CVE-2025-33053

Summary of CVE-2025-33053 : A vulnerability in Windows WebDAV/Internet Shortcut handling allows remote code execution when a vulnerable host opens a crafted .url file that points to a WebDAV share. Exploitation relies on the WebClient service resolving UNC paths via WebDAV and may trigger arbitra...

CVE-2024-21340

Technical details for CVE-2024-21340 are not provided in the supplied documents. Monitor for updates.

CVE-2023-38159

Technical details for CVE-2023-38159 are not provided in the connected documents. Public details (affected software, impact, and mitigations) should be consulted from the NVD/Microsoft advisory.

CVE-2024-43451

CVE-2024-43451 is a Windows NTLMv2 hash disclosure spoofing vulnerability. Affected: Windows; root cause: NTLM hash leakage occurs when the shell processes .URL shortcuts, triggering NTLM authentication over SMB to an attacker-controlled server. Impact: attackers can obtain NTLMv2 hashes and perf...

CVE-2023-36602

The CVE-2023-36602 entry maps to a Windows TCP/IP Denial of Service vulnerability with CVSS v3.1 base score 7.5. IBM’s Security Bulletin notes that Windows TCP/IP DoS affects IBM Cloud Pak System Software Suite 2.3.3.0–2.3.3.6 (Intel iFix1), with remediation by upgrading to Cloud Pak System v2.3....

CVE-2023-36702

CVE-2023-36702 affects Microsoft DirectMusic. Based on the CVSS 3.1 vector, the vulnerability is a LOCAL, low-complexity exploit that requires user interaction and yields HIGH impact to confidentiality, integrity, and availability. The provided documents identify the affected component only as Di...

CVE-2023-36722

Technical details (affected product/versions, root cause, exploitability, or fix) for CVE-2023-36722 are not provided in the supplied connected documents; monitor for updates.

CVE-2024-43461

CVE-2024-43461 — Windows MSHTML Platform Spoofing Vulnerability : A UI misrepresentation in MSHTML that can be used to spoof a web page. Affected component: Windows MSHTML Platform. Underlying issue is a UI spoofing flaw; CVSSv3.1 score 8.8 ( NETWORK, LOW, NONE, UI: REQUIRED; Confidentiality/Inte...

CVE-2023-36711

Technical details about CVE-2023-36711 are not publicly provided in the supplied documents. Monitor for official advisories for affected products, impact, and fixes.

CVE-2024-43583

CVE-2024-43583 is a Winlogon elevation of privilege vulnerability. Connected PoC details show an attacker with low local privileges can escalate to SYSTEM by abusing the Image File Execution Options (IFEO) registry hijack to replace a legitimate system process with a malicious payload. Affected W...

CVE-2026-50661

CVE-2026-50661 is a Windows BitLocker security feature bypass vulnerability. The available documents describe a protection-mechanism failure that could allow a physically present attacker to bypass BitLocker protections and access encrypted data. Public materials confirm the issue is triggered by...

CVE-2026-21510

CVE-2026-21510 is a Windows Shell security feature bypass vulnerability (Protection Mechanism Failure) that can allow remote code execution by bypassing SmartScreen prompts and shell warnings. Affected component: Windows Shell (explorer.exe) and related UI elements. Exploitation requires social e...

CVE-2023-1017

CVE-2023-1017 describes an out-of-bounds write in TPM2.0/Module Library CryptParameterDecryption. A local attacker could crash the TPM or gain arbitrary code execution in the TPM context. Affected scope includes TPM2.0 implementations via libtpms in VM TPM support and TPM modules. Public details ...

CVE-2024-20666

CVE-2024-20666 is a BitLocker security feature bypass related to the Windows Recovery Environment (WinRE). The connected MSRC/updates data confirm a BitLocker bypass vulnerability and note a Microsoft security update to mitigate it (KBs associated with January 2024 security updates, including Win...

CVE-2023-36589

The CVE-2023-36589 entry corresponds to a Microsoft Message Queuing (MSMQ) Remote Code Execution vulnerability. Public records in connected documents confirm MSMQ is the affected component, with a local attack vector and user interaction required. The CVSS 3.1 base metrics (AV:L, AC:L, PR:L, UI:R...

CVE-2026-47291

The CVE-2026-47291 entry describes an integer overflow/ wraparound in Windows HTTP.sys that enables a remote attacker to execute code over the network. Affected software component: Windows HTTP.sys. Root cause: integer overflow/wraparound in the HTTP.sys processing path. Impact: unauthenticated n...

