CVE-2025-21233

CVE-2025-21233 is a Windows Telephony Service Remote Code Execution vulnerability. External exploit is mapped to a network attack with user interaction required, high impact (CVSS v3.1: 8.8; Privileges Required: None; User Interaction: Required; Confidentiality/Integrity/Availability: High). Conn...

CVE-2025-21281

CVE-2025-21281 is a Microsoft Windows COM elevation-of-privilege vulnerability. The CVE entry maps to Windows COM with a high CVSS v3.1 score (7.8, LOW_PRIVILEGES, LOCAL vector; no user interaction; confidentiality/integrity/availability impact: HIGH). The connected documents identify the affecte...

CVE-2025-21330

CVE-2025-21330 is a Windows Remote Desktop Services Denial-of-Service vulnerability. The connected sources confirm the vulnerability name and its impact class (DoS) with a CVSS v3.1 base score of 7.5 (Network attack vector, no privileges required, no user interaction). The provided documents do n...

CVE-2025-21375

CVE-2025-21375 is a local elevation-of-privilege in the Windows Kernel Streaming WOW Thunk Service Driver. The vulnerability is identified as a Privilege Escalation with CVSS v3.1 base score 7.8 (HIGH), requiring LOCAL access, LOW attack complexity, and no user interaction; the impact is high to ...

CVE-2025-26670

CVE-2025-26670 is a Windows LDAP use-after-free vulnerability that enables remote code execution over the network. The available connected sources confirm the issue affects Windows LDAP and describe the underlying cause as a use-after-free condition, with the impact explicitly stated as remote co...

CVE-2025-26676

CVE-2025-26676 is a Windows RRAS vulnerability described as a buffer over-read that allows an unauthenticated, network-connected attacker to disclose application/network data. The affected component is Windows Routing and Remote Access Service; root cause is a memory over-read in RRAS processing,...

CVE-2025-26677

CVE-2025-26677 affects Windows Remote Desktop Gateway Service and involves uncontrolled resource consumption leading to a denial of service. The provided documents do not include exploit details or exact root-cause; they indicate that Microsoft released May 2025 security updates addressing vulner...

CVE-2025-27740

CVE-2025-27740 affects Windows Active Directory Certificate Services and is described as a weakness in authentication that enables an authorized attacker to elevate privileges over the network. The connected documents confirm the affected component as Windows Active Directory Certificate Services...

CVE-2025-32707

CVE-2025-32707 is a localprivilege-escalation vulnerability in the Windows NTFS subsystem caused by an out-of-bounds read. The NCSC vulnerability listing confirms Windows NTFS involvement and classifies the impact as elevated privileges, with a CVSS v3.1 base score of 7.8 (HIGH) and a local attac...

CVE-2025-53778

CVE-2025-53778 is a Windows NTLM elevation-of-privilege flaw caused by improper authentication in NTLM that can enable a network-authenticated attacker with low privileges to elevate to SYSTEM. It is discussed in security reports (e.g., KREBS patch-tuesday coverage) and is addressed by August 202...

CVE-2026-33842

The CVE-2026-33842 entry describes a local information disclosure in Windows File Explorer. The vulnerability allows an authorized (low privileges) attacker to disclose sensitive information locally through the File Explorer component. Per the NVD entry, the impact is confined to confidentiality ...

CVE-2019-0726

CVE-2019-0726 affects the Windows DHCP Client. The connected advisories describe a remote code execution vulnerability caused by improper processing of DHCP responses, leading to memory corruption. Exploitation is described as remote code execution with administrative privileges in the advisories...

CVE-2019-1163

Technical details (affected products, components, versions, root cause, impact or fixes) are not publicly provided in the supplied documents. Monitor for updates from official advisories and CVE records.

CVE-2020-0753

Technical details for CVE-2020-0753 are not provided in the connected documents. The Initial Description only notes an Elevation of Privilege in Windows Error Reporting. Monitor for updates from Microsoft/MSRC for full specifics (affected products, root cause, and remediation).

CVE-2020-0987

Technical details (affected product/version, root cause, impact, fixes) are not publicly available in the provided Connected Documents; cross‑references exist (CVE-2020-0982, CVE-2020-0987, CVE-2020-1005) but no specifics are given.

