CVE-2025-47827

Technical details for CVE-2025-47827 are not publicly provided in the supplied documents. The initial description notes a Secure Boot bypass via igel-flash-driver, but no additional technical specifics, affected versions, or fixes are included here. Monitor for updates.

CVE-2026-26128

CVE-2026-26128 concerns an elevation-of-privilege flaw in Windows SMB Server caused by improper authentication. The vulnerability affects Windows SMB Server and is described in connected sources as allowing an authorized local attacker to obtain higher privileges. Evidence from the connected docu...

CVE-2026-44803

CVE-2026-44803 describes an integer overflow/wraparound in Windows Win32K - GRFX that can allow a local attacker to execute code. The vulnerability is identified across multiple sources (NVD, CVE listing, and MSRC update page) and is classified with a high impact: local code execution, requiring ...

CVE-2026-49160

The CVE-2026-49160 entry concerns HTTP.sys with an HTTP/2 resource consumption flaw leading to unauthenticated denial of service over the network. Exploitation details, affected versions or specific component paths aren’t provided in the connected documents. The NVD/MSRC entries confirm an uncont...

CVE-2023-21812

CVE-2023-21812 is a Windows vulnerability in the Common Log File System Driver (CLFS) that enables Elevation of Privilege. The NVD entry lists a CVSS v3.1 base score of 7.8 (HIGH) with LOCAL attack vector, LOW attack complexity, LOW privileges required, and no user interaction; impact is HIGH on ...

CVE-2023-23403

CVE-2023-23403 is Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability. The CVE entry describes a remote code execution flaw in Microsoft’s PostScript and PCL6 Printer Driver. Connected CNVD-2023-30868 corroborates the same driver-based RCE issue; other connected...

CVE-2023-33154

Technical details about CVE-2023-33154 are not publicly available in the provided connected documents. Please monitor official advisories and CVE listings for updates.

CVE-2024-26183

CVE-2024-26183 is a Windows Kerberos Denial-of-Service vulnerability. The CVSS 3.1 base metrics (AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) indicate a NETWORK-exploitable issue with a MEDIUM severity (6.5) and a HIGH impact on availability, requiring LOW privileges and no user interaction. The descript...

CVE-2024-26194

CVE-2024-26194 is a Secure Boot security feature bypass vulnerability. The CVSS vector indicates Local access, high attack complexity, and no privileges/UI required, with high confidentiality, integrity, and availability impact. Microsoft’s MSRC page is referenced for a potential fix, and ENISA/N...

CVE-2024-28901

Microsoft Windows: CVE-2024-28901 affects the Windows Remote Access Connection Manager. The vulnerability is an information disclosure in RasMan, exploitable locally with low complexity and requiring low privileges; it grants high confidentiality impact and does not affect integrity or availabili...

CVE-2024-28925

CVE-2024-28925 is listed in the Microsoft Windows Secure Boot family as a Secure Boot security feature bypass with high impact (CVSS 3.1: 8.0; Adjacent access, no privileges required, user interaction required). The connected advisory (NCSC) confirms a Windows Secure Boot bypass in the same CVE g...

CVE-2024-49072

Technical details about CVE-2024-49072 are not publicly available in the provided documents. Monitor for updates from official advisories; no covered exploit specifics, affected products, versions, or mitigations are provided here.

CVE-2023-21526

Technical details about CVE-2023-21526 are not publicly available in the provided documents. Monitor for updates from official advisories; no specifics on affected products, root cause, impact, or mitigations are provided here.

CVE-2023-21822

Technical details for CVE-2023-21822 are not publicly available in the provided documents. Monitor for updates.

CVE-2023-23417

Technical details about CVE-2023-23417 are not publicly available in the provided documents. No concrete information on affected products/versions, root cause, impact, or fixes is provided here. Monitor for updates from the connected sources.

CVE-2023-24940

Technical details for CVE-2023-24940 are not publicly available in the provided documents. The connected items reference the CVE but do not specify affected products, versions, root cause, or fixes. Monitor for updates.

CVE-2024-26242

CVE-2024-26242 is a Windows Telephony Server elevation-of-privilege vulnerability. The connected documents indicate a local-privilege escalation with CVSS v3.1 base score 7.0 (AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H). Root cause and exact exploit details are not provided in the sources. Microsoft has...

