2052 matches found
CVE-2023-32057
CVE-2023-32057 is a Microsoft Message Queuing (MSMQ) Remote Code Execution vulnerability. The connected sources indicate an attacker can trigger RCE by sending a malicious MSMQ packet to an MSMQ server, enabling remote code execution on the server side. A mitigation documented in the sources is t...
CVE-2025-21245
CVE-2025-21245 is a Windows Telephony Service remote code execution vulnerability. The CIRCL feed and CVE listings indicate it affects Windows Telephony Service with potential for executing code from an attacker-supplied payload (impact: execution of arbitrary code) and a CVSS v3.1 base score of ...
CVE-2025-48799
CVE-2025-48799 is an Elevation of Privilege flaw in Windows Update Service (wuauserv) described as: improper link resolution before file access ('link following') can allow an authorized local attacker to elevate to NT AUTHORITY\SYSTEM when Windows 10/11 systems have at least two drives and Stora...
CVE-2023-36003
CVE-2023-36003 is a Microsoft Windows XAML Diagnostics Elevation of Privilege vulnerability. The XAML Diagnostics API can be abused to obtain elevated privileges locally. Public material confirms exploits/POCs exist (e.g., GitHub PoCs) and that patches were released during December 2023 Patch Tue...
CVE-2024-20669
CVE-2024-20669 affects Microsoft Windows Secure Boot. It is a Local, High-Privilege vulnerability classed as a Secure Boot security feature bypass with a CVSS v3.1 base score of 6.7 (Impact: Confidentiality, Integrity, and Availability High). Connected sources confirm Windows Secure Boot-related ...
CVE-2024-26250
CVE-2024-26250 is a Windows Secure Boot vulnerability categorized as a circumvention of security measures. The connected advisory (NCSC) lists CVE-2024-26250 under the Windows Secure Boot section with that impact. The available documents do not provide product version ranges or exact vulnerable c...
CVE-2024-49105
CVE-2024-49105 affects the Windows Remote Desktop Client. It enables remote code execution over the network; exploitation requires user interaction and high privileges, with high impacts to confidentiality, integrity, and availability. CVSS v3.1 base score 8.4 (Network, Low attack complexity, Pri...
CVE-2023-23394
Technical details for CVE-2023-23394 are not provided in the connected documents. They reference CSRSS generally and Windows updates (DCOM hardening, LSASS, domain join issues) but do not specify affected products/versions or exploit details. Monitor for updates.
CVE-2024-26240
CVE-2024-26240 is a Windows Secure Boot vulnerability rated CVSS v3.1 base score 8.0 (AV: Adjacent, AC: Low, PR: None, UI: Required, S: Unchanged, C/I/A: High). The connected documents corroborate that this CVE involves bypassing or circumvention of Secure Boot security measures, with explicit no...
CVE-2023-24868
CVE-2023-24868 corresponds to a remote code execution vulnerability in the Microsoft PostScript and PCL6 Class Printer Driver . The CNVD entry explicitly describes it as a remote code execution flaw in this printer driver, aligning with the CVE title. The NVD entry lists the vulnerability as expl...
CVE-2023-24901
CVE-2023-24901 maps to a Windows NFS Portmapper Information Disclosure vulnerability. The NVD record lists a CVSS v3.1 base score of 7.5 (HIGH) with Network attack vector, low attack complexity, no privileges required, no user interaction, and a confidentiality impact of HIGH (I and A mostly unaf...
CVE-2023-24912
Technical details for CVE-2023-24912 are not publicly provided in the supplied documents. Monitor for updates from official advisories when more information becomes available.
CVE-2024-26220
CVE-2024-26220 affects Windows Mobile Hotspot and is described as an Information Disclosure vulnerability. The connected NCSC advisory lists CVE-2024-26220 with impact: Access to sensitive data and a CVSS v3.1 base score of 5.0 (Medium). No root-cause, affected build versions, or remediation deta...
CVE-2024-30027
CVE-2024-30027 corresponds to an NTFS Elevation of Privilege vulnerability. Affected component: Windows NTFS (elevates privileges locally). Root cause details are not explicitly stated in the provided documents beyond the NTFS elevation claim. CVSS v3.1 base metrics indicate a High impact (7.8) w...
CVE-2024-38187
Technical details about CVE-2024-38187 are not provided in the supplied documents. Public disclosures or affected products are not specified here. Monitor for updates from Microsoft advisories and CVE records.
