CVE-2026-35421

CVE-2026-35421 describes a heap-based buffer overflow in Windows GDI that permits a local attacker to execute arbitrary code. The entry lists a CVSS v3.1 base score of 7.8 (HIGH) with LOCAL attack vector, LOW attack complexity, NO privileges required, user interaction required, and impacts to con...

CVE-2023-24883

Technical details about CVE-2023-24883 are not provided in the supplied documents. Public information on affected product/versions, root cause, impact, and fixes is not available here. Monitor for updates.

CVE-2023-24908

Technical details for CVE-2023-24908 are not publicly available in the provided documents. Monitor for updates to obtain affected products, root cause, impact, and fixes.

CVE-2023-32017

CVE-2023-32017 concerns the Microsoft PostScript Printer Driver and allows Remote Code Execution tied to a driver component. The IOCs/impact in the provided materials indicate a LOCAL attack vector with no user interaction, and confidentiality, integrity, and availability impacts rated HIGH. No e...

CVE-2023-35387

CVE-2023-35387 affects the Windows Bluetooth A2DP driver, described as an Elevation of Privilege vulnerability. The CVSSv3.1 metrics indicate an adjacent attack vector, no privileges required, low attack complexity, user interaction required, and a CHANGED scope with HIGH impacts to confidentiali...

CVE-2024-30020

CVE-2024-30020 corresponds to a Remote Code Execution vulnerability in Windows Cryptographic Services. Affected: Windows Cryptographic Services component; vulnerability type is RCE. From the CVE entry, the CVSS v3.1 base score is 8.1 (High) with Network attack vector, high attack complexity, no p...

CVE-2024-30031

CVE-2024-30031 is documented as a Windows elevation-of-privilege issue affecting the CNG Key Isolation Service . The available sources describe the vulnerability as a local, privilege-required issue with high impact across confidentiality, integrity, and availability, but do not provide vendor-sp...

CVE-2024-38132

Technical details about CVE-2024-38132 are not publicly provided in the supplied connected documents. The NAT DoS entry is listed, but no affected product/version, root cause, or remediation is described. Monitor for updates.

CVE-2024-38152

CVE-2024-38152 is listed under Windows WDAC OLE DB provider for SQL with a CVSS and impact of 7.80 (Execute Random Code). The connected documents confirm the affected component and the vulnerability’s label, but do not provide concrete details on root cause, affected versions, exploit scenarios, ...

CVE-2025-21274

CVE-2025-21274 corresponds to a Windows Event Tracing Denial of Service vulnerability. The NVD entry rates impact as Denial of Service with a CVSSv3.1 base score of 5.5 (Local, Low UI, privileges required: Low, Availability impact: High). Connected sources indicate this vulnerability affects Wind...

CVE-2025-27736

Technical details about CVE-2025-27736 (affected product/versions/root cause/fix) are not disclosed in the provided connected documents. Monitor Microsoft advisories and CVE records for updates and remediation information.

CVE-2023-24862

CVE-2023-24862 is a Windows Schannel (Secure Channel) Denial of Service vulnerability. The available data identifies the flaw as local with low privileges required and a high availability impact (CVSS v3.1: AV=L/AC=L/PR=L/UI=N/S=U/C=N/I=N/A=H). Public documents do not provide granular technical d...

CVE-2024-30081

Technical details for CVE-2024-30081 are not provided in the supplied documents. The connected Microsoft KB updates reference unrelated issues (RADIUS, BitLocker, LNK policy) and do not disclose affected products, root cause, impact, or fixes for this CVE. Monitor for updates.

CVE-2023-28243

CVE-2023-28243 is a remote code execution vulnerability in the Microsoft PostScript and PCL6 Class Printer Driver. The CVE entry notes a high-severity (CVSS 3.1 base 8.8) issue with network attack vector and no user interaction required, applicable to affected printer driver components. Connected...

CVE-2024-43623

CVE-2024-43623 is documented across connected sources as a Windows NT OS Kernel elevation-of-privilege vulnerability. The ENISA/NCSC summary and related Microsoft patch-coverage references confirm it affects the Windows NT OS Kernel and was addressed via the November 2024 update cycle (e.g., KB50...

CVE-2024-49102

CVE-2024-49102 — Windows RRAS Remote Code Execution is a network‑based vulnerability in the Routing and Remote Access Service (RRAS) of Windows. The CVSS score cited in the initial entry is 8.8/10 (High) with AV:N, AC:L, PR:N, UI:R, S:U, C/H/I/A: High, indicating unauthenticated network access re...

