CVE-2024-38149

CVE-2024-38149 is a Windows BranchCache Denial of Service vulnerability. Documents indicate a network-exploitable issue (CVSS v3.1: 7.5, AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) affecting BranchCache components. Microsoft provides fixes via security updates (KB/MSRC guidance); no explicit root-cause ...

CVE-2024-38256

CVE-2024-38256 is a Windows kernel‑mode driver information disclosure vulnerability. The incident affects Windows kernel‑mode drivers and has a CVSSv3.1 base score of 5.5 (MEDIUM) with local attack vector, low attack complexity, and low privileges required; confidentiality impact is High, others ...

CVE-2024-49121

CVE-2024-49121 is an LDAP Denial-of-Service vulnerability in Windows LDAP (Domain Controller). The connected advisory confirms the LDAP issue as a DoS risk and notes that Microsoft has released fixes via updates; applying the relevant Windows security updates is the recommended remediation. MITRE...

CVE-2025-21265

Technical details about CVE-2025-21265 are not provided in the supplied documents. Public information on affected products, root cause, and fixes is missing here. Monitor for updates from Microsoft and NVD for concrete vulnerability specifics.

CVE-2025-21266

CVE-2025-21266 is a Windows Telephony Service remote code execution vulnerability. The linked data shows a network-exposed impact with CVSS v3.1 base score 8.8 (HIGH), requiring user interaction for exploitation and affecting confidentiality, integrity, and availability. Affected component is the...

CVE-2025-59254

Summary: CVE-2025-59254 is a heap-based buffer overflow in the Windows DWM Core Library that enables a locally authenticated attacker to escalate privileges. Affected component: DWM Core Library on Windows. Impact: Local privilege escalation with high potential impact; CVSS 3.1 score 7.8 (LOCAL, ...

CVE-2024-38070

Technical details about CVE-2024-38070 are not publicly provided in the supplied documents. Please monitor for updates from Microsoft and NVD; current entries reference WLDP but do not disclose exploit paths or affected products.

CVE-2024-38238

CVE-2024-38238 is listed in the Windows Streaming Service category as a local elevation-of-privileges vulnerability affecting the Windows kernel streaming service. The connected documents corroborate an elevated-privilege risk for this CVE within Windows components, without providing full exploit...

CVE-2024-38239

Microsoft Windows Kerberos CVE-2024-38239 is an Elevation of Privilege in the Windows Kerberos component. The connected Windows vulnerability listing assigns CVSS v3.1 base score 7.2 (HIGH) with network attack vector, low attack complexity, and privileges required: HIGH; impact is CONfidentiality...

CVE-2024-38245

CVE-2024-38245 is a Windows Kernel Streaming Service Driver elevation-of-privilege flaw. A local attacker could exploit it with low privileges and no user interaction to gain SYSTEM-level access; CVSS v3.1/3.1 vector indicates local access, low complexity, with high impact to confidentiality, int...

CVE-2024-38249

CVE-2024-38249 is a Windows Graphics Component elevation-of-privilege vulnerability. The connected sources confirm this CVE affects Windows Graphics Component and carries a CVSS v3.1 base score of 7.8 (HIGH), with local attack vector, low attack complexity, and privileges required: LOW; impact to...

CVE-2024-43563

CVE-2024-43563 affects Windows Ancillary Function Driver for WinSock. The vulnerability is an Elevation of Privilege in the driver, with local attack vector, low privileges required, no user interaction, and high impact to confidentiality, integrity, and availability. Connected sources corroborat...

CVE-2025-21214

Technical details about CVE-2025-21214 (Windows BitLocker information disclosure) are not publicly provided in the supplied connected documents. The sources reference updates but do not specify affected versions, root cause, exploitability, or mitigation beyond patch availability. Monitor for upd...

CVE-2025-21238

CVE-2025-21238 affects the Windows Telephony Service and is a remote code execution vulnerability. The initial data lists CVSS 3.1 with NETWORK attack vector, LOW attack complexity, no privileges required, and user interaction required; impact is high on confidentiality, integrity, and availabili...

CVE-2025-21243

CVE-2025-21243 affects Windows Telephony Service. The vulnerability is a remote code execution flaw caused by input validation in Windows Telephony Server, enabling network-based exploitation with required user interaction and no privileges. The CVSS v3.1 base score is 8.8 (HIGH) with network acc...

CVE-2025-21256

Technical details for CVE-2025-21256 are not provided in the connected documents. Public information here is limited to general Windows updates references; no product, exploit, or root-cause specifics are disclosed. Monitor for updates and additional disclosures.

