CVE-2024-26244

CVE-2024-26244 is a remote code execution vulnerability in the Microsoft WDAC OLE DB provider for SQL Server. According to the CVSS 3.1 vector, it is exploitable over the network with no privileges required, but requires user interaction, and has high impact on confidentiality, integrity, and ava...

CVE-2024-28921

CVE-2024-28921 is a Windows Secure Boot security feature bypass vulnerability. The CVE entry is supported by multiple sources (NVD/NCSC/related feeds) indicating a local-attack-path bypassing Secure Boot with elevated privileges required and no user interaction. The CVSS vector shows: Local attac...

CVE-2024-43519

CVE-2024-43519 : Microsoft WDAC OLE DB provider for SQL Server is affected by a Remote Code Execution vulnerability. The CVSS v3.1 base score is 8.8 (HIGH); attack vector is NETWORK, with LOW attack complexity and no privileges required, but user interaction is required. The issue stems from the ...

CVE-2023-21689

CVE-2023-21689 is a Microsoft PEAP Remote Code Execution vulnerability with a CVSS v3.1 base score of 9.8. The vulnerability is network-exploitable with no user interaction and requires no privileges; it potentially impacts confidentiality, integrity, and availability. Connected sources confirm t...

CVE-2023-21798

Technical details about CVE-2023-21798 are not publicly provided in the connected documents. Monitor for updates.

CVE-2023-23413

Technical details about CVE-2023-23413 (affected product, root cause, versions, exploitability) are not provided in the connected documents. Public details are limited to the initial description; monitor for updates.

CVE-2023-24912

Technical details for CVE-2023-24912 are not publicly provided in the supplied documents. Monitor for updates from official advisories when more information becomes available.

CVE-2024-20669

CVE-2024-20669 affects Microsoft Windows Secure Boot. It is a Local, High-Privilege vulnerability classed as a Secure Boot security feature bypass with a CVSS v3.1 base score of 6.7 (Impact: Confidentiality, Integrity, and Availability High). Connected sources confirm Windows Secure Boot-related ...

CVE-2024-26189

CVE-2024-26189 is a Secure Boot security feature bypass affecting Windows Secure Boot. The CVE is listed in the Windows Secure Boot table with CVSS v3.1 base score 8.0 (HIGH) and impact described as bypassing security measures. Connected sources corroborate a Secure Boot bypass characterization, ...

CVE-2025-24044

CVE-2025-24044 is a local privilege-escalation in the Windows Win32 Kernel Subsystem caused by a use-after-free condition. Connected docs classify it as an EoP risk with local exploitability and note fixes in Microsoft Windows updates (e.g., March 2025 cycle). No product/version specifics beyond ...

CVE-2023-24901

CVE-2023-24901 maps to a Windows NFS Portmapper Information Disclosure vulnerability. The NVD record lists a CVSS v3.1 base score of 7.5 (HIGH) with Network attack vector, low attack complexity, no privileges required, no user interaction, and a confidentiality impact of HIGH (I and A mostly unaf...

CVE-2023-24946

CVE-2023-24946 is described in the provided sources as a Windows Backup Engine/Backup Service Elevation of Privilege vulnerability. The CNVD entry explicitly notes an attacker could gain SYSTEM privileges, indicating a local, privilege-escalation flaw. The CVSS vector in the initial data shows: L...

CVE-2024-28899

Technical details for CVE-2024-28899 are not publicly available in the provided documents. No affected products, root cause, exploit info, or remediation are specified here; monitor for updates.

CVE-2024-28924

Technical details about CVE-2024-28924 are not publicly provided in the connected documents. Monitor for updates from Microsoft, NVD, or CVE editors for affected products, impact, root cause, and available fixes.

CVE-2024-30031

CVE-2024-30031 is documented as a Windows elevation-of-privilege issue affecting the CNG Key Isolation Service . The available sources describe the vulnerability as a local, privilege-required issue with high impact across confidentiality, integrity, and availability, but do not provide vendor-sp...

CVE-2024-30038

CVE-2024-30038 is a Win32k local privilege escalation vulnerability. The issue exists in Win32k’s kernel-user boundary; exploitation would require local access with low privileges and no user interaction, potentially granting HIGH confidentiality/integrity/availability impact. Microsoft has issue...

CVE-2023-23412

CVE-2023-23412 is a Windows local elevation-of-privilege issue (Attack Vector: LOCAL, Privileges Required: LOW, UI: NONE) with HIGH impact on confidentiality, integrity, and availability per CVSS 3.1 metrics. Microsoft security updates released March 14, 2023 (e.g., KB5023705, KB5023764, KB502376...

