CVE-2025-33064

CVE-2025-33064 affects Windows Routing and Remote Access Service (RRAS). It is a heap-based buffer overflow that allows an authenticated attacker to execute code over the network. CVSS v3.1 base score 8.8 (HIGH). Affected component: RRAS on Windows. Root cause: heap-based overflow in RRAS handlin...

CVE-2026-58640

CVE-2026-58640 is a heap-based buffer overflow in Windows NTFS that enables an authorized local attacker to execute code. The vulnerability is tied to Windows NTFS logic and has a CVSS v3.1 score of 7.3 (HIGH) with local access required and user interaction. Affected component: Windows NTFS; root...

CVE-2022-35746

Technical details about CVE-2022-35746 are not provided in the supplied documents. No product/version/root-cause/impact are specified here; monitor for official updates from Microsoft/NVD to obtain concrete information and remediation.

CVE-2023-35299

CVE-2023-35299 affects the Windows Common Log File System Driver and is an Elevation of Privilege vulnerability. CVSSv3.1 base score 7.8 (Local, Privilege Required: Low, User Interaction: None, Scope: Unchanged; Impact: Confidentiality/Integrity/Availability High). The connected sources (includin...

CVE-2023-35314

Technical details for CVE-2023-35314 are not provided in the connected documents. The materials here only reiterate the vulnerability title. No affected products, root cause, or fixes are specified. Monitor for updates.

CVE-2023-35316

Technical details about CVE-2023-35316 (affected products, root cause, impact, or fixes) are not provided in the connected documents. The initial description lacks public details. Monitor for updates and any forthcoming technical information.

CVE-2023-35336

CVE-2023-35336 affects the Windows MSHTML Platform and is described as a Security Feature Bypass vulnerability. Public details in the provided documents indicate the issue targets the MSHTML component and is classified with a MEDIUM base severity (CVSS v3.1: 5.4 overall; CPU: NETWORK attack vecto...

CVE-2024-37970

Technical details about CVE-2024-37970 are not provided in the connected documents. The initial description notes a Secure Boot security feature bypass, but no affected product/version/root cause/fix is disclosed here. Monitor for updates.

CVE-2024-38237

CVE-2024-38237 is a local privilege-escalation in Windows Kernel Streaming WOW Thunk Service Driver. Affected component is a Windows kernel-mode driver used by streaming services; vulnerability exploited locally with low privileges and no user interaction, leading to elevated privileges and poten...

CVE-2024-43514

Technical details about CVE-2024-43514 are not publicly provided in the connected documents; they reference fixes but do not describe root cause, vectors, or affected versions. Monitor for updates.

CVE-2024-43553

CVE-2024-43553 is an NT OS Kernel elevation-of-privilege vulnerability associated with Windows NT OS Kernel. The connected data explicitly maps this CVE to Windows NT OS Kernel with a high impact (privilege escalation). The NCSC advisory notes that vulnerabilities in Windows have been fixed, and ...

CVE-2025-21287

CVE-2025-21287 is a Windows Installer elevation of privilege vulnerability. The linked documents confirm this CVE affects the Windows Installer component in Windows OS, enabling a local attacker with low privileges and no user interaction to elevate privileges. Remediation is provided by Microsof...

CVE-2025-21359

Technical details (affected product, root cause, impact, or fix) for CVE-2025-21359 are not provided in the supplied documents. Please monitor official advisories (Microsoft/MSRC updates) for concrete vulnerability specifics and remediation guidance.

CVE-2025-21378

Technical details about CVE-2025-21378 are not publicly available in the provided documents. The set includes only high-level summaries and advisories; monitor for updates from Microsoft and NVD for affected products, impact, and fixes.

CVE-2025-24073

CVE-2025-24073 affects the Windows DWM Core Library and stems from improper input validation, enabling a locally authorized attacker to elevate privileges. The vulnerability is described with a base CVSS v3.1 score of 7.8 (High) and local attack vector with low complexity, requiring low privilege...

CVE-2025-27741

CVE-2025-27741 describes an out-of-bounds read in Windows NTFS that allows a local attacker to elevate privileges. The issue is tied to NTFS handling and is mitigated by Microsoft security updates; affected users should apply the latest Windows security updates per MSRC guidance. The connected so...

CVE-2025-47955

CVE-2025-47955 involves improper privilege management in Windows Remote Access Connection Manager, enabling local privilege escalation for an authorized attacker. CVSS 3.1 base 7.8 (HIGH): Local, low complexity, no user interaction, with high impact on confidentiality, integrity, and availability...

