CVE-2025-29959

Technical details about CVE-2025-29959 are not publicly available in the provided connected documents. The initial description notes a RRAS uninitialized resource issue, but no product/version/root-cause/fix specifics are present here; monitor official advisories for updates.

CVE-2025-29962

Technical details about CVE-2025-29962 are not provided in the supplied documents; no affected products, root cause, or fixes are disclosed here. Monitor for updates.

CVE-2025-33055

CVE-2025-33055 is an information-disclosure vulnerability: an out-of-bounds read in Windows Storage Management Provider could allow an authorized, local attacker to disclose information. Connected sources confirm the flaw and impact but do not provide concrete exploit details or a documented reme...

CVE-2025-33058

CVE-2025-33058 describes an out-of-bounds read in the Windows Storage Management Provider, enabling a locally authorized attacker to disclose information. Affected product/component: Windows Storage Management Provider. Root cause: memory read beyond bounds leading to information disclosure (conf...

CVE-2026-58531

CVE-2026-58531 is a Windows SMB elevation-of-privilege vulnerability caused by a race condition in a shared resource. It affects Windows SMB components and enables an authorized attacker to elevate privileges over the network. CVSS v3.1 base score 7.5 (NETWORK, HIGH impact), per Microsoft’s advis...

CVE-2026-62752

CVE-2026-62752 is a Windows Kerberos heap-based buffer overflow that allows an authorized attacker to elevate privileges locally. The description confirms a local, low-attack-complexity path with high impact to confidentiality, integrity, and availability. No specific exploit details or versions/...

CVE-2026-62883

CVE-2026-62883 describes a numeric truncation error in Windows DNS that allows an authorized attacker to elevate privileges locally. Affected component: Windows DNS resolution logic. Root cause: numeric truncation leads to improper handling of DNS-related data, enabling local privilege escalation...

CVE-2017-0051

CVE-2017-0051 affects Microsoft Windows 10 Version 1607 and Windows Server 2016. The description indicates a remote-denial-of-service via a crafted Office document, referred to as the Microsoft Hyper-V Network Switch Denial of Service Vulnerability. The vulnerability is described as causing an ap...

CVE-2017-0156

CVE-2017-0156 is an elevation-of-privilege vulnerability in the Microsoft Graphics component affecting Windows 7, 8.1, RT 8.1, 10, and Windows Server 2008 R2/2012/2012 R2/2016. The issue arises when the Graphics Component fails to properly handle memory objects, allowing a local attacker to gain ...

CVE-2017-0191

CVE-2017-0191 affects multiple Windows platforms (Windows 7, 8.1, 10 and Windows Server 2008 R2/2012/2012 R2/2016) with a denial-of-service condition caused by how memory objects are handled. The vulnerability could allow an attacker to cause a target system to stop responding. The provided sourc...

CVE-2025-21352

CVE-2025-21352 is a Windows Internet Connection Sharing (ICS) Denial of Service vulnerability. The NVD entry describes a DoS impact with an overall CVSS v3.1 base score of 6.5 (MEDIUM), attack vector Adjacent, attack complexity Low, privileges required None, user interaction None, and high availa...

CVE-2025-29954

Technical details for CVE-2025-29954 are not publicly provided in the supplied documents. Monitor for official updates from Microsoft (MSRC) and vulnerability feeds as the connected sources are not detailed here.

CVE-2025-49735

CVE-2025-49735 describes a use-after-free vulnerability in Windows KDC Proxy Service (KPSSVC) that could allow remote code execution over the network. The entry is publicly tracked with a Network attack vector, high impact on confidentiality, integrity, and availability (CVSS v3.1 base score 8.1)...

CVE-2026-21248

CVE-2026-21248 describes a heap-based buffer overflow in Windows Hyper-V. The vulnerability allows an authorized, locally-privileged attacker to execute code on the affected host. The CVSS v3.1 metrics indicate LOCAL attack vector, LOW attack complexity and LOW privileges required, with UI access...

CVE-2026-32071

CVE-2026-32071 is a Windows Local Security Authority Subsystem Service (LSASS) denial-of-service vulnerability. The affected component is LSASS; the CVSS metrics indicate network-based exploitation with low complexity, no privileges or user interaction required, and an impact on availability (HIG...

CVE-2026-40397

CVE-2026-40397 describes an integer underflow (wrap/wraparound) in the Windows Common Log File System Driver that enables a locally authenticated attacker to elevate privileges. The description indicates a local, privileges-required (low), no user interaction vulnerability with high impact to con...

CVE-2026-50444

CVE-2026-50444 is a Windows Server Update Services (WSUS) Elevation of Privilege vulnerability caused by Missing authentication for a critical function. An authorized attacker could elevate privileges over the network. Public details are supported by multiple sources (MSRC update guide, NCSC advi...

