CVE-2025-26669

CVE-2025-26669 is listed in RRAS (Windows Routing and Remote Access Service) with the impact described as Access to sensitive data and a severity score of 8.80. The RRAS entry indicates an information-disclosure risk via an out-of-bounds read, attributed to a vulnerability in RRAS. Connected sour...

CVE-2025-27474

CVE-2025-27474 is a Windows RRAS vulnerability described as the use of an uninitialized resource that enables an unauthorized attacker to disclose information over a network. The connected sources corroborate that this CVE affects Windows Routing and Remote Access Service (RRAS) and result in inf...

CVE-2025-27741

CVE-2025-27741 describes an out-of-bounds read in Windows NTFS that allows a local attacker to elevate privileges. The issue is tied to NTFS handling and is mitigated by Microsoft security updates; affected users should apply the latest Windows security updates per MSRC guidance. The connected so...

CVE-2025-32719

CVE-2025-32719 is a Windows Storage Management Provider vulnerability described as an out-of-bounds read that allows an authorized, local attacker to disclose information. The CVE has a CVSS v3.1 base score of 5.5 (Local, Low attack complexity, Privileges Required: Low) with high confidentiality ...

CVE-2025-59254

Summary: CVE-2025-59254 is a heap-based buffer overflow in the Windows DWM Core Library that enables a locally authenticated attacker to escalate privileges. Affected component: DWM Core Library on Windows. Impact: Local privilege escalation with high potential impact; CVSS 3.1 score 7.8 (LOCAL, ...

CVE-2026-34345

CVE-2026-34345 describes a race condition in the Windows Ancillary Function Driver for WinSock that allows local privilege escalation when a shared resource is improperly synchronized. Connected sources confirm the vulnerability affects Windows components and has been addressed by the May 2026 up...

CVE-2026-42909

CVE-2026-42909 involves a heap-based buffer overflow in the Remote Desktop Client that enables a remote attacker to execute code over the network. The vulnerability arises from improper handling of data during remote desktop operations, leading to memory corruption. The CVSS-3.1 vector (AV:N/AC:H...

CVE-2026-50387

CVE-2026-50387 — Windows GDI Elevation of Privilege Affects: Windows GDI subsystem. The vulnerability is a stack-based buffer overflow in GDI that can be triggered by an authorized attacker to achieve local privilege escalation. Impact: Local elevation of privileges with a CVSS v3.1 base score of...

CVE-2026-62877

CVE-2026-62877 is a Windows Win32K vulnerability described as a stack-based buffer overflow that enables local privilege escalation by an authorized user. The affected component is the Windows Win32K subsystem; the root cause is a stack-based buffer overflow within Win32K code paths. The CVSS vec...

CVE-2018-8637

CVE-2018-8637 is a Windows kernel vulnerability (Win32k Information Disclosure) that can disclose memory addresses from kernel space, potentially bypassing KASLR. Affected: Windows kernel components (Win32k) on Windows 10/Windows Server 2019. Root cause: how the kernel handles memory addresses en...

CVE-2019-1399

Technical details beyond the high-level description (affected product, root cause, vulnerable component, specific versions, fixes) are not publicly provided in the connected documents. Monitor for updates.

CVE-2019-1472

CVE-2019-1472 is described in CNVD-2020-02181 as a Microsoft Windows Kernel Information Disclosure Vulnerability. It results from improper handling of memory objects in the Windows kernel; an attacker who can log on to an affected system and run a specially crafted application could disclose info...

CVE-2020-0616

CVE-2020-0616 is a Windows denial-of-service flaw caused by improper handling of hard links. An attacker must log on to an affected system and run a crafted application to disrupt the target (potentially overwrite system files). Microsoft’s update fixes ACLs on system files to address this vulner...

CVE-2020-0667

CVE-2020-0667 affects Microsoft Windows, specifically the Windows Search Indexer component. The connected documents confirm the root cause: the vulnerability arises from how the Windows Search Indexer handles objects in memory, enabling an elevation of privilege when exploited locally. The CNVD e...

CVE-2020-0678

Technical details for CVE-2020-0678 are not publicly available in the provided documents. Monitor for updates from official advisories.

CVE-2020-0714

CVE-2020-0714 corresponds to a DirectX Information Disclosure vulnerability in Windows. The root cause is DirectX failing to properly handle memory objects, which can lead to disclosure of information. An attacker who has authenticated access could exploit this by running a specially crafted appl...

CVE-2020-0740

CVE-2020-0740 describes an Elevation of Privilege in the Connected Devices Platform Service on Microsoft Windows and Microsoft Windows Server. The root cause is a flaw in how the service handles objects in memory, enabling a local attacker with low privileges to execute code with user/system righ...

