2147 matches found
CVE-2023-36394
Technical details about CVE-2023-36394 (Windows Search Service elevation of privilege) are not provided in the supplied documents. Monitor for updates; no vendor, impact, or remediation details are disclosed here.
CVE-2025-32709
CVE-2025-32709 is a local privilege-escalation due to a use-after-free in the Windows Ancillary Function Driver for WinSock (AFD) . Affected component: AFD in Windows networking stack. Root cause: use-after-free leading to arbitrary/privilege escalation. Impact: local elevation to administrator a...
CVE-2026-42992
CVE-2026-42992 describes a heap-based buffer overflow in the Remote Desktop Client that could allow an unauthenticated attacker to execute code over the network. The vulnerability affects the Remote Desktop Client as described across multiple sources (NVD, CVE listings, and Microsoft’s advisory)....
CVE-2025-21181
Technical details (affected products/versions, root cause, exploitability, fixes) for CVE-2025-21181 are not provided in the supplied documents. Please monitor official advisories for concrete technical information.
CVE-2024-20674
CVE-2024-20674 is a Windows Kerberos security feature bypass vulnerability. The connected exploit doc describes a logic bug in the client-side handling of Kerberos U2U TGT-REP that can enable authentication bypass via a network MITM and spoofing, potentially allowing an attacker to impersonate th...
CVE-2021-43226
CVE-2021-43226 pertains to the Windows Common Log File System (CLFS) Driver. The available documents identify a local privilege-escalation vulnerability in CLFS that could allow a privileged attacker on a Windows host to gain higher privileges. The CVE is listed in the KEV catalog as a Microsoft ...
CVE-2024-37976
CVE-2024-37976 is described as a Windows EFI Partition vulnerability: a security feature bypass (Circumvention of security measure) with CVSS 3.1 base score 6.7 (LOCAL, LOW attack complexity, HIGH privileges required, no user interaction). The connected data specifies affected component as Window...
CVE-2026-45586
CVE-2026-45586 affects the Windows Collaborative Translation Framework (CTFMON). The root cause is improper link resolution before file access (link following), enabling local elevation of privileges when exploited by an authenticated attacker. Microsoft’s June 2026 patch releases (KB5094041/KB50...
CVE-2024-26207
CVE-2024-26207 is a Windows Remote Access Connection Manager information disclosure vulnerability. Affected component: Windows Remote Access Connection Manager (local attacker? per CVSS v3.1 shows LOCAL with low complexity and low privileges). Documented impact in the connected NCSC advisory (NCS...
CVE-2023-36424
CVE-2023-36424 is documented as a Windows kernel-level out-of-bounds read vulnerability in the Common Log File System Driver (clfs.sys) that enables privilege escalation. Connected sources describe a pool overflow/record-validation flaw in clfs.sys (Windows Kernel pool management) exploited via c...
CVE-2023-21729
Technical details about CVE-2023-21729 are not provided in the connected documents; available sources only reference the CVE without specifics. Monitor for updates.
CVE-2023-1018
CVE-2023-1018 is an out-of-bounds read in TPM 2.0’s Module Library (CryptParameterDecryption) that could allow a local attacker to read sensitive data stored in the TPM. Connected advisories confirm a local, authenticated access scenario and note TPM exposure on affected IBM Power firmware (Power...
CVE-2024-30073
CVE-2024-30073 is a Windows Security Zone Mapping security feature bypass vulnerability. The public records show a CVSS v3.1 base score of 7.8 (High) with Local attack vector, low attack complexity, no privileges required, but user interaction required, and impact to confidentiality, integrity, a...
CVE-2023-36719
Technical details about CVE-2023-36719, including affected products, root cause, impact, or fixes, are not publicly provided in the supplied documents. Monitor for updates from official sources.
CVE-2024-21438
Technical details for CVE-2024-21438 are not provided in the supplied documents. Monitor for updates from the connected sources to obtain affected product, root cause, impact, and remediation information.
CVE-2025-30397
CVE-2025-30397 is a memory-corruption/Use-After-Free style vulnerability in the Microsoft Scripting Engine (jscript.dll) that enables remote code execution via specially crafted web content. The CVE’s affected component is the JScript/Windows Scripting Engine, with an attack vector over the netwo...