CVE-2026-26151

CVE-2026-26151 describes insufficient UI warnings in Windows Remote Desktop that can enable a network attacker to spoof a remote session. The NVD entry lists a CVSS v3.1 base score of 7.1 (HIGH) with network access, no privileges required, user interaction required, and impact to confidentiality ...

CVE-2026-54128

CVE-2026-54128 is a Windows DHCP Client use-after-free vulnerability that could allow an unauthenticated local attacker to execute code. The issue, described in the NVD entry and echoed by TALOS, affects the Windows DHCP Client component and is known to have been exploited in the wild (per CIRCL ...

CVE-2023-33168

CVE-2023-33168 is a Remote Procedure Call Runtime Denial of Service vulnerability. The connected documents provide only a generic description and CVSS metrics; they do not reveal affected product/vendor/component/versions, root cause, exploit details, or a fix. OpenVAS entries reference the CVE b...

CVE-2023-35339

CVE-2023-35339 is a Windows CryptoAPI Denial of Service vulnerability with a CVSS v3.1 base score of 7.5 (NETWORK, LOW attack complexity, NONE privileges, NONE user interaction, HIGH availability impact). The provided records do not specify affected versions, root cause details, exploitation stat...

CVE-2024-38142

CVE-2024-38142 is a Windows Secure Kernel Mode elevation-of-privilege vulnerability (local, low-privilege prerequisite; high impact). The connected sources provide CVSS and impact only (Obtaining Increased Entitlements) and do not specify root cause details beyond the Windows kernel context. Publ...

CVE-2024-38145

CVE-2024-38145 affects the Windows Layer-2 Bridge Network Driver. The available data shows a Denial-of-Service impact with CVSS v3.1 base score 7.5 (Network attack, Low attack complexity, No privileges, No user interaction). Root cause, affected software versions, and remediation are not provided...

CVE-2024-38244

CVE-2024-38244 is a Windows Kernel Streaming Service Driver elevation-of-privilege flaw. The CVE is rated CVSSv3.1 base score 7.8 (HIGH) with LOCAL attack vector, LOW attack complexity, and LOW privileges required; exploitation grants total compromise of confidentiality, integrity, and availabili...

CVE-2024-49090

CVE-2024-49090 affects the Windows Common Log File System Driver. The connected sources indicate an Elevation of Privilege vulnerability in the CLFS driver that could allow a local attacker with low privileges and no user interaction to obtain increased rights (high impact across confidentiality,...

CVE-2025-21184

CVE-2025-21184 is an Elevation of Privilege issue affecting Windows Core Messaging. The connected AVLEONOV article identifies it as EoP in Windows Core Messaging and lists it among February Patch Tuesday CVEs. Provided documents do not include a vendor/product version, root cause, exploit details...

CVE-2025-21212

CVE-2025-21212 corresponds to an Internet Connection Sharing (ICS) Denial of Service vulnerability in Windows. Reported impact is DoS, with an adjacent attack vector, low attack complexity, no user interaction required, and no confidentiality/integrity impact, but availability is affected (CVSS 3...

CVE-2025-27469

CVE-2025-27469 affects Windows LDAP (Lightweight Directory Access Protocol) and describes an uncontrolled resource consumption that enables an unauthenticated attacker to cause network-denied service. The issue is categorized as a Denial-of-Service via LDAP on the network. Microsoft has released ...

CVE-2026-33842

The CVE-2026-33842 entry describes a local information disclosure in Windows File Explorer. The vulnerability allows an authorized (low privileges) attacker to disclose sensitive information locally through the File Explorer component. Per the NVD entry, the impact is confined to confidentiality ...

CVE-2026-57094

CVE-2026-57094 is a remote-code-execution vulnerability in Microsoft Windows Media Foundation caused by a heap-based buffer overflow. It affects Windows Media Foundation components and can be exploited over a network to run arbitrary code. Public details confirm the vulnerability as a network-att...

CVE-2023-35309

MSMQ Remote Code Execution vulnerability CVE-2023-35309 is discussed in the connected AVLEONOV article as an MSMQ RCE requiring an attacker to send a malicious MSMQ packet to an MSMQ server. The article also suggests blocking TCP port 1801 as a mitigation and notes the vulnerability context among...

CVE-2024-38091

Technical details for CVE-2024-38091 are not provided in the connected documents. Monitor for updates; no affected products, root cause, vectors, or fixes are stated here.

