CVE-2026-40378

CVE-2026-40378 affects Windows Local Security Authority Subsystem Service (LSASS). A memory allocation with an excessive size value can allow an unauthenticated attacker to cause a network-based denial of service. The CVSSv3.1 base score is 7.5 (HIGH). No exploitation details are provided in the ...

CVE-2024-38067

Technical details about CVE-2024-38067 (Windows OCSP Server DoS) are not provided in the supplied connected documents; no product/version/root-cause/impact/fix information is present. Monitor for updates.

CVE-2024-38244

CVE-2024-38244 is a Windows Kernel Streaming Service Driver elevation-of-privilege flaw. The CVE is rated CVSSv3.1 base score 7.8 (HIGH) with LOCAL attack vector, LOW attack complexity, and LOW privileges required; exploitation grants total compromise of confidentiality, integrity, and availabili...

CVE-2024-43553

CVE-2024-43553 is an NT OS Kernel elevation-of-privilege vulnerability associated with Windows NT OS Kernel. The connected data explicitly maps this CVE to Windows NT OS Kernel with a high impact (privilege escalation). The NCSC advisory notes that vulnerabilities in Windows have been fixed, and ...

CVE-2024-43615

CVE-2024-43615 affects OpenSSH for Windows and is categorized as a remote code execution vulnerability with NETWORK attacker access, requiring user interaction and low privileges. The CVSS 3.1 vector indicates Network access, high confidentiality/integrity/availability impact, and required user i...

CVE-2024-49098

CVE-2024-49098 affects Windows WWAN Service (WwanSvc). The vulnerability allows information disclosure in WWAN, with CVSS 3.1: AV Physical, AC Low, PR Low, UI None, S Unchanged, C High, I None, A None. Exploitation requires physical access and low complexity; attacker needs low privileges. Remedi...

CVE-2025-21212

CVE-2025-21212 corresponds to an Internet Connection Sharing (ICS) Denial of Service vulnerability in Windows. Reported impact is DoS, with an adjacent attack vector, low attack complexity, no user interaction required, and no confidentiality/integrity impact, but availability is affected (CVSS 3...

CVE-2025-21252

Technical details about CVE-2025-21252 are not publicly available in the provided documents. Monitor for updates from Microsoft and NVD for affected products, impact, and remediation.

CVE-2025-21266

CVE-2025-21266 is a Windows Telephony Service remote code execution vulnerability. The linked data shows a network-exposed impact with CVSS v3.1 base score 8.8 (HIGH), requiring user interaction for exploitation and affecting confidentiality, integrity, and availability. Affected component is the...

CVE-2025-21359

Technical details (affected product, root cause, impact, or fix) for CVE-2025-21359 are not provided in the supplied documents. Please monitor official advisories (Microsoft/MSRC updates) for concrete vulnerability specifics and remediation guidance.

CVE-2025-26669

CVE-2025-26669 is listed in RRAS (Windows Routing and Remote Access Service) with the impact described as Access to sensitive data and a severity score of 8.80. The RRAS entry indicates an information-disclosure risk via an out-of-bounds read, attributed to a vulnerability in RRAS. Connected sour...

CVE-2025-33050

CVE-2025-33050 is a denial-of-service issue in Windows DHCP Server. Public details confirm impact to the DHCP Server service enabling denial of network service under network access, with CVSSv3.1 score 7.5 (NETWORK, HIGH). Connected docs indicate Microsoft security updates (KB5061010, KB5060531, ...

CVE-2026-23668

CVE-2026-23668 affects the Windows Graphics Component and is an elevation-of-privilege vulnerability. The advisory indicates a local attack vector with high attack complexity, requiring low privileges and no user interaction (UI: NONE). The vulnerability impacts confidentiality, integrity, and av...

CVE-2026-50447

CVE-2026-50447 is a Windows Message Queuing (MSMQ) remote-code-execution vulnerability. The issue is a heap-based buffer overflow in MSMQ that could allow an unauthenticated attacker to execute code over the network. Public sources indicate high-severity impact (CVSS v3.1: 9.8, network attack, no...

CVE-2026-50655

CVE-2026-50655 is a Windows Media/Media Foundation heap-based buffer overflow that allows local code execution by a non-privileged attacker with user interaction. It has concrete details in multiple connected sources: exploitation status on CIRCL (exploited in the wild), and Microsoft/MSRC entrie...

CVE-2018-8649

CVE-2018-8649 is a Windows memory-management DoS vulnerability affecting Windows 10 (1809) and Windows Server 2019. The issue arises when Windows improperly handles objects in memory, allowing a local attacker who can log on to trigger a denial of service, potentially causing the system to stop r...