CVE-2025-32701
CVE-2025-32701 is a Windows CLFS driver use-after-free vulnerability that can allow an authorized attacker to elevate privileges locally. The weakness affects the Windows Common Log File System Driver and has a base CVSS v3.1 score of 7.8 (HIGH) with LOCAL attack vector, LOW attack complexity, an...
CVE-2023-36405
Technical details about CVE-2023-36405 (affected software, impact, root cause, or fixes) are not provided in the connected documents. Monitor for official disclosures or vendor advisories for concrete information.
CVE-2024-20652
Technical details about CVE-2024-20652 are not publicly provided in the supplied documents; no affected products, root cause, or fixes are specified. Monitor for updates.
CVE-2026-56190
CVE-2026-56190 is a Windows Remote Desktop Protocol vulnerability described as a use of an uninitialized resource in Windows RDP that allows an unauthenticated attacker to execute code over the network. The CVE has a very high severity (CVSSv3.1 base score 9.8, CRITICAL) and is referenced in Micr...
CVE-2023-28250
Technical details about CVE-2023-28250 are not publicly provided in the supplied documents. Monitor for updates from official advisories.
CVE-2024-21437
CVE-2024-21437 is a Windows Graphics Component elevation-of-privilege vulnerability (local access, low attack complexity) affecting Windows OS. Public references corroborate it as a Windows Graphics Component issue discussed among Patch Tuesday updates, highlighting it among elevated-risk vulnera...
CVE-2026-65791
CVE-2026-65791 : Heap-based buffer overflow in Windows iSCSI Target Service enables remote code execution over a network. Affected: Windows iSCSI Target Service. Root cause: heap-based overflow. Impact: unauthorized code execution with high confidentiality, integrity, and availability implication...
CVE-2023-28293
CVE-2023-28293 is cited in connected material as one of the KTM/log-related Windows Kernel registry vulnerabilities disclosed by a Google Project Zero-style researcher. The documents place it among KTM transaction/log issues (with CVEs 2023-28271 and 2023-28272 also referenced) and discuss KTM lo...
CVE-2023-29363
CVE-2023-29363 is a Windows Pragmatic General Multicast (PGM) Remote Code Execution vulnerability. The issue affects Windows message queuing in PGM server scenarios, where a remote, unauthenticated attacker could send a crafted file over the network to achieve code execution if the message-queuin...
CVE-2025-32706
CVE-2025-32706 is an elevation-of-privilege flaw in Windows CLFS Driver (heap-based buffer overflow) that enables local privilege escalation. Affected product: Windows Common Log File System Driver. Base CVSS v3.1: 7.8 (HIGH); attack vector LOCAL, requires LOW privileges, no user interaction. Pub...
CVE-2026-50694
CVE-2026-50694 is a Windows SSTP use-after-free vulnerability that could allow an unauthenticated attacker to execute code remotely over the network. The issue affects Windows Secure Socket Tunneling Protocol (SSTP) and is rated high/critical in external assessments, with exploitation possible wi...
CVE-2023-36397
Technical details about CVE-2023-36397 are not provided in the supplied documents. No affected products, versions, root cause, impact, or remediation are specified here. Monitor for future updates from official advisories.
CVE-2024-21372
Technical details for CVE-2024-21372 are not publicly available in the provided documents. The connected items only reference the CVE among broader Windows vulnerability listings; no affected product/version, root cause, impact, or fixes are stated.
CVE-2024-21350
CVE-2024-21350 corresponds to a Remote Code Execution vulnerability in the Microsoft WDAC OLE DB provider for SQL Server. The entry lists a CVSS v3.1 base score of 8.8 (HIGH), with attack vector NETWORK, privileges required NONE, user interaction REQUIRED, and both confidentiality, integrity, and...
CVE-2024-21433
Technical details for CVE-2024-21433 are not publicly available in the provided documents. No affected products, root cause, or remediation are specified here. Monitor for updates.
