CVE-2023-36909

Technical details for CVE-2023-36909 are not publicly provided in the supplied documents. No affected products, root cause, or remediation details are present here. Monitor for updates.

CVE-2024-43634

CVE-2024-43634 (Windows USB Video Class System Driver Elevation of Privilege) affects Windows USB Video Driver. Connected sources corroborate a privilege-escalation vulnerability with CVSS v3.1 base score 6.8 (Vector: Privileges none, User interaction none, Attack vector physical, Scope unchanged...

CVE-2025-21303

Technical details are not publicly provided in the supplied documents for CVE-2025-21303 (Windows Telephony Service RCE). Monitor for updates from Microsoft; no specific vulnerable component/version or remediation is described here.

CVE-2025-27483

CVE-2025-27483 is an NTFS elevation-of-privilege issue described as an out-of-bounds read in Windows NTFS that could allow a local attacker to obtain elevated privileges. The CVE is tied to Windows NTFS and is rated HIGH (CVSS 3.1: AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H; base score 7.8). Public refe...

CVE-2026-62795

CVE-2026-62795 is a Windows LDAP (Lightweight Directory Access Protocol) use-after-free vulnerability that allows a remote attacker to execute code over the network. The issue is described as a remote code execution in Windows LDAP due to a use-after-free condition, enabling an unauthenticated, n...

CVE-2026-65679

Summary: CVE-2026-65679 is a heap-based buffer overflow in the Windows iSCSI Target Service that allows remote code execution over a network. The vulnerability arises from an out-of-bounds write handling, enabling an unauthenticated attacker to execute code on affected systems. The CVSSv3.1 vecto...

CVE-2023-21688

Technical details about CVE-2023-21688 are not publicly provided in the supplied documents. No concrete information on affected products, root cause, or remediation is available here. Monitor for updates from official sources.

CVE-2023-28236

CVE-2023-28236 is a Windows kernel elevation-of-privilege vulnerability. The description indicates a local-privilege escalation affecting the Windows kernel with a high impact on confidentiality, integrity, and availability (CVSS 3.1: AV:L, AC:L, PR:L, UI:N, S:U, C:H, I:H, A:H). The available con...

CVE-2023-28269

CVE-2023-28269 describes a Security Feature Bypass in Windows Boot Manager. Affected: Windows Boot Manager. Impact: confidentiality, integrity, and availability rated high. Exploitation characteristics (per NVD): physical access required (attack vector Physical), low attack complexity, no privile...

CVE-2023-35313

CVE-2023-35313 is a Windows OCSP SnapIn Remote Code Execution vulnerability. Multiple sources confirm a local-execution flaw in the Windows OCSP SnapIn component that could allow an attacker to remotely execute code on a vulnerable system, with impact listed as high (CVSS 7.8). Affected platforms...

CVE-2024-30017

CVE-2024-30017 affects Microsoft Windows Hyper-V. It is a remote code execution vulnerability in Hyper-V with CVSSv3.1 base score 8.8 (Network, Privileges Required: Low, User Interaction: None; Confidentiality/Integrity/Availability: High). Affected: Windows Hyper-V component; likely requires net...

CVE-2024-30087

Technical details are not provided in the connected documents. CVE-2024-30087 is a Win32k Elevation of Privilege vulnerability with CVSS 3.1 base score 7.8, vector LOCAL, exploit complexity LOW, privileges required LOW, user interaction NONE.

CVE-2024-38184

CVE-2024-38184 is a Windows kernel-mode driver elevation of privilege vulnerability. The CVE affects Windows kernel-mode drivers and is exploitable locally with LOW privileges required and no user interaction, with a HIGH impact on confidentiality, integrity, and availability per the CVSS 3.1 met...

CVE-2024-43520

CVE-2024-43520 is a Windows Kernel Denial-of-Service vulnerability. The initial records classify it as a Windows kernel issue affecting availability, with a CVSS v3.1 base score of 5.0 (LOCAL, LOW privileges, LOW attack complexity, UI: REQUIRED, S: U, C/N/I with A:H). Connected sources indicate t...

CVE-2025-26648

CVE-2025-26648 affects the Windows Kernel. Description: sensitive data stored in memory that is not properly locked can allow an authorized locally authenticated attacker to elevate privileges. The issue is listed under Windows Kernel vulnerabilities (CVE-2025-26648) with high impact (local Privi...