CVE-2024-38149

CVE-2024-38149 is a Windows BranchCache Denial of Service vulnerability. Documents indicate a network-exploitable issue (CVSS v3.1: 7.5, AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) affecting BranchCache components. Microsoft provides fixes via security updates (KB/MSRC guidance); no explicit root-cause ...

CVE-2024-38243

CVE-2024-38243 is a Windows Streaming Service elevation of privilege vulnerability. The connected NCSC entry classifies it as impacting Windows Streaming Service with the effect of obtaining elevated privileges, consistent with a local-exploit scenario (CVSS: Local, Privileges Required Low, User ...

CVE-2024-38256

CVE-2024-38256 is a Windows kernel‑mode driver information disclosure vulnerability. The incident affects Windows kernel‑mode drivers and has a CVSSv3.1 base score of 5.5 (MEDIUM) with local attack vector, low attack complexity, and low privileges required; confidentiality impact is High, others ...

CVE-2024-43645

CVE-2024-43645 is a Windows Defender Application Control (WDAC) security feature bypass described in connected advisories. The vulnerability permits bypassing WDAC protections via a local attacker, with high potential impact to confidentiality, integrity, and availability. Microsoft has published...

CVE-2025-21256

Technical details for CVE-2025-21256 are not provided in the connected documents. Public information here is limited to general Windows updates references; no product, exploit, or root-cause specifics are disclosed. Monitor for updates and additional disclosures.

CVE-2025-21265

Technical details about CVE-2025-21265 are not provided in the supplied documents. Public information on affected products, root cause, and fixes is missing here. Monitor for updates from Microsoft and NVD for concrete vulnerability specifics.

CVE-2025-26669

CVE-2025-26669 is listed in RRAS (Windows Routing and Remote Access Service) with the impact described as Access to sensitive data and a severity score of 8.80. The RRAS entry indicates an information-disclosure risk via an out-of-bounds read, attributed to a vulnerability in RRAS. Connected sour...

CVE-2025-29837

Technical details about CVE-2025-29837 (affected products, root cause, exploitability) are not publicly disclosed in the provided connected documents; no specifics on impact or remediation are available here.

CVE-2026-23668

CVE-2026-23668 affects the Windows Graphics Component and is an elevation-of-privilege vulnerability. The advisory indicates a local attack vector with high attack complexity, requiring low privileges and no user interaction (UI: NONE). The vulnerability impacts confidentiality, integrity, and av...

CVE-2026-62889

CVE-2026-62889 is a Windows SSTP remote code execution vulnerability caused by a double free in the SSTP implementation. The available descriptions from NVD and CVE records state that an unauthenticated attacker could exploit this over a network to execute arbitrary code. The CVSS 3.1 base score ...

CVE-2024-35270

Technical details about CVE-2024-35270 (Windows iSCSI Service DoS) are not provided in the connected documents. Monitor for official advisories and Microsoft updates for affected products and remediation.

CVE-2024-38070

Technical details about CVE-2024-38070 are not publicly provided in the supplied documents. Please monitor for updates from Microsoft and NVD; current entries reference WLDP but do not disclose exploit paths or affected products.

CVE-2024-43643

CVE-2024-43643 is a Windows USB Video Class System Driver elevation-of-privilege vulnerability. The vulnerability pertains to the Windows USB Video Driver component and is categorized with CVSSv3.1 vektor: physical attack, low complexity, no privileges required, no user interaction, and impacts t...

CVE-2024-49121

CVE-2024-49121 is an LDAP Denial-of-Service vulnerability in Windows LDAP (Domain Controller). The connected advisory confirms the LDAP issue as a DoS risk and notes that Microsoft has released fixes via updates; applying the relevant Windows security updates is the recommended remediation. MITRE...

CVE-2025-21214

Technical details about CVE-2025-21214 (Windows BitLocker information disclosure) are not publicly provided in the supplied connected documents. The sources reference updates but do not specify affected versions, root cause, exploitability, or mitigation beyond patch availability. Monitor for upd...

CVE-2025-21252

Technical details about CVE-2025-21252 are not publicly available in the provided documents. Monitor for updates from Microsoft and NVD for affected products, impact, and remediation.

CVE-2025-21266

CVE-2025-21266 is a Windows Telephony Service remote code execution vulnerability. The linked data shows a network-exposed impact with CVSS v3.1 base score 8.8 (HIGH), requiring user interaction for exploitation and affecting confidentiality, integrity, and availability. Affected component is the...

CVE-2025-21282

Technical details about CVE-2025-21282 are not publicly provided in the supplied documents. No affected product/version or exploit information is disclosed here. Monitor for updates from official advisories and CVE/NVD entries.