CVE-2020-1116

CVE-2020-1116 is described as a Windows CSRSS Information Disclosure Vulnerability, arising from CSRSS failing to properly handle objects in memory. The affected component is Windows CSRSS; the vulnerability enables information disclosure via local access (CVSSv3.1: 5.5 MEDIUM, AV:L/AC:L/PR:L/UI:...

CVE-2020-1212

Technical details about CVE-2020-1212 are not publicly provided in the supplied connected documents; no vendor/product/impact specifics beyond the initial description are present. Monitor for updates.

CVE-2020-1253

Technical details about CVE-2020-1253 are not provided in the connected documents. The initial entry notes an elevation of privileges in the Windows kernel-mode driver, but no specifics (versions, impact, or fixes) are included here.

CVE-2020-1255

CVE-2020-1255 refers to an elevation of privilege vulnerability in the Windows Background Intelligent Transfer Service (BITS) IIS module. Connected data (CNVD-2021-27705) states the flaw arises from the module’s failure to properly handle uploads, enabling an attacker to exploit a specially craft...

CVE-2020-1296

Windows Diagnostics & feedback Information Disclosure Vulnerability (CVE-2020-1296) exists in the way the Diagnostics & feedback Settings app handles memory objects. An attacker would need to log on to an affected system and interact with the app to cause diagnostic data to be sent to Microsoft. ...

CVE-2020-1354

CVE-2020-1354 affects the Windows UPnP Device Host; root cause is improper memory handling leading to Elevation of Privilege. Exploitation requires local execution on the victim system, with impact described as elevated privileges. This CVE is related to CVE-2020-1430 and appears in NVD and CVE r...

CVE-2020-1370

Technical details about CVE-2020-1370 are not publicly available in the provided documents. Monitor for updates from official advisories (e.g., MSRC, ENISA EUVD) for affected products, impact, and fixes.

CVE-2020-17004

According to CNVD-2021-63301, CVE-2020-17004 is a Windows/Windows Server graphics component information-disclosure vulnerability. It allows an attacker to read kernel memory contents from a user-mode process. The affected product is Microsoft Windows/Windows Server; the exact root cause, vulnerab...

CVE-2020-17162

Technical details about CVE-2020-17162 are not publicly provided in the connected documents; only a general description and CVSS metrics are present. Monitor official advisories for updates.

CVE-2021-1662

CVE-2021-1662 is a Windows Event Tracing Elevation of Privilege vulnerability (local, low complexity, high impact per CVSS 3.1). The available connected documents indicate Windows event tracing is the affected component and classify the issue as a local privilege escalation; no specific exploit d...

CVE-2021-1688

Technical details for CVE-2021-1688 are not publicly available in the provided connected documents. Monitor for updates from official advisories.

CVE-2021-26864

CVE-2021-26864 is described as a Windows Virtual Registry Provider Elevation of Privilege vulnerability. Connected details outline a chain where container isolation through Windows Server/Silo mechanisms (registry overlays, object manager root directories, and silo handling) can be bypassed. A no...

CVE-2021-26901

CVE-2021-26901 is a Windows Event Tracing Elevation of Privilege vulnerability. The entry is active with a local, low-attack-complexity vector and high impact (confidentiality, integrity, and availability) per CVSS v3.1 and CVSS v2.0 metrics. Connected docs show Windows updates (e.g., KB5000802/K...

CVE-2021-28319

CVE-2021-28319 is a Windows TCP/IP Driver Denial of Service vulnerability. The NVD entry notes a network-exposed issue with a high impact on availability (CVSS v3.1 base score 7.5) and a lower attack complexity, with no authentication required. Connected documents indicate the vulnerability is am...

CVE-2021-28320

Technical details about CVE-2021-28320 (affected components, exploitability, or fixes) are not provided in the supplied documents. Monitor for updates from official advisories (MSRC/Microsoft security guides) for specifics and remediation.

CVE-2021-28326

Technical details about CVE-2021-28326 are not provided in the supplied documents. The connected items mention advisories but do not describe affected components, root cause, impact, or fixes.

CVE-2021-43232

CVE-2021-43232 corresponds to a Windows Event Tracing (ETW) remote code execution vulnerability. The CNVD entry explicitly identifies ETW as the affected component and states the vulnerability enables remote code execution on Windows. The CVE record itself notes Windows Event Tracing RCE with a m...

