2253 matches found
CVE-2024-49104
The connected NCSC advisory (EUVD/NCSC) lists CVE-2024-49104 under Windows Routing and Remote Access Service (RRAS) with a high impact: Execution of arbitrary code (CVSS 8.80). The RRAS entry is described as vulnerable to arbitrary code execution, but the document does not provide root cause spec...
CVE-2025-21254
CVE-2025-21254 is associated with Internet Connection Sharing (ICS) in Windows and is described as a Denial-of-Service vulnerability. The primary documented impact is availability disruption (A) with low attack complexity and adjacent-attack vector, no authentication or user interaction required,...
CVE-2025-21280
CVE-2025-21280 is a Windows Virtual Trusted Platform Module Denial of Service vulnerability. Connected documents identify the affected component as the Windows Virtual TPM and note an impact on availability. The NCSC advisory lists a CVSS v3.1 base score of 5.5 (LOCAL attack, LOW privileges requi...
CVE-2025-21349
CVE-2025-21349 is described by the connected NCSC advisory as a Windows vulnerability in Remote Desktop Services: a tampering flaw in the Windows Remote Desktop Configuration Service. The entry lists a CVSS v3.1 base score of 6.8 (Medium), with network access required (AV:N, UI:R, S:U) and high c...
CVE-2025-21373
Technical details for CVE-2025-21373 are not provided in the supplied documents. Monitor for updates from Microsoft and the KB/MSRC references for affected product, impact and fixes.
CVE-2025-24995
CVE-2025-24995 is a heap-based buffer overflow in the Kernel Streaming WOW Thunk Service Driver that allows a locally authorized attacker to elevate privileges. The NVD entry confirms the vulnerable component and impact (local privilege elevation; high severity). Public references point to Micros...
CVE-2025-27473
CVE-2025-27473 affects Windows HTTP.sys. Description in the connected sources confirms an uncontrolled resource consumption condition that enables a network-based Denial of Service, exploitable by an unauthorized attacker. The vulnerability impact is denial of service over the network; no exploit...
CVE-2026-21525
CVE-2026-21525 is a Windows Remote Access Connection Manager (RasMan) Denial of Service vulnerability caused by a NULL pointer dereference. An unauthenticated, locally-initiated attacker can trigger a crash of RasMan, impacting availability. Connected sources confirm this as a local DoS issue, wi...
CVE-2023-24906
CVE-2023-24906 concerns a vulnerability in the Microsoft PostScript and PCL6 Class Printer Driver that can lead to information disclosure. The affected component is the PostScript and PCL6 Class Printer Driver; root cause and detailed technical steps are not elaborated in the provided documents b...
CVE-2023-32053
Technical details about CVE-2023-32053 (affected components, root cause, versions, exploit status) are not publicly provided in the supplied documents. Monitor for updates in connected sources to obtain concrete information.
CVE-2024-30008
CVE-2024-30008 is a Windows DWM Core Library information-disclosure vulnerability. Affected component: Windows DWM Core Library. Root cause: information disclosure (no specifics provided). Impact per sources: confidentiality impact high; CVSS 3.1 base 5.5 (LOCAL, low attack complexity and privile...
CVE-2024-38085
Technical details about CVE-2024-38085 are not provided in the supplied documents; no affected products, root cause, or mitigations are disclosed here. Monitor for updates from Microsoft and related CVE references.
CVE-2024-43628
According to the NCSC advisory, CVE-2024-43628 is a Windows Telephony Service Remote Code Execution vulnerability with a CVSS v3.1 base score of 8.8 (HIGH) and an impact described as Execute random code. The vulnerability is listed under Windows Telephony Service with a remediation path through M...
CVE-2024-49079
Technical details for CVE-2024-49079 are not provided in the supplied documents. Monitor for updates from Microsoft, NVD, CVE List, and other official sources as disclosures evolve.
CVE-2025-21200
CVE-2025-21200 is listed by ENISA/NCSC as a vulnerability affecting the Windows Telephony Service with high impact and the ability to execute arbitrary code. The linked material specifies a CVSSv3.1 base score of 8.8 (Network attack, No user privileges, User interaction required; High confidentia...
