CVE-2024-38112

CVE-2024-38112 Windows MSHTML Platform Spoofing is a Windows/MSHTML vulnerability exploited in the wild by the Void Banshee group. The issue involves spoofing UI within the MSHTML/IE rendering path, enabling code execution when a user opens a crafted .url payload that references an embedded MHTML...

CVE-2024-43451

CVE-2024-43451 is a Windows NTLMv2 hash disclosure spoofing vulnerability. Affected: Windows; root cause: NTLM hash leakage occurs when the shell processes .URL shortcuts, triggering NTLM authentication over SMB to an attacker-controlled server. Impact: attackers can obtain NTLMv2 hashes and perf...

CVE-2023-36571

CVE-2023-36571 is described as a Microsoft Message Queuing (MSMQ) Remote Code Execution vulnerability. The connected documents confirm MSMQ is the affected component and (from the NVD metrics) the CVSS v3.1 base score is 7.3 (HIGH) with LOCAL attack vector, LOW attack complexity, LOW privileges r...

CVE-2023-41765

Technical details about CVE-2023-41765 (affected products, root cause, impact, or fixes) are not provided in the supplied documents. Monitor for updates and additional disclosures to assess applicability and remediation.

CVE-2023-36701

Technical details for CVE-2023-36701 are not publicly available in the provided documents. Monitor for updates from authoritative sources.

CVE-2023-36718

CVE-2023-36718: Microsoft Virtual Trusted Platform Module Remote Code Execution Vulnerability. CVSS 3.1: Attack Vector LOCAL, Attack Complexity HIGH, Privileges Required LOW, User Interaction NONE, Scope CHANGED, with Confidentiality, Integrity, and Availability impacts rated HIGH. Exploitation s...

CVE-2023-36431

CVE-2023-36431 concerns Microsoft Message Queuing (MSMQ) with a Denial of Service impact. The connected CNVD/NVD entries identify MSMQ as the affected component and classify it as a DoS vulnerability, but do not provide concrete root-cause details, vulnerable versions, or remediation steps within...

CVE-2023-36570

Technical details for CVE-2023-36570 are not publicly available in the provided documents. Monitor for updates.

CVE-2025-33053

Summary of CVE-2025-33053 : A vulnerability in Windows WebDAV/Internet Shortcut handling allows remote code execution when a vulnerable host opens a crafted .url file that points to a WebDAV share. Exploitation relies on the WebClient service resolving UNC paths via WebDAV and may trigger arbitra...

CVE-2023-41774

CVE-2023-41774 describes a Remote Code Execution vulnerability in the Layer 2 Tunneling Protocol (L2TP) for Windows. The vulnerability is identified as a high-severity, network-exposed issue with no user interaction required. Public materials here do not provide explicit exploitation details, aff...

CVE-2023-36573

Technical details (affected products, vulnerable components, exploitability, and remediation) are not publicly provided in the connected documents. Monitor for updates from official CVE/NVD/MSRC sources to obtain concrete details and fixes.

CVE-2023-36731

CVE-2023-36731 is a Windows Win32k Elevation of Privilege vulnerability. The CVE entry appears in multiple Microsoft KBs (notably KB5031362) and is listed across OpenVAS checks, indicating it is addressed by Windows security updates in those advisories. The core detail in the provided documents i...

CVE-2023-36575

CVE-2023-36575 corresponds to a Microsoft Message Queuing (MSMQ) Remote Code Execution vulnerability. The NVD entry lists a CVSS v3.1 base score of 7.3 ( HIGH ), with a LOCAL attack vector, LOW privileges required, and USER INTERACTION NEEDED; all three impact metrics (confidentiality, integrity,...

CVE-2025-24983

CVE-2025-24983 is a local privilege-escalation vulnerability in the Windows Win32k/Win32 Kernel Subsystem (use-after-free). Exploitation enables an authorized attacker to elevate privileges to SYSTEM locally (AV:L, AC:H, PR:L, UI:N, S:U, C/H/I/A:H). The CVSS base metrics indicate high impact to c...

CVE-2023-36594

CVE-2023-36594 affects Windows via a vulnerability in the Windows Graphics Component that enables Elevation of Privilege. The CVSS v3.1 metrics indicate a Local attack vector, Low attack complexity, Low privileges required, and no user interaction, with Confidentiality, Integrity, and Availabilit...

CVE-2023-36710

CVE-2023-36710 is a Windows Media Foundation Core Remote Code Execution vulnerability. The connected sources describe a two-step chain: a WAV file processing flaw in Windows Media Foundation allows two out-of-bounds writes, which an attacker can trigger via a specially crafted WAV played as part ...

