2583 matches found
CVE-2017-0109
Hyper-V Remote Code Execution Vulnerability (CVE-2017-0109) affects Microsoft Windows with Hyper-V across multiple OS versions (from Windows Vista SP2 up to Windows Server 2016). The issue allows guest OS users to execute arbitrary code on the host OS via a crafted application, representing a pow...
CVE-2017-8531
CVE-2017-8531 : Affected are Windows graphics components including Uniscribe across Windows client/server lines (e.g., Windows 7 SP1, 8.1, 10 variants; Windows Server 2008-2016) and Microsoft Office; root cause is an information disclosure vulnerability caused by improper memory disclosure in the...
CVE-2017-8574
CVE-2017-8574 describes a local elevation-of-privilege in the Microsoft Windows Graphics Component. Affected software includes Windows 10 versions 1607 and 1703 (and Windows Server 2016) where the Graphics component fails to properly handle objects in memory, enabling a local attacker to run code...
CVE-2017-8581
CVE-2017-8581 is a Win32k elevation of privilege vulnerability affecting multiple Windows platforms (Windows 7/8.1/10 and corresponding Server editions) where improper handling of objects in memory could allow an attacker to run code with elevated privileges. The provided documents identify the a...
CVE-2017-8588
CVE-2017-8588 is a WordPad remote code execution vulnerability in Windows where parsing specially crafted WordPad files can execute code. Connected sources identify WordPad vulnerability (KB4026061) affecting WordPad across affected Windows versions and indicate the CVE entry is linked to a mitig...
CVE-2024-35270
Technical details about CVE-2024-35270 (Windows iSCSI Service DoS) are not provided in the connected documents. Monitor for official advisories and Microsoft updates for affected products and remediation.
CVE-2024-38072
CVE-2024-38072 is associated with Windows Remote Desktop Licensing Service and is described as a Denial of Service vulnerability. The provided Connected documents mention the vulnerability generically (DoS impact) and reference a Microsoft security update page, but do not supply detailed root-cau...
CVE-2024-38256
CVE-2024-38256 is a Windows kernel‑mode driver information disclosure vulnerability. The incident affects Windows kernel‑mode drivers and has a CVSSv3.1 base score of 5.5 (MEDIUM) with local attack vector, low attack complexity, and low privileges required; confidentiality impact is High, others ...
CVE-2025-49744
CVE-2025-49744 — Microsoft Graphics Component heap-based buffer overflow can allow an authorized, local attacker to escalate privileges. Connected sources confirm this as an elevation-of-privilege vulnerability in the Microsoft Graphics Component (a graphics driver component). The provided docume...
CVE-2025-62549
CVE-2025-62549 is a Windows RRAS Remote Code Execution vulnerability. The connected documents confirm an unauthenticated network exploit that allows code execution via RRAS component, with high impact and network access. Affected software is Windows RRAS services; root cause identified as an untr...
CVE-2026-59136
CVE-2026-59136 affects Microsoft COM for Windows due to use of an uninitialized resource, enabling a locally authorized attacker to disclose information. The vulnerability impact is information disclosure with a CVSS v3.1 base score of 5.5 (Medium); attack requires local access, low privileges, a...
CVE-2026-61932
The CVE-2026-61932 entry describes a type confusion vulnerability in the Windows DWM Core Library that allows an authorized attacker to achieve local privilege escalation . Affected component is the Windows DWM Core Library; root cause is resource access via incompatible type. The provided docume...
CVE-2026-69595
CVE-2026-69595 is a use-after-free vulnerability in the Windows Services for NFS ONCRPC XDR Driver that allows an unauthorized, unauthenticated attacker to achieve remote code execution over the network. Microsoft rated it CRITICAL (CVSS 3.1: 9.8) with low attack complexity and no user interactio...
CVE-2017-0212
CVE-2017-0212 : Windows Hyper-V vSMB Elevation of Privilege. Affected: Windows 10 (Gold, 1511, 1607, 1703) and Windows Server 2016, where Hyper-V fails to properly validate vSMB packet data, enabling privilege escalation. Root cause: improper validation in vSMB handling. Impact: elevation of priv...
CVE-2017-11824
The CVE-2017-11824 entry describes an Elevation of Privilege in the Windows Graphics Component due to improper handling of objects in memory, allowing code execution with elevated privileges. The Connected documents (KB/MS updates) indicate this vulnerability is among a broader set addressed by c...
CVE-2017-8486
CVE-2017-8486 is a local information-disclosure vulnerability in Windows due to how Win32k handles objects in memory. Affected products include Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 (various builds), and Windows S...
