CVE-2024-43487

CVE-2024-43487 corresponds to a Windows Mark of the Web (MOTW) security feature bypass. The MOTW component itself is identified as the vulnerable area, enabling bypass of the MOTW protection. Public materials in the connected documents indicate the vulnerability is addressed by Microsoft security...

CVE-2025-21268

CVE-2025-21268 is a Windows MapUrlToZone security feature bypass. Affected component: MapUrlToZone logic; impact is circumvention of security boundaries (CVSS v3.1: 4.3, NETWORK attack vector, user interaction required). Connected sources confirm it as a security feature bypass vulnerability and ...

CVE-2025-27741

CVE-2025-27741 describes an out-of-bounds read in Windows NTFS that allows a local attacker to elevate privileges. The issue is tied to NTFS handling and is mitigated by Microsoft security updates; affected users should apply the latest Windows security updates per MSRC guidance. The connected so...

CVE-2025-29837

Technical details about CVE-2025-29837 (affected products, root cause, exploitability) are not publicly disclosed in the provided connected documents; no specifics on impact or remediation are available here.

CVE-2025-33056

CVE-2025-33056 affects Microsoft Local Security Authority Server (lsasrv). The provided documents identify the issue as improper access control that enables a remote attacker to cause a denial of service over the network. The NCSC advisory explicitly lists this CVE under Windows LSASS with a CVSS...

CVE-2023-35296

Technical details for CVE-2023-35296 are not provided in the supplied documents. No information on affected products, versions, impact, or fixes. Monitor for updates from Microsoft and CVE sources.

CVE-2023-35316

Technical details about CVE-2023-35316 (affected products, root cause, impact, or fixes) are not provided in the connected documents. The initial description lacks public details. Monitor for updates and any forthcoming technical information.

CVE-2023-35629

CVE-2023-35629 concerns the Microsoft USBHUB 3.0 Device Driver Remote Code Execution vulnerability in Windows. The OpenVAS entry links CVE-2023-35629 to the Windows USB Mass Storage Class Driver (table showing CVE-2023-35629 with a “Executing random code” impact), indicating the issue manifests a...

CVE-2024-38050

Technical details about CVE-2024-38050 (affected software, root cause, impact, exploitability) are not provided in the supplied documents. Please monitor for updates from Microsoft or related security advisories.

CVE-2024-38126

CVE-2024-38126 affects Windows Network Address Translation (NAT). The provided table lists it under Windows NAT with a CVSS v3.1 score of 7.5 (HIGH) and impact as Denial-of-Service. Other connected documents reference general Microsoft Windows fixes but do not provide concrete technical details (...

CVE-2024-38142

CVE-2024-38142 is a Windows Secure Kernel Mode elevation-of-privilege vulnerability (local, low-privilege prerequisite; high impact). The connected sources provide CVSS and impact only (Obtaining Increased Entitlements) and do not specify root cause details beyond the Windows kernel context. Publ...

CVE-2024-38151

Technical details (affected product/component/root cause/impact/fix) for CVE-2024-38151 are not provided in the connected documents. Only the label “Windows Kernel Information Disclosure” with CVSS 5.5 is given; monitor for updates.

CVE-2024-38241

CVE-2024-38241 is a Windows kernel streaming service driver elevation of privilege vulnerability (local, required privileges: low; attack complexity: low; user interaction: none). The NVD entry assigns CVSS v3.1: 7.8 (HIGH) with impacts to confidentiality, integrity, and availability (all HIGH) i...

CVE-2024-38244

CVE-2024-38244 is a Windows Kernel Streaming Service Driver elevation-of-privilege flaw. The CVE is rated CVSSv3.1 base score 7.8 (HIGH) with LOCAL attack vector, LOW attack complexity, and LOW privileges required; exploitation grants total compromise of confidentiality, integrity, and availabili...

CVE-2025-21287

CVE-2025-21287 is a Windows Installer elevation of privilege vulnerability. The linked documents confirm this CVE affects the Windows Installer component in Windows OS, enabling a local attacker with low privileges and no user interaction to elevate privileges. Remediation is provided by Microsof...

CVE-2025-21378

Technical details about CVE-2025-21378 are not publicly available in the provided documents. The set includes only high-level summaries and advisories; monitor for updates from Microsoft and NVD for affected products, impact, and fixes.