CVE-2022-44670

CVE-2022-44670 affects Windows SSTP and allows remote code execution via a race condition in the SSTP/RAS handshake. An unauthenticated attacker could send a crafted SSTP connection request to a RAS server to achieve RCE. Public details in connected sources describe exploit path and patch context...

CVE-2023-28278

Technical details about CVE-2023-28278 (affected product, root cause, versions, exploit info, or remediation) are not provided in the connected documents. Please monitor for official disclosures or patches.

CVE-2023-32033

CVE-2023-32033: Microsoft Failover Cluster Remote Code Execution vulnerability with CVSS v3.1 base score 7.2 (HIGH). Attack vector is NETWORK, no user interaction, with confidentiality, integrity, and availability impacts all HIGH. Initial description confirms the affected vector but does not spe...

CVE-2023-33167

Technical details about CVE-2023-33167 are not publicly provided in the supplied documents. No explicit affected products, root cause, or fixes are described here. Monitor for updates.

CVE-2023-33174

Technical details about CVE-2023-33174 are not publicly provided in the connected documents. The materials mention a Windows cryptographic information disclosure vulnerability but do not specify affected components, root cause, versions, impact, or fixes. Monitor for updates.

CVE-2023-35308

Technical details for CVE-2023-35308 are not publicly available in the provided documents. Monitor for updates from official sources to learn affected products, impact, and mitigations.

CVE-2023-35345

Technical details (affected component, root cause, CVSS, exploit status) are not publicly available in the provided documents. Monitor for updates from official advisories.

CVE-2023-35360

Technical details are not publicly available in the provided documents. No specific affected product/versions, root cause, impact, or fix is described here; monitor for updates.

CVE-2023-35361

CVE-2023-35361 is a Windows Kernel Elevation of Privilege vulnerability. The provided documents identify the flaw as a local-privilege escalation with high impact (confidentiality, integrity, and availability) but do not supply concrete technical details, affected versions, root cause specifics, ...

CVE-2024-30012

CVE-2024-30012 is a Windows Mobile Broadband Driver Remote Code Execution vulnerability. The CVSS v3.1 base score is 6.8 (AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). The affected component is the Windows Mobile Broadband Driver; impact is remote code execution with high confidentiality, integrity, and ...

CVE-2024-37971

Technical details about CVE-2024-37971 are not publicly available in the provided connected documents. Monitor for updates from Microsoft and NVD for affected products, impact, and remediation; current sources do not specify affected components or fixes within this dataset.

CVE-2024-38013

Technical details about CVE-2024-38013 are not disclosed in the provided connected documents. The CVE entry exists (Windows Server Backup elevation of privilege), but no affected product versions, root cause, exploitation, or remediation are described here. Monitor for updates.

CVE-2024-38019

Technical details about CVE-2024-38019 are not provided in the supplied documents. Public sources in Connected documents do not specify affected products, root cause, exploit status or remediation. Monitor for official advisories and Microsoft update notes for confirmation.

CVE-2024-38061

Technical details for CVE-2024-38061 (affected products, root cause, impact, fixes) are not provided in the supplied documents. No remediation or exploitation specifics are available here. Monitor for updates.

CVE-2024-38064

Technical details for CVE-2024-38064 are not provided in the supplied documents. Public details (affected product/impact) are not disclosed here. Monitor for updates from vendors and vulnerability feeds to obtain concrete root cause, affected components, and fixes.

CVE-2024-43556

CVE-2024-43556 is a Windows Graphics Component elevation-of-privilege vulnerability. Public sources confirm it affects the Windows Graphics Component and can yield elevated privileges (base CVSS v3.1 7.8). The issue is listed as a local, privilege-escalation risk; exploitation details are not pro...

CVE-2024-43589

Technical details about CVE-2024-43589 (affected RRAS, root cause, impact, fixes) are not publicly provided in the connected documents. Monitor for updates from Microsoft and CVE registries.

CVE-2025-21217

CVE-2025-21217 is a Windows NTLM spoofing vulnerability with a CVSS v3.1 base score of 6.5 (Network, low attack complexity, no privileges required, user interaction required; Confidentiality impact: High). Exploitation details, affected products/versions, and a fixed patch are not provided in the...