CVE-2024-38048

Technical details for CVE-2024-38048 are not publicly provided in the connected documents. Please monitor for updates; the supplied sources do not include affected products, root cause, impact, or remediation specifics.

CVE-2024-38053

Technical details for CVE-2024-38053 are not provided in the supplied documents; no affected products, root cause, impact, or remediation are specified here. Monitor for updates.

CVE-2024-38085

Technical details about CVE-2024-38085 are not provided in the supplied documents; no affected products, root cause, or mitigations are disclosed here. Monitor for updates from Microsoft and related CVE references.

CVE-2024-38122

Technical details about CVE-2024-38122 are not provided in the connected documents. The initial entry only labels an LSA server information disclosure without concrete details on affected products, versions, impact, or fixes; monitor for updates.

CVE-2024-38130

Technical details for CVE-2024-38130 are not publicly available in the provided documents. No vendor/dependent specifics (product version, root cause, impact, or fixes) are given here. Monitor for official disclosures and updated advisories.

CVE-2025-32707

CVE-2025-32707 is a localprivilege-escalation vulnerability in the Windows NTFS subsystem caused by an out-of-bounds read. The NCSC vulnerability listing confirms Windows NTFS involvement and classifies the impact as elevated privileges, with a CVSS v3.1 base score of 7.8 (HIGH) and a local attac...

CVE-2023-33169

Technical details about CVE-2023-33169 are not publicly provided in the supplied documents. Monitor for updates from official sources; no product/vendor/version/impact information or fixes are included here.

CVE-2023-35318

Technical details about CVE-2023-35318 are not provided in the supplied documents; no affected products, root cause, or remediation are disclosed here. Monitor for updates.

CVE-2024-30082

Technical details about CVE-2024-30082 are not provided in the connected documents. The supplied materials contain no concrete product/version/root-cause/impact/fix information. Monitor official advisories for updates and remediation guidance.

CVE-2024-38011

Technical details about CVE-2024-38011 (affected products, vulnerable components, root cause, impact, fixes) are not provided in the supplied documents. Monitor for updates from the vendor and security advisories for confirmation and remediation guidance.

CVE-2024-38017

Technical details about CVE-2024-38017 are not provided in the supplied documents. The dataset includes related Windows KBs and other CVEs, but no explicit affected product, root cause, impact, or fix for CVE-2024-38017.

CVE-2024-38022

Technical details about CVE-2024-38022 are not provided in the connected documents; no affected products, root cause, or fixes are described here. Monitor for updates from official sources.

CVE-2024-38028

Technical details for CVE-2024-38028 are not publicly available in the provided documents; no affected products, root cause, or remediation are specified. Monitor for updates.

CVE-2024-38066

Technical details about CVE-2024-38066 (affected product, root cause, impact, or fix) are not publicly available in the provided connected documents. Monitor for updates from official advisories and vendor pages.

CVE-2024-38116

Technical details for CVE-2024-38116 are not publicly available in the provided documents; monitor for updates.

CVE-2024-38143

CVE-2024-38143 is a Windows WLAN AutoConfig Service elevation of privilege vulnerability. The CVSS 3.1 vector indicates an attacker must have physical access (AV:P) and exploit with high complexity, no user interaction, and local access (PR:N, UI:N). The vulnerability could yield elevated privile...

CVE-2025-21228

CVE-2025-21228 is a Windows Digital Media Elevation of Privilege vulnerability. The initial and related documents identify the issue as a Windows Digital Media component risk that could allow an attacker to obtain elevated privileges (Impact: high; Privileges Required: low; Attack Vector: physica...

CVE-2025-21231

CVE-2025-21231 documents describe a Denial-of-Service vulnerability in the Windows IP Helper component. The CVE entry lists a network-based attack vector with low attack complexity and no privileges required, resulting in availability impact. Connected records corroborate IP Helper as the affecte...