CVE-2020-0804

CVE-2020-0804 is an elevation-of-privilege vulnerability in the Windows Network Connections Service related to how in-memory objects are handled. The issue enables local privilege escalation with high impact (confidentiality, integrity, and availability), as evidenced by CVSS scores of 7.2 (2.0) ...

CVE-2020-0819

CVE-2020-0819 describes an elevation of privilege vulnerability in Windows Device Setup Manager caused by improper handling of file operations. The CVE is documented across multiple sources (NVD/NVD entry) with a base CVSS v3.1 score of 7.8 (HIGH) and CVSS v2 score of 7.2 (HIGH), indicating local...

CVE-2020-0821

Technical details about CVE-2020-0821 are not publicly provided in the supplied documents; the connected records reference a general Windows kernel information disclosure vulnerability. Monitor for updates.

CVE-2020-0843

CVE-2020-0843 is a local elevation-of-privilege vulnerability in Windows Installer. The issue arises from how Windows Installer handles certain filesystem operations, allowing an unprivileged attacker on the victim system to compromise the host. CVSSv3.1 base score is 7.8 (HIGH) with local exploi...

CVE-2020-0907

CVE-2020-0907 is described as a remote code execution vulnerability in how Microsoft Graphics Components handles objects in memory. The connected MS KB and vendor feeds confirm this CVE is among a set of Windows updates (KB4549951 family) addressing multiple issues, but the provided documents do ...

CVE-2020-0912

Technical details about CVE-2020-0912 are not provided in the supplied documents. No affected product/version is specified beyond a generic memory-handling issue. Monitor official sources for updates.

CVE-2020-0928

CVE-2020-0928 is a Windows kernel information-disclosure vulnerability. The root cause is the Windows kernel’s improper handling of memory objects, which could allow an attacker who logs on and runs a crafted application to obtain information that could help further compromise the system. The vul...

CVE-2020-1006

CVE-2020-1006 affects the Windows Push Notification Service (WNS) in Windows. The root cause is an elevation of privilege due to how memory objects are handled by WNS, enabling a locally authenticated attacker to escalate privileges. The CVSS data indicates a LOCAL attack vector with LOW required...

CVE-2020-1061

CVE-2020-1061 is a remote code execution vulnerability described as affecting the Microsoft Script Runtime, stemming from how it handles objects in memory. The available connected docs reiterate this in the CVE description and identify the component as the Microsoft Script Runtime, with no explic...

CVE-2020-1118

CVE-2020-1118 is a denial-of-service vulnerability in the Windows TLS implementation caused by improper handling of certain key exchange messages. An unauthenticated attacker could trigger a system halt or reboot by sending a specially crafted TLS message during handshake, potentially impacting T...

CVE-2020-1241

CVE-2020-1241 is a Windows Kernel security feature bypass vulnerability. It arises when the Kernel fails to properly sanitize certain parameters, allowing a locally authenticated attacker to run a crafted application to bypass security checks. The vulnerability is addressed by updates that correc...

CVE-2020-1280

CVE-2020-1280 is an elevation of privilege vulnerability in Windows Bluetooth Service where memory objects are mishandled. The CVE is documented in NVD as a local, user-initiated issue with potential high impact if exploited, though exploitation details or root-cause specifics are not provided in...

CVE-2020-1304

Technical details for CVE-2020-1304 are not provided in the connected documents. No affected products, root cause, impact, or fixes are present here. Monitor for updates from official advisories.

CVE-2020-1358

CVE-2020-1358 corresponds to a memory-handling information disclosure in the Windows Resource Policy component. The initial description notes that exploitation requires prior code execution on the victim system, implying local access is needed, with the vulnerability potentially exposing memory-c...

CVE-2020-17013

CVE-2020-17013 is a Win32k information disclosure vulnerability in Windows. Available connected documents indicate the issue affects the Win32k subsystem and is associated with information disclosure (confidentiality impact), with CVSS metrics suggesting local access requirements and low to moder...

CVE-2020-17056

Technical details about CVE-2020-17056 (affected product/component, root cause, impact, and fixes) are not provided in the connected documents. Monitor official advisories for updates.

CVE-2021-1693

Technical details about CVE-2021-1693 are not provided in the connected documents. The initial description remains high‑level; monitor official advisories for updates to obtain affected products, impact, and fixes.

CVE-2021-26879

CVE-2021-26879 is described across the provided documents as a Windows Network Address Translation (NAT) Denial of Service vulnerability. The materials consistently reference the issue at the Windows NAT level, identifying the vulnerability and its impact as a DoS condition, but they do not speci...