CVE-2024-38126
CVE-2024-38126 affects Windows Network Address Translation (NAT). The provided table lists it under Windows NAT with a CVSS v3.1 score of 7.5 (HIGH) and impact as Denial-of-Service. Other connected documents reference general Microsoft Windows fixes but do not provide concrete technical details (...
CVE-2024-38260
CVE-2024-38260 is a Windows Remote Desktop Licensing Service RCE vulnerability. Affected: Windows systems with the Remote Desktop Licensing Service. Impact per sources: execution of arbitrary code with the attacker’s privileges; CVSSv3.1 base score 8.8 (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). Conne...
CVE-2024-43456
Mode C: The CVE-2024-43456 case relates to Windows Remote Desktop Services Tampering. Connected docs corroborate impact as Manipulating Data (per NCSC entry: CVSS ~4.8). Microsoft has fixed vulnerabilities in Windows as part of the referenced advisories, but explicit patch versions/KB numbers for...
CVE-2024-43551
Technical details for CVE-2024-43551 (Windows Storage Elevation of Privilege) are not publicly provided in the supplied connected documents. The records confirm the vulnerability exists, but root cause, affected products/versions, exploit specifics, or fixes are not disclosed here. Monitor MSRC u...
CVE-2024-43645
CVE-2024-43645 is a Windows Defender Application Control (WDAC) security feature bypass described in connected advisories. The vulnerability permits bypassing WDAC protections via a local attacker, with high potential impact to confidentiality, integrity, and availability. Microsoft has published...
CVE-2025-21282
Technical details about CVE-2025-21282 are not publicly provided in the supplied documents. No affected product/version or exploit information is disclosed here. Monitor for updates from official advisories and CVE/NVD entries.
CVE-2025-21314
Technical details on CVE-2025-21314 are not publicly provided in the supplied documents. The materials reference Windows updates addressing vulnerabilities and general guidance, but do not specify affected components, root cause, or remediation for this CVE. Monitor for updates.
CVE-2025-26634
CVE-2025-26634 describes a heap-based buffer overflow in Windows Core Messaging that could allow an unauthenticated? not; authorized attacker to elevate privileges over a network. The CVE entry lists a CVSS v3.1 base score of 7.5 (HIGH) with NETWORK attack vector, HIGH impact on confidentiality/i...
CVE-2025-55230
CVE-2025-55230 is a local privilege-escalation in the Windows MBT Transport driver (netbt.sys) caused by an untrusted pointer dereference when handling a specific IOCTL. An authenticated local user can elevate to SYSTEM by dereferencing a kernel address via kernel memory access. A PoC exploit exi...
CVE-2026-33098
CVE-2026-33098 affects Windows container isolation via the FS Filter Driver causing Elevation of Privilege. The advisory indicates a LOCAL attack vector with LOW attack complexity and LOW privileges required, no user interaction, and HIGH impact to confidentiality, integrity, and availability. Th...
CVE-2026-50688
CVE-2026-50688 is a Windows Win32k elevation-of-privilege vulnerability described as a use-after-free in the Win32k subsystem that allows a locally authenticated attacker to gain higher privileges. The connected documents confirm the CVE title and its Windows kernel context, with advisories and C...
CVE-2016-7246
CVE-2016-7246 affects Windows kernel-mode drivers and is described as a local privilege-escalation vulnerability in Win32k. Public sources indicate the flaw resides in kernel-space handling accessed by user-mode apps, enabling a crafted application to gain elevated privileges. The initial documen...
CVE-2017-11849
The CVE-2017-11849 entry concerns the Windows kernel information disclosure vulnerability. Affected software includes Windows kernel on Windows 7 SP1; Windows Server 2008 SP2/R2 SP1; Windows 8.1/RT 8.1; Windows Server 2012/R2; Windows 10 versions (Gold, 1511, 1607, 1703, 1709); and Windows Server...
CVE-2017-8579
CVE-2017-8579 describes a kernel-mode privilege escalation via the DirectX component in Windows 10 (Gold/1511, 1607, 1703) and Windows Server 2016. An authenticated, local attacker can run arbitrary code in kernel mode through a specially crafted DirectX application. The impact is full system com...
CVE-2017-8633
The CVE-2017-8633 vulnerability is an elevation of privilege in Windows Error Reporting (WER). The issue arises when WER handles and executes files, allowing an attacker to escalate privileges on affected Windows versions (Windows 7/8.1/10 and corresponding server SKUs). The linked OpenVAS/KB dat...
CVE-2024-43506
CVE-2024-43506 refers to a Microsoft Windows BranchCache Denial-of-Service vulnerability. The available OpenVAS/NVD context indicates the issue is a network-exploitable DoS (CVSS 3.1: 7.5) affecting Windows BranchCache, with no user interaction required and no privilege escalation per the given d...
