CVE-2026-21236 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

...

CVE-2025-59242 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

...

EUVD-2024-40727

Malicious code in bioql PyPI...

EUVD-2024-37200

Malicious code in bioql PyPI...

Metasploit Weekly Wrap-Up 09/19/2025

Consistently Persistent The Metasploit Framework has around 26 different modules which can be used to establish persistence on a target. Persistence modules help operators ensure they can maintain a consistent foothold within an environment once a target has been compromised and are quite helpful...

PT-2025-36836

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: A time-of-check time-of-use toctou race condition exists in the Windows TCP/IP stack. This condition allows a locally authorized attacker to elevate privileges. The issue allows attackers t...

CVE-2025-49686

Null pointer dereference in Windows TCP/IP allows an authorized attacker to elevate privileges locally...

PT-2025-73: NULL pointer dereference in Windows TCP/IP Driver

The Null pointer dereference vulnerability was discovered in Windows TCP/IP Driver. The vulnerability allows an authorized attacker to gain SYSTEM privileges. The affected products: Windows Server 2019 & Server 2019 Server Core installation Versions to 10.0.17763.7558 Windows 10 Version 1809 for...

CVE-2024-52940

AnyDesk through 8.1.0 on Windows, when Allow Direct Connections is enabled, inadvertently exposes a public IP address within network traffic. The attacker must know the victim's AnyDesk ID...

The vulnerability of the Windows Networking (WNet) service in Windows operating systems allows a perpetrator to cause a service failure.

The vulnerability of the Windows Networking WNet service in Windows operating systems is related to the use of the NULL pointer pointer. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

The vulnerability of the Windows Networking (WNet) service in Windows operating systems allows a perpetrator to cause a service failure.

The vulnerability of the Windows Networking WNet service on Windows operating systems is related to the use of the NULL pointer pointer. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

The vulnerability of the Windows Networking (WNet) service in Windows operating systems, which allows a perpetrator to disclose protected information

The vulnerability of the Windows Networking WNet service in Windows operating systems is related to the use of an uninitialized pointer. Exploiting this vulnerability can allow a remote attacker to disclose sensitive information that is protected by this service...

The vulnerability of the Networking component of Windows operating systems, which allows a hacker to trigger a service failure

The vulnerability of the Networking component of Windows operating systems exists due to insufficient checking of input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

CVE-2024-38234

Windows Networking Denial of Service Vulnerability...

CVE-2024-38232

Windows Networking Denial of Service Vulnerability...

CVE-2024-38234 Windows Networking Denial of Service Vulnerability

...

CVE-2024-38234

CVE-2024-38234 is a Windows Network Virtualization vulnerability rated CVSS v3.1 base score 6.5 (Medium) with Adjacent attack vector, Low attack complexity, No privileges, No user interaction, and a High availability impact (Denial of Service). The connected documents confirm the CVE-ID and its D...

CVE-2024-38232

CVE-2024-38232 — Windows Networking Denial of Service Vulnerability Affected: Windows networking components. The record consolidates multiple Windows CVEs, with CVE-2024-38232 specifically characterized as a Denial-of-Service in Windows Networking. The vulnerability has a CVSS v3.1 base score of ...

CVE-2024-38234: Improper Input Validation

Windows Networking Denial of Service Vulnerability...

Microsoft Windows TCP/IP 安全漏洞

Microsoft Windows TCP/IP is a component of Microsoft Corporation USA that provides TCP/IP configuration capabilities for Windows. A security vulnerability exists in Microsoft Windows TCP/IP. An attacker exploiting this vulnerability could remotely execute code. The following products and versions...