CVE-2025-24073

CVE-2025-24073 affects the Windows DWM Core Library and stems from improper input validation, enabling a locally authorized attacker to elevate privileges. The vulnerability is described with a base CVSS v3.1 score of 7.8 (High) and local attack vector with low complexity, requiring low privilege...

CVE-2025-27738

CVE-2025-27738 affects Windows Resilient File System (ReFS). Description in NCSC advisory attributes an improper access control issue that could allow an authenticated attacker to disclose information over the network, with impact categorized as access to sensitive data. The NT/OS update guidance...

CVE-2025-32715

CVE-2025-32715 is a vulnerability in the Windows Remote Desktop Client described as an out-of-bounds read that can lead to information disclosure . The connected NCSC advisory lists CVSS v3.1/6.50 with an impact of Access to sensitive data . Exploitation details, affected product versions, and sp...

CVE-2022-35746

Technical details about CVE-2022-35746 are not provided in the supplied documents. No product/version/root-cause/impact are specified here; monitor for official updates from Microsoft/NVD to obtain concrete information and remediation.

CVE-2023-35314

Technical details for CVE-2023-35314 are not provided in the connected documents. The materials here only reiterate the vulnerability title. No affected products, root cause, or fixes are specified. Monitor for updates.

CVE-2023-35341

Technical details for CVE-2023-35341 are not publicly available in the provided documents. Monitor for updates from official sources (e.g., vendor advisories, CVE records) to obtain affected products, impact, and remediation information.

CVE-2024-38102

Technical details for CVE-2024-38102 are not provided in the Connected documents. Monitor for updates.

CVE-2024-38145

CVE-2024-38145 affects the Windows Layer-2 Bridge Network Driver. The available data shows a Denial-of-Service impact with CVSS v3.1 base score 7.5 (Network attack, Low attack complexity, No privileges, No user interaction). Root cause, affected software versions, and remediation are not provided...

CVE-2024-43535

CVE-2024-43535 is a Windows Kernel-Mode Driver Elevation of Privilege affecting Windows Kernel-Mode Drivers (tm.sys cited in public discussions). The CVE entry lists a HIGH base impact (Privilege escalation) with LOCAL access and HIGH confidentiality/integrity/availability impact. A GitHub repo i...

CVE-2025-21184

CVE-2025-21184 is an Elevation of Privilege issue affecting Windows Core Messaging. The connected AVLEONOV article identifies it as EoP in Windows Core Messaging and lists it among February Patch Tuesday CVEs. Provided documents do not include a vendor/product version, root cause, exploit details...

CVE-2025-24046

Technical details enabling exploitation of CVE-2025-24046 (Kernel Streaming Service Driver elevation) are not publicly provided in the connected documents. The initial entry states a use-after-free leading to local privilege elevation; no confirmed exploit vectors or patches are described here. M...

CVE-2025-27469

CVE-2025-27469 affects Windows LDAP (Lightweight Directory Access Protocol) and describes an uncontrolled resource consumption that enables an unauthenticated attacker to cause network-denied service. The issue is categorized as a Denial-of-Service via LDAP on the network. Microsoft has released ...

CVE-2025-47955

CVE-2025-47955 involves improper privilege management in Windows Remote Access Connection Manager, enabling local privilege escalation for an authorized attacker. CVSS 3.1 base 7.8 (HIGH): Local, low complexity, no user interaction, with high impact on confidentiality, integrity, and availability...

CVE-2023-35299

CVE-2023-35299 affects the Windows Common Log File System Driver and is an Elevation of Privilege vulnerability. CVSSv3.1 base score 7.8 (Local, Privilege Required: Low, User Interaction: None, Scope: Unchanged; Impact: Confidentiality/Integrity/Availability High). The connected sources (includin...

CVE-2023-36011

CVE-2023-36011 is a Windows Win32k elevation-of-privilege vulnerability. Affected: Windows Win32K component (kernel-related). Nature: local exploit with low attack complexity and no user interaction; enables total impact on confidentiality, integrity, and availability. CVSSv3.1 base score 7.8 (HI...

CVE-2024-35270

Technical details about CVE-2024-35270 (Windows iSCSI Service DoS) are not provided in the connected documents. Monitor for official advisories and Microsoft updates for affected products and remediation.

CVE-2024-37970

Technical details about CVE-2024-37970 are not provided in the connected documents. The initial description notes a Secure Boot security feature bypass, but no affected product/version/root cause/fix is disclosed here. Monitor for updates.