CVE-2019-0717

CVE-2019-0717 is a Microsoft Hyper-V Denial of Service vulnerability in the Hyper-V Network Switch (vmswitch.sys). A privileged user on a guest OS can craft input that, if exploited, crashes the host server. The underlying issue is improper input validation when guest VMs access the Hyper-V Netwo...

CVE-2019-1173

CVE-2019-1173 is an elevation-of-privilege flaw affecting the Windows component PsmServiceExtHost.dll where in-memory object handling is improper. The vulnerability allows a locally authenticated attacker to execute code with elevated permissions by running a crafted application. Microsoft’s secu...

CVE-2019-1292

CVE-2019-1292: A Windows denial of service vulnerability from improper handling of objects in memory. Public documents consistently describe the issue as affecting Windows memory handling and causing a DoS, but do not provide concrete affected product versions, root-cause details, exploits, or of...

CVE-2020-0658

CVE-2020-0658 affects the Windows Common Log File System (CLFS) driver. The vulnerability stems from a flaw in how objects in memory are handled, allowing an information disclosure. According to the provided data, exploitation is local with low attack complexity, and confidentiality impact is lis...

CVE-2020-0676

Technical details for CVE-2020-0676 are not publicly available in the provided connected documents. The initial description offers a general summary only. Monitor for updates and rely on official advisories for affected products and fixes.

CVE-2020-0705

CVE-2020-0705 is an information-disclosure vulnerability in Windows’ Network Driver Interface Specification (NDIS) where memory handling is improper. The issue can disclose information from memory and requires prior execution on the target (local access with low attack complexity per CVSS v3.1: A...

CVE-2020-0741

CVE-2020-0741 is an elevation of privilege vulnerability affecting Microsoft Windows and Microsoft Windows Server via the Connected Devices Platform Service . The root cause, as described in connected CNVD records, is improper handling of objects in memory within this service, enabling an attacke...

CVE-2020-1014

CVE-2020-1014 is described in connected docs as an elevation of privilege in the Microsoft Windows Update Client caused by improper privilege handling. The CNVD entry attributes the flaw to the Windows Update Client, enabling privilege escalation, and the OpenVAS/MSKB references corroborate this ...

CVE-2020-1072

CVE-2020-1072 is described as a Windows kernel information disclosure vulnerability caused by the kernel’s improper handling of objects in memory. The connected CNVD entry repeats this description, confirming an information-disclosure risk stemming from memory object handling in Windows kernel sp...

CVE-2020-1114

Technical details about CVE-2020-1114 are not present in the provided Connected documents. Public details appear limited to the Initial description. Monitor for updates.

CVE-2020-1134

Technical details for CVE-2020-1134 are not provided in the connected documents. Public information in the Initial Description is limited to general vulnerability context. Monitor for updates from ENISA EUVD entries if relevant.

CVE-2020-1294

Technical details about CVE-2020-1294 are not provided in the connected documents. Monitor for updates from Microsoft/MSRC and NVD for affected components, impacts, and fixes.

CVE-2020-1356

CVE-2020-1356 affects the Windows iSCSI Target Service and is described as an Elevation of Privilege vulnerability caused by improper handling of file operations. The NVD entry notes local access Vector with Low complexity and that exploitation could grant Partial confidentiality/integrity/availa...

CVE-2020-1357

CVE-2020-1357 is described as an elevation of privilege affecting the Windows System Events Broker. The漏洞 arises from the broker’s improper handling of file operations, enabling an attacker to elevate privileges by running a crafted application on the local machine. The available connected docume...

CVE-2020-1359

CVE-2020-1359 is a Windows elevation-of-privilege issue tied to the CNG Key Isolation Service. The vulnerability arises from improper memory handling in the Windows CNG Key Isolation Service, enabling local privilege escalation on affected Windows/Windows Server systems. Connected records also re...

CVE-2020-1374

CVE-2020-1374 affects the Windows Remote Desktop Client. The provided documents describe a remote code execution vulnerability that can be triggered when a user connects to a malicious RDP server. The AVLEONOV summary echoes that this is an RDP Client RCE affecting Windows 7 through Windows 10 (u...

CVE-2021-26879

CVE-2021-26879 is described across the provided documents as a Windows Network Address Translation (NAT) Denial of Service vulnerability. The materials consistently reference the issue at the Windows NAT level, identifying the vulnerability and its impact as a DoS condition, but they do not speci...

