2052 matches found
CVE-2025-21369
CVE-2025-21369 is listed by the NCSC advisory as a vulnerability in Microsoft Windows’ Digest Authentication that enables executing arbitrary code. The advisory attributes an overall high severity (CVSS v3.1 base 8.80) with a network attack vector and impact. The connected document confirms the v...
CVE-2023-24865
CVE-2023-24865 corresponds to a vulnerability in the Microsoft PostScript and PCL6 Class Printer Driver that results in an information disclosure. The CVE is characterized by a network-accessible vector with low attack complexity and low privileges required, but with high confidentiality impact a...
CVE-2023-24872
CVE-2023-24872 affects the Microsoft PostScript and PCL6 Class Printer Driver. The entry documents a Remote Code Execution vulnerability with high severity (CVSS 3.1: AV=N/AC=L/PR=L/UI=N/S=U/C=H/I=H/A=H). Concrete technical details (affected product/version, root cause, exploit status, or fixes) ...
CVE-2023-24885
CVE-2023-24885 corresponds to a remote code execution vulnerability in Microsoft PostScript and PCL6 Class Printer Driver. The connected CNVD entry confirms a remote code execution flaw in the PostScript and PCL6 class printer drivers; however, the documents do not provide detailed root cause ana...
CVE-2023-28224
CVE-2023-28224 is described as a Windows PPPoE Remote Code Execution vulnerability. The entry provides a CVSS 3.1 score of 7.1 (HIGH) with attack vector Adjacent, high complexity, no privileges required, user interaction required, and impacts to confidentiality, integrity, and availability. Explo...
CVE-2023-28228
CVE-2023-28228 is documented as a Windows spoofing vulnerability. Based on the CVE entry, its CVSS v3.1 base score is 5.5 (Medium) with a Local attack vector, Low attack complexity, No privileges required, User interaction required, and Impact mainly on integrity (High) with no confidentiality/av...
CVE-2023-29359
Technical details about CVE-2023-29359 are not provided in the connected documents. The entries identify a GDI Elevation of Privilege vulnerability but do not specify affected products/versions, root cause, impact specifics, or remediation.
CVE-2025-21260
Technical details about CVE-2025-21260 are not publicly provided in the connected documents. Monitor for updates from Microsoft and CVE sources for affected components, impact, and remediation.
CVE-2025-21329
CVE-2025-21329 is a MapUrlToZone Security Feature Bypass in Windows. Public docs identify it as a bypass of a security feature (CVE-2025-21329) with CVSS v3.1 base metrics indicating NETWORK attack vector, low attack complexity, no privileges required, user interaction required, and a MEDIUM seve...
CVE-2026-58594
CVE-2026-58594 is a Windows Remote Desktop Client RCE vulnerability caused by an integer overflow/wraparound in the RDP client. Public sources (NVD/NCSC/CIRCL) attribute network-based exploitation with potential arbitrary code execution on vulnerable Windows systems. Connected entries confirm the...
CVE-2024-38186
Technical details (affected product, root cause, impact, versions, or remediation) for CVE-2024-38186 are not provided in the connected documents. Monitor for updates.
CVE-2023-35377
Technical details for CVE-2023-35377 are not publicly available in the provided documents. Monitor for updates.
CVE-2024-38104
Technical details for CVE-2024-38104 are not provided in the supplied connected documents; no affected products, root cause, impact, or remediation are specified here. Monitor for official updates to disclose specifics.
CVE-2026-50508
CVE-2026-50508 describes an exposure of sensitive information in Windows NTLM that enables an unauthenticated network-based spoofing capability. The vulnerability affects the Windows NTLM authentication path and is documented with a network attack vector and a high confidentiality impact. Public ...
CVE-2022-35756
Technical details about CVE-2022-35756 (affected products, root cause, impact, fix) are not provided in the connected documents. Monitor for official disclosures and updates from Microsoft and CVE listings.
CVE-2023-28266
Technical details (affected product/component, root cause, impact, fix) are not provided in the connected documents. Monitor for updates.
CVE-2023-36906
Technical details for CVE-2023-36906 are not publicly provided in the supplied documents. No affected products, root cause, or fixes are confirmed here. Monitor for updates.