CVE-2024-37975

Technical details for CVE-2024-37975 are not provided in the connected documents. The available materials only label it as a Secure Boot bypass without product, vector, impact, or remediation specifics. Monitor for updates for publicly disclosed details.

CVE-2024-38237

CVE-2024-38237 is a local privilege-escalation in Windows Kernel Streaming WOW Thunk Service Driver. Affected component is a Windows kernel-mode driver used by streaming services; vulnerability exploited locally with low privileges and no user interaction, leading to elevated privileges and poten...

CVE-2024-38243

CVE-2024-38243 is a Windows Streaming Service elevation of privilege vulnerability. The connected NCSC entry classifies it as impacting Windows Streaming Service with the effect of obtaining elevated privileges, consistent with a local-exploit scenario (CVSS: Local, Privileges Required Low, User ...

CVE-2024-43514

Technical details about CVE-2024-43514 are not publicly provided in the connected documents; they reference fixes but do not describe root cause, vectors, or affected versions. Monitor for updates.

CVE-2025-21243

CVE-2025-21243 affects Windows Telephony Service. The vulnerability is a remote code execution flaw caused by input validation in Windows Telephony Server, enabling network-based exploitation with required user interaction and no privileges. The CVSS v3.1 base score is 8.8 (HIGH) with network acc...

CVE-2025-21252

Technical details about CVE-2025-21252 are not publicly available in the provided documents. Monitor for updates from Microsoft and NVD for affected products, impact, and remediation.

CVE-2025-21266

CVE-2025-21266 is a Windows Telephony Service remote code execution vulnerability. The linked data shows a network-exposed impact with CVSS v3.1 base score 8.8 (HIGH), requiring user interaction for exploitation and affecting confidentiality, integrity, and availability. Affected component is the...

CVE-2025-21374

CVE-2025-21374 affects the Windows Client-Side Caching (CSC) Service and is described as a local information-disclosure vulnerability. The CVSS 3.1 vector indicates Local attack vector, Low privileges required, no user interaction, with Confidentiality impact only; other impacts are not affected ...

CVE-2025-27472

CVE-2025-27472 corresponds to a Windows Mark of the Web (MOTW) security feature bypass. The initial description notes a protection mechanism failure that allows bypass over a network. Connected documents identify this CVE as an issue tracked by Microsoft with an official MSRC entry (MSRC CVE-2025...

CVE-2023-33168

CVE-2023-33168 is a Remote Procedure Call Runtime Denial of Service vulnerability. The connected documents provide only a generic description and CVSS metrics; they do not reveal affected product/vendor/component/versions, root cause, exploit details, or a fix. OpenVAS entries reference the CVE b...

CVE-2023-35309

MSMQ Remote Code Execution vulnerability CVE-2023-35309 is discussed in the connected AVLEONOV article as an MSMQ RCE requiring an attacker to send a malicious MSMQ packet to an MSMQ server. The article also suggests blocking TCP port 1801 as a mitigation and notes the vulnerability context among...

CVE-2024-38149

CVE-2024-38149 is a Windows BranchCache Denial of Service vulnerability. Documents indicate a network-exploitable issue (CVSS v3.1: 7.5, AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) affecting BranchCache components. Microsoft provides fixes via security updates (KB/MSRC guidance); no explicit root-cause ...

CVE-2024-38256

CVE-2024-38256 is a Windows kernel‑mode driver information disclosure vulnerability. The incident affects Windows kernel‑mode drivers and has a CVSSv3.1 base score of 5.5 (MEDIUM) with local attack vector, low attack complexity, and low privileges required; confidentiality impact is High, others ...

CVE-2024-49090

CVE-2024-49090 affects the Windows Common Log File System Driver. The connected sources indicate an Elevation of Privilege vulnerability in the CLFS driver that could allow a local attacker with low privileges and no user interaction to obtain increased rights (high impact across confidentiality,...

CVE-2025-21239

Technical details about CVE-2025-21239 (affected component, root cause, exploitability, affected products) are not publicly provided in the connected documents. Monitor for updates from Microsoft/NVD CVE entries for new details and fixes.

CVE-2025-21265

Technical details about CVE-2025-21265 are not provided in the supplied documents. Public information on affected products, root cause, and fixes is missing here. Monitor for updates from Microsoft and NVD for concrete vulnerability specifics.

CVE-2025-21282

Technical details about CVE-2025-21282 are not publicly provided in the supplied documents. No affected product/version or exploit information is disclosed here. Monitor for updates from official advisories and CVE/NVD entries.