CVE-2025-21233

CVE-2025-21233 is a Windows Telephony Service Remote Code Execution vulnerability. External exploit is mapped to a network attack with user interaction required, high impact (CVSS v3.1: 8.8; Privileges Required: None; User Interaction: Required; Confidentiality/Integrity/Availability: High). Conn...

CVE-2025-21375

CVE-2025-21375 is a local elevation-of-privilege in the Windows Kernel Streaming WOW Thunk Service Driver. The vulnerability is identified as a Privilege Escalation with CVSS v3.1 base score 7.8 (HIGH), requiring LOCAL access, LOW attack complexity, and no user interaction; the impact is high to ...

CVE-2022-35753

Technical details (affected products/versions, impact, root cause, or fixes) for CVE-2022-35753 are not provided in the connected documents. Monitor official sources (MSRC/NVD) for concrete details and remediation guidance.

CVE-2023-32043

CVE-2023-32043 is a Windows Remote Desktop Security Feature Bypass vulnerability. The available document set confirms the issue as a remote-network vulnerability with no user impact on availability, but with high confidentiality and integrity impact per CVSS v3.1 (score 6.8). The connected source...

CVE-2023-33167

Technical details about CVE-2023-33167 are not publicly provided in the supplied documents. No explicit affected products, root cause, or fixes are described here. Monitor for updates.

CVE-2023-33174

Technical details about CVE-2023-33174 are not publicly provided in the connected documents. The materials mention a Windows cryptographic information disclosure vulnerability but do not specify affected components, root cause, versions, impact, or fixes. Monitor for updates.

CVE-2023-35306

CVE-2023-35306 is a Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure vulnerability. Available data identifies the affected component as the Microsoft PostScript and PCL6 Class Printer Driver, with impact described as information disclosure and a CVSS v3.1 base score of 5....

CVE-2023-35308

Technical details for CVE-2023-35308 are not publicly available in the provided documents. Monitor for updates from official sources to learn affected products, impact, and mitigations.

CVE-2023-35642

CVE-2023-35642 corresponds to a Denial-of-Service vulnerability in Windows’ Internet Connection Sharing (ICS) feature. The NVD entry explicitly labels this as an ICS DoS issue, with CVSS 3.1 indicating Adjacent attack vector, no privileges required, no user interaction, and high impact on availab...

CVE-2024-30068

Technical details about CVE-2024-30068 are not provided in the supplied documents; no affected products, root cause, or fixes are disclosed here. Monitor for updates.

CVE-2024-38013

Technical details about CVE-2024-38013 are not disclosed in the provided connected documents. The CVE entry exists (Windows Server Backup elevation of privilege), but no affected product versions, root cause, exploitation, or remediation are described here. Monitor for updates.

CVE-2024-38019

Technical details about CVE-2024-38019 are not provided in the supplied documents. Public sources in Connected documents do not specify affected products, root cause, exploit status or remediation. Monitor for official advisories and Microsoft update notes for confirmation.

CVE-2024-38027

Technical details about CVE-2024-38027 (affected software, root cause, impact, or fixes) are not provided in the supplied documents. No public disclosure details available here. Monitor for updates.

CVE-2024-38057

Technical details about CVE-2024-38057 (affected product/version, root cause, exploitability, and fix) are not provided in the connected documents. Monitor for updates from vendor/security advisories.

CVE-2024-43638

CVE-2024-43638 is a Windows USB Video Class System Driver Elevation of Privilege vulnerability. The connected sources corroborate a Windows USB Video Driver component as the affected area and indicate that mitigations are released via Microsoft security updates (e.g., November 2024 updates/KBs). ...

CVE-2024-49088

CVE-2024-49088 affects the Windows Common Log File System Driver and is described as a local elevation of privilege vulnerability. The CVSS 3.1 vector (LOCAL, LOW complexity, LOW privileges required) with a base score of 7.8 indicates a high-risk, local-attack scenario resulting in high impact to...

