CVE-2023-32042

Technical details about CVE-2023-32042 are not publicly provided in the supplied documents. No affected products, root cause, or remediation are specified here. Monitor for updates as connected sources do not elaborate.

CVE-2023-33174

Technical details about CVE-2023-33174 are not publicly provided in the connected documents. The materials mention a Windows cryptographic information disclosure vulnerability but do not specify affected components, root cause, versions, impact, or fixes. Monitor for updates.

CVE-2023-35306

CVE-2023-35306 is a Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure vulnerability. Available data identifies the affected component as the Microsoft PostScript and PCL6 Class Printer Driver, with impact described as information disclosure and a CVSS v3.1 base score of 5....

CVE-2023-35642

CVE-2023-35642 corresponds to a Denial-of-Service vulnerability in Windows’ Internet Connection Sharing (ICS) feature. The NVD entry explicitly labels this as an ICS DoS issue, with CVSS 3.1 indicating Adjacent attack vector, no privileges required, no user interaction, and high impact on availab...

CVE-2024-38064

Technical details for CVE-2024-38064 are not provided in the supplied documents. Public details (affected product/impact) are not disclosed here. Monitor for updates from vendors and vulnerability feeds to obtain concrete root cause, affected components, and fixes.

CVE-2024-38116

Technical details for CVE-2024-38116 are not publicly available in the provided documents; monitor for updates.

CVE-2024-49088

CVE-2024-49088 affects the Windows Common Log File System Driver and is described as a local elevation of privilege vulnerability. The CVSS 3.1 vector (LOCAL, LOW complexity, LOW privileges required) with a base score of 7.8 indicates a high-risk, local-attack scenario resulting in high impact to...

CVE-2025-21319

CVE-2025-21319 is a Windows kernel memory information disclosure vulnerability. The issue is tracked in multiple vulnerabilities and discussed by Microsoft, with a CVSSv3.1 base score of 5.5 (Local attack, Low attack complexity, Low privileges required, no user interaction, High confidentiality i...

CVE-2025-24995

CVE-2025-24995 is a heap-based buffer overflow in the Kernel Streaming WOW Thunk Service Driver that allows a locally authorized attacker to elevate privileges. The NVD entry confirms the vulnerable component and impact (local privilege elevation; high severity). Public references point to Micros...

CVE-2023-33169

Technical details about CVE-2023-33169 are not publicly provided in the supplied documents. Monitor for updates from official sources; no product/vendor/version/impact information or fixes are included here.

CVE-2023-35308

Technical details for CVE-2023-35308 are not publicly available in the provided documents. Monitor for updates from official sources to learn affected products, impact, and mitigations.

CVE-2024-37984

Technical details for CVE-2024-37984 are not provided in the connected documents. No affected products, root cause, impact, or remediation are specified here. Monitor for updates from Microsoft and other sources for further information.

CVE-2024-38017

Technical details about CVE-2024-38017 are not provided in the supplied documents. The dataset includes related Windows KBs and other CVEs, but no explicit affected product, root cause, impact, or fix for CVE-2024-38017.

CVE-2024-38122

Technical details about CVE-2024-38122 are not provided in the connected documents. The initial entry only labels an LSA server information disclosure without concrete details on affected products, versions, impact, or fixes; monitor for updates.

CVE-2024-43556

CVE-2024-43556 is a Windows Graphics Component elevation-of-privilege vulnerability. Public sources confirm it affects the Windows Graphics Component and can yield elevated privileges (base CVSS v3.1 7.8). The issue is listed as a local, privilege-escalation risk; exploitation details are not pro...

CVE-2025-21228

CVE-2025-21228 is a Windows Digital Media Elevation of Privilege vulnerability. The initial and related documents identify the issue as a Windows Digital Media component risk that could allow an attacker to obtain elevated privileges (Impact: high; Privileges Required: low; Attack Vector: physica...

