2253 matches found
CVE-2022-35759
Technical details for CVE-2022-35759 (affected product, root cause, impact, and fix) are not provided in the connected documents. Monitor for updates.
CVE-2023-35340
Microsoft Windows CVE-2023-35340 affects the CNG Key Isolation Service and is a local elevation-of-privilege vulnerability. It has a CVSS v3.1 base score of 7.8 (AV:L, AC:H, PR:L, UI:N, S:C, C:H, I:H, A:H). The provided documents identify the affected component and impact but do not include explo...
CVE-2023-35358
CVE-2023-35358 refers to a Windows kernel registry vulnerability where an unexpected -1 cell index was observed in KCB.KeyCell, indicating that the code assumed at least one key with an allocated node in the key node stack, but differed when using layered/differencing hives and transactions. The ...
CVE-2023-35361
CVE-2023-35361 is a Windows Kernel Elevation of Privilege vulnerability. The provided documents identify the flaw as a local-privilege escalation with high impact (confidentiality, integrity, and availability) but do not supply concrete technical details, affected versions, root cause specifics, ...
CVE-2024-30067
Technical details for CVE-2024-30067 are not provided in the supplied documents. Monitor official disclosures for affected products, impact, and remediation guidance.
CVE-2024-37989
Technical details and affected products for CVE-2024-37989 are not publicly provided in the supplied documents. Monitor for vendor advisories and CVE repositories for updates.
CVE-2024-38065
Technical details about CVE-2024-38065 (affected product/component/impact) are not provided in the supplied documents. No concrete exploit or remediation information is available here. Monitor for official disclosures and updated advisories.
CVE-2024-38242
CVE-2024-38242: Kernel Streaming Service Driver Elevation of Privilege. A local attacker with low privileges can exploit this to gain SYSTEM-level access without user interaction (per CVSS 3.1: AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H; base 7.8). Microsoft has released updates to fix the issue (e.g., ...
CVE-2025-21407
According to the provided documents, CVE-2025-21407 is associated with Windows Telephony Service and is listed with a high impact (CVSS 8.80) involving the execution of arbitrary code. The NCSC advisory explicitly catalogs CVE-2025-21407 under Windows Telephony Service with an impact of executing...
CVE-2026-20856
CVE-2026-20856 is a Windows Server Update Services (WSUS) remote code execution vulnerability caused by improper input validation. Exploitation is possible over a network with no user interaction; CVSSv3.1 base score 8.1 (High). Public references note this is addressed by January 2026 security up...
CVE-2026-21530
CVE-2026-21530 : A double-free vulnerability in Windows Rich Text Edit is described as enabling an authorized attacker to perform local privilege escalation. The connected documents confirm the affected component and the local-privilege-elevation impact but do not provide exploit details, specifi...
CVE-2026-32183
CVE-2026-32183 is a Windows Snipping Tool vulnerability that allows local execution of arbitrary code due to improper neutralization of special elements in a command (command injection). Affected component: Snipping Tool on Windows. Impact per sources: Executing (remote) code with high confidenti...
CVE-2023-35304
CVE-2023-35304 is a Windows Kernel Elevation of Privilege vulnerability. The NVD entry provides CVSS v3.1 metrics (LOCAL exploit, LOW complexity, LOW privileges required) with high impact on confidentiality, integrity, and availability (base score 7.8). Multiple OpenVAS entries and KB articles re...
CVE-2024-30069
Technical details for CVE-2024-30069 are not provided in the connected documents. Public information about affected products, root cause, exploitation, and remediation is not present here. Monitor official sources for updates.
CVE-2024-37973
Technical details about CVE-2024-37973 are not provided in the connected documents. The supplied materials reference related items (e.g., CVE-2024-38058) but do not disclose affected products, root cause, impact, or fixes for CVE-2024-37973. Monitor for updates.
CVE-2024-43621
CVE-2024-43621 affects Windows Telephony Service (a Windows OS component). The vulnerability is a Remote Code Execution flaw in the Windows Telephony Service, with CVSS 3.1 base metrics indicating Network attack vector, no privileges required, and user interaction needed; impact is High/High/High...