CVE-2023-24856
Technical details about CVE-2023-24856 are not publicly available in the provided connected documents. The entry lacks affected products/versions or exploit information. Monitor for updates from official sources to obtain concrete details, impact, and remediation.
CVE-2023-28222
Technical details (affected components, root cause, impacted versions, exploits, or patch status) are not provided in the supplied documents. Monitor for updates from official sources.
CVE-2023-36900
CVE-2023-36900 affects the Windows Common Log File System (CLFS) driver, enabling Elevation of Privilege via an integer overflow/wraparound vulnerability. The connected exploit repository documents a PoC labeled as an exploit for an Integer Overflow or Wraparound in Microsoft CLFS, with a Denial-...
CVE-2024-30098
CVE-2024-30098 is referenced in multiple October 2025 Windows security updates (KB5066791, KB5066835, KB5066793, KB5066780, KB5066836, etc.). The connected documents describe a cryptographic hardening change: moving RSA-based smart card certificates from Cryptographic Service Provider (CSP) to Ke...
CVE-2024-26175
CVE-2024-26175 is a local-bypass vulnerability in Windows Secure Boot, enabling bypass of the Secure Boot security feature. Affected component: Windows Secure Boot. Root cause: security-measure bypass integrated into Secure Boot; the CVSSv3.1 base metrics indicate a High severity (7.8) with Local...
CVE-2024-38140
CVE-2024-38140 is a Windows RMCAST (Reliable Multicast Transport Driver) remote code execution vulnerability rated CRITICAL (CVSS 3.1: 9.8). The entry indicates an in-network attacker could remotely execute arbitrary code, with no privileges required and no user interaction, under the RMCAST comp...
CVE-2024-38257
CVE-2024-38257 affects the Windows AllJoyn API, described as an Information Disclosure vulnerability. The CVSS vector indicates network access with no user interaction, low attack complexity, and no privileges required, with confidentiality impact high and other impacts none. Connected sources co...
CVE-2025-24044
CVE-2025-24044 is a local privilege-escalation in the Windows Win32 Kernel Subsystem caused by a use-after-free condition. Connected docs classify it as an EoP risk with local exploitability and note fixes in Microsoft Windows updates (e.g., March 2025 cycle). No product/version specifics beyond ...
CVE-2025-60724
Technical details about CVE-2025-60724 are not provided in the supplied documents. Connected KBs discuss OS updates and security fixes but do not specify vulnerable product versions, root cause, exploitation, or patch specifics for this CVE. Monitor for updates.
CVE-2026-62781
CVE-2026-62781 is a heap-based buffer overflow in the RPC Runtime Library that enables remote code execution over the network. The vulnerability allows an unauthenticated attacker to run code on affected systems via network interaction. Current documents confirm the issue but do not provide produ...
CVE-2023-24861
Technical details about CVE-2023-24861 (Windows Graphics Component Elevation of Privilege Vulnerability) are not publicly available in the provided documents; no affected versions, root cause, or remediation are specified here. Monitor for official disclosures and updates.
CVE-2023-35367
Technical details for CVE-2023-35367 are not publicly provided in the supplied documents. No specific affected products, versions, root cause, remediation, or exploit information is available here. Monitor official sources for updates.
CVE-2023-36882
CVE-2023-36882 concerns Microsoft WDAC OLE DB provider for SQL Server, enabling Remote Code Execution. The NVD details show a network-based exploitable flaw with CVSS v3.1: AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, score 8.8 (HIGH). Root cause and affected versions are not fully enumerated in the prov...
CVE-2026-23670
CVE-2026-23670 affects Windows Virtualization-Based Security (VBS) security feature. The issue is a local, high-privilege bypass of VBS protections, with no user interaction required (UI: NONE). Exploitation is possible with local access and may impact confidentiality and integrity (both HIGH), w...
CVE-2023-21802
Technical details (affected product/component/versions/root cause and fixes) for CVE-2023-21802 are not publicly available in the provided documents. Monitor for updates from official CVE/NVD/KB sources.
CVE-2023-21803
CVE-2023-21803 corresponds to a Windows iSCSI Discovery Service Remote Code Execution vulnerability. The available data shows a critical 9.8 CVSSv3.1 score with network attack vector , no privileges required , and no user interaction ; impact is shown as High for confidentiality, integrity, and a...