CVE-2026-62696

CVE-2026-62696 impacts the Windows Program Compatibility Assistant Service. The advisory describes an integer underflow (wrap/wraparound) that allows an authorized local attacker to elevate privileges. CVSS: 3.1, Base score 7.8 (HIGH), with Local attack vector, Low attack complexity, Privileges r...

CVE-2026-62730

CVE-2026-62730 describes a buffer over-read in the Windows Wired AutoConfig Service that can disclose information locally. The issue is exploitable by an authorized, low-privilege local attacker (LOCAL attack vector, LOW privileges, no user interaction) with a CVSS v3.1 base score of 5.5 (HIGH co...

CVE-2026-65662

CVE-2026-65662 describes an out-of-bounds read in Windows GDI that allows an authorized local attacker to disclose information. The vulnerability impacts Windows GDI components and is rated with a CVSS v3.1 base score of 5.5 (Medium) , with local attack vector, low attack complexity, and low priv...

CVE-2026-69491

CVE-2026-69491 is a heap-based buffer overflow in Windows Microsoft DirectMusic that allows an unauthorized, network-based attacker to achieve remote code execution without user interaction or prior privileges. The vulnerability is rated CVSS 9.8 (Critical) with high impact to confidentiality, in...

CVE-2026-69768

A heap-based buffer overflow in Windows RNDIS (Remote Network Driver Interface Specification) allows an unauthorized, network-based attacker to achieve remote code execution without user interaction or prior privileges. Microsoft assigned a CVSS 3.1 score of 9.8 (Critical) , reflecting high impac...

CVE-2016-7273

CVE-2016-7273 affects the Windows Graphics Component in Windows 10 (Gold/1511/1607) and Windows Server 2016. A remote code execution vulnerability arises from how the Graphics Component handles objects in memory, allowing an attacker to run arbitrary code when a user visits a crafted web site or ...

CVE-2017-0080

Technical details about CVE-2017-0080 are not publicly provided in the supplied documents; the connected EUVD/CIRCL entries mention sightings/malware but do not include affected products, root cause, or remediation. Monitor for updates.

CVE-2017-0291

CVE-2017-0291 is a Windows PDF remote-code-execution vulnerability tied to the JPEG2000 parsing path in the Microsoft Windows PDF library. The KLA/Kaspersky entry explicitly lists a Windows PDF remote-code-execution vulnerability with CVE-2017-0291 and describes exploitation via specially crafted...

CVE-2017-8624

CVE-2017-8624 corresponds to the Windows CLFS Elevation of Privilege Vulnerability in the Common Log File System. The initial description states that CLFS on multiple Windows editions handles in-memory objects in an unsafe way, enabling local privilege escalation. The CVSS data supplied indicates...

CVE-2025-59505

CVE-2025-59505 is a Windows Smart Card Reader privilege-escalation vulnerability described as a double-free issue that could allow an authenticated local attacker to gain elevated privileges. The connected material confirms the CVE is categorized as a high-severity (CVSS v3.1 base 7.8) local, use...

CVE-2026-40398

CVE-2026-40398 is a heap-based buffer overflow in Windows Remote Desktop Services that allows an authenticated attacker to perform local privilege escalation. The description across sources consistently identifies a local, authenticated exploit path with a high impact (C/H/I/A: High) and a CVSS v...

CVE-2026-44801

CVE-2026-44801 = heap-based buffer overflow in Remote Desktop Client enabling a remote code execution by an unauthenticated attacker over the network. Root cause: heap overflow; impact: remote execution of code. Affected software/version details are not provided in the documents. No exploit statu...

CVE-2026-62709

The CVE describes an information-disclosure flaw in Windows GDI+. Affected component: Windows GDI+ (graphics rendering). Root cause: use of an uninitialized resource, enabling an authorized local attacker to disclose information. Impact: confidentiality loss with a CVSS v3.1 base score of 5.5 (Lo...

CVE-2026-62747

CVE-2026-62747 is a heap-based buffer overflow in Windows Device Association Service that enables a locally authenticated attacker to elevate privileges. Exploit details are not provided in the connected documents, and no specific patch/version is listed here; CVSS v3.1 base score is 7.8 ( HIGH )...

CVE-2026-62758

CVE-2026-62758 is a heap-based buffer overflow in Windows Remote Access Connection Manager that permits a locally authenticated attacker to elevate privileges. Affected component: RASMAN service on Windows. Root cause: heap overflow enabling arbitrary code execution with HIGH impact on confidenti...

CVE-2026-62782

CVE-2026-62782 is a Windows SMB Client vulnerability described as an out-of-bounds read that could allow an unauthenticated, remote attacker to disclose information over the network. The description and multiple sources (NVD, MSRC, CIRCL, ENISA/NCSC advisory references) confirm the affected compo...

