CVE-2025-32710

CVE-2025-32710 refers to a Use-After-Free vulnerability in Windows Remote Desktop Services that allows a network-based attacker to execute code on affected systems. The CVE is linked to Windows RDS components; the Nessus plugin notes it alongside CVE-2025-32715, and an exploit repo exists, but ex...

CVE-2025-25004

CVE-2025-25004 affects Microsoft PowerShell. The connected documents corroborate a local privilege escalation vulnerability due to improper access control, enabling an authorized attacker to obtain elevated privileges on the host. The advisory entries (including NCSC-2025-0313) assign CVSS v3.1/3...

CVE-2025-26637

CVE-2025-26637 affects Windows BitLocker, described as a protection mechanism failure that allows bypass of security with a physical attack. The CVSSv3.1 vector (AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) indicates a physical-attack feasible exploit with high confidentiality, integrity, and availabilit...

CVE-2026-62787

CVE-2026-62787 is a remote code execution vulnerability in Windows DNS Server caused by a use-after-free condition. An authenticated attacker could execute code over the network on a targeted host. CVSS v3.1 base score 7.5 (HIGH): AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H. The connected sources confirm...

CVE-2019-0571

CVE-2019-0571 is a Windows Data Sharing Service elevation of privilege vulnerability affecting Windows 10, Windows Server 2016/2019, and related builds. The issue arises from improper handling of file operations within the Data Sharing Service, enabling a local attacker to gain elevated privilege...

CVE-2019-0974

CVE-2019-0974 is a remote code execution vulnerability in the Windows Jet Database Engine caused by improper handling of in-memory objects. An attacker could lure a user to open a specially crafted file, potentially executing arbitrary code on the affected system. The update fixes the issue by co...

CVE-2019-1391

Technical details for CVE-2019-1391 are not publicly available in the provided documents. Monitor for updates from vendors and vulnerability trackers.

CVE-2019-1484

CVE-2019-1484 describes a Windows OLE remote code execution vulnerability caused by improper validation of user input. Red Hat entry mirrors this description. OpenVAS items reference missing Microsoft security updates (e.g., KB4530684/68/89/71/73/and others) as remediation, implying patching via ...

CVE-2020-0890

CVE-2020-0890 describes a Denial of Service in Microsoft Hyper-V. A privileged user inside a guest VM could trigger a DoS by sending specially crafted data to Hyper-V, causing the host to fail to handle requests. The affected component is Hyper-V on Windows Server (host server) and the root cause...

CVE-2020-17095

CVE-2020-17095 is a Windows Hyper-V remote code execution vulnerability. Microsoft documentation ties it to Hyper-V RCE and lists patches across multiple Windows builds (e.g., KB4592438, KB4592440, KB4592449). CVSS/metrics show high/critical severity; exploitation in the wild is not indicated in ...

CVE-2021-36959

Technical details for CVE-2021-36959 are not publicly available in the provided documents. Monitor for updates from connected sources; existing entries reference the vulnerability but do not specify affected products, root cause, impact, or fixes.

CVE-2021-38630

Technical details (affected product, root cause, impact, or fix) are not provided in the connected documents for CVE-2021-38630. Monitor official advisories (NVD, MSRC) for updates.

CVE-2022-21895

Technical details for CVE-2022-21895 are not publicly provided in the connected documents. The sources reference the CVE at a high level without product specifics, root cause, or remediation. Monitor for updates as new documents may disclose details.

CVE-2022-37955

Technical details for CVE-2022-37955 are not publicly provided in the supplied documents; the materials reference only updates without specific vulnerable components, root cause, or fixes. Monitor for official disclosures and patch guidance.

CVE-2022-37959

Technical details about CVE-2022-37959 (affected software, vulnerable component, impact, exploitation, or remediations) are not provided in the supplied documents. Monitor for vendor advisories and updated analyses.

CVE-2022-38015

Technical details about CVE-2022-38015 (Windows Hyper-V DoS) are not publicly provided in the supplied documents. Monitor for updates from Microsoft/NVD and related advisories.

CVE-2022-44667

Technical details are not publicly available in the provided documents. The supplied items only label CVE-2022-44667 as a Windows Media Remote Code Execution vulnerability; no specific affected product/version/root cause/fix is included. Monitor for updates.