CVE-2026-33834

Technical details are not publicly available in the provided documents. No affected products/versions or remediation specifics are included here. Monitor for updates from official CVE/NVD entries to obtain concrete exploit info, mitigations, and fixes.

CVE-2026-62820

CVE-2026-62820 concerns Windows DNS Server. The issue is a race condition caused by concurrent execution using a shared resource with improper synchronization, leading to remote code execution over a network. Affected product is Windows DNS Server; the vulnerability is triggered via network acces...

CVE-2023-28226

CVE-2023-28226 relates to Windows Enroll Engine Security Feature Bypass. Affected software: Windows OS (Enroll Engine component). Vulnerability type: security feature bypass. Reported metrics indicate: CVSS 3.1, attack vector Network, attack complexity High, privileges required None, user interac...

CVE-2023-29370

Technical details about CVE-2023-29370 are not publicly provided in the supplied documents. No affected products, root cause, impact, or remediation specifics are disclosed here. Monitor for updates in connected sources.

CVE-2024-30028

CVE-2024-30028 is a Windows Win32k elevation-of-privilege vulnerability. The NCSC advisory lists it under Windows Win32K with a CVSS v3.1 base score of 7.8 (HIGH) and impact: higher privileges, and notes the vulnerability is exploitable locally with low attack complexity (PR:L, AV:L) and no user ...

CVE-2024-37972

Technical details for CVE-2024-37972 are not publicly provided in the supplied documents. No affected products, root cause, impact, or remediation are disclosed here. Monitor for updates from authoritative sources.

CVE-2026-40403

CVE-2026-40403 describes a heap-based buffer overflow in Windows Win32K GRFX that could allow a locally authenticated attacker to execute code. Affected component is Windows graphics subsystem (Win32K GRFX); cause is a heap-based overflow. Impact per available data is local code execution with hi...

CVE-2026-42836

CVE-2026-42836: A race condition due to improper synchronization in the Windows Function Discovery Service (fdwsd.dll) enables a locally authenticated attacker to escalate privileges. The issue is described as a concurrency problem with a shared resource. Affected component: Function Discovery Se...

CVE-2026-62819

CVE-2026-62819 corresponds to a Remote Code Execution vulnerability in Windows Routing and Remote Access Service (RRAS). Available details indicate that the vulnerability resides in RRAS and could allow an attacker to gain unauthorized code execution on a victim’s machine via a network attack. Th...

CVE-2023-28221

Technical details about CVE-2023-28221 are not publicly available in the provided documents. Monitor for updates from Microsoft and vulnerability feeds.

CVE-2024-30029

According to the NCSC advisory (NCSC-2024-0210), CVE-2024-30029 affects Microsoft Windows RRAS and is rated with CVSSv3.1 base score 7.5 (HIGH). The RRAS vulnerability enables remote code execution via network access, with the advisory indicating the impact as executing random code on the target....

CVE-2023-21686

Technical details about CVE-2023-21686 are not publicly provided in the supplied documents. No affected product/version/root cause or remediation are described here. Monitor for updates from official sources.

CVE-2023-21739

Technical details about CVE-2023-21739 are not provided in the connected documents. The supplied items reference other CVEs and updates; please monitor official vulnerability notes from Microsoft/NVD for details and remediation.

CVE-2023-21820

Technical details (affected product/version, root cause, impact, or fix) are not publicly available in the provided documents. Monitor for updates.

CVE-2023-32038

CVE-2023-32038 concerns the Microsoft ODBC Driver Remote Code Execution vulnerability. The connected data identifies the affected component as the Microsoft ODBC Driver and classifies the impact as Remote Code Execution with a high severity (CVSS v3.1 base score 8.8). Attack vectors are NETWORK w...

CVE-2024-30024

CVE-2024-30024 is listed by ENISA NCSC as a Windows RRAS vulnerability with a CVSS v3.1 score of 7.5 (HIGH) and a base impact of executing random code. It is part of the Windows Routing and Remote Access Service (RRAS) family and is described in the connected document as a network-exposed issue t...

CVE-2024-30077

Technical details are not provided in the supplied documents; no public specifics are included here. Monitor for updates from official advisories.