CVE-2023-41771

Technical details about CVE-2023-41771 are not provided in the supplied documents. No concrete product/vendor/version impact or remediation is disclosed here; monitor for updates from the referenced sources.

CVE-2023-41769

Technical details for CVE-2023-41769 are not publicly provided in the supplied documents. No affected products, exploit info, or remediation confirmed here. Monitor for official disclosures and vendor advisories for concrete impact and fixes.

CVE-2023-41766

Technical details for CVE-2023-41766 are not provided in the connected documents. Public information about affected components, root cause, impact, and fixes is not available here. Monitor for updates from official sources.

CVE-2023-41768

CVE-2023-41768 is a Windows Layer 2 Tunneling Protocol remote code execution vulnerability. The issue affects Microsoft Windows L2TP handling and is described as a high-severity, network-based flaw with no required user interaction. The connected sources identify Windows updates released in Oct 2...

CVE-2024-49112

CVE-2024-49112 affects Windows LDAP on Domain Controllers. Connected sources describe an integer-overflow flaw in the LDAP server that can allow unauthenticated remote code execution via crafted CLDAP/LDAP traffic, leading to arbitrary code execution and potential DoS. Exploitation may require lo...

CVE-2023-36743

Technical details about CVE-2023-36743 are not provided in the supplied connected documents. The set includes general references and vulnerability listings, but no affected products, root cause, impact, or fixes. Monitor for updates as more information becomes publicly available.

CVE-2023-38166

CVE-2023-38166 is a Windows Layer 2 Tunneling Protocol remote code execution vulnerability. The supplied data states a CVSS v3.1 base score of 8.1 (HIGH), with network attack vector, high attack complexity, no privileges required, no user interaction, and impact to confidentiality, integrity, and...

CVE-2023-41773

CVE-2023-41773 is described in the initial document as a Windows Layer 2 Tunneling Protocol Remote Code Execution vulnerability with high severity (CVSS v3.1: 8.1, network access, no user interaction). Connected documents corroborate that this is a Windows L2TP RCE issue; CNVD‑2023‑81881 and NVD ...

CVE-2023-36729

CVE-2023-36729 is a Local Elevation of Privilege vulnerability related to the Named Pipe File System. CVSS 3.1 base score 7.8 (High) with LOCAL attack vector, LOW privileges required, no user interaction, and implications for confidentiality, integrity, and availability all rated High. The availa...

CVE-2024-43583

CVE-2024-43583 is a Winlogon elevation of privilege vulnerability. Connected PoC details show an attacker with low local privileges can escalate to SYSTEM by abusing the Image File Execution Options (IFEO) registry hijack to replace a legitimate system process with a malicious payload. Affected W...

CVE-2023-36564

Technical details about CVE-2023-36564 are not publicly available in the provided documents. Monitor official advisories for updates on affected products, impact, and available fixes.

CVE-2023-36712

Technical details for CVE-2023-36712 are not publicly disclosed in the provided connected documents. Based on available records, no affected products, root cause, or remediation are specified here. Monitor for updates from official advisories.

CVE-2023-36578

CVE-2023-36578: Microsoft Message Queuing (MSMQ) Remote Code Execution vulnerability. The NVD entry confirms MSMQ is affected with a local exploit vector, requiring user interaction, and a CVSS v3.1 base score of 7.3 (HIGH) affecting confidentiality, integrity, and availability. The provided docu...

CVE-2025-29974

Technical details about CVE-2025-29974 are not publicly provided in the supplied documents. Monitor for updates from Microsoft and other security bulletins to obtain confirmed affected products, scope, and remediation.

CVE-2023-36713

The CVE-2023-36713 entry concerns a vulnerability in the Windows Common Log File System Driver that leads to Information Disclosure. According to the NVD entry, the issue has a CVSSv3.1 base score of 5.5 (Medium) with Confidentiality Impact High, and it is a Local, Low-Complexity attack requiring...

CVE-2023-41770

Technical details about CVE-2023-41770 are not provided in the supplied documents. No information on affected products, versions, root cause, impact, or fixes is available. Monitor for updates in the connected feeds.

CVE-2023-36438

Technical details about CVE-2023-36438 are not publicly provided in the connected documents. The OpenVAS entries reference this CVE among many Windows vulnerabilities but do not supply affected products, versions, root cause, or remediation specifics. Monitor for updates.

CVE-2023-36585

Technical details for CVE-2023-36585 are not publicly available in the provided documents. Monitor for updates in official advisories; no affected products, impact, vectors, or fixes can be confirmed from the supplied content.

CVE-2023-36776

Technical details for CVE-2023-36776 are not provided in the supplied documents. No product/version/root-cause/impact/fix details are publicly disclosed here. Monitor for updates from sources in Connected Documents (KBs/OS updates) for remediation.

