CVE-2026-62889

CVE-2026-62889 is a Windows SSTP remote code execution vulnerability caused by a double free in the SSTP implementation. The available descriptions from NVD and CVE records state that an unauthenticated attacker could exploit this over a network to execute arbitrary code. The CVSS 3.1 base score ...

CVE-2023-21755

CVE-2023-21755 is a Windows Kernel Elevation of Privilege vulnerability described as a local, high-severity issue (CVSS 7.8) with low attack complexity and no user interaction required. The provided documents confirm the vulnerability name and impact characteristics but do not specify the exact r...

CVE-2023-21820

Technical details (affected product/version, root cause, impact, or fix) are not publicly available in the provided documents. Monitor for updates.

CVE-2023-29346

Technical details about CVE-2023-29346 are not publicly available in the provided documents. No affected product/version/impact is specified here. Monitor for updates in the connected sources.

CVE-2023-29373

Technical details about CVE-2023-29373 are not publicly provided in the supplied documents; monitor for updates from Microsoft and vulnerability feeds.

CVE-2023-33164

CVE-2023-33164 is described as a Remote Procedure Call Runtime Denial of Service vulnerability. The provided data show CVSS v3.1 base score 6.5 (Medium) with network attack vector, low attack complexity, privilege requirement Low, no user interaction, and availability impact High. The connected d...

CVE-2023-35376

Technical details for CVE-2023-35376 are not publicly available in the provided documents; monitor for updates.

CVE-2023-36912

Technical details about CVE-2023-36912 are not publicly available in the provided documents. Monitor for updates.

CVE-2024-30025

CVE-2024-30025 affects the Windows Common Log File System Driver. The Windows/KB guidance mappings list CVE-2024-30025 with a CVSS v3.1 base score of 7.8 (LOCAL attack, LOW complexity, LOW privileges required, HIGH confidentiality/integrity/availability impact) and categorize it as an privilege e...

CVE-2024-30091

Technical details are not publicly provided in the supplied documents. No affected product, vulnerable component, version, root cause, impact, or fix information is included beyond the CVE ID and the generic description.

CVE-2024-38198

CVE-2024-38198 is a Windows Print Spooler elevation-of-privilege vulnerability. The connected data confirms the issue affects Windows Print Spooler Components and is categorized with a HIGH base severity (CVSS 3.1: 7.5) and impact as obtaining elevated privileges. The vulnerability is documented ...

CVE-2025-21286

CVE-2025-21286 is a Windows Telephony Service Remote Code Execution vulnerability. The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) yields a high impact with network attack vector and user interaction required. Connected sources confirm Microsoft fixes are available: KB5050009 (OS Build ...

CVE-2025-24988

The CVE-2025-24988 entry affects the Windows USB Video Driver, with an out-of-bounds read vulnerability that enables an authorized attacker with physical access to elevate privileges. Connected sources confirm this CVE name and context and indicate Microsoft has released updates to fix Windows US...

CVE-2025-27487

CVE-2025-27487 is a heap-based buffer overflow in Windows Remote Desktop Client that allows an authenticated attacker to execute code over the network (CVSSv3.1: 8.0 HIGH; AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H). Connected sources confirm this vulnerability and reference remote desktop RCE updates. ...

CVE-2025-48817

Technical details about CVE-2025-48817 are not publicly provided in the supplied documents. No vendor/product/versions or mitigations are disclosed here. Monitor official advisories for updates.

CVE-2022-35749

Technical details about CVE-2022-35749 are not provided in the supplied documents. Available references confirm the CVE title and severity, but no affected product/version or root cause are detailed here. Monitor for official disclosures and updates.

CVE-2023-21801

CVE-2023-21801 affects Microsoft PostScript and PCL6 Class Printer Driver and is described as a Remote Code Execution vulnerability. Connected documents confirm the vulnerability exists in these printer drivers but do not provide concrete details on affected product versions, root cause specifics...

CVE-2023-29365

Technical details about CVE-2023-29365 are not publicly available in the provided documents. Monitor official sources (Microsoft MSRC/NVD) for updates on affected products, impact, and fixes.