CVE-2025-21281

CVE-2025-21281 is a Microsoft Windows COM elevation-of-privilege vulnerability. The CVE entry maps to Windows COM with a high CVSS v3.1 score (7.8, LOW_PRIVILEGES, LOCAL vector; no user interaction; confidentiality/integrity/availability impact: HIGH). The connected documents identify the affecte...

CVE-2025-24987

CVE-2025-24987 is a Windows USB Video Driver vulnerability described as an out-of-bounds read that can allow an authorized attacker to elevate privileges with physical access. The issue affects the Windows USB Video Driver component and is associated with high impact on confidentiality, integrity...

CVE-2025-27473

CVE-2025-27473 affects Windows HTTP.sys. Description in the connected sources confirms an uncontrolled resource consumption condition that enables a network-based Denial of Service, exploitable by an unauthorized attacker. The vulnerability impact is denial of service over the network; no exploit...

CVE-2022-35759

Technical details for CVE-2022-35759 (affected product, root cause, impact, and fix) are not provided in the connected documents. Monitor for updates.

CVE-2023-33167

Technical details about CVE-2023-33167 are not publicly provided in the supplied documents. No explicit affected products, root cause, or fixes are described here. Monitor for updates.

CVE-2024-38011

Technical details about CVE-2024-38011 (affected products, vulnerable components, root cause, impact, fixes) are not provided in the supplied documents. Monitor for updates from the vendor and security advisories for confirmation and remediation guidance.

CVE-2024-38027

Technical details about CVE-2024-38027 (affected software, root cause, impact, or fixes) are not provided in the supplied documents. No public disclosure details available here. Monitor for updates.

CVE-2024-38242

CVE-2024-38242: Kernel Streaming Service Driver Elevation of Privilege. A local attacker with low privileges can exploit this to gain SYSTEM-level access without user interaction (per CVSS 3.1: AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H; base 7.8). Microsoft has released updates to fix the issue (e.g., ...

CVE-2024-43509

CVE-2024-43509 is listed in connected advisories as affecting the Windows Graphics Component with an elevation of privilege impact. The ENISA/NCSC entries corroborate this CVE under Windows Graphics Component and assign an impact/score (7.80) and local, privilege‑required conditions. Concrete det...

CVE-2025-21233

CVE-2025-21233 is a Windows Telephony Service Remote Code Execution vulnerability. External exploit is mapped to a network attack with user interaction required, high impact (CVSS v3.1: 8.8; Privileges Required: None; User Interaction: Required; Confidentiality/Integrity/Availability: High). Conn...

CVE-2025-26672

CVE-2025-26672 is described as a buffer over-read in Windows Routing and Remote Access Service (RRAS) that allows an unauthenticated attacker to disclose information over the network. Connected sources corroborate that RRAS is the affected component and frame the impact as an information disclosu...

CVE-2023-32035

Technical details for CVE-2023-32035 (affected product/component/version/root cause/mitigation) are not provided in the connected documents. The initial description only notes a Remote Procedure Call Runtime Denial of Service vulnerability without concrete details. Monitor updates from official s...

CVE-2023-35360

Technical details are not publicly available in the provided documents. No specific affected product/versions, root cause, impact, or fix is described here; monitor for updates.

CVE-2024-30068

Technical details about CVE-2024-30068 are not provided in the supplied documents; no affected products, root cause, or fixes are disclosed here. Monitor for updates.

CVE-2024-37971

Technical details about CVE-2024-37971 are not publicly available in the provided connected documents. Monitor for updates from Microsoft and NVD for affected products, impact, and remediation; current sources do not specify affected components or fixes within this dataset.

CVE-2024-37989

Technical details and affected products for CVE-2024-37989 are not publicly provided in the supplied documents. Monitor for vendor advisories and CVE repositories for updates.

CVE-2024-38019

Technical details about CVE-2024-38019 are not provided in the supplied documents. Public sources in Connected documents do not specify affected products, root cause, exploit status or remediation. Monitor for official advisories and Microsoft update notes for confirmation.

CVE-2024-38034

Public technical details for CVE-2024-38034 are not provided in the connected documents. The sources reference related updates and other CVEs but do not specify affected products, versions, root cause, or remediation for this CVE. Monitor for updates.