CVE-2025-21215
Technical details about CVE-2025-21215 are not provided in the connected documents. Public information here is limited to the vulnerability title and references; monitor for updates from Microsoft/NVD.
CVE-2025-21217
CVE-2025-21217 is a Windows NTLM spoofing vulnerability with a CVSS v3.1 base score of 6.5 (Network, low attack complexity, no privileges required, user interaction required; Confidentiality impact: High). Exploitation details, affected products/versions, and a fixed patch are not provided in the...
CVE-2025-21269
CVE-2025-21269 is described as a Windows HTML Platforms Security Feature Bypass vulnerability. Connected CNVD/NCSC/KB entries reference a Windows HTML Platforms security feature bypass without detailed exploit steps; the Initial metrics show CVSS 3.1 (4.3, Network, UI: Required). Exploitation spe...
CVE-2025-21316
Technical details for CVE-2025-21316 are not publicly available in the provided documents. Monitor for updates from Microsoft and threat intelligence sources.
CVE-2025-26670
CVE-2025-26670 is a Windows LDAP use-after-free vulnerability that enables remote code execution over the network. The available connected sources confirm the issue affects Windows LDAP and describe the underlying cause as a use-after-free condition, with the impact explicitly stated as remote co...
CVE-2026-54128
CVE-2026-54128 is a Windows DHCP Client use-after-free vulnerability that could allow an unauthenticated local attacker to execute code. The issue, described in the NVD entry and echoed by TALOS, affects the Windows DHCP Client component and is known to have been exploited in the wild (per CIRCL ...
CVE-2026-58640
CVE-2026-58640 is a heap-based buffer overflow in Windows NTFS that enables an authorized local attacker to execute code. The vulnerability is tied to Windows NTFS logic and has a CVSS v3.1 score of 7.3 (HIGH) with local access required and user interaction. Affected component: Windows NTFS; root...
CVE-2022-35758
Technical details about CVE-2022-35758 (affected product/component, root cause, impact, or remediation) are not publicly provided in the supplied connected documents. Monitor for updates from official sources.
CVE-2023-32041
CVE-2023-32041 concerns a Windows Update Orchestrator Service information disclosure vulnerability. The provided documents do not include concrete technical details (affected products/versions, root cause, exploitability, or fixes). Monitor for updates.
CVE-2023-35357
CVE-2023-35357 is a Windows Kernel local privilege escalation stemming from registry hive memory corruption. The material shows how an attacker can leverage an out-of-bounds hive cell index to manipulate the CMHIVE/HHIVE, potentially reading/writing kernel memory via hacks like the registry value...
CVE-2024-38048
Technical details for CVE-2024-38048 are not publicly provided in the connected documents. Please monitor for updates; the supplied sources do not include affected products, root cause, impact, or remediation specifics.
CVE-2024-38143
CVE-2024-38143 is a Windows WLAN AutoConfig Service elevation of privilege vulnerability. The CVSS 3.1 vector indicates an attacker must have physical access (AV:P) and exploit with high complexity, no user interaction, and local access (PR:N, UI:N). The vulnerability could yield elevated privile...
CVE-2025-21228
CVE-2025-21228 is a Windows Digital Media Elevation of Privilege vulnerability. The initial and related documents identify the issue as a Windows Digital Media component risk that could allow an attacker to obtain elevated privileges (Impact: high; Privileges Required: low; Attack Vector: physica...
CVE-2025-21247
CVE-2025-21247 is a MapUrlToZone security bypass in Windows. Description: Improper resolution of path equivalence allows a network attacker to bypass a security feature. CVSS: 3.1, Network attack, Low complexity, No privileges required, User interaction required, Confidentiality impact Low; Integ...
CVE-2025-21281
CVE-2025-21281 is a Microsoft Windows COM elevation-of-privilege vulnerability. The CVE entry maps to Windows COM with a high CVSS v3.1 score (7.8, LOW_PRIVILEGES, LOCAL vector; no user interaction; confidentiality/integrity/availability impact: HIGH). The connected documents identify the affecte...