CVE-2023-29373

Technical details about CVE-2023-29373 are not publicly provided in the supplied documents; monitor for updates from Microsoft and vulnerability feeds.

CVE-2023-32008

CVE-2023-32008: Windows Resilient File System (ReFS) Remote Code Execution vulnerability. Affects Windows with ReFS; exploitation is LOCAL with user interaction and no privileges required. CVSS v3.1 base score 7.8 (HIGH); impact on confidentiality, integrity, and availability is HIGH. Remediation...

CVE-2023-35376

Technical details for CVE-2023-35376 are not publicly available in the provided documents; monitor for updates.

CVE-2023-36912

Technical details about CVE-2023-36912 are not publicly available in the provided documents. Monitor for updates.

CVE-2024-30016

CVE-2024-30016 affects Windows Cryptographic Services . The vulnerability is described as an information disclosure with impact to confidentiality (high) and is listed in sources as a Windows component issue with a CVSS v3.1 base score of 5.5 (attack vector: local; privileges required: low; user ...

CVE-2024-30023

CVE-2024-30023 affects the Windows Routing and Remote Access Service (RRAS). The RRAS remote code execution vulnerability is listed under Windows RRAS with CVSS details indicating Network attack vector, high impact to confidentiality, integrity, and availability, and requiring user interaction. T...

CVE-2024-30025

CVE-2024-30025 affects the Windows Common Log File System Driver. The Windows/KB guidance mappings list CVE-2024-30025 with a CVSS v3.1 base score of 7.8 (LOCAL attack, LOW complexity, LOW privileges required, HIGH confidentiality/integrity/availability impact) and categorize it as an privilege e...

CVE-2024-30070

CVE-2024-30070 is a DHCP Server Denial of Service vulnerability affecting Windows DHCP Server. Current documents confirm the vulnerability exists and classify it as a network-exploitable DoS with a CVSS v3.1 base score of 7.5 (HIGH) and no privileges required, no user interaction, and availabilit...

CVE-2024-30091

Technical details are not publicly provided in the supplied documents. No affected product, vulnerable component, version, root cause, impact, or fix information is included beyond the CVE ID and the generic description.

CVE-2024-38030

Technical details for CVE-2024-38030 are not publicly disclosed in the provided documents. No affected products, root cause, impact, or fixes are specified. Monitor for updates as more information becomes available.

CVE-2024-38115

Technical details for CVE-2024-38115 are not publicly available in the provided documents. Monitor for updates.

CVE-2024-43554

CVE-2024-43554 corresponds to a Windows Kernel-Mode Driver Information Disclosure vulnerability with an impact described as Access to sensitive data (CVSS ~5.5). Affected component is a kernel-mode driver; root cause details are not fully disclosed in the provided documents. Microsoft has issued ...

CVE-2024-43611

CVE-2024-43611 affects Windows Routing and Remote Access Service (RRAS). The vulnerability in RRAS enables Remote Code Execution with an attack vector over the network; CVSS v3.1 base score is 8.8 (High). The NCSC page lists CVE-2024-43611 under RRAS items with an 8.80/Execute Random Code rating,...

CVE-2024-49077

CVE-2024-49077 concerns the Windows Mobile Broadband Driver and is categorized as an elevation-of-privilege vulnerability. The available documents identify the affected component as the Windows Mobile Broadband driver and classify the impact as escalation of privileges with a base CVSSv3.1 score ...

CVE-2025-21286

CVE-2025-21286 is a Windows Telephony Service Remote Code Execution vulnerability. The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) yields a high impact with network attack vector and user interaction required. Connected sources confirm Microsoft fixes are available: KB5050009 (OS Build ...

CVE-2025-27487

CVE-2025-27487 is a heap-based buffer overflow in Windows Remote Desktop Client that allows an authenticated attacker to execute code over the network (CVSSv3.1: 8.0 HIGH; AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H). Connected sources confirm this vulnerability and reference remote desktop RCE updates. ...

CVE-2025-48817

Technical details about CVE-2025-48817 are not publicly provided in the supplied documents. No vendor/product/versions or mitigations are disclosed here. Monitor official advisories for updates.

CVE-2026-58613

CVE-2026-58613 (Windows Cloud Files Mini Filter Driver) causes a local privilege escalation via a use-after-free in the driver. This is observed as an elevation of privileges by an authorized attacker who already has local access. Public sources in the connected documents identify the issue as a ...