CVE-2025-21338

CVE-2025-21338 is a GDI+ Remote Code Execution vulnerability. The CVE affects Windows components that use GDI+ and has a CVSSv3.1 base score of 7.8 (HIGH) with LOCAL attack vector, LOW privileges required, no user interaction, and impacts to confidentiality, integrity, and availability as describ...

CVE-2023-21804

Technical details about CVE-2023-21804 are not publicly available in the provided documents. Monitor for updates from Microsoft and related CVE references to obtain affected products, impact, and remediation.

CVE-2023-23401

Technical details (affected components, root cause, impact, and remediation) for CVE-2023-23401 are not publicly provided in the supplied documents. Monitor for updates from official advisories and vulnerability databases.

CVE-2023-24863

The CVE-2023-24863 entry concerns a vulnerability in the Microsoft PostScript and PCL6 Class Printer Driver described as an Information Disclosure Vulnerability . The public data provided does not specify the exact root cause details, vulnerable file/function, affected product versions, or the ex...

CVE-2024-30022

CVE-2024-30022 pertains to the Windows RRAS component and is listed in the ENISA/NCSC compilation with a CVSSv3.1 base score of 7.5 (high). The adverse impact is remote code execution with network access, requiring user interaction and no privileges. Connected sources explicitly associate CVE-202...

CVE-2025-29809

CVE-2025-29809 is a Windows Kerberos security feature bypass vulnerability. The issue involves insecure storage of sensitive information in Kerberos, enabling an attacker with local access and low privileges, and no user interaction, to bypass a security feature. Affected product/area: Windows Ke...

CVE-2025-59282

CVE-2025-59282 affects Inbox COM Objects. The vulnerability is a race condition caused by concurrent access to a shared resource, leading to potential local code execution by an authenticated attacker with local access. The score in public metrics lists a CVSS v3.1 base score of 7.0 (HIGH) with l...

CVE-2023-24866

Technical details about CVE-2023-24866 are not publicly provided in the supplied documents. No affected products, versions, or remediation specifics are confirmed here. Monitor for updates from official sources.

CVE-2023-24927

CVE-2023-24927 affects Microsoft PostScript and PCL6 Class Printer Driver and is described as a Remote Code Execution vulnerability. The connected CNVD entry confirms remote code execution exists, but the provided documents do not specify the exact root cause, affected versions, or exploit detail...

CVE-2023-28271

CVE-2023-28271 is discussed within registry and KTM-transaction logging context in the connected documents, indicating a kernel memory-related information disclosure linked to KTM logs and registry transaction handling. The material notes exposure of uninitialized kernel data and pointers to KTM ...

CVE-2023-29372

CVE-2023-29372 affects the Microsoft WDAC OLE DB provider for SQL Server and is described as a Remote Code Execution vulnerability. The available information lists a CVSS v3.1 base score of 8.8 (HIGH) with NETWORK attack vector, LOW attack complexity, NO privileges required, UI required, and impa...

CVE-2024-30090

CVE-2024-30090 is an elevation-of-privilege vulnerability affecting the Windows Kernel Streaming framework, specifically the msrks.ks.sys component used for processing streaming data (e.g., microphone/webcam input). The public materials indicate exploitation potential via a memory-bounds/buffer h...

CVE-2025-21213

Technical details about CVE-2025-21213 are not provided in the supplied documents. No affected products, root cause, or remediation specifics are disclosed here. Monitor for updates from official advisories.

CVE-2025-24066

CVE-2025-24066 is a local privilege escalation in Windows Kernel-Mode Drivers caused by a heap-based buffer overflow in the kernel streaming service driver. The impact is increased privileges (local), with the vulnerability exploitable only locally. Microsoft has released updates addressing this ...

CVE-2025-29810

CVE-2025-29810 corresponds to an improper access control in Active Directory Domain Services that can allow an authenticated attacker to elevate privileges over the network. The NCSC advisory groups CVE-2025-29810 under Windows Active Directory Domain Services with an impact described as ‘Obtain ...

CVE-2024-30084

Technical details (affected product/versions/root cause/impact) for CVE-2024-30084 are not publicly available in the provided documents. Monitor for updates.

CVE-2024-38117

CVE-2024-38117 affects the Windows NTFS component and is labeled as an elevation-of-privilege vulnerability with the impact “Obtaining Increased Rights” and a CVSS v3.1 base score of 7.8 (High). The connected documents provide the impact and the component but do not disclose the exact root cause ...