CVE-2024-38048

Technical details for CVE-2024-38048 are not publicly provided in the connected documents. Please monitor for updates; the supplied sources do not include affected products, root cause, impact, or remediation specifics.

CVE-2024-38061

Technical details for CVE-2024-38061 (affected products, root cause, impact, fixes) are not provided in the supplied documents. No remediation or exploitation specifics are available here. Monitor for updates.

CVE-2025-21244

Technical details for CVE-2025-21244 are not provided in the connected documents. They reference a Windows Telephony Service RCE but do not disclose affected versions, root cause, exploit methods, or fixes. Monitor official advisories for updates.

CVE-2025-21375

CVE-2025-21375 is a local elevation-of-privilege in the Windows Kernel Streaming WOW Thunk Service Driver. The vulnerability is identified as a Privilege Escalation with CVSS v3.1 base score 7.8 (HIGH), requiring LOCAL access, LOW attack complexity, and no user interaction; the impact is high to ...

CVE-2025-24051

Technical details about CVE-2025-24051 are not publicly provided in the connected documents. The initial entry notes a heap overflow in RRAS enabling remote code execution, but no affected versions, exploit specifics, or mitigations are present here. Monitor for updates.

CVE-2025-24056

CVE-2025-24056 is a heap-based buffer overflow in the Windows Telephony Server that allows a network-based attacker to execute arbitrary code on affected systems. The issue is described as remote code execution with network access (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) and a base score of 8.8 (HIG...

CVE-2025-32707

CVE-2025-32707 is a localprivilege-escalation vulnerability in the Windows NTFS subsystem caused by an out-of-bounds read. The NCSC vulnerability listing confirms Windows NTFS involvement and classifies the impact as elevated privileges, with a CVSS v3.1 base score of 7.8 (HIGH) and a local attac...

CVE-2022-35747

Technical details for CVE-2022-35747 are not provided in the connected documents. No affected products, root cause, impacts, or fixes are specified beyond the generic description. Monitor for updates for public disclosure and remediation guidance.

CVE-2023-32034

Technical details for CVE-2023-32034 are not publicly available in the provided documents. No specifics on affected products, versions, root cause, impact, or mitigations are included here. Monitor for updates.

CVE-2023-35340

Microsoft Windows CVE-2023-35340 affects the CNG Key Isolation Service and is a local elevation-of-privilege vulnerability. It has a CVSS v3.1 base score of 7.8 (AV:L, AC:H, PR:L, UI:N, S:C, C:H, I:H, A:H). The provided documents identify the affected component and impact but do not include explo...

CVE-2023-35641

CVE-2023-35641 is an Internet Connection Sharing (ICS) remote code execution in Windows. Connected sources confirm affected component (Windows ICS) and classify the impact as remote code execution with the attacker needing adjacent network access, no user interaction, and no privileges required (...

CVE-2024-30069

Technical details for CVE-2024-30069 are not provided in the connected documents. Public information about affected products, root cause, exploitation, and remediation is not present here. Monitor official sources for updates.

CVE-2024-38013

Technical details about CVE-2024-38013 are not disclosed in the provided connected documents. The CVE entry exists (Windows Server Backup elevation of privilege), but no affected product versions, root cause, exploitation, or remediation are described here. Monitor for updates.

CVE-2024-38057

Technical details about CVE-2024-38057 (affected product/version, root cause, exploitability, and fix) are not provided in the connected documents. Monitor for updates from vendor/security advisories.

CVE-2025-21236

CVE-2025-21236 is a Windows Telephony Service remote code execution vulnerability. The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) indicates network-based access with low complexity, requiring user interaction, and with high impact across confidentiality, integrity, and availability. Th...

CVE-2025-21237

CVE-2025-21237 is a Windows Telephony Service Remote Code Execution vulnerability. Exploitation could allow remote code execution via the Telephony Service; CVSS v3.1 base score 8.8 (HIGH) with network access, user interaction required. Affected products are Windows components where Telephony Ser...