CVE-2025-21227

Technical details for CVE-2025-21227 are not publicly available in the provided documents. No root cause, affected products, or fixes are specified here. Monitor for updates from official advisories and CVE records.

CVE-2025-21237

CVE-2025-21237 is a Windows Telephony Service Remote Code Execution vulnerability. Exploitation could allow remote code execution via the Telephony Service; CVSS v3.1 base score 8.8 (HIGH) with network access, user interaction required. Affected products are Windows components where Telephony Ser...

CVE-2025-21244

Technical details for CVE-2025-21244 are not provided in the connected documents. They reference a Windows Telephony Service RCE but do not disclose affected versions, root cause, exploit methods, or fixes. Monitor official advisories for updates.

CVE-2025-24051

Technical details about CVE-2025-24051 are not publicly provided in the connected documents. The initial entry notes a heap overflow in RRAS enabling remote code execution, but no affected versions, exploit specifics, or mitigations are present here. Monitor for updates.

CVE-2025-26672

CVE-2025-26672 is described as a buffer over-read in Windows Routing and Remote Access Service (RRAS) that allows an unauthenticated attacker to disclose information over the network. Connected sources corroborate that RRAS is the affected component and frame the impact as an information disclosu...

CVE-2023-35336

CVE-2023-35336 affects the Windows MSHTML Platform and is described as a Security Feature Bypass vulnerability. Public details in the provided documents indicate the issue targets the MSHTML component and is classified with a MEDIUM base severity (CVSS v3.1: 5.4 overall; CPU: NETWORK attack vecto...

CVE-2023-35360

Technical details are not publicly available in the provided documents. No specific affected product/versions, root cause, impact, or fix is described here; monitor for updates.

CVE-2023-35361

CVE-2023-35361 is a Windows Kernel Elevation of Privilege vulnerability. The provided documents identify the flaw as a local-privilege escalation with high impact (confidentiality, integrity, and availability) but do not supply concrete technical details, affected versions, root cause specifics, ...

CVE-2024-37971

Technical details about CVE-2024-37971 are not publicly available in the provided connected documents. Monitor for updates from Microsoft and NVD for affected products, impact, and remediation; current sources do not specify affected components or fixes within this dataset.

CVE-2024-38061

Technical details for CVE-2024-38061 (affected products, root cause, impact, fixes) are not provided in the supplied documents. No remediation or exploitation specifics are available here. Monitor for updates.

CVE-2024-38064

Technical details for CVE-2024-38064 are not provided in the supplied documents. Public details (affected product/impact) are not disclosed here. Monitor for updates from vendors and vulnerability feeds to obtain concrete root cause, affected components, and fixes.

CVE-2025-21250

CVE-2025-21250 is a Windows Telephony Service Remote Code Execution vulnerability with CVSS 3.1 base score 8.8 (Network, Low attack complexity, No privileges, User interaction required). Connected sources reference the Windows Telephony Service as the affected component and indicate in CIRCL that...

CVE-2025-24056

CVE-2025-24056 is a heap-based buffer overflow in the Windows Telephony Server that allows a network-based attacker to execute arbitrary code on affected systems. The issue is described as remote code execution with network access (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) and a base score of 8.8 (HIG...

CVE-2025-24987

CVE-2025-24987 is a Windows USB Video Driver vulnerability described as an out-of-bounds read that can allow an authorized attacker to elevate privileges with physical access. The issue affects the Windows USB Video Driver component and is associated with high impact on confidentiality, integrity...

CVE-2022-35759

Technical details for CVE-2022-35759 (affected product, root cause, impact, and fix) are not provided in the connected documents. Monitor for updates.

CVE-2023-35340

Microsoft Windows CVE-2023-35340 affects the CNG Key Isolation Service and is a local elevation-of-privilege vulnerability. It has a CVSS v3.1 base score of 7.8 (AV:L, AC:H, PR:L, UI:N, S:C, C:H, I:H, A:H). The provided documents identify the affected component and impact but do not include explo...