windows Shell with the capability for an attacker to pretend to be another user (e.g., “Pretend to be another user”) and refere...

CVE-2026-50419

CVE-2026-50419 is a Windows Kernel information-disclosure vulnerability that could allow an authorized local attacker to disclose sensitive data. The CVSS v3.1 base score is 3.3 (LOW) with LOCAL access and low complexity; no exploitation details are provided in the connected documents. Microsoft ...

CVE-2026-69485

CVE-2026-69485 is a Remote Code Execution vulnerability in Microsoft Remote Desktop Client caused by use of an uninitialized resource . An authorized attacker with low privileges can exploit it remotely over a network without user interaction, achieving full compromise of confidentiality, integri...

CVE-2026-69524

CVE-2026-69524 is a use-after-free vulnerability in Windows Active Directory Domain Services that allows an unauthorized, network-based attacker to achieve remote code execution without prior authentication or user interaction. Microsoft rates it CVSS 8.1 (HIGH) with high impact on confidentialit...

CVE-2016-7214

Technical details about CVE-2016-7214 are not publicly provided in the supplied documents. The connected EUVD/NVD entries do not reveal affected products or root causes here. Monitor for updates from official advisories.

CVE-2016-7219

CVE-2016-7219 affects the Windows Crypto driver (kernel-mode) across multiple Windows releases (Vista/Server 2008 through Windows 10/Server 2016). The impact is information disclosure via a crafted application, caused by improper handling of objects in memory within the Crypto driver. The vulnera...

CVE-2016-7221

CVE-2016-7221 is a Windows IME DLL-loading privilege-escalation issue. The IME loads DLLs via a registry-controlled mechanism and can be exploited by a locally authenticated user to gain higher privileges when an application initiates the IME. Public writeups (e.g., JVN/JVND) describe the exploit...

CVE-2017-0097

CVE-2017-0097 affects Hyper-V in multiple Windows platforms (Vista SP2, Server 2008 SP2/R2, Windows 7 SP1, 8.1, Server 2012/R2, Windows 10 up to 1607 and Server 2016). The vulnerability allows a guest OS user, running as a VM, to cause a denial of service on the host via a crafted application. Th...