CVE-2023-36431

CVE-2023-36431 concerns Microsoft Message Queuing (MSMQ) with a Denial of Service impact. The connected CNVD/NVD entries identify MSMQ as the affected component and classify it as a DoS vulnerability, but do not provide concrete root-cause details, vulnerable versions, or remediation steps within...

CVE-2023-36573

Technical details (affected products, vulnerable components, exploitability, and remediation) are not publicly provided in the connected documents. Monitor for updates from official CVE/NVD/MSRC sources to obtain concrete details and fixes.

CVE-2023-36574

CVE-2023-36574 affects Microsoft Message Queuing (MSMQ) with a local, user-interaction–dependent remote code execution vulnerability (CVSS v3.1: AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H; base 7.3). Exploitation status and remediation details are not provided in the supplied connected documents.

CVE-2023-36571

CVE-2023-36571 is described as a Microsoft Message Queuing (MSMQ) Remote Code Execution vulnerability. The connected documents confirm MSMQ is the affected component and (from the NVD metrics) the CVSS v3.1 base score is 7.3 (HIGH) with LOCAL attack vector, LOW attack complexity, LOW privileges r...

CVE-2023-36731

CVE-2023-36731 is a Windows Win32k Elevation of Privilege vulnerability. The CVE entry appears in multiple Microsoft KBs (notably KB5031362) and is listed across OpenVAS checks, indicating it is addressed by Windows security updates in those advisories. The core detail in the provided documents i...

CVE-2023-41774

CVE-2023-41774 describes a Remote Code Execution vulnerability in the Layer 2 Tunneling Protocol (L2TP) for Windows. The vulnerability is identified as a high-severity, network-exposed issue with no user interaction required. Public materials here do not provide explicit exploitation details, aff...

CVE-2023-36701

Technical details for CVE-2023-36701 are not publicly available in the provided documents. Monitor for updates from authoritative sources.

CVE-2023-41765

Technical details about CVE-2023-41765 (affected products, root cause, impact, or fixes) are not provided in the supplied documents. Monitor for updates and additional disclosures to assess applicability and remediation.

CVE-2023-41767

Technical details about CVE-2023-41767 are not publicly provided in the supplied documents. No concrete affected products, root cause, or remediation are specified. Monitor for updates from official sources.

CVE-2024-49112

CVE-2024-49112 affects Windows LDAP on Domain Controllers. Connected sources describe an integer-overflow flaw in the LDAP server that can allow unauthenticated remote code execution via crafted CLDAP/LDAP traffic, leading to arbitrary code execution and potential DoS. Exploitation may require lo...

CVE-2022-38028

CVE-2022-38028 is a Windows Print Spooler privilege-escalation vulnerability. It arises from improper privilege assignment in the Print Spooler service, enabling a local attacker with low privileges and no user interaction to escalate to SYSTEM. Public exploits have been observed; CISA/KEV and MS...

CVE-2023-36710

CVE-2023-36710 is a Windows Media Foundation Core Remote Code Execution vulnerability. The connected sources describe a two-step chain: a WAV file processing flaw in Windows Media Foundation allows two out-of-bounds writes, which an attacker can trigger via a specially crafted WAV played as part ...

CVE-2023-36575

CVE-2023-36575 corresponds to a Microsoft Message Queuing (MSMQ) Remote Code Execution vulnerability. The NVD entry lists a CVSS v3.1 base score of 7.3 ( HIGH ), with a LOCAL attack vector, LOW privileges required, and USER INTERACTION NEEDED; all three impact metrics (confidentiality, integrity,...

CVE-2023-36697

Technical details about CVE-2023-36697 are not publicly available in the provided documents; monitor for updates.

CVE-2023-36729

CVE-2023-36729 is a Local Elevation of Privilege vulnerability related to the Named Pipe File System. CVSS 3.1 base score 7.8 (High) with LOCAL attack vector, LOW privileges required, no user interaction, and implications for confidentiality, integrity, and availability all rated High. The availa...

CVE-2023-36570

Technical details for CVE-2023-36570 are not publicly available in the provided documents. Monitor for updates.

CVE-2023-36591

Technical details (affected product versions, root cause, exploit information) are not publicly available in the provided documents; monitor for updates from official advisories and vendor advisories.