CVE-2021-27063

CVE-2021-27063 is a Windows DNS Server Denial of Service vulnerability. The NVD entry lists a NETWORK attack vector with LOW complexity and NO authentication, causing a PARTIAL availability impact (CVSS v2 base score 5.0; CVSS v3.1 base score 7.5, HIGH impact on availability). The connected recor...

CVE-2021-28311

CVE-2021-28311 is a Windows Application Compatibility Cache Denial of Service vulnerability. The connected documents confirm a Windows OS-level issue affecting the Application Compatibility Cache, with mitigation via March/April 2021 Windows security updates (e.g., KB5001330/KB5001337 and related...

CVE-2021-43219

CVE-2021-43219 corresponds to a DirectX Graphics Kernel File Denial of Service vulnerability affecting Windows DXGK file handling. The primary concrete details in the available documents are: (1) affected component: DirectX Graphics Kernel File (DXGK) within Windows, (2) impact as indicated by CV...

CVE-2022-33645

CVE-2022-33645 is a Windows TCP/IP driver denial-of-service vulnerability. Public sources (NVD/CNVD) describe it as a DoS in the Windows TCP/IP component caused by mishandling of incoming error messages, with the CVE listed as affecting Windows TCP/IP and assigned a CVSSv3 score of 7.5 (HIGH). Co...

CVE-2023-35343

CVE-2023-35343 is a Windows Geolocation Service remote code execution vulnerability. The initial entry confirms an OS component (Windows Geolocation Service) with a CVSS v3.1 base score of 7.8 (High); attack vector listed as Local with User Interaction required, and impacts to confidentiality, in...

CVE-2024-29999

CVE-2024-29999 is listed as Windows Mobile Broadband Driver Remote Code Execution vulnerability. Connected sources identify it under Windows Mobile Broadband as allowing execution of code, with CVSS-like rating around 6.8/10 and a local-access context in some mappings. Technical details (affected...

CVE-2024-35270

Technical details about CVE-2024-35270 (Windows iSCSI Service DoS) are not provided in the connected documents. Monitor for official advisories and Microsoft updates for affected products and remediation.

CVE-2024-37975

Technical details for CVE-2024-37975 are not provided in the connected documents. The available materials only label it as a Secure Boot bypass without product, vector, impact, or remediation specifics. Monitor for updates for publicly disclosed details.

CVE-2024-38126

CVE-2024-38126 affects Windows Network Address Translation (NAT). The provided table lists it under Windows NAT with a CVSS v3.1 score of 7.5 (HIGH) and impact as Denial-of-Service. Other connected documents reference general Microsoft Windows fixes but do not provide concrete technical details (...

CVE-2024-43456

Mode C: The CVE-2024-43456 case relates to Windows Remote Desktop Services Tampering. Connected docs corroborate impact as Manipulating Data (per NCSC entry: CVSS ~4.8). Microsoft has fixed vulnerabilities in Windows as part of the referenced advisories, but explicit patch versions/KB numbers for...

CVE-2024-43553

CVE-2024-43553 is an NT OS Kernel elevation-of-privilege vulnerability associated with Windows NT OS Kernel. The connected data explicitly maps this CVE to Windows NT OS Kernel with a high impact (privilege escalation). The NCSC advisory notes that vulnerabilities in Windows have been fixed, and ...

CVE-2024-43581

CVE-2024-43581 is associated with Microsoft OpenSSH for Windows and is described as a Remote Code Execution vulnerability. The Initial document provides a CVSS v3.1 score of 7.1 ( HIGH ) with network attack vector, high impact to confidentiality, integrity, and availability, and requires user int...

CVE-2024-43615

CVE-2024-43615 affects OpenSSH for Windows and is categorized as a remote code execution vulnerability with NETWORK attacker access, requiring user interaction and low privileges. The CVSS 3.1 vector indicates Network access, high confidentiality/integrity/availability impact, and required user i...

CVE-2024-49098

CVE-2024-49098 affects Windows WWAN Service (WwanSvc). The vulnerability allows information disclosure in WWAN, with CVSS 3.1: AV Physical, AC Low, PR Low, UI None, S Unchanged, C High, I None, A None. Exploitation requires physical access and low complexity; attacker needs low privileges. Remedi...

CVE-2025-21212

CVE-2025-21212 corresponds to an Internet Connection Sharing (ICS) Denial of Service vulnerability in Windows. Reported impact is DoS, with an adjacent attack vector, low attack complexity, no user interaction required, and no confidentiality/integrity impact, but availability is affected (CVSS 3...