CVE-2024-49122

CVE-2024-49122 is a Microsoft Message Queuing (MSMQ) Remote Code Execution vulnerability. The entry notes a network-exposed base score of 8.1 (High) with no user interaction and total impact, and the MSMQ component is affected. Connected documents corroborate an RCE classification for MSMQ with u...

CVE-2023-21816

No concrete technical details about CVE-2023-21816 are present in the connected documents. The initial description only notes a Windows AD DS DoS. Monitor official advisories and vendor updates for remediation, affected versions, impact, and patch information.

CVE-2023-24909

CNVD-2023-30863 describes CVE-2023-24909 as a remote code execution vulnerability in Microsoft PostScript and PCL6 Class Printer Driver. The CNVD entry states the vulnerability exists and affects the printer drivers from Microsoft, but it does not provide detailed root cause, affected versions, o...

CVE-2023-24942

Technical details (affected products, root cause, impact, or remediation) are not publicly available in the provided documents for CVE-2023-24942. Monitor for updates.

CVE-2023-36908

CVE-2023-36908 details are not publicly provided in the supplied documents. No explicit affected products, root cause, or remediation are described. Monitor for updates from official sources.

CVE-2024-30009

CVE-2024-30009 corresponds to a Windows RRAS remote code execution vulnerability. The RRAS service is affected, with the issue enabling execution of arbitrary code on a network-accessible target. The CVSS vector indicates network access, low attack complexity, no privileges required, user interac...

CVE-2024-30015

CVE-2024-30015 affects Windows Routing and Remote Access Service (RRAS). The connected NCSC advisory lists CVE-2024-30015 under RRAS with impact described as Execution of random code (CVSS v3.1: 7.5, Network attack vector, high complexity, no privileges required, user interaction required, impact...

CVE-2024-30049

CVE-2024-30049 is a Windows Win32 Kernel Subsystem elevation-of-privilege vulnerability affecting the Win32K component. Public details in connected sources indicate the issue enables elevated privileges with local access (CVSSv3.1: AV=L/AC=L/PR=L/UI=N/S=U/C=H/I=H/A=H; base score 7.8), and multipl...

CVE-2025-24990

CVE-2025-24990 is a local privilege escalation in the Microsoft‑supplied Agere Modem Driver (ltmdm64.sys). The issue is described as an untrusted pointer dereference within the driver, enabling a local attacker to escalate privileges to administrator. Microsoft addressed it by removing the driver...

CVE-2026-65789

CVE-2026-65789 corresponds to a Windows DNS Server use-after-free vulnerability that enables remote code execution over a network. Based on the connected documents, the vulnerability is described as a use-after-free in Windows DNS which can allow an unauthorized attacker to execute code remotely....

CVE-2023-21694

Technical details about CVE-2023-21694 are not publicly provided in the supplied documents. The connected records do not specify affected products, root cause, remediation, or exploit status. Monitor for official disclosures and updates.

CVE-2023-21695

Technical details about CVE-2023-21695 are not publicly available in the provided documents. Monitor for updates from official sources; no concrete exploit/vector/impact details are provided here.

CVE-2023-24928

CVE-2023-24928 relates to a remote code execution vulnerability in Microsoft PostScript and PCL6 Class Printer Driver. The issue affects the PostScript/PCL6 printer driver components, enabling an attacker to remotely execute code by crafting data sent to a printer shared resource. The available c...

CVE-2023-24931

Technical details for CVE-2023-24931 are not provided in the connected documents. Public information about affected products, root cause, impact, and fixes is not present here; monitor for official advisories and updates from vendors and CERTs.

CVE-2023-35330

CVE-2023-35330 is a Windows vulnerability described as a Windows Extended Negotiation Denial of Service. According to the provided data, the CVSS 3.1 base score is 7.5 (High), with network attack vector, low parallel complexity, no privileges required, no user interaction, and impact limited to A...

CVE-2023-36909

Technical details for CVE-2023-36909 are not publicly provided in the supplied documents. No affected products, root cause, or remediation details are present here. Monitor for updates.

CVE-2024-43634

CVE-2024-43634 (Windows USB Video Class System Driver Elevation of Privilege) affects Windows USB Video Driver. Connected sources corroborate a privilege-escalation vulnerability with CVSS v3.1 base score 6.8 (Vector: Privileges none, User interaction none, Attack vector physical, Scope unchanged...