CVE-2026-70307

CVE-2026-70307 describes a use-after-free flaw in the Windows Ancillary Function Driver for WinSock that can allow an authorized local attacker to elevate privileges. Affected component is the Windows network stack’s Ancillary Function Driver used by WinSock; root cause is a use-after-free bug in...

CVE-2017-8686

CVE-2017-8686 affects the Windows Server DHCP service on Windows Server 2012 Gold/R2 and Windows Server 2016. The issue is a memory corruption vulnerability in the DHCP service that can allow an attacker to run arbitrary code on the DHCP failover server or cause the DHCP service to become nonresp...

CVE-2017-8704

CVE-2017-8704 concerns a Hyper-V Denial of Service in Windows 10 version 1607 and Windows Server 2016. The root cause is that Hyper-V fails to properly validate input received from an authenticated user inside a guest VM, which can cause a host crash/DoS. The vulnerability affects the Hyper-V com...

CVE-2017-8707

CVE-2017-8707 affects the Windows Hyper-V component across multiple Windows Server and client OS versions (Server 2008 SP2, R2 SP1; Windows 8.1; Server 2012 Gold/R2; Windows 10 variants 1511/1607/1703; Server 2016). The issue is an information-disclosure vulnerability caused by improper validatio...

CVE-2024-43534

CVE-2024-43534 is a Windows Graphics Component Information Disclosure vulnerability. The affected product is Windows Graphics Component; the entry indicates an information disclosure impact (confidentiality) with network attack vector, no integrity/availability impact, and user interaction requir...

CVE-2024-43608

CVE-2024-43608 is a Windows RRAS remote code execution vulnerability with network access (AV:N, AC:L, PR:N, UI:R, S:U, C/H/I/H/A:H) and high impact across confidentiality, integrity, and availability. Connected sources corroborate RRAS involvement and classify the exploit as a remote code executi...

CVE-2024-43646

Technical details are not publicly provided in the supplied documents. Monitor for updates from Microsoft/Microsoft Security Update Guide and NVD.

CVE-2024-49107

Technical details, affected components, and remediation specifics for CVE-2024-49107 are not provided in the supplied connected documents. Monitor for official updates from Microsoft and CVE listings for concrete technical description, impact, and fixes.

CVE-2025-21257

CVE-2025-21257 corresponds to Windows WLAN AutoConfig Service Information Disclosure Vulnerability. The connected documents identify the affected component as the Windows WLAN AutoConfig Service and describe the issue as an information disclosure vulnerability, with local attack requirements (Loc...

CVE-2025-30385

Technical details about CVE-2025-30385 are not provided in the connected documents. The initial description mentions a Windows use-after-free in the CLFS driver that could elevate privileges, but no vendor/version specifics or fixes are disclosed here. Monitor for authoritative updates.

CVE-2025-33063

CVE-2025-33063 affects the Windows Storage Management Provider and describes an out-of-bounds read that can let an authorized local attacker disclose information. The vulnerability has a high confidentiality impact (data exposure) with local attack vector; there is no exploitation detail in the I...

CVE-2026-20940

CVE-2026-20940 is a heap-based buffer overflow in the Windows Cloud Files Mini Filter Driver that enables a locally authenticated attacker to elevate privileges. Connected advisories confirm the affected component (Cloud Files Mini Filter Driver) and the privilege-escalation impact; Microsoft has...

CVE-2026-21265

CVE-2026-21265 describes a Secure Boot bypass tied to expiration of Microsoft root certificates in the UEFI KEK/DB chain. Affected certificates include KEK CA 2011 (expires 2026-06-24), UEFI CA 2011 (expires 2026-06-27), and Windows Production PCA 2011 (expires 2026-10-19). The vulnerability aris...

CVE-2026-26174

CVE-2026-26174 is a race-condition vulnerability in Windows Server Update Services (WSUS) that enables a locally authenticated attacker to achieve elevation of privileges. The issue is described as concurrent execution using a shared resource with improper synchronization. Multiple connected docu...

CVE-2026-42825

CVE-2026-42825 describes a use-after-free in Windows Telephony Service that allows an authorized attacker to elevate privileges locally. The description clearly states local privilege escalation as the impact, but the connected documents do not provide specifics on affected product versions, root...

CVE-2026-49794

CVE-2026-49794 concerns the Windows USB Audio Class driver (usbaudio.sys). The vulnerability is an out-of-bounds read in the driver that enables an unauthorized attacker to disclose information when a physical access scenario is present. Attacker class: physical access with low attack complexity ...

CVE-2026-50304

CVE-2026-50304 is a confirmed vulnerability affecting Microsoft Windows Active Directory Federation Services (AD FS). The issue is a stack-based buffer overflow in AD FS that could allow an unauthenticated network attacker to cause a denial of service. Connected sources corroborate the nature of ...