CVE-2024-21420
Technical details about CVE-2024-21420 are not publicly provided in the supplied documents. The connected sources reference the CVE ID and Microsoft patches but do not disclose affected product specifics, root cause, impact, or remediation beyond generic update context. Monitor for updates.
CVE-2024-38118
Technical details (affected component, root cause, exploit info, patch status) for CVE-2024-38118 are not provided in the connected documents. The initial description notes LSA server information disclosure but lacks concrete specifics; monitor for updates.
CVE-2024-26162
CVE-2024-26162 corresponds to a remote code execution vulnerability in the Microsoft ODBC Driver. The CVSS 3.1 base metrics indicate: Network attack vector, low attack complexity, no privileges required, user interaction is required, and there is a High impact to confidentiality, integrity, and a...
CVE-2023-21549
Technical details for CVE-2023-21549 are not present in the provided documents. The connected entries do not describe affected products/versions or remediation. Monitor official sources for updates on this CVE.
CVE-2024-26166
Technical details about CVE-2024-26166 (affected software, root cause, impact, or fixes) are not provided in the connected documents. Please monitor for official advisories from Microsoft and CVE records for updates.
CVE-2023-21563
Technical details (affected product, vulnerable component, root cause, impact, or fixes) are not provided in the connected documents. Please monitor for updates from official advisories.
CVE-2024-26174
CVE-2024-26174 is a Windows Kernel Information Disclosure Vulnerability. The connected sources specify the issue as an out-of-bounds read of key node security in CmpValidateHiveSecurityDescriptors when loading corrupted registry hives, enabling potential leakage of kernel/registry data. Affected ...
CVE-2024-21358
Technical details about CVE-2024-21358 (Microsoft WDAC OLE DB provider for SQL Server remote code execution) are not provided in the supplied documents. Monitor for official updates from Microsoft and trusted security advisories for affected products, mitigations, and fixes.
CVE-2024-21370
Public technical details for CVE-2024-21370 are not provided in the connected documents; the OpenVAS entries enumerate the CVE across multiple Microsoft KBs without product/version specifics. Monitor for updates.
CVE-2024-49113
CVE-2024-49113 is a Windows LDAP Denial-of-Service vulnerability affecting the LDAP client. Public PoCs exist (e.g., LDAPNightmare) and show proof-of-concept testing integrated with Metasploit and other repositories; multiple exploit/checker projects also reference testing for this CVE. The descr...
CVE-2024-21349
Technical details for CVE-2024-21349 (Microsoft ActiveX Data Objects remote code execution) are not provided in the connected documents; no affected versions, root cause, impact, or remediation are cited. Monitor for updates.
CVE-2023-36425
Technical details (affected products, root cause, exploitability, or remediation) are not publicly provided in the supplied documents. Monitor for updates.
CVE-2024-26234
CVE-2024-26234 is a locally exploitable proxy driver spoofing vulnerability in Windows. The issue is tied to the Windows Proxy Driver, with exploitation requiring high privileges and no user interaction, leading to potential confidentiality, integrity, and availability impacts as indicated by the...
CVE-2025-21413
CVE-2025-21413 is a Windows Telephony Service remote code execution vulnerability. The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) indicates network access, no privileges, user interaction required, with high impact to confidentiality, integrity, and availability. Connected sources conf...
CVE-2023-36017
Technical details about CVE-2023-36017 are not publicly provided in the connected documents. The available materials only show the CVE entry with a Windows Scripting Engine memory corruption description and CVSS data. Monitor for updates from official sources.
CVE-2024-21352
Technical details for CVE-2024-21352 are not publicly available in the provided documents; monitor for updates.
CVE-2024-21391
CVE-2024-21391 affects Microsoft WDAC OLE DB provider for SQL Server and is described as a Remote Code Execution vulnerability. The initial document provides a CVSS 3.1 base score of 8.8 (HIGH) with NETWORK attack vector, LOW attack complexity, and user interaction required. No specific remediati...
CVE-2024-21359
Technical details for CVE-2024-21359 are not provided in the connected documents. The available data only references a WDAC OLE DB provider RCE vulnerability. Monitor for official advisories to learn affected products, impact, and remediation.