CVE-2024-30025

CVE-2024-30025 affects the Windows Common Log File System Driver. The Windows/KB guidance mappings list CVE-2024-30025 with a CVSS v3.1 base score of 7.8 (LOCAL attack, LOW complexity, LOW privileges required, HIGH confidentiality/integrity/availability impact) and categorize it as an privilege e...

CVE-2024-30024

CVE-2024-30024 is listed by ENISA NCSC as a Windows RRAS vulnerability with a CVSS v3.1 score of 7.5 (HIGH) and a base impact of executing random code. It is part of the Windows Routing and Remote Access Service (RRAS) family and is described in the connected document as a network-exposed issue t...

CVE-2024-26238

CVE-2024-26238 refers to a Windows Task Scheduler (PLUGScheduler) elevation of privilege vulnerability affecting Microsoft Windows. The CVE is described as a local privilege escalation (attack vector: LOCAL, user interaction: NONE) with a CVSS v3.1 base score of 7.8 (HIGH) and impacts to confiden...

CVE-2024-29994

CVE-2024-29994 is Microsoft Windows SCSI Class System File Elevation of Privilege. Connected sources (NCSC advisory) list CVE-2024-29994 with CVSS v3.1 base 7.8 (high), Local attack vector, Low privileges required, no user interaction, and impact to confidentiality, integrity, and availability. T...

CVE-2024-30059

Technical details about CVE-2024-30059 are not provided in the connected documents. Available sources only note the vulnerability title and CVSS metrics; monitor for official advisories for affected versions, impact, and fixes.

CVE-2024-30053

CVE-2024-30053 refers to a Cross-Site Scripting vulnerability in Microsoft Azure Migrate. The Azure Migrate product is affected; Microsoft has released updates to fix the issue (MSRC advisory page cited). Public risk details indicate a Medium severity (CVSS v3.1 base score around 6.5; B: 6.5) wit...

CVE-2024-30050

CVE-2024-30050 is a Windows Mark of the Web security feature bypass vulnerability. Public sources label it as a security bypass issue in MOTW, with a CVSS v3.1 base score of 5.4 (Network, Low complexity, User interaction required; I and A impacts: I = Low, A = Low). The condition allows bypass of...

CVE-2024-30044

CVE-2024-30044 is a Microsoft SharePoint Server Remote Code Execution vulnerability reported across multiple feeds. The connected docs identify the affected product as SharePoint Server and describe a remote code execution flaw that could allow an attacker to run arbitrary code on the target syst...

CVE-2024-30023

CVE-2024-30023 affects the Windows Routing and Remote Access Service (RRAS). The RRAS remote code execution vulnerability is listed under Windows RRAS with CVSS details indicating Network attack vector, high impact to confidentiality, integrity, and availability, and requiring user interaction. T...

CVE-2024-30022

CVE-2024-30022 pertains to the Windows RRAS component and is listed in the ENISA/NCSC compilation with a CVSSv3.1 base score of 7.5 (high). The adverse impact is remote code execution with network access, requiring user interaction and no privileges. Connected sources explicitly associate CVE-202...

CVE-2024-30021

CVE-2024-30021 is a Windows Mobile Broadband Driver Remote Code Execution vulnerability. Affected component: Windows Mobile Broadband (driver). Documented impact indicates potential for executing code with high confidentiality, integrity, and availability impact; CVSSv3.1 base score 6.8 (Medium) ...

CVE-2024-30020

CVE-2024-30020 corresponds to a Remote Code Execution vulnerability in Windows Cryptographic Services. Affected: Windows Cryptographic Services component; vulnerability type is RCE. From the CVE entry, the CVSS v3.1 base score is 8.1 (High) with Network attack vector, high attack complexity, no p...

CVE-2024-30018

CVE-2024-30018 is a Windows Kernel Elevation of Privilege vulnerability. The CVSS indicates local access with low privileges required and no user interaction, yielding a high impact on confidentiality, integrity, and availability (base score 7.8). Microsoft has released updates addressing Windows...

CVE-2024-30019

CVE-2024-30019 is a Windows DHCP Server Denial-of-Service vulnerability. The OpenVAS/NCSC references confirm affected product Windows DHCP Server and impact Denial-of-Service (CVSS around 6.5). Exploitation or exploit status is not detailed in the provided docs. Remediation is to apply the Micros...

CVE-2024-30017

CVE-2024-30017 affects Microsoft Windows Hyper-V. It is a remote code execution vulnerability in Hyper-V with CVSSv3.1 base score 8.8 (Network, Privileges Required: Low, User Interaction: None; Confidentiality/Integrity/Availability: High). Affected: Windows Hyper-V component; likely requires net...

CVE-2024-30016

CVE-2024-30016 affects Windows Cryptographic Services . The vulnerability is described as an information disclosure with impact to confidentiality (high) and is listed in sources as a Windows component issue with a CVSS v3.1 base score of 5.5 (attack vector: local; privileges required: low; user ...

CVE-2024-30015

CVE-2024-30015 affects Windows Routing and Remote Access Service (RRAS). The connected NCSC advisory lists CVE-2024-30015 under RRAS with impact described as Execution of random code (CVSS v3.1: 7.5, Network attack vector, high complexity, no privileges required, user interaction required, impact...

CVE-2024-30014

CVE-2024-30014 is a Windows RRAS (Routing and Remote Access Service) Remote Code Execution vulnerability. Connected sources confirm the RRAS entry with CVSS v3.1 base score 7.5 (HIGH): Network attack vector, high impact on confidentiality, integrity and availability, with user interaction require...

CVE-2024-30012

CVE-2024-30012 is a Windows Mobile Broadband Driver Remote Code Execution vulnerability. The CVSS v3.1 base score is 6.8 (AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). The affected component is the Windows Mobile Broadband Driver; impact is remote code execution with high confidentiality, integrity, and ...

CVE-2024-30011

CVE-2024-30011 is a Windows Hyper-V Denial of Service vulnerability. The NVD entry lists CVSS v3.1 base score 6.5 (MEDIUM), with Network attackVector, Low attackComplexity, Low privilegesRequired, No user interaction, and Availability impact HIGH. CIRCL reporting also references CVE-2024-30011. T...