CVE-2025-21202
CVE-2025-21202 is a Windows Recovery Environment Agent elevation-of-privilege vulnerability. The consolidated sources show an impact of obtaining elevated privileges (CVE mapped under Windows Recovery Environment Agent) with a CVSS-like score around 6.1 (Medium) and physical access as a considera...
CVE-2025-21290
The CVE-2025-21290 vulnerability affects Microsoft Message Queuing (MSMQ) and is a Denial of Service issue exploitable over the network. The provided data show a CVSS v3.1 base score of 7.5 (HIGH) with attack vector Network and no user interaction required. The root cause detail is not explicitly...
CVE-2025-21296
CVE-2025-21296 corresponds to a BranchCache remote code execution vulnerability in Microsoft BranchCache. Connected sources describe BranchCache as a WAN optimization feature and indicate a vulnerability that could allow remote code execution. The CVE entry itself lists a 7.5 CVSSv3.1 score with ...
CVE-2025-21371
CVE-2025-21371 is a remote code execution vulnerability in Windows Telephony Service. Connected documents identify the affected component as Windows Telephony Service and annotate the CVE with a high severity (CVSS v3.1: 8.8, NETWORK attack, no privileges required, user interaction required, C/H/...
CVE-2025-24069
CVE-2025-24069 is an out-of-bounds read in the Windows Storage Management Provider that permits an authorized local attacker to disclose information. Affected component: Windows Storage Management Provider. CVSS: Local attack, Low privileges required, no user interaction, Confidentiality impact H...
CVE-2025-32715
CVE-2025-32715 is a vulnerability in the Windows Remote Desktop Client described as an out-of-bounds read that can lead to information disclosure . The connected NCSC advisory lists CVSS v3.1/6.50 with an impact of Access to sensitive data . Exploitation details, affected product versions, and sp...
CVE-2026-50447
CVE-2026-50447 is a Windows Message Queuing (MSMQ) remote-code-execution vulnerability. The issue is a heap-based buffer overflow in MSMQ that could allow an unauthenticated attacker to execute code over the network. Public sources indicate high-severity impact (CVSS v3.1: 9.8, network attack, no...
CVE-2023-32034
Technical details for CVE-2023-32034 are not publicly available in the provided documents. No specifics on affected products, versions, root cause, impact, or mitigations are included here. Monitor for updates.
CVE-2023-35338
Technical details for CVE-2023-35338 (affected components, root cause, exploits, or fixes) are not provided in the connected documents. Monitor for updates from official sources.
CVE-2024-38010
Technical details (affected product, root cause, impact, fixes) for CVE-2024-38010 are not provided in the supplied documents. Monitor for updates from official advisories.
CVE-2024-38025
Technical details about CVE-2024-38025 are not provided in the supplied connected documents; no vendor/product/version/root-cause/impact/fix details are visible. Monitor for updates in case additional information becomes available.
CVE-2024-38034
Public technical details for CVE-2024-38034 are not provided in the connected documents. The sources reference related updates and other CVEs but do not specify affected products, versions, root cause, or remediation for this CVE. Monitor for updates.
CVE-2024-38146
CVE-2024-38146 affects the Windows Layer-2 Bridge Network Driver. The CVSS 3.1 base score is 7.5 (HIGH) with Network attack, low complexity, no privileges, no user interaction, and high availability impact. Descriptions in connected OpenVAS items corroborate a DoS impact on Windows Layer-2 Bridge...
CVE-2024-43518
CVE-2024-43518 is associated with Windows Telephony Server, categorized (in the ENISA/NCSC context) as a high-severity remote code execution vulnerability with an 8.80 CVSS score and impact of executing arbitrary code. The connected advisory set indicates Microsoft has issued updates to fix Windo...
CVE-2025-21299
Technical details about CVE-2025-21299 (affected products, root cause, exploit methods, and remediation) are not provided in the given documents. Monitor for updates from Microsoft MSRC/MSKB entries for this CVE.
CVE-2025-26665
CVE-2025-26665 affects Windows UPnP Device Host (upnphost.dll). The issue is described as sensitive data stored in memory that is not properly locked, enabling a local attacker with authorized access to obtain increased entitlements (privilege escalation). Connected sources corroborate the impact...
