CVE-2023-28224

CVE-2023-28224 is described as a Windows PPPoE Remote Code Execution vulnerability. The entry provides a CVSS 3.1 score of 7.1 (HIGH) with attack vector Adjacent, high complexity, no privileges required, user interaction required, and impacts to confidentiality, integrity, and availability. Explo...

CVE-2022-35744

Technical details (affected product, root cause, impact, or fixes) are not provided in the supplied documents. Monitor for updates from official CVE sources; no specifics about exploitation, vectors, or mitigations are included here.

CVE-2023-23385

Technical details for CVE-2023-23385 are not publicly available in the provided documents. Monitor for updates from official sources.

CVE-2023-28227

CVE-2023-28227 concerns the Windows Bluetooth Driver and is described as a Remote Code Execution vulnerability. The NVD entry lists a CVSS v3.1 base score of 7.5 (High) with vector AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H, indicating an adjacent attacker with no user interaction could achieve compromi...

CVE-2023-28228

CVE-2023-28228 is documented as a Windows spoofing vulnerability. Based on the CVE entry, its CVSS v3.1 base score is 5.5 (Medium) with a Local attack vector, Low attack complexity, No privileges required, User interaction required, and Impact mainly on integrity (High) with no confidentiality/av...

CVE-2023-35365

CVE-2023-35365 affects Windows RRAS with remote code execution potential. Exploitation, per the linked discussion, requires an attacker to send crafted packets to an affected RRAS server. The RRAS feature is not installed or enabled by default on Windows systems, which reduces exposure for users ...

CVE-2025-21310

Technical details for CVE-2025-21310 are not publicly available in the provided documents. Monitor for updates from Microsoft and NVD.

CVE-2025-21329

CVE-2025-21329 is a MapUrlToZone Security Feature Bypass in Windows. Public docs identify it as a bypass of a security feature (CVE-2025-21329) with CVSS v3.1 base metrics indicating NETWORK attack vector, low attack complexity, no privileges required, user interaction required, and a MEDIUM seve...

CVE-2023-23409

CVE-2023-23409 corresponds to a CSRSS Information Disclosure vulnerability. The available data indicate a local attack vector with low attack complexity and low privileges required, yielding a high confidentiality impact (CVSS 3.1: AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N). The description notes CSRSS...

CVE-2023-24872

CVE-2023-24872 affects the Microsoft PostScript and PCL6 Class Printer Driver. The entry documents a Remote Code Execution vulnerability with high severity (CVSS 3.1: AV=N/AC=L/PR=L/UI=N/S=U/C=H/I=H/A=H). Concrete technical details (affected product/version, root cause, exploit status, or fixes) ...

CVE-2024-38196

CVE-2024-38196 is tied to the Windows Common Log File System Driver and is described as an Elevation of Privilege (local) vulnerability. The CVE is listed with a CVSSv3.1 base score of 7.8 (HIGH) and a local attack vector with low attack complexity, requiring low privileges and no user interactio...

CVE-2025-21191

CVE-2025-21191 affects Windows Local Security Authority (LSA) with a time-of-check/time-of-use race condition that enables an authorized local attacker to elevate privileges (obtaining increased entitlements). The vulnerability is categorized under local privilege escalation and is documented in ...

CVE-2025-21260

Technical details about CVE-2025-21260 are not publicly provided in the connected documents. Monitor for updates from Microsoft and CVE sources for affected components, impact, and remediation.

CVE-2023-24885

CVE-2023-24885 corresponds to a remote code execution vulnerability in Microsoft PostScript and PCL6 Class Printer Driver. The connected CNVD entry confirms a remote code execution flaw in the PostScript and PCL6 class printer drivers; however, the documents do not provide detailed root cause ana...

CVE-2023-24939

Technical details about CVE-2023-24939 are not publicly provided in the supplied documents; no affected products, vectors, or fixes are described here. Monitor for updates.

CVE-2024-43641

CVE-2024-43641 is a Windows Registry Elevation of Privilege issue. The connected documents reveal a sophisticated exploitation path based on hive memory corruption and out-of-bounds cell indexes, enabling an unprivileged actor to obtain arbitrary kernel read/write access and, ultimately, SYSTEM-l...