CVE-2024-30013

Technical details for CVE-2024-30013 are not provided in the supplied documents. No information about affected product/version, root cause, impact, or fixes is available here. Monitor for updates from official advisories to obtain concrete details.

CVE-2024-30016

CVE-2024-30016 affects Windows Cryptographic Services . The vulnerability is described as an information disclosure with impact to confidentiality (high) and is listed in sources as a Windows component issue with a CVSS v3.1 base score of 5.5 (attack vector: local; privileges required: low; user ...

CVE-2024-38115

Technical details for CVE-2024-38115 are not publicly available in the provided documents. Monitor for updates.

CVE-2024-38134

Technical details about CVE-2024-38134 (Kernel Streaming WOW Thunk Service Driver Elevation of Privilege) are not provided in the included documents. Monitor for updates from Microsoft and CVE databases for affected products, remediation, and known exploits.

CVE-2024-38223

Technical details for CVE-2024-38223 are not publicly available in the provided documents. No information on affected products, root cause, or fixes is supplied here. Monitor sources for updates.

CVE-2024-43554

CVE-2024-43554 corresponds to a Windows Kernel-Mode Driver Information Disclosure vulnerability with an impact described as Access to sensitive data (CVSS ~5.5). Affected component is a kernel-mode driver; root cause details are not fully disclosed in the provided documents. Microsoft has issued ...

CVE-2025-21376

CVE-2025-21376 is described as a Windows LDAP remote code execution vulnerability. The connected AVLEONOV article lists CVE-2025-21376 under Windows LDAP RCE but provides no vendor/product/versions, root cause, exploit details, or patch information in the supplied documents. Therefore, no concret...

CVE-2025-26637

CVE-2025-26637 affects Windows BitLocker, described as a protection mechanism failure that allows bypass of security with a physical attack. The CVSSv3.1 vector (AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) indicates a physical-attack feasible exploit with high confidentiality, integrity, and availabilit...

CVE-2025-33059

CVE-2025-33059 is an information-disclosure vulnerability in Windows Storage Management Provider caused by an out-of-bounds read. An authorized, low-privilege attacker can disclose information locally (CONFIDENTIALITY: HIGH; VECT: LOCAL; IMPACT: NONE on integrity/availability). Affected Microsoft...

CVE-2026-62792

Summary: CVE-2026-62792 is a stack-based buffer overflow in the Windows TCP/IP stack that enables a remote attacker to execute code over the network. The provided documents identify the affected component as Windows TCP/IP and confirm a RCE impact, with the exploit delivered remotely via network ...

CVE-2022-35750

Technical details about CVE-2022-35750 (affected product/component, versions, root cause, exploitability) are not publicly available in the provided Connected Documents. Monitor for updates and new disclosures in authoritative sources.

CVE-2022-41094

Technical details about CVE-2022-41094 are not publicly provided in the connected documents. The records show a Windows Hyper-V Elevation of Privilege entry but do not specify affected products/versions or root cause. Monitor for updates.

CVE-2023-32008

CVE-2023-32008: Windows Resilient File System (ReFS) Remote Code Execution vulnerability. Affects Windows with ReFS; exploitation is LOCAL with user interaction and no privileges required. CVSS v3.1 base score 7.8 (HIGH); impact on confidentiality, integrity, and availability is HIGH. Remediation...

CVE-2023-36006

The CVE-2023-36006 entry concerns Microsoft WDAC OLE DB provider for SQL Server and is a Remote Code Execution vulnerability. The OpenVAS and NCSC records confirm the affected component as the WDAC OLE DB provider for SQL Server and classify the impact as high, with CVSS3.1 base metrics indicatin...

CVE-2024-30014

CVE-2024-30014 is a Windows RRAS (Routing and Remote Access Service) Remote Code Execution vulnerability. Connected sources confirm the RRAS entry with CVSS v3.1 base score 7.5 (HIGH): Network attack vector, high impact on confidentiality, integrity and availability, with user interaction require...