CVE-2026-40378
CVE-2026-40378 affects Windows Local Security Authority Subsystem Service (LSASS). A memory allocation with an excessive size value can allow an unauthenticated attacker to cause a network-based denial of service. The CVSSv3.1 base score is 7.5 (HIGH). No exploitation details are provided in the ...
CVE-2026-62728
The vulnerability CVE-2026-62728 affects Windows systems via the Common Log File System (CLFS) Driver. It is a time-of-check time-of-use (TOCTOU) race condition that allows an authorized, local attacker to elevate privileges. The CVSSv3.1 metrics indicate a Local attack, High impact on confidenti...
CVE-2023-35339
CVE-2023-35339 is a Windows CryptoAPI Denial of Service vulnerability with a CVSS v3.1 base score of 7.5 (NETWORK, LOW attack complexity, NONE privileges, NONE user interaction, HIGH availability impact). The provided records do not specify affected versions, root cause details, exploitation stat...
CVE-2023-35641
CVE-2023-35641 is an Internet Connection Sharing (ICS) remote code execution in Windows. Connected sources confirm affected component (Windows ICS) and classify the impact as remote code execution with the attacker needing adjacent network access, no user interaction, and no privileges required (...
CVE-2024-37974
Technical details about CVE-2024-37974 are not provided in the given documents. The connected items mention related issues (e.g., BitLocker / Secure Boot references) but do not reveal affected products, root cause, or remediation for this CVE. Monitor for updates.
CVE-2024-38046
CVE-2024-38046 is described as a local privilege-escalation vulnerability in PowerShell. The primary public documentation (NVD/NCSC) confirms a local attacker with low privileges could elevate privileges on affected Windows components, with a CVSS v3.1 base score of 7.8 (LOCAL, Privileges Require...
CVE-2024-38051
Technical details about CVE-2024-38051 (Windows Graphics Component RCE) are not provided in the connected documents. Monitor for updates from official advisories to obtain affected products, root cause, and remediation information.
CVE-2024-43449
CVE-2024-43449 is a Windows USB Video Class System Driver elevation-of-privilege vulnerability. The CVE entry lists a CVSSv3.1 base score of 6.8 (Medium) with attack vector as Physical, no user interaction required, and an impact profile of High on confidentiality, integrity, and availability. Mi...
CVE-2025-21294
CVE-2025-21294 refers to a Microsoft Digest Authentication Remote Code Execution vulnerability. Public documents indicate it affects Windows components and has high impact (RCE). Connected sources confirm updates exist to fix the vulnerabilities and recommend installing January 2025 security upda...
CVE-2025-21347
CVE-2025-21347 is linked to the Windows Update Stack and is described in the connected NCSC advisory as a Denial-of-Service vulnerability. The CVE entry in that document assigns a base CVSS-like severity of 6.0 and notes that Microsoft has updates available to fix the issue. The mode of the vulne...
CVE-2025-26688
CVE-2025-26688 is a stack-based buffer overflow in Microsoft Virtual Hard Disk that enables a locally authenticated attacker to elevate privileges. The vulnerability is labeled as “Obtaining Increased Entitlements” (CVSS v3.1 base score 7.8). Connected sources corroborate the affected product (Mi...
CVE-2026-32073
CVE-2026-32073 refers to a Local Privilege Escalation in the Windows Ancillary Function Driver for WinSock. The advisory notes a local attack vector with high impact (C:H/I:H/A:H) and a low-privilege, no-user-interaction requirement, under CVSS 3.1: base score 7.0, attack vector Local, attack com...
CVE-2023-32045
Technical details about CVE-2023-32045 are not provided in the supplied documents. For updates and potential remediation, monitor official advisories (MSRC) and NVD entries.
CVE-2023-33173
Technical details about CVE-2023-33173 are not provided in the supplied documents. No specific affected products, root causes, or fixes are disclosed here. Monitor for updates from official advisories.
CVE-2024-37988
Technical details for CVE-2024-37988 are not publicly available in the provided documents. No information on affected products, root cause, impact, or fixes is present here. Monitor for updates from the referenced sources and connected advisories.
CVE-2024-38056
Technical details about CVE-2024-38056 are not publicly provided in the connected documents. The entry is listed, but no affected products, root cause, impact, or fixes are described here.