CVE-2025-21338

CVE-2025-21338 is a GDI+ Remote Code Execution vulnerability. The CVE affects Windows components that use GDI+ and has a CVSSv3.1 base score of 7.8 (HIGH) with LOCAL attack vector, LOW privileges required, no user interaction, and impacts to confidentiality, integrity, and availability as describ...

CVE-2024-38104

Technical details for CVE-2024-38104 are not provided in the supplied connected documents; no affected products, root cause, impact, or remediation are specified here. Monitor for official updates to disclose specifics.

CVE-2023-24865

CVE-2023-24865 corresponds to a vulnerability in the Microsoft PostScript and PCL6 Class Printer Driver that results in an information disclosure. The CVE is characterized by a network-accessible vector with low attack complexity and low privileges required, but with high confidentiality impact a...

CVE-2023-35377

Technical details for CVE-2023-35377 are not publicly available in the provided documents. Monitor for updates.

CVE-2023-35380

Technical details for CVE-2023-35380 are not publicly available in the provided documents. The initial sources list the vulnerability title but do not specify affected products, versions, root cause, or remediation. Monitor for updates.

CVE-2023-35630

CVE-2023-35630 is a Microsoft Windows Internet Connection Sharing (ICS) remote code execution vulnerability. The NVD entry lists CVSS v3.1 base score 8.8 (HIGH) with AV:A, AC:L, PR:N, UI:N, S:U, C:H, I:H, A:H, indicating adjacent-network exploitation with no user interaction. Multiple OpenVAS ent...

CVE-2024-38058

CVE-2024-38058 is tied to BitLocker: Microsoft security updates (KB5040430, KB5040431, KB5040437, etc.) add PCRs 4–7 and 11 to the default Secure Boot validation profile. This is described as a BitLocker-related change with CVE-2024-38058 referenced for the PCR extension in multiple OS updates. T...

CVE-2022-35756

Technical details about CVE-2022-35756 (affected products, root cause, impact, fix) are not provided in the connected documents. Monitor for official disclosures and updates from Microsoft and CVE listings.

CVE-2023-28266

Technical details (affected product/component, root cause, impact, fix) are not provided in the connected documents. Monitor for updates.

CVE-2025-47160

The CVE-2025-47160 entry applies to Windows Shell and describes a Protection mechanism failure that allows a remote attacker to bypass a security feature over the network. The NVD entry lists a CVSS v3.1 base score of 5.4 (AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L), indicating a network-exposed issue w...

CVE-2023-21799

Technical details about CVE-2023-21799 are not publicly provided in the supplied documents. Monitor for updates.

CVE-2023-24886

CVE-2023-24886 corresponds to a Remote Code Execution vulnerability in Microsoft’s PostScript and PCL6 Class Printer Driver. Connected sources confirm the affected component (PostScript and PCL6 printer driver) and that security updates were released in the April 2023 cycle (KB5025221, KB5025224,...

CVE-2023-28225

CVE-2023-28225 is described as a Windows NTLM Elevation of Privilege vulnerability. The provided data indicate a local attack vector with low privileges required, no user interaction, and a high impact on confidentiality, integrity, and availability (CVSS 3.1: AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)...

CVE-2023-32011

Technical details about CVE-2023-32011 are not publicly provided in the supplied documents. The available sources confirm the vulnerability name and related MS updates but do not disclose affected products, versions, root cause, or fixes.

CVE-2023-35381

Technical details about CVE-2023-35381 (Windows Fax Service Remote Code Execution) are not publicly provided in the supplied documents; no affected product/version/root-cause/exploit information is available here. Monitor for updates and refer to official advisories for specifics.

CVE-2025-24990

CVE-2025-24990 is a local privilege escalation in the Microsoft‑supplied Agere Modem Driver (ltmdm64.sys). The issue is described as an untrusted pointer dereference within the driver, enabling a local attacker to escalate privileges to administrator. Microsoft addressed it by removing the driver...

CVE-2022-35755

Technical details about CVE-2022-35755 (affected software, root cause, impact, or patch specifics) are not provided in the connected documents; monitor official CVE/NVD updates for details.

CVE-2023-24925

CVE-2023-24925 is a Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability. The CVSS v3.1 base score is 8.8 (HIGH) with a network attack vector, low attack complexity, and no user interaction required. The impact is described as high across confidentiality, integri...

CVE-2023-29364

Technical details for CVE-2023-29364 are not provided in the supplied documents. Monitor for updates from Microsoft and CVE records.