CVE-2025-21420

CVE-2025-21420 is evidenced by PoCs showing a Disk Cleanup Tool (cleanmgr.exe) elevation via a DLL sideload approach. The GitHub PoCs demonstrate loading dokan1.dll/dokannp1.dll to trigger arbitrary code paths, with the exploit chain listing SetProcessMitigationPolicy (ProcessRedirectionTrustPoli...

CVE-2023-36579

Technical details about CVE-2023-36579 (MSMQ DoS) are not publicly provided in the supplied documents. Monitor for updates from official advisories; no affected products, exploitability, or remediation details are stated here.

CVE-2023-36724

CVE-2023-36724 corresponds to a Windows Power Management Service Information Disclosure vulnerability. Affected component: Windows Power Management Service. Root cause and impact: information disclosure with high confidentiality impact; attack vector LOCAL, low complexity, no user interaction req...

CVE-2023-36557

CVE-2023-36557 is identified as a PrintHTML API Remote Code Execution Vulnerability. The primary document describes it as a PrintHTML API RCE with CVSS v3.1 metrics (AV:L, AC:L, PR:N, UI:R, S:U, C:H, I:H, A:H) totaling a base score of 7.8 (HIGH). The exploitation field is listed as null in the in...

CVE-2023-36572

CVE-2023-36572 is the Microsoft Message Queuing (MSMQ) Remote Code Execution vulnerability. The CNVD entry explicitly notes a remote code execution flaw in MSMQ that an attacker could exploit to run arbitrary code on a targeted system. The MSMQ issue is corroborated by the NVD/NVD-derived descrip...

CVE-2023-36732

CVE-2023-36732 is a Win32k elevation-of-privilege vulnerability affecting Windows, with a local attack vector, low attack complexity, and low privileges required, and it has a high impact on confidentiality, integrity, and availability per CVSS 3.1 (7.8). The provided records identify the vulnera...

CVE-2024-30092

CVE-2024-30092 corresponds to a Windows Hyper-V remote code execution vulnerability. Connected sources corroborate a Hyper-V RCE issue affecting Windows Hyper-V with an entry showing 8.0 base-vector severity and adjacent attack vector; Microsoft has released updates to fix vulnerabilities in Wind...

CVE-2023-36726

Technical details about CVE-2023-36726 are not publicly provided in the connected documents. The items reference this CVE by ID but do not disclose affected product, root cause, impact, or remediation in the supplied sources.

CVE-2023-36598

CVE-2023-36598 concerns the Microsoft WDAC ODBC Driver with a remote code execution vulnerability. Affected component: WDAC ODBC Driver (Microsoft). Exploitation requires local access and user interaction, with a CVSS v3.1 base score of 7.8 (High); impact to confidentiality, integrity, and availa...

CVE-2023-36709

Technical details for CVE-2023-36709 (Microsoft AllJoyn API Denial of Service) are not publicly available in the provided connected documents. Monitor for updates and additional technical specifics in official advisories and vendor notices.

CVE-2023-36717

Technical details for CVE-2023-36717 are not publicly available in the provided documents. Monitor for updates from official advisories and vendor notices.

CVE-2025-21337

CVE-2025-21337 is a Windows vulnerability categorized as an elevation of privileges (impact: obtaining elevated privileges) with a low base score (CVSS v3.1: 3.3) and local attack vector. The connected advisory from NCSC-2025-0047 aligns this CVE to a Windows component issue with a CVSS ~3.3 and ...

CVE-2023-20588

CVE-2023-20588 is a division-by-zero vulnerability on some AMD Zen1 CPUs that could cause speculative data leakage and affect confidentiality. The connected Amazon Linux 2 advisory (ALAS2KERNEL-5.4-2025-116) confirms the Linux kernel fix for kernel-5.4 series (e.g., 5.4.254-169.358.amzn2.aarch64/...

CVE-2024-43461

CVE-2024-43461 — Windows MSHTML Platform Spoofing Vulnerability : A UI misrepresentation in MSHTML that can be used to spoof a web page. Affected component: Windows MSHTML Platform. Underlying issue is a UI spoofing flaw; CVSSv3.1 score 8.8 ( NETWORK, LOW, NONE, UI: REQUIRED; Confidentiality/Inte...

CVE-2023-1017

CVE-2023-1017 describes an out-of-bounds write in TPM2.0/Module Library CryptParameterDecryption. A local attacker could crash the TPM or gain arbitrary code execution in the TPM context. Affected scope includes TPM2.0 implementations via libtpms in VM TPM support and TPM modules. Public details ...