CVE-2025-21282

Technical details about CVE-2025-21282 are not publicly provided in the supplied documents. No affected product/version or exploit information is disclosed here. Monitor for updates from official advisories and CVE/NVD entries.

CVE-2025-26634

CVE-2025-26634 describes a heap-based buffer overflow in Windows Core Messaging that could allow an unauthenticated? not; authorized attacker to elevate privileges over a network. The CVE entry lists a CVSS v3.1 base score of 7.5 (HIGH) with NETWORK attack vector, HIGH impact on confidentiality/i...

CVE-2024-43643

CVE-2024-43643 is a Windows USB Video Class System Driver elevation-of-privilege vulnerability. The vulnerability pertains to the Windows USB Video Driver component and is categorized with CVSSv3.1 vektor: physical attack, low complexity, no privileges required, no user interaction, and impacts t...

CVE-2025-21239

Technical details about CVE-2025-21239 (affected component, root cause, exploitability, affected products) are not publicly provided in the connected documents. Monitor for updates from Microsoft/NVD CVE entries for new details and fixes.

CVE-2025-21246

CVE-2025-21246 is a Windows Telephony Service remote code execution vulnerability with a CVSS v3.1 base score of 8.8 (HIGH) and network attack vector. The provided connected documents confirm this CVE and indicate Microsoft has released updates to address it (e.g., KB5050009 and related January 2...

CVE-2025-26673

CVE-2025-26673 is Windows LDAP (LDAP) Denial-of-Service. The connected data confirms that the LDAP service can be abused to exhaust resources and disable service over the network (DoS). Remediation, where provided, points to Microsoft security updates; update Windows to the April 2025 bundle (KB5...

CVE-2025-29969

Technical details about CVE-2025-29969 (affected product/version, root cause, exploitability, and remediation) are not provided in the supplied documents; monitor for updates.

CVE-2025-49744

CVE-2025-49744 — Microsoft Graphics Component heap-based buffer overflow can allow an authorized, local attacker to escalate privileges. Connected sources confirm this as an elevation-of-privilege vulnerability in the Microsoft Graphics Component (a graphics driver component). The provided docume...

CVE-2024-30079

Technical details about CVE-2024-30079 are not provided in the connected documents. No affected product/version, root cause, or remediation details are disclosed here. Monitor for updates.

CVE-2024-43570

CVE-2024-43570 is a Windows Kernel Elevation of Privilege vulnerability. Connected sources confirm affected software as Windows kernel components and indicate fixes released in October 2024 through MSRC advisories and OS updates (KB5044280/KB5044281/KB5044285) covering multiple Windows builds, wi...

CVE-2024-43620

CVE-2024-43620 corresponds to a Windows Telephony Service remote code execution vulnerability with a high impact (base CVSS 8.8; network access; user interaction required). In the connected documents, it is listed under Windows Telephony Service with an impact described as Execute arbitrary code ...

CVE-2025-21289

CVE-2025-21289 is a denial-of-service vulnerability in Microsoft Message Queuing (MSMQ). Public details in the provided documents show a network‑accessible issue with a CVSS 3.1 base score of 7.5 (HIGH) where no user interaction is required and no privileges are needed to trigger the impact of de...

CVE-2025-21301

CVE-2025-21301 is a Windows Geolocation Service Information Disclosure vulnerability with CVSS 3.1 base score 6.5 (Network attack, Low attack complexity, Privileges required: Low, User interaction: None). The vulnerability is disclosed as affecting Windows Geolocation Service and is addressed by ...

CVE-2025-21320

CVE-2025-21320 is a Windows kernel memory information disclosure vulnerability. The CVE is documented as a local, memory-information leakage issue with low attack complexity and low privileges required, potentially exposing high-confidentiality data. Public details provided in connected sources a...

CVE-2025-21336

Technical details about CVE-2025-21336 are not publicly provided in the supplied documents. The materials reference a Windows cryptographic information disclosure vulnerability but do not specify affected products/versions or fixes.

CVE-2023-35325

Technical details for CVE-2023-35325 are not publicly available in the provided documents. Monitor for updates from official advisories; no concrete affected products, root cause, impact, or fixes are specified here.

CVE-2024-43501

CVE-2024-43501 affects the Windows Common Log File System Driver and is a local elevation-of-privilege vulnerability. Triggers could allow an attacker with low privileges to escalate to obtain high-level privileges, with the issue categorized as high severity (CVSS v3.1 base score 7.8). The CVE i...