CVE-2024-38196
CVE-2024-38196 is tied to the Windows Common Log File System Driver and is described as an Elevation of Privilege (local) vulnerability. The CVE is listed with a CVSSv3.1 base score of 7.8 (HIGH) and a local attack vector with low attack complexity, requiring low privileges and no user interactio...
CVE-2025-21191
CVE-2025-21191 affects Windows Local Security Authority (LSA) with a time-of-check/time-of-use race condition that enables an authorized local attacker to elevate privileges (obtaining increased entitlements). The vulnerability is categorized under local privilege escalation and is documented in ...
CVE-2026-42985
CVE-2026-42985 is described in connected sources as a heap-based buffer overflow in the Remote Desktop Client that allows an unauthenticated attacker to execute code over the network. The initial and connected docs provide the vulnerability description and a high CVSS score (8.8, HIGH) with netwo...
CVE-2026-50518
CVE-2026-50518 is a heap-based buffer overflow in Windows DHCP Server that allows an unauthenticated attacker to execute code remotely over a network. Public sources (NVD, EUVD, CIRCL, MSRC update guidance) confirm the flaw and its impact as remote code execution; Talos notes exploitation in the ...
CVE-2026-62778
CVE-2026-62778 refers to a Windows DNS vulnerability described as a use-after-free in the DNS service that enables a remote attacker to elevate privileges over a network. The affected component is the Windows DNS service; the root cause is a use-after-free condition in DNS processing. The impact ...
CVE-2023-21799
Technical details about CVE-2023-21799 are not publicly provided in the supplied documents. Monitor for updates.
CVE-2023-24886
CVE-2023-24886 corresponds to a Remote Code Execution vulnerability in Microsoft’s PostScript and PCL6 Class Printer Driver. Connected sources confirm the affected component (PostScript and PCL6 printer driver) and that security updates were released in the April 2023 cycle (KB5025221, KB5025224,...
CVE-2023-24925
CVE-2023-24925 is a Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability. The CVSS v3.1 base score is 8.8 (HIGH) with a network attack vector, low attack complexity, and no user interaction required. The impact is described as high across confidentiality, integri...
CVE-2023-28248
CVE-2023-28248 is a Windows kernel EoP vulnerability rooted in hive memory corruption. The linked material details a chain from hive memory corruption to OOB cell indexes that bypass typical bounds checks, enabling arbitrary kernel read/write through crafted regf data and controlled cell indices....
CVE-2023-35380
Technical details for CVE-2023-35380 are not publicly available in the provided documents. The initial sources list the vulnerability title but do not specify affected products, versions, root cause, or remediation. Monitor for updates.
CVE-2023-35381
Technical details about CVE-2023-35381 (Windows Fax Service Remote Code Execution) are not publicly provided in the supplied documents; no affected product/version/root-cause/exploit information is available here. Monitor for updates and refer to official advisories for specifics.
CVE-2023-35630
CVE-2023-35630 is a Microsoft Windows Internet Connection Sharing (ICS) remote code execution vulnerability. The NVD entry lists CVSS v3.1 base score 8.8 (HIGH) with AV:A, AC:L, PR:N, UI:N, S:U, C:H, I:H, A:H, indicating adjacent-network exploitation with no user interaction. Multiple OpenVAS ent...
CVE-2024-38041
CVE-2024-38041 is a Windows Kernel information disclosure vulnerability. The connected sources confirm the affected component as Windows Kernel with impact on confidentiality (C:H) and local attack vector (AV:L) with low attack complexity (AC:L) and no user interaction (UI:N). Privileges required...
CVE-2024-38058
CVE-2024-38058 is tied to BitLocker: Microsoft security updates (KB5040430, KB5040431, KB5040437, etc.) add PCRs 4–7 and 11 to the default Secure Boot validation profile. This is described as a BitLocker-related change with CVE-2024-38058 referenced for the PCR extension in multiple OS updates. T...
CVE-2024-43562
CVE-2024-43562 is a Windows NAT Denial-of-Service vulnerability with CVSSv3.1 base score 7.5 (Network vector, no user interaction, no privileges required). Exploitation is possible remotely over the network and can lead to a high impact: denial of service. Connected sources list Windows NAT as af...
