CVE-2025-21227

Technical details for CVE-2025-21227 are not publicly available in the provided documents. No root cause, affected products, or fixes are specified here. Monitor for updates from official advisories and CVE records.

CVE-2025-21290

The CVE-2025-21290 vulnerability affects Microsoft Message Queuing (MSMQ) and is a Denial of Service issue exploitable over the network. The provided data show a CVSS v3.1 base score of 7.5 (HIGH) with attack vector Network and no user interaction required. The root cause detail is not explicitly...

CVE-2025-21347

CVE-2025-21347 is linked to the Windows Update Stack and is described in the connected NCSC advisory as a Denial-of-Service vulnerability. The CVE entry in that document assigns a base CVSS-like severity of 6.0 and notes that Microsoft has updates available to fix the issue. The mode of the vulne...

CVE-2025-59254

Summary: CVE-2025-59254 is a heap-based buffer overflow in the Windows DWM Core Library that enables a locally authenticated attacker to escalate privileges. Affected component: DWM Core Library on Windows. Impact: Local privilege escalation with high potential impact; CVSS 3.1 score 7.8 (LOCAL, ...

CVE-2026-62757

Summary: CVE-2026-62757 involves Windows Schannel with improper verification of cryptographic signatures, allowing a network-borne attacker to bypass a security feature. The impact is described as a security feature bypass over the network, with a medium base score (CVSS 3.1: 5.3) and high confid...

CVE-2022-35759

Technical details for CVE-2022-35759 (affected product, root cause, impact, and fix) are not provided in the connected documents. Monitor for updates.

CVE-2023-35312

The CVE-2023-35312 entry concerns Microsoft VOLSNAP.SYS with local access privilege escalation. Based on the provided metrics, the vulnerability supports LOCAL attack vector, requiring LOW privileges and no user interaction, with HIGH impact on confidentiality, integrity, and availability (CVSS 3...

CVE-2024-38028

Technical details for CVE-2024-38028 are not publicly available in the provided documents; no affected products, root cause, or remediation are specified. Monitor for updates.

CVE-2024-38056

Technical details about CVE-2024-38056 are not publicly provided in the connected documents. The entry is listed, but no affected products, root cause, impact, or fixes are described here.

CVE-2024-38061

Technical details for CVE-2024-38061 (affected products, root cause, impact, fixes) are not provided in the supplied documents. No remediation or exploitation specifics are available here. Monitor for updates.

CVE-2024-38243

CVE-2024-38243 is a Windows Streaming Service elevation of privilege vulnerability. The connected NCSC entry classifies it as impacting Windows Streaming Service with the effect of obtaining elevated privileges, consistent with a local-exploit scenario (CVSS: Local, Privileges Required Low, User ...

CVE-2025-21237

CVE-2025-21237 is a Windows Telephony Service Remote Code Execution vulnerability. Exploitation could allow remote code execution via the Telephony Service; CVSS v3.1 base score 8.8 (HIGH) with network access, user interaction required. Affected products are Windows components where Telephony Ser...

CVE-2025-21296

CVE-2025-21296 corresponds to a BranchCache remote code execution vulnerability in Microsoft BranchCache. Connected sources describe BranchCache as a WAN optimization feature and indicate a vulnerability that could allow remote code execution. The CVE entry itself lists a 7.5 CVSSv3.1 score with ...