CVE-2023-41766

Technical details for CVE-2023-41766 are not provided in the connected documents. Public information about affected components, root cause, impact, and fixes is not available here. Monitor for updates from official sources.

CVE-2023-36590

Technical details about CVE-2023-36590 (affected MSMQ RCE) are not publicly provided in the supplied connected documents. Please monitor for updates from official advisories and vulnerability databases for affected products, vulnerable components, impact, and fixes.

CVE-2023-36718

CVE-2023-36718: Microsoft Virtual Trusted Platform Module Remote Code Execution Vulnerability. CVSS 3.1: Attack Vector LOCAL, Attack Complexity HIGH, Privileges Required LOW, User Interaction NONE, Scope CHANGED, with Confidentiality, Integrity, and Availability impacts rated HIGH. Exploitation s...

CVE-2023-36902

Technical details for CVE-2023-36902 are not publicly provided in the supplied documents. Monitor for updates from Microsoft and vulnerability feeds.

CVE-2023-38166

CVE-2023-38166 is a Windows Layer 2 Tunneling Protocol remote code execution vulnerability. The supplied data states a CVSS v3.1 base score of 8.1 (HIGH), with network attack vector, high attack complexity, no privileges required, no user interaction, and impact to confidentiality, integrity, and...

CVE-2023-36743

Technical details about CVE-2023-36743 are not provided in the supplied connected documents. The set includes general references and vulnerability listings, but no affected products, root cause, impact, or fixes. Monitor for updates as more information becomes publicly available.

CVE-2025-21418

CVE-2025-21418 is a heap-based buffer overflow in the Windows Ancillary Function Driver for WinSock that enables local privilege escalation to SYSTEM. Affected: Windows components exposed to local attack surface; exploitability is local with low attack complexity and no user interaction. Public r...

CVE-2023-36606

Technical details for CVE-2023-36606 are not publicly available in the provided documents. Monitor for updates from vendor/security advisories.

CVE-2023-41771

Technical details about CVE-2023-41771 are not provided in the supplied documents. No concrete product/vendor/version impact or remediation is disclosed here; monitor for updates from the referenced sources.

CVE-2026-45602

Technical details (affected product versions, root cause, exploit specifics, and remediation) are not publicly available in the provided documents. Monitor for updates from NVD and CVE List for CVE-2026-45602.

CVE-2023-36592

CVE-2023-36592 concerns Microsoft Message Queuing (MSMQ) Remote Code Execution. Connected CNVD-2023-84129 notes a remote code execution vulnerability in MSMQ. The CVSS metrics in the Initial document indicate Local attack vector, Low privileges required, User interaction, and high impact across c...

CVE-2023-36720

CVE-2023-36720 is a DoS vulnerability in Windows Mixed Reality Developer Tools with a CVSS v3.1 base score of 7.5 (HIGH). It requires network access, has no user interaction, and does not require privileges, with the impact limited to availability (I/N; A=HIGH). The available sources identify the...

CVE-2023-41769

Technical details for CVE-2023-41769 are not publicly provided in the supplied documents. No affected products, exploit info, or remediation confirmed here. Monitor for official disclosures and vendor advisories for concrete impact and fixes.

CVE-2023-41773

CVE-2023-41773 is described in the initial document as a Windows Layer 2 Tunneling Protocol Remote Code Execution vulnerability with high severity (CVSS v3.1: 8.1, network access, no user interaction). Connected documents corroborate that this is a Windows L2TP RCE issue; CNVD‑2023‑81881 and NVD ...

CVE-2025-21420

CVE-2025-21420 is evidenced by PoCs showing a Disk Cleanup Tool (cleanmgr.exe) elevation via a DLL sideload approach. The GitHub PoCs demonstrate loading dokan1.dll/dokannp1.dll to trigger arbitrary code paths, with the exploit chain listing SetProcessMitigationPolicy (ProcessRedirectionTrustPoli...

CVE-2023-36564

Technical details about CVE-2023-36564 are not publicly available in the provided documents. Monitor official advisories for updates on affected products, impact, and available fixes.

CVE-2023-36581

CVE-2023-36581 corresponds to a Denial of Service vulnerability in Microsoft Message Queuing (MSMQ). Public records in the connected CNVD entry describe a MSMQ DoS issue, but the available documents do not provide concrete technical details such as affected versions, root cause, specific exploit ...