CVE-2021-26898

CVE-2021-26898 is described as a Windows Event Tracing Elevation of Privilege Vulnerability. The provided documents do not specify affected products, components, versions, root cause, exploit details, or remediation specific to this CVE. Public references confirm the vulnerability name and CVSS m...

CVE-2023-33168

CVE-2023-33168 is a Remote Procedure Call Runtime Denial of Service vulnerability. The connected documents provide only a generic description and CVSS metrics; they do not reveal affected product/vendor/component/versions, root cause, exploit details, or a fix. OpenVAS entries reference the CVE b...

CVE-2023-35310

Technical details about CVE-2023-35310 (affected components, impact, exploitability, and mitigations) are not publicly provided in the supplied connected documents. Monitor official disclosures and Microsoft advisories for updates.

CVE-2023-35339

CVE-2023-35339 is a Windows CryptoAPI Denial of Service vulnerability with a CVSS v3.1 base score of 7.5 (NETWORK, LOW attack complexity, NONE privileges, NONE user interaction, HIGH availability impact). The provided records do not specify affected versions, root cause details, exploitation stat...

CVE-2023-35644

CVE-2023-35644 is a Windows SysMain service elevation of privilege vulnerability (CVSS v3.1: 7.8). It is a local privilege escalation with low privileges required and no user interaction; impact is elevated rights. Connected sources confirm related Microsoft Windows vulnerabilities and indicate u...

CVE-2024-37975

Technical details for CVE-2024-37975 are not provided in the connected documents. The available materials only label it as a Secure Boot bypass without product, vector, impact, or remediation specifics. Monitor for updates for publicly disclosed details.

CVE-2024-38070

Technical details about CVE-2024-38070 are not publicly provided in the supplied documents. Please monitor for updates from Microsoft and NVD; current entries reference WLDP but do not disclose exploit paths or affected products.

CVE-2024-38230

CVE-2024-38230 is associated with Windows Standards-Based Storage Management Service and is described in the connected materials as a Denial of Service against that Windows component. The primary technical details available: affected software/component (Windows Standards-Based Storage Management ...

CVE-2024-38256

CVE-2024-38256 is a Windows kernel‑mode driver information disclosure vulnerability. The incident affects Windows kernel‑mode drivers and has a CVSSv3.1 base score of 5.5 (MEDIUM) with local attack vector, low attack complexity, and low privileges required; confidentiality impact is High, others ...

CVE-2024-49090

CVE-2024-49090 affects the Windows Common Log File System Driver. The connected sources indicate an Elevation of Privilege vulnerability in the CLFS driver that could allow a local attacker with low privileges and no user interaction to obtain increased rights (high impact across confidentiality,...

CVE-2025-21214

Technical details about CVE-2025-21214 (Windows BitLocker information disclosure) are not publicly provided in the supplied connected documents. The sources reference updates but do not specify affected versions, root cause, exploitability, or mitigation beyond patch availability. Monitor for upd...

CVE-2025-21239

Technical details about CVE-2025-21239 (affected component, root cause, exploitability, affected products) are not publicly provided in the connected documents. Monitor for updates from Microsoft/NVD CVE entries for new details and fixes.

CVE-2025-21265

Technical details about CVE-2025-21265 are not provided in the supplied documents. Public information on affected products, root cause, and fixes is missing here. Monitor for updates from Microsoft and NVD for concrete vulnerability specifics.

CVE-2025-21268

CVE-2025-21268 is a Windows MapUrlToZone security feature bypass. Affected component: MapUrlToZone logic; impact is circumvention of security boundaries (CVSS v3.1: 4.3, NETWORK attack vector, user interaction required). Connected sources confirm it as a security feature bypass vulnerability and ...

CVE-2025-21282

Technical details about CVE-2025-21282 are not publicly provided in the supplied documents. No affected product/version or exploit information is disclosed here. Monitor for updates from official advisories and CVE/NVD entries.

CVE-2025-21374

CVE-2025-21374 affects the Windows Client-Side Caching (CSC) Service and is described as a local information-disclosure vulnerability. The CVSS 3.1 vector indicates Local attack vector, Low privileges required, no user interaction, with Confidentiality impact only; other impacts are not affected ...

CVE-2025-26673

CVE-2025-26673 is Windows LDAP (LDAP) Denial-of-Service. The connected data confirms that the LDAP service can be abused to exhaust resources and disable service over the network (DoS). Remediation, where provided, points to Microsoft security updates; update Windows to the April 2025 bundle (KB5...