CVE-2023-21813
Technical details on CVE-2023-21813 are not provided in the furnished documents; no affected products, exploit info, or fixes are described here. Monitor for updates from official advisories.
CVE-2023-23385
Technical details for CVE-2023-23385 are not publicly available in the provided documents. Monitor for updates from official sources.
CVE-2023-23422
CVE-2023-23422 is a Windows kernel elevation-of-privilege vulnerability described in the Registry hive memory‑corruption research. The exposed flaw is a local, kernel‑level issue where memory corruption in a registry hive (notably HKCU) can be triggered to craft an out‑of‑bounds cell index that r...
CVE-2023-24858
CVE-2023-24858 concerns an information-disclosure vulnerability in Microsoft’s PostScript and PCL6 Class Printer Driver. The issue, affecting the printer driver component, exposes confidential data via the affected driver surfaces. CVSS metrics from NVD indicate network vector, high confidentiali...
CVE-2023-28227
CVE-2023-28227 concerns the Windows Bluetooth Driver and is described as a Remote Code Execution vulnerability. The NVD entry lists a CVSS v3.1 base score of 7.5 (High) with vector AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H, indicating an adjacent attacker with no user interaction could achieve compromi...
CVE-2023-28273
CVE-2023-28273 is a Windows Clip Service Elevation of Privilege vulnerability. The initial data lists a local attack vector with high impact and exploitation conditions: local access, high attack complexity, low privileges required, no user interaction, and impact to confidentiality, integrity, a...
CVE-2023-35365
CVE-2023-35365 affects Windows RRAS with remote code execution potential. Exploitation, per the linked discussion, requires an attacker to send crafted packets to an affected RRAS server. The RRAS feature is not installed or enabled by default on Windows systems, which reduces exposure for users ...
CVE-2024-38159
CVE-2024-38159 affects Windows Network Virtualization. The vulnerability enables remote code execution over the network with high privileges required and no user interaction, reflected by CVSSv3.1: AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H (base 9.1). Microsoft and partners indicate updates exist to fi...
CVE-2025-21273
Technical details are not publicly provided in the supplied documents. The CVE-2025-21273 entry lacks explicit affected product versions, root cause, or remediation specifics in this set; monitor for updates from Microsoft/MSRC.
CVE-2023-24867
The CVE, CVE-2023-24867, is described in connected sources as a remote code execution vulnerability in Microsoft’s PostScript and PCL6 Class Printer Driver. CNVD-2023-28103 explicitly notes a remote code execution flaw in the Microsoft PostScript Printer Driver; NVD/NIST entries corroborate the v...
CVE-2023-24911
The CNVD-2023-30862 entry aligns with CVE-2023-24911, describing an information-disclosure vulnerability in Microsoft PostScript and PCL6 Class Printer Driver. It notes an information disclosure exists and involves these Microsoft printer drivers, but provides no version/impact details or remedia...
CVE-2024-26241
CVE-2024-26241 is a Win32k elevation-of-privilege vulnerability in Windows. The OpenVAS entries list Win32K as the affected component with local exploitation, requiring low privileges and no user interaction, and causing high confidentiality, integrity, and availability impact. The CVSSv3.1 base ...
CVE-2024-38033
Technical details about CVE-2024-38033 are not provided in the supplied documents. Monitor for updates from Microsoft and vulnerability feeds for affected products, versions, and fixes.
CVE-2025-21211
Technical details about CVE-2025-21211 are not publicly provided in the supplied connected documents. Monitor for updates from official advisories; no confirmed affected products, vectors, or fixes are described here.
CVE-2026-40404
CVE-2026-40404 concerns a Windows Universal Disk Format (UDFS) File System Driver Elevation of Privilege. The vulnerability affects the UDFS component, with a local attack vector, requiring low privileges and no user interaction, and yields high impact to confidentiality, integrity, and availabil...
CVE-2022-35744
Technical details (affected product, root cause, impact, or fixes) are not provided in the supplied documents. Monitor for updates from official CVE sources; no specifics about exploitation, vectors, or mitigations are included here.
CVE-2023-23409
CVE-2023-23409 corresponds to a CSRSS Information Disclosure vulnerability. The available data indicate a local attack vector with low attack complexity and low privileges required, yielding a high confidentiality impact (CVSS 3.1: AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N). The description notes CSRSS...