CVE-2024-30050

CVE-2024-30050 is a Windows Mark of the Web security feature bypass vulnerability. Public sources label it as a security bypass issue in MOTW, with a CVSS v3.1 base score of 5.4 (Network, Low complexity, User interaction required; I and A impacts: I = Low, A = Low). The condition allows bypass of...

CVE-2024-38132

Technical details about CVE-2024-38132 are not publicly provided in the supplied connected documents. The NAT DoS entry is listed, but no affected product/version, root cause, or remediation is described. Monitor for updates.

CVE-2024-43562

CVE-2024-43562 is a Windows NAT Denial-of-Service vulnerability with CVSSv3.1 base score 7.5 (Network vector, no user interaction, no privileges required). Exploitation is possible remotely over the network and can lead to a high impact: denial of service. Connected sources list Windows NAT as af...

CVE-2025-21274

CVE-2025-21274 corresponds to a Windows Event Tracing Denial of Service vulnerability. The NVD entry rates impact as Denial of Service with a CVSSv3.1 base score of 5.5 (Local, Low UI, privileges required: Low, Availability impact: High). Connected sources indicate this vulnerability affects Wind...

CVE-2025-21419

CVE-2025-21419 is a Windows Setup cleanup vulnerability that enables local elevation of privilege. The CVSS 3.1 vector (AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H) indicates an attacker with low privileges and local access can achieve high integrity and availability impact, without user interaction. The...

CVE-2023-24907

CVE-2023-24907 describes a remote code execution vulnerability in the Microsoft PostScript and PCL6 Class Printer Driver . The CVE entry (as per NVD) has a CVSS 3.1 base score of 8.8 (High) with vectors: AV:N, AC:L, PR:L, UI:N, S:U, C:H, I:H, A:H, indicating network attack with no user interactio...

CVE-2023-24908

Technical details for CVE-2023-24908 are not publicly available in the provided documents. Monitor for updates to obtain affected products, root cause, impact, and fixes.

CVE-2023-28249

CVE-2023-28249 is a Windows Boot Manager security feature bypass vulnerability. The connected sources confirm the affected component as Windows Boot Manager and classify the issue as a bypass of security features with high potential impact on confidentiality, integrity, and availability; specific...

CVE-2023-32017

CVE-2023-32017 concerns the Microsoft PostScript Printer Driver and allows Remote Code Execution tied to a driver component. The IOCs/impact in the provided materials indicate a LOCAL attack vector with no user interaction, and confidentiality, integrity, and availability impacts rated HIGH. No e...

CVE-2023-35387

CVE-2023-35387 affects the Windows Bluetooth A2DP driver, described as an Elevation of Privilege vulnerability. The CVSSv3.1 metrics indicate an adjacent attack vector, no privileges required, low attack complexity, user interaction required, and a CHANGED scope with HIGH impacts to confidentiali...

CVE-2024-30020

CVE-2024-30020 corresponds to a Remote Code Execution vulnerability in Windows Cryptographic Services. Affected: Windows Cryptographic Services component; vulnerability type is RCE. From the CVE entry, the CVSS v3.1 base score is 8.1 (High) with Network attack vector, high attack complexity, no p...

CVE-2024-30022

CVE-2024-30022 pertains to the Windows RRAS component and is listed in the ENISA/NCSC compilation with a CVSSv3.1 base score of 7.5 (high). The adverse impact is remote code execution with network access, requiring user interaction and no privileges. Connected sources explicitly associate CVE-202...

CVE-2024-30081

Technical details for CVE-2024-30081 are not provided in the supplied documents. The connected Microsoft KB updates reference unrelated issues (RADIUS, BitLocker, LNK policy) and do not disclose affected products, root cause, impact, or fixes for this CVE. Monitor for updates.

CVE-2023-28243

CVE-2023-28243 is a remote code execution vulnerability in the Microsoft PostScript and PCL6 Class Printer Driver. The CVE entry notes a high-severity (CVSS 3.1 base 8.8) issue with network attack vector and no user interaction required, applicable to affected printer driver components. Connected...

CVE-2024-38117

CVE-2024-38117 affects the Windows NTFS component and is labeled as an elevation-of-privilege vulnerability with the impact “Obtaining Increased Rights” and a CVSS v3.1 base score of 7.8 (High). The connected documents provide the impact and the component but do not disclose the exact root cause ...