CVE-2024-43506

CVE-2024-43506 refers to a Microsoft Windows BranchCache Denial-of-Service vulnerability. The available OpenVAS/NVD context indicates the issue is a network-exploitable DoS (CVSS 3.1: 7.5) affecting Windows BranchCache, with no user interaction required and no privilege escalation per the given d...

CVE-2024-43622

CVE-2024-43622 is a Windows Telephony Service remote code execution vulnerability. According to NCSC guidance, it is associated with an 8.8/High severity score (CVSS 3.1: AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H), indicating network access without authentication is sufficient and user interaction is r...

CVE-2025-21223

Technical details about CVE-2025-21223 are not provided in the supplied connected documents. The initial entry notes a Windows Telephony Service RCE, but no vendor/version/impact specifics are disclosed here. Monitor for future updates.

CVE-2025-21284

Technical details about CVE-2025-21284 are not provided in the connected documents. Public references exist (NVD, CVE listings) but there are no specifics in these sources about affected products, root cause, impact details, or fixes; monitor for updates.

CVE-2025-21288

Technical details about CVE-2025-21288 are not publicly provided in the supplied connected documents; the record notes a Windows COM Server information disclosure vulnerability but lacks specifics on affected products/versions or mitigations. Monitor for official disclosures.

CVE-2025-49691

CVE-2025-49691 is a heap-based buffer overflow in Windows Media that could allow an adjacent-network attacker to execute code. CVSSv3.1 base score 8.0 (AV: Adjacent, AC: Low, PR: None, UI: Required, S: Unchanged, C/I/A: High). The connected documents indicate this affects Windows Media and has co...

CVE-2024-43565

CVE-2024-43565 corresponds to a Windows NAT Denial of Service vulnerability with a CVSS v3.1 base score of 7.5 (NETWORK attack, LOW attack complexity, NO privileges, NO user interaction). The issue is tied to the Windows NAT component and is listed among multiple Microsoft Windows vulnerabilities...

CVE-2025-27468

Technical details about CVE-2025-27468 (affected product, root cause, and patch status) are not publicly provided in the supplied Connected documents. Monitor for official updates from MSRC/Microsoft for specifics.

CVE-2025-29842

Technical details (affected product, root cause, impact, fixes) for CVE-2025-29842 are not provided in the supplied connected documents. Monitor for updates from official advisories.

CVE-2025-32722

CVE-2025-32722 causes improper access control in the Windows Storage Port Driver . The vulnerability could allow an authorized local attacker to disclose information, per the CVE description. CVSSv3.1: Local attack, Low privileges required, no user interaction, Confidentiality impact High, others...

CVE-2025-33067

CVE-2025-33067 — Windows Kernel local privilege escalation due to improper privilege management. Affects the Windows Kernel; attacker can gain elevated rights locally with no user interaction. CVSSv3.1 base score 8.4 (AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). Connected sources confirm the impact as l...

CVE-2025-54109

CVE-2025-54109 affects Windows Defender Firewall Service. The vulnerability is described as a type confusion that can enable local privilege escalation by an authorized attacker. Connected sources (NCSC advisory) list CVE-2025-54109 with a base score of 6.7 (Medium) and attribute the impact to lo...

CVE-2024-38119

CVE-2024-38119 affects Windows Network Address Translation (NAT). The vulnerability allows Remote Code Execution with high impact (cctx: code execution, data/privilege impact) when an attacker on an adjacent network exploits NAT processing. CVSS 3.1 vector: AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H. Mi...

CVE-2025-21201

CVE-2025-21201 is cited by NCSC as a Windows Telephony Server remote code execution vulnerability with CVSS-like severity of 8.8 (high) andImpact described as executing random code. The connected NCSC advisory confirms the vulnerability exists in Windows Telephony Server and provides an explicit ...

CVE-2025-21240

CVE-2025-21240 is a Windows Telephony Service remote code execution vulnerability. The CIRCL sighting data lists Windows Telephony Service with CVSS 8.80 (High) and impact: Execute random code, consistent with the CVSS vector in the Initial Description (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H). Conne...

CVE-2025-21272

CVE-2025-21272 affects Windows COM, specifically the COM Server component, described as an Information Disclosure vulnerability. The issue is exploitable locally with low privileges and low attack complexity, with confidentiality impact rated High. Connected sources corroborate Windows COM as aff...

CVE-2025-21305

CVE-2025-21305 is documented as a Windows Telephony Service Remote Code Execution vulnerability. The connected CIRCL source explicitly lists CVE-2025-21305 under Windows Telephony Service with an impact described as Execute random code, indicating a code-execution vector in the Telephony service....