CVE-2024-28922

CVE-2024-28922 is a Secure Boot security feature bypass vulnerability. CVSS‑3.1 metrics show a physical attack vector, low attack complexity, low privileges required, user interaction needed, with no confidentiality impact, but high integrity impact (base score 4.1, Medium). Connected sources ref...

CVE-2025-26645

CVE-2025-26645 affects the Windows Remote Desktop Client. The vulnerability is a relative path traversal in the Remote Desktop Client that allows an unauthenticated attacker to execute code over the network. According to the published metrics, the exploit requires network access with low attack c...

CVE-2026-42970

CVE-2026-42970 involves Windows Push Notifications and is caused by the use of an uninitialized resource , enabling an authorized attacker to locally disclose information. The CVSS 3.1 vector (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) yields a base score of 5.5 (Medium) with high confidentiality impac...

CVE-2026-49172

The CVE-2026-49172 entry describes a heap-based buffer overflow in Windows FTP Service that allows an unauthenticated, network-based attacker to execute code remotely. Documents confirm the vulnerability exists in Windows FTP Service and enables remote code execution with network access and no re...

CVE-2023-21685

The CVE-2023-21685 entry concerns Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution. The connected NVD record provides CVSS 3.1: NETWORK attack vector, LOW attack complexity, NONE privileges required, UI required, and impacts to Confidentiality, Integrity, and Availability (all ...

CVE-2023-21798

Technical details about CVE-2023-21798 are not publicly provided in the connected documents. Monitor for updates.

CVE-2023-23406

CVE-2023-23406 corresponds to a remote code execution vulnerability in the Microsoft PostScript and PCL6 Class Printer Driver. Connected sources confirm this CVE affects Microsoft’s PostScript and PCL6 printer drivers and describe a remote code execution outcome. The CVSS 3.1 data shows an extern...

CVE-2023-35386

Technical details specific to CVE-2023-35386 are not publicly provided in the supplied documents. The connected materials reference the CVE in log-file handling context, but no concrete product/version/impact data is disclosed. Monitor for updates.

CVE-2023-24887

CVE-2023-24887 is a Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution vulnerability. Affected component: Microsoft PostScript and PCL6 Class Printer Driver. Root cause/impact: remote code execution with NETWORK attack vector, low complexity, low privileges, no user interact...

CVE-2023-24946

CVE-2023-24946 is described in the provided sources as a Windows Backup Engine/Backup Service Elevation of Privilege vulnerability. The CNVD entry explicitly notes an attacker could gain SYSTEM privileges, indicating a local, privilege-escalation flaw. The CVSS vector in the initial data shows: L...

CVE-2023-28216

Technical details about CVE-2023-28216 are not publicly available in the provided documents. Monitor for updates.

CVE-2023-28253

Technical details for CVE-2023-28253 are not publicly provided in the supplied documents; no affected product/version, root cause, or remediation details are present here. Monitor for updates.

CVE-2024-26244

CVE-2024-26244 is a remote code execution vulnerability in the Microsoft WDAC OLE DB provider for SQL Server. According to the CVSS 3.1 vector, it is exploitable over the network with no privileges required, but requires user interaction, and has high impact on confidentiality, integrity, and ava...

CVE-2024-28924

Technical details about CVE-2024-28924 are not publicly provided in the connected documents. Monitor for updates from Microsoft, NVD, or CVE editors for affected products, impact, root cause, and available fixes.

CVE-2024-30038

CVE-2024-30038 is a Win32k local privilege escalation vulnerability. The issue exists in Win32k’s kernel-user boundary; exploitation would require local access with low privileges and no user interaction, potentially granting HIGH confidentiality/integrity/availability impact. Microsoft has issue...

CVE-2023-21689

CVE-2023-21689 is a Microsoft PEAP Remote Code Execution vulnerability with a CVSS v3.1 base score of 9.8. The vulnerability is network-exploitable with no user interaction and requires no privileges; it potentially impacts confidentiality, integrity, and availability. Connected sources confirm t...

CVE-2023-23411

CVE-2023-23411 : Windows Hyper-V Denial of Service vulnerability. The embedded metrics indicate a LOCAL attack vector with LOW privileges required, no user interaction, and an AV/C/I/A impact profile (Availability impact: HIGH). The description confirms a Hyper-V related DoS, but the supplied doc...