CVE-2026-61368

CVE-2026-61368 is a Windows Hyper-V heap-based buffer overflow that enables a locally authenticated attacker (low privileges, user interaction required) to disclose information. Affected component: Hyper-V; root cause is a heap overflow leading to information disclosure. CVSS 3.1 base score 5.0 (...

CVE-2018-8596

CVE-2018-8596 affects the Windows GDI component. The vulnerability is an information disclosure due to improper memory disclosure in GDI, impacting multiple Windows versions (Windows 7, Windows Server 2008/2008 R2/2012/2012 R2, Windows 8.1, Windows 10 and various Server editions). Root cause: imp...

CVE-2019-0573

CVE-2019-0573 describes a local elevation-of-privilege vulnerability in the Windows Data Sharing Service. Connected sources indicate affected OS family includes Windows 10/Server 2016/2019, with a local attacker able to exploit and gain elevated privileges. The CVE entry links to exploit-db explo...

CVE-2019-0716

CVE-2019-0716 is a Windows Denial of Service vulnerability caused by improper handling of memory objects. The public description states that an attacker who logs on to an affected system and runs a specially crafted application could cause the target to stop responding. The issue does not allow c...

CVE-2019-1012

CVE-2019-1012 refers to an information-disclosure vulnerability in the Windows GDI component where memory contents can be disclosed due to improper handling of objects. The issue could be exploited by convincing a user to open a specially crafted document or visit an untrusted page, enabling info...

CVE-2020-0782

Technical details for CVE-2020-0782 are not publicly available in the provided documents. The initial description gives a high-level remediation but no product/version/root-cause or exploit specifics. Monitor for updates from official advisories.

CVE-2020-0889

The CVE-2020-0889 vulnerability affects the Windows Jet Database Engine in Microsoft Windows/Windows Server, arising from improper handling of memory objects and enabling remote code execution. The connected KB4549951 notes a security update (KB4549951) for Windows 10 OS builds 18362.778 and 1836...

CVE-2020-0914

CVE-2020-0914 affects the Windows State Repository Service. The vulnerability is an Information Disclosure in which objects in memory are mishandled, potentially allowing a local attacker who runs a specially crafted application to obtain sensitive information and further compromise the system. M...

CVE-2020-1520

CNVD-2020-49363 and CVE-2020-1520 describe a Windows Remote Code Execution flaw in the Windows Font Driver Host caused by improper memory handling. Affected: Windows Font Driver Host on Windows/Windows Server. Impact: remote code execution with attacker gaining code execution on the victim. Remed...

CVE-2020-1557

CVE-2020-1557: A remote code execution vulnerability in the Windows Jet Database Engine occurs due to improper handling of objects in memory. An attacker could trigger code execution by persuading a user to open a specially crafted file. The update fixes the issue by correcting how the Jet Engine...

CVE-2021-27095

Technical details about CVE-2021-27095 are not publicly provided in the connected documents. The materials reference the vulnerability only as Windows Media Video Decoder Remote Code Execution without specific affected products, versions, or fixes.

CVE-2021-28357

CVE-2021-28357 is a Windows RPC Runtime Remote Code Execution vulnerability. The CVSSv3.1 base score is 8.8 (network, low privileges required, no user interaction) with HIGH impact to confidentiality, integrity, and availability. The vulnerability affects the Windows RPC Runtime and is addressed ...

CVE-2021-28358

Technical details for CVE-2021-28358 are not provided in the given documents. Monitoring updates is recommended as no affected products, root cause, impact, or remediation are stated here.

CVE-2021-31970

CVE-2021-31970 is a Windows TCP/IP Driver Security Feature Bypass vulnerability. Affected software is Windows, with the issue residing in the TCP/IP driver as described by the NVD entry. Exploitation would be local, requiring low privileges, with no user interaction, and could impact availability...

CVE-2022-21847

CVE-2022-21847 is a Windows Hyper-V Denial of Service vulnerability. Public records confirm this CVE exists and is associated with local attack requirements and a medium overall risk (NVD: CVSS v3.1 base 6.5, CVSS v2: 4.9). Affected context is Hyper-V on Windows, but the exact root cause, vulnera...