CVE-2024-43641
CVE-2024-43641 is a Windows Registry Elevation of Privilege issue. The connected documents reveal a sophisticated exploitation path based on hive memory corruption and out-of-bounds cell indexes, enabling an unprivileged actor to obtain arbitrary kernel read/write access and, ultimately, SYSTEM-l...
CVE-2025-24068
CVE-2025-24068 describes a buffer over-read in the Windows Storage Management Provider that can lead to local information disclosure for an authenticated user. The issue affects Windows Storage Management Provider components and is rated with a local attack vector and a confidentiality impact. Co...
CVE-2025-47160
The CVE-2025-47160 entry applies to Windows Shell and describes a Protection mechanism failure that allows a remote attacker to bypass a security feature over the network. The NVD entry lists a CVSS v3.1 base score of 5.4 (AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L), indicating a network-exposed issue w...
CVE-2026-66799
CVE-2026-66799 describes a heap-based buffer overflow in Windows Key Guard that allows an authenticated, local attacker to elevate privileges. Affected component: Windows Key Guard. Root cause: heap-based buffer overflow (as stated). Impact: local privilege escalation with high confidentiality, i...
CVE-2023-21818
Technical details for CVE-2023-21818 are not publicly provided in the supplied documents. The available sources reference the CVE within larger Windows vulnerability lists but do not disclose affected products, root cause, impact, or fixes.
CVE-2023-24907
CVE-2023-24907 describes a remote code execution vulnerability in the Microsoft PostScript and PCL6 Class Printer Driver . The CVE entry (as per NVD) has a CVSS 3.1 base score of 8.8 (High) with vectors: AV:N, AC:L, PR:L, UI:N, S:U, C:H, I:H, A:H, indicating network attack with no user interactio...
CVE-2023-24913
CNVD-2023-30861 describes CVE-2023-24913 as a remote code execution vulnerability in Microsoft PostScript and PCL6 Class Printer Driver. Affected components are Microsoft PostScript Printer Driver and Microsoft PCL6 Class Printer Driver, with exploitation described as remote code execution by an ...
CVE-2023-28225
CVE-2023-28225 is described as a Windows NTLM Elevation of Privilege vulnerability. The provided data indicate a local attack vector with low privileges required, no user interaction, and a high impact on confidentiality, integrity, and availability (CVSS 3.1: AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)...
CVE-2023-28298
Technical details for CVE-2023-28298 are not provided in the connected documents. OpenVAS entries reference the CVE across KB updates but do not describe affected components, root cause, impact, or remediation. Monitor for updates.
CVE-2023-32011
Technical details about CVE-2023-32011 are not publicly provided in the supplied documents. The available sources confirm the vulnerability name and related MS updates but do not disclose affected products, versions, root cause, or fixes.
CVE-2024-30050
CVE-2024-30050 is a Windows Mark of the Web security feature bypass vulnerability. Public sources label it as a security bypass issue in MOTW, with a CVSS v3.1 base score of 5.4 (Network, Low complexity, User interaction required; I and A impacts: I = Low, A = Low). The condition allows bypass of...
CVE-2023-28249
CVE-2023-28249 is a Windows Boot Manager security feature bypass vulnerability. The connected sources confirm the affected component as Windows Boot Manager and classify the issue as a bypass of security features with high potential impact on confidentiality, integrity, and availability; specific...
CVE-2023-29364
Technical details for CVE-2023-29364 are not provided in the supplied documents. Monitor for updates from Microsoft and CVE records.
CVE-2024-49080
CVE-2024-49080 affects Windows IP Routing Management Snapin and is a remote code execution vulnerability. According to the Initial document, it has CVSS 3.1 base metrics: Network attack vector, low attack complexity, low privileges required, no user interaction, with impacts on confidentiality, i...
CVE-2025-21419
CVE-2025-21419 is a Windows Setup cleanup vulnerability that enables local elevation of privilege. The CVSS 3.1 vector (AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H) indicates an attacker with low privileges and local access can achieve high integrity and availability impact, without user interaction. The...
CVE-2023-23421
CVE-2023-23421 is part of a family of hive-memory-corruption bugs in the Windows Registry (kernel) that enable local privilege escalation. The connected analysis shows an attacker-controlled hive memory‑corruption primitive (e.g., UAF in a registry key or related hive data) that can be exploited ...