CVE-2024-26232

The CVE-2024-26232 entry describes a Remote Code Execution vulnerability in Microsoft Message Queuing (MSMQ). The available details indicate a LOCAL attack with LOW privileges required and USER INTERACTION required, with HIGH impact on confidentiality, integrity, and availability (CVSS 7.3). The ...

CVE-2024-30037

The CVE-2024-30037 entry affects Windows Common Log File System Driver and is categorized as a local Elevation of Privilege vulnerability (requires local access; may grant elevated privileges). The connected documents corroborate the CVE mapping and indicate it is part of a set of Windows fixes; ...

CVE-2024-43519

CVE-2024-43519 : Microsoft WDAC OLE DB provider for SQL Server is affected by a Remote Code Execution vulnerability. The CVSS v3.1 base score is 8.8 (HIGH); attack vector is NETWORK, with LOW attack complexity and no privileges required, but user interaction is required. The issue stems from the ...

CVE-2023-21805

Technical details about CVE-2023-21805 are not publicly provided in the supplied documents. Monitor for updates.

CVE-2023-23413

Technical details about CVE-2023-23413 (affected product, root cause, versions, exploitability) are not provided in the connected documents. Public details are limited to the initial description; monitor for updates.

CVE-2024-26180

Technical details about CVE-2024-26180 are not provided in the supplied documents. Monitor for updates from official advisories and affected vendors.

CVE-2024-26189

CVE-2024-26189 is a Secure Boot security feature bypass affecting Windows Secure Boot. The CVE is listed in the Windows Secure Boot table with CVSS v3.1 base score 8.0 (HIGH) and impact described as bypassing security measures. Connected sources corroborate a Secure Boot bypass characterization, ...

CVE-2024-28921

CVE-2024-28921 is a Windows Secure Boot security feature bypass vulnerability. The CVE entry is supported by multiple sources (NVD/NCSC/related feeds) indicating a local-attack-path bypassing Secure Boot with elevated privileges required and no user interaction. The CVSS vector shows: Local attac...

CVE-2023-23423

CVE-2023-23423 is a Windows Kernel Elevation of Privilege vulnerability tied to hive memory corruption in the Windows Registry (HKCU/HKLM hives). The connected Project Zero analysis provides concrete exploitation details: a memory-corruption primitive in hive data can be combined with a crafted o...

CVE-2023-28267

CVE-2023-28267 is the Remote Desktop Protocol Client Information Disclosure Vulnerability affecting the Microsoft Windows Remote Desktop Client (CPE: cpe:/a:microsoft:remote_desktop_connection). The CVSSv3.1 base score is 6.5 (Medium), with attack vector Network, attack complexity Low, privileges...

CVE-2023-29358

CVE-2023-29358 is a Windows GDI Elevation of Privilege vulnerability. Per the sources, it is a LOCAL, low-attack-complexity issue with LOW privileges required, and it has HIGH confidentiality, integrity, and availability impact. The connected documents corroborate the Windows context and do not p...

CVE-2024-28899

Technical details for CVE-2024-28899 are not publicly available in the provided documents. No affected products, root cause, exploit info, or remediation are specified here; monitor for updates.

CVE-2024-49046

CVE-2024-49046 affects the Windows Win32 Kernel Subsystem and is categorized as an Elevation of Privilege vulnerability. The CVSS 3.1 vector indicates LOCAL exploitability with LOW attack complexity and LOW privileges required, but HIGH impact to confidentiality, integrity, and availability under...

CVE-2026-21519

CVE-2026-21519 is a local elevation-of-privilege flaw in Windows Desktop Window Manager caused by type confusion. An authenticated, low-privilege attacker can overwhelm DWM locally to gain SYSTEM rights, with no user interaction required. It has been identified as exploited in the wild by multipl...

CVE-2026-49798

CVE-2026-49798 is a Windows Kernel use-after-free vulnerability that enables local privilege escalation. The root cause is use-after-free in kernel code, allowing an unauthenticated attacker with local access to elevate privileges. Affected component details are limited in the provided documents;...

CVE-2023-23412

CVE-2023-23412 is a Windows local elevation-of-privilege issue (Attack Vector: LOCAL, Privileges Required: LOW, UI: NONE) with HIGH impact on confidentiality, integrity, and availability per CVSS 3.1 metrics. Microsoft security updates released March 14, 2023 (e.g., KB5023705, KB5023764, KB502376...