CVE-2024-43570
CVE-2024-43570 is a Windows Kernel Elevation of Privilege vulnerability. Connected sources confirm affected software as Windows kernel components and indicate fixes released in October 2024 through MSRC advisories and OS updates (KB5044280/KB5044281/KB5044285) covering multiple Windows builds, wi...
CVE-2025-21223
Technical details about CVE-2025-21223 are not provided in the supplied connected documents. The initial entry notes a Windows Telephony Service RCE, but no vendor/version/impact specifics are disclosed here. Monitor for future updates.
CVE-2025-21239
Technical details about CVE-2025-21239 (affected component, root cause, exploitability, affected products) are not publicly provided in the connected documents. Monitor for updates from Microsoft/NVD CVE entries for new details and fixes.
CVE-2025-21252
Technical details about CVE-2025-21252 are not publicly available in the provided documents. Monitor for updates from Microsoft and NVD for affected products, impact, and remediation.
CVE-2025-21256
Technical details for CVE-2025-21256 are not provided in the connected documents. Public information here is limited to general Windows updates references; no product, exploit, or root-cause specifics are disclosed. Monitor for updates and additional disclosures.
CVE-2025-21266
CVE-2025-21266 is a Windows Telephony Service remote code execution vulnerability. The linked data shows a network-exposed impact with CVSS v3.1 base score 8.8 (HIGH), requiring user interaction for exploitation and affecting confidentiality, integrity, and availability. Affected component is the...
CVE-2025-21301
CVE-2025-21301 is a Windows Geolocation Service Information Disclosure vulnerability with CVSS 3.1 base score 6.5 (Network attack, Low attack complexity, Privileges required: Low, User interaction: None). The vulnerability is disclosed as affecting Windows Geolocation Service and is addressed by ...
CVE-2025-48822
CVE-2025-48822 is an out-of-bounds read vulnerability in Windows Hyper-V that could enable local code execution. The connected NCSC entry explicitly lists the impact as Execution of arbitrary code on Windows Hyper‑V, with CVSS base score 8.6 (LOCAL, HIGH). The documents do not provide additional ...
CVE-2026-50451
CVE-2026-50451 affects Windows Routing and Remote Access Service (RRAS): missing authentication for a critical function enables local privilege escalation by an authorized attacker. Documented impact is privilege escalation (local), base CVSSv3.1 7.1 (HIGH); remediation is Microsoft security upda...
CVE-2026-50502
CVE-2026-50502 corresponds to a Windows Event Logging Service remote code execution vulnerability. The issue is described as insufficient granularity of access control in the Event Logging Service, enabling an authenticated, network-accessing attacker to run code on the vulnerable system. For con...
CVE-2026-65678
CVE-2026-65678: A use-after-free in Windows Win32K enables an in-local privilege elevation by an authorized attacker. Affected software is Windows with Win32K component; the vulnerability arises from improper lifecycle handling leading to use-after-free conditions. The CVSS score is 7.0 (High) wi...
CVE-2017-0063
CVE-2017-0063 concerns the Color Management Module (ICM32.dll) in Windows, where memory handling in ICM32.dll across multiple Windows versions (Vista SP2, Server 2008 SP2/R2, 7 SP1, 8.1, 2012/RT 8.1, 10 versions, 2016 Server) can be leveraged by a crafted website to bypass ASLR and execute code w...
CVE-2017-0183
CVE-2017-0184 is a Hyper-V Denial of Service vulnerability caused by improper validation of input from a privileged user on a guest OS. Exploitation could crash the host Hyper-V service. A known remediation is the security update KB3217841 (April 2017).
CVE-2017-11763
CVE-2017-11763 is a remote code execution vulnerability in the Microsoft Graphics Component exploited via specially crafted embedded fonts. Affected products include multiple Windows versions listed in the CVE description. Remediation is provided by security updates in the October 2017 rollups (e...
CVE-2017-11851
The CVE-2017-11851 affects the Windows kernel information disclosure vulnerability: Windows 7 SP1, Windows Server 2008 SP2/R2 SP1, Windows 8.1/RT 8.1, Server 2012/R2, Windows 10 (versions 1511, 1607, 1703, 1709), Windows Server 2016, and Server 1709. It arises from improper handling of objects in...
CVE-2024-38067
Technical details about CVE-2024-38067 (Windows OCSP Server DoS) are not provided in the supplied connected documents; no product/version/root-cause/impact/fix information is present. Monitor for updates.
CVE-2024-38070
Technical details about CVE-2024-38070 are not publicly provided in the supplied documents. Please monitor for updates from Microsoft and NVD; current entries reference WLDP but do not disclose exploit paths or affected products.