CVE-2023-28216

Technical details about CVE-2023-28216 are not publicly available in the provided documents. Monitor for updates.

CVE-2023-29358

CVE-2023-29358 is a Windows GDI Elevation of Privilege vulnerability. Per the sources, it is a LOCAL, low-attack-complexity issue with LOW privileges required, and it has HIGH confidentiality, integrity, and availability impact. The connected documents corroborate the Windows context and do not p...

CVE-2024-26180

Technical details about CVE-2024-26180 are not provided in the supplied documents. Monitor for updates from official advisories and affected vendors.

CVE-2023-23394

Technical details for CVE-2023-23394 are not provided in the connected documents. They reference CSRSS generally and Windows updates (DCOM hardening, LSASS, domain join issues) but do not specify affected products/versions or exploit details. Monitor for updates.

CVE-2024-26250

CVE-2024-26250 is a Windows Secure Boot vulnerability categorized as a circumvention of security measures. The connected advisory (NCSC) lists CVE-2024-26250 under the Windows Secure Boot section with that impact. The available documents do not provide product version ranges or exact vulnerable c...

CVE-2025-21245

CVE-2025-21245 is a Windows Telephony Service remote code execution vulnerability. The CIRCL feed and CVE listings indicate it affects Windows Telephony Service with potential for executing code from an attacker-supplied payload (impact: execution of arbitrary code) and a CVSS v3.1 base score of ...

CVE-2024-49046

CVE-2024-49046 affects the Windows Win32 Kernel Subsystem and is categorized as an Elevation of Privilege vulnerability. The CVSS 3.1 vector indicates LOCAL exploitability with LOW attack complexity and LOW privileges required, but HIGH impact to confidentiality, integrity, and availability under...

CVE-2024-49105

CVE-2024-49105 affects the Windows Remote Desktop Client. It enables remote code execution over the network; exploitation requires user interaction and high privileges, with high impacts to confidentiality, integrity, and availability. CVSS v3.1 base score 8.4 (Network, Low attack complexity, Pri...

CVE-2023-28267

CVE-2023-28267 is the Remote Desktop Protocol Client Information Disclosure Vulnerability affecting the Microsoft Windows Remote Desktop Client (CPE: cpe:/a:microsoft:remote_desktop_connection). The CVSSv3.1 base score is 6.5 (Medium), with attack vector Network, attack complexity Low, privileges...

CVE-2024-30027

CVE-2024-30027 corresponds to an NTFS Elevation of Privilege vulnerability. Affected component: Windows NTFS (elevates privileges locally). Root cause details are not explicitly stated in the provided documents beyond the NTFS elevation claim. CVSS v3.1 base metrics indicate a High impact (7.8) w...

CVE-2024-30098

CVE-2024-30098 is referenced in multiple October 2025 Windows security updates (KB5066791, KB5066835, KB5066793, KB5066780, KB5066836, etc.). The connected documents describe a cryptographic hardening change: moving RSA-based smart card certificates from Cryptographic Service Provider (CSP) to Ke...

CVE-2024-38140

CVE-2024-38140 is a Windows RMCAST (Reliable Multicast Transport Driver) remote code execution vulnerability rated CRITICAL (CVSS 3.1: 9.8). The entry indicates an in-network attacker could remotely execute arbitrary code, with no privileges required and no user interaction, under the RMCAST comp...

CVE-2023-32057

CVE-2023-32057 is a Microsoft Message Queuing (MSMQ) Remote Code Execution vulnerability. The connected sources indicate an attacker can trigger RCE by sending a malicious MSMQ packet to an MSMQ server, enabling remote code execution on the server side. A mitigation documented in the sources is t...

CVE-2023-36003

CVE-2023-36003 is a Microsoft Windows XAML Diagnostics Elevation of Privilege vulnerability. The XAML Diagnostics API can be abused to obtain elevated privileges locally. Public material confirms exploits/POCs exist (e.g., GitHub PoCs) and that patches were released during December 2023 Patch Tue...

CVE-2024-26220

CVE-2024-26220 affects Windows Mobile Hotspot and is described as an Information Disclosure vulnerability. The connected NCSC advisory lists CVE-2024-26220 with impact: Access to sensitive data and a CVSS v3.1 base score of 5.0 (Medium). No root-cause, affected build versions, or remediation deta...

CVE-2024-26240

CVE-2024-26240 is a Windows Secure Boot vulnerability rated CVSS v3.1 base score 8.0 (AV: Adjacent, AC: Low, PR: None, UI: Required, S: Unchanged, C/I/A: High). The connected documents corroborate that this CVE involves bypassing or circumvention of Secure Boot security measures, with explicit no...