CVE-2025-47981

CVE-2025-47981 is a heap-based buffer overflow in Windows SPNEGO Extended Negotiation that enables pre-auth remote code execution over the network. It affects Windows clients (e.g., Windows 10 1607+) and Windows Server platforms. The initial doc provides a 9.8 CVSSv3.1 score (NETWORK, NONE/LOW/NO...

CVE-2023-21801

CVE-2023-21801 affects Microsoft PostScript and PCL6 Class Printer Driver and is described as a Remote Code Execution vulnerability. Connected documents confirm the vulnerability exists in these printer drivers but do not provide concrete details on affected product versions, root cause specifics...

CVE-2023-29346

Technical details about CVE-2023-29346 are not publicly available in the provided documents. No affected product/version/impact is specified here. Monitor for updates in the connected sources.

CVE-2023-33164

CVE-2023-33164 is described as a Remote Procedure Call Runtime Denial of Service vulnerability. The provided data show CVSS v3.1 base score 6.5 (Medium) with network attack vector, low attack complexity, privilege requirement Low, no user interaction, and availability impact High. The connected d...

CVE-2023-36889

Technical details about CVE-2023-36889 are not publicly available in the provided documents. Monitor for updates from vendors and vulnerability feeds for affected products, impact, and remediation.

CVE-2024-30016

CVE-2024-30016 affects Windows Cryptographic Services . The vulnerability is described as an information disclosure with impact to confidentiality (high) and is listed in sources as a Windows component issue with a CVSS v3.1 base score of 5.5 (attack vector: local; privileges required: low; user ...

CVE-2024-30025

CVE-2024-30025 affects the Windows Common Log File System Driver. The Windows/KB guidance mappings list CVE-2024-30025 with a CVSS v3.1 base score of 7.8 (LOCAL attack, LOW complexity, LOW privileges required, HIGH confidentiality/integrity/availability impact) and categorize it as an privilege e...

CVE-2022-35749

Technical details about CVE-2022-35749 are not provided in the supplied documents. Available references confirm the CVE title and severity, but no affected product/version or root cause are detailed here. Monitor for official disclosures and updates.

CVE-2022-35752

Technical details about CVE-2022-35752 are not publicly available in the provided connected documents. Monitor for updates.

CVE-2022-35755

Technical details about CVE-2022-35755 (affected software, root cause, impact, or patch specifics) are not provided in the connected documents; monitor official CVE/NVD updates for details.

CVE-2024-30014

CVE-2024-30014 is a Windows RRAS (Routing and Remote Access Service) Remote Code Execution vulnerability. Connected sources confirm the RRAS entry with CVSS v3.1 base score 7.5 (HIGH): Network attack vector, high impact on confidentiality, integrity and availability, with user interaction require...

CVE-2024-30023

CVE-2024-30023 affects the Windows Routing and Remote Access Service (RRAS). The RRAS remote code execution vulnerability is listed under Windows RRAS with CVSS details indicating Network attack vector, high impact to confidentiality, integrity, and availability, and requiring user interaction. T...

CVE-2024-30099

Technical details for CVE-2024-30099 are not present in the provided documents. No affected products, root cause, exploit information, or remediation are stated here. Please monitor for updates from Microsoft and related security advisories to obtain confirmed details.

CVE-2025-21205

CVE-2025-21205 is a Windows Telephony Service vulnerability: a heap-based buffer overflow that allows a network-based attacker to achieve remote code execution. The CVSS details show a HIGH base score with NETWORK access, LOW attack complexity, and PR:N, UI:R. Successful exploitation would impact...

CVE-2023-29365

Technical details about CVE-2023-29365 are not publicly available in the provided documents. Monitor official sources (Microsoft MSRC/NVD) for updates on affected products, impact, and fixes.

CVE-2024-38115

Technical details for CVE-2024-38115 are not publicly available in the provided documents. Monitor for updates.

CVE-2024-43554

CVE-2024-43554 corresponds to a Windows Kernel-Mode Driver Information Disclosure vulnerability with an impact described as Access to sensitive data (CVSS ~5.5). Affected component is a kernel-mode driver; root cause details are not fully disclosed in the provided documents. Microsoft has issued ...

CVE-2025-21286

CVE-2025-21286 is a Windows Telephony Service Remote Code Execution vulnerability. The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) yields a high impact with network attack vector and user interaction required. Connected sources confirm Microsoft fixes are available: KB5050009 (OS Build ...