CVE-2024-30023

CVE-2024-30023 affects the Windows Routing and Remote Access Service (RRAS). The RRAS remote code execution vulnerability is listed under Windows RRAS with CVSS details indicating Network attack vector, high impact to confidentiality, integrity, and availability, and requiring user interaction. T...

CVE-2024-30095

Technical details about CVE-2024-30095 (affected products, root cause, exploitability, or fixes) are not provided in the connected documents. Monitor for updates.

CVE-2024-30099

Technical details for CVE-2024-30099 are not present in the provided documents. No affected products, root cause, exploit information, or remediation are stated here. Please monitor for updates from Microsoft and related security advisories to obtain confirmed details.

CVE-2024-38030

Technical details for CVE-2024-38030 are not publicly disclosed in the provided documents. No affected products, root cause, impact, or fixes are specified. Monitor for updates as more information becomes available.

CVE-2024-38127

CVE-2024-38127 is a Windows Hyper-V Elevation of Privilege vulnerability. The initial description identifies it as a Windows Hyper-V EoP with local attack vector, low privileges required, no user interaction, and an impact of high confidentiality, integrity, and availability. The CVSS 3.1 vector ...

CVE-2024-49118

CVE-2024-49118 is listed in connected sources as a Windows component vulnerability affecting Microsoft Message Queuing (MSMQ). The entry is documented with an ability to execute arbitrary code (impact: 8.10; attack vector: network) and is categorized under Windows Message Queuing in the CVE lists...

CVE-2025-24992

CVE-2025-24992 is a local, information-disclosure vulnerability in Windows NTFS caused by a buffer over-read. The CVE is tied to Windows NTFS and is described as allowing an unauthorized local disclosure of information. CVSS 3.1 base metrics indicate a Local attack vector, Low attack complexity, ...

CVE-2026-61363

CVE-2026-61363 describes a heap-based buffer overflow in the Remote Desktop Client that enables remote code execution over the network. Affected component is the Remote Desktop Client; root cause is a heap overflow allowing arbitrary code execution on a vulnerable host. The NVD entries confirm th...

CVE-2022-35743

CVE-2022-35743 is a Microsoft Windows MSDT Remote Code Execution vulnerability. Documents indicate an exploitation path that is Local with Low Attack Complexity and requires User Interaction, yielding high confidentiality, integrity, and availability impact. CVSS 3.1 base score 7.8 (HIGH). No exp...

CVE-2023-21691

Technical details about CVE-2023-21691 are not provided in the supplied documents. Public information here only reiterates the vulnerability title; no affected products, root cause, impact, or remediation details are included. Monitor for updates.

CVE-2023-21693

Technical details about CVE-2023-21693 are not publicly provided in the supplied connected documents. No specifics on affected products, root cause, or remediation are included here. Monitor for updates from official sources.

CVE-2023-21749

CVE-2023-21749: Windows Kernel local privilege escalation stemming from registry SID table poisoning, described in CIRCL as “Windows Kernel registry SID table poisoning leading to bad locking and other issues.” The connected docs do not provide detailed root-cause analysis beyond that label, nor ...

CVE-2023-24926

CVE-2023-24926: Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability. Affects the PostScript and PCL6 class printer driver; underlying impact is remote code execution over the network. The CVSS 3.1 base score is 8.8 (High) with high confidentiality, integrity, an...

CVE-2023-28272

Technical details for CVE-2023-28272 are not provided in the connected documents. Public exploitability, affected components, and remediation are not disclosed here; monitor official advisories for updates.

CVE-2023-29371

Technical details about CVE-2023-29371 are not publicly available in the provided documents. Monitor for updates from vendors and security bulletins.

CVE-2024-38060

CVE-2024-38060 is a Windows Imaging Component remote code execution vulnerability. Public documents indicate it is addressed via the July 9, 2024 security updates (e.g., KBs in the July 2024 cycle). The connected MSKB entries reference security updates that address related components (e.g., RADIU...

CVE-2024-38180

CVE-2024-38180 relates to a security feature bypass in Windows SmartScreen. Affected product: Windows SmartScreen (Windows). The CVE is described as a Security Feature Bypass with high impact (C/H/I/A) and a network attack vector requiring user interaction. The initial documents do not provide de...