CVE-2025-24068

CVE-2025-24068 describes a buffer over-read in the Windows Storage Management Provider that can lead to local information disclosure for an authenticated user. The issue affects Windows Storage Management Provider components and is rated with a local attack vector and a confidentiality impact. Co...

CVE-2023-24868

CVE-2023-24868 corresponds to a remote code execution vulnerability in the Microsoft PostScript and PCL6 Class Printer Driver . The CNVD entry explicitly describes it as a remote code execution flaw in this printer driver, aligning with the CVE title. The NVD entry lists the vulnerability as expl...

CVE-2024-26175

CVE-2024-26175 is a local-bypass vulnerability in Windows Secure Boot, enabling bypass of the Secure Boot security feature. Affected component: Windows Secure Boot. Root cause: security-measure bypass integrated into Secure Boot; the CVSSv3.1 base metrics indicate a High severity (7.8) with Local...

CVE-2023-28222

Technical details (affected components, root cause, impacted versions, exploits, or patch status) are not provided in the supplied documents. Monitor for updates from official sources.

CVE-2024-26241

CVE-2024-26241 is a Win32k elevation-of-privilege vulnerability in Windows. The OpenVAS entries list Win32K as the affected component with local exploitation, requiring low privileges and no user interaction, and causing high confidentiality, integrity, and availability impact. The CVSSv3.1 base ...

CVE-2023-35367

Technical details for CVE-2023-35367 are not publicly provided in the supplied documents. No specific affected products, versions, root cause, remediation, or exploit information is available here. Monitor official sources for updates.

CVE-2023-36882

CVE-2023-36882 concerns Microsoft WDAC OLE DB provider for SQL Server, enabling Remote Code Execution. The NVD details show a network-based exploitable flaw with CVSS v3.1: AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, score 8.8 (HIGH). Root cause and affected versions are not fully enumerated in the prov...

CVE-2023-38184

CVE-2023-38184 is a Windows LDAP Remote Code Execution vulnerability. The NVD entry lists a CVSS v3.1 base score of 7.5 (High) with Network attack vector, high attack complexity, low privileges required, no user interaction, and impacts to confidentiality, integrity, and availability. The provide...

CVE-2025-21211

Technical details about CVE-2025-21211 are not publicly provided in the supplied connected documents. Monitor for updates from official advisories; no confirmed affected products, vectors, or fixes are described here.

CVE-2025-21273

Technical details are not publicly provided in the supplied documents. The CVE-2025-21273 entry lacks explicit affected product versions, root cause, or remediation specifics in this set; monitor for updates from Microsoft/MSRC.

CVE-2023-23385

Technical details for CVE-2023-23385 are not publicly available in the provided documents. Monitor for updates from official sources.

CVE-2023-24861

Technical details about CVE-2023-24861 (Windows Graphics Component Elevation of Privilege Vulnerability) are not publicly available in the provided documents; no affected versions, root cause, or remediation are specified here. Monitor for official disclosures and updates.

CVE-2023-24867

The CVE, CVE-2023-24867, is described in connected sources as a remote code execution vulnerability in Microsoft’s PostScript and PCL6 Class Printer Driver. CNVD-2023-28103 explicitly notes a remote code execution flaw in the Microsoft PostScript Printer Driver; NVD/NIST entries corroborate the v...

CVE-2023-28227

CVE-2023-28227 concerns the Windows Bluetooth Driver and is described as a Remote Code Execution vulnerability. The NVD entry lists a CVSS v3.1 base score of 7.5 (High) with vector AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H, indicating an adjacent attacker with no user interaction could achieve compromi...

CVE-2023-28228

CVE-2023-28228 is documented as a Windows spoofing vulnerability. Based on the CVE entry, its CVSS v3.1 base score is 5.5 (Medium) with a Local attack vector, Low attack complexity, No privileges required, User interaction required, and Impact mainly on integrity (High) with no confidentiality/av...

CVE-2023-29359

Technical details about CVE-2023-29359 are not provided in the connected documents. The entries identify a GDI Elevation of Privilege vulnerability but do not specify affected products/versions, root cause, impact specifics, or remediation.

CVE-2023-35365

CVE-2023-35365 affects Windows RRAS with remote code execution potential. Exploitation, per the linked discussion, requires an attacker to send crafted packets to an affected RRAS server. The RRAS feature is not installed or enabled by default on Windows systems, which reduces exposure for users ...