CVE-2025-21319
CVE-2025-21319 is a Windows kernel memory information disclosure vulnerability. The issue is tracked in multiple vulnerabilities and discussed by Microsoft, with a CVSSv3.1 base score of 5.5 (Local attack, Low attack complexity, Low privileges required, no user interaction, High confidentiality i...
CVE-2026-49181
CVE-2026-49181 is a Windows DHCP Client vulnerability described as an integer underflow (wrap or wraparound) that allows an unauthenticated attacker to elevate privileges over a network. The CVE is corroborated by multiple sources in Connected documents, including NVD and MSRC updates, and ENISA/...
CVE-2023-21701
CVE-2023-21701 is described as a Microsoft PEAP Denial of Service vulnerability with a CVSS v3.1 base score of 7.5 (Network attack, no user interaction, high impact to availability). The provided documents do not include concrete exploit details, affected product versions, root cause, or a confir...
CVE-2023-21797
Technical details about CVE-2023-21797 are not publicly provided in the supplied documents; no affected product/version or exploit information is present here. Monitor for updates from official sources.
CVE-2023-35312
The CVE-2023-35312 entry concerns Microsoft VOLSNAP.SYS with local access privilege escalation. Based on the provided metrics, the vulnerability supports LOCAL attack vector, requiring LOW privileges and no user interaction, with HIGH impact on confidentiality, integrity, and availability (CVSS 3...
CVE-2023-35318
Technical details about CVE-2023-35318 are not provided in the supplied documents; no affected products, root cause, or remediation are disclosed here. Monitor for updates.
CVE-2023-35324
Technical details about CVE-2023-35324 are not publicly available in the provided documents; no affected products, root cause, or remediation are specified here. Monitor for updates.
CVE-2023-35336
CVE-2023-35336 affects the Windows MSHTML Platform and is described as a Security Feature Bypass vulnerability. Public details in the provided documents indicate the issue targets the MSHTML component and is classified with a MEDIUM base severity (CVSS v3.1: 5.4 overall; CPU: NETWORK attack vecto...
CVE-2023-36871
Technical details for CVE-2023-36871 are not publicly available in the provided connected documents. No vendor/product/version specifics, exploit information, or remediation are included here. Monitor for updates from official sources.
CVE-2024-38022
Technical details about CVE-2024-38022 are not provided in the connected documents; no affected products, root cause, or fixes are described here. Monitor for updates from official sources.
CVE-2024-38043
Technical details for CVE-2024-38043 are not publicly provided in the supplied documents. No affected product/version or root cause is specified here. Monitor for updates from Microsoft and CVE repositories.
CVE-2024-38053
Technical details for CVE-2024-38053 are not provided in the supplied documents; no affected products, root cause, impact, or remediation are specified here. Monitor for updates.
CVE-2024-38066
Technical details about CVE-2024-38066 (affected product, root cause, impact, or fix) are not publicly available in the provided connected documents. Monitor for updates from official advisories and vendor pages.
CVE-2024-38130
Technical details for CVE-2024-38130 are not publicly available in the provided documents. No vendor/dependent specifics (product version, root cause, impact, or fixes) are given here. Monitor for official disclosures and updated advisories.
CVE-2024-49088
CVE-2024-49088 affects the Windows Common Log File System Driver and is described as a local elevation of privilege vulnerability. The CVSS 3.1 vector (LOCAL, LOW complexity, LOW privileges required) with a base score of 7.8 indicates a high-risk, local-attack scenario resulting in high impact to...
CVE-2025-21231
CVE-2025-21231 documents describe a Denial-of-Service vulnerability in the Windows IP Helper component. The CVE entry lists a network-based attack vector with low attack complexity and no privileges required, resulting in availability impact. Connected records corroborate IP Helper as the affecte...
CVE-2025-26687
CVE-2025-26687 is a use-after-free in Windows Win32K - GRFX that enables a network-based privilege escalation. The affected component is the Win32K GRFX graphics subsystem; the underlying issue is a use-after-free in that path, leading to total impact (CVE-2025-26687 shows a base score of 7.5/10 ...
CVE-2023-21697
Technical details about CVE-2023-21697 are not publicly available in the provided documents. Monitor for updates from Microsoft/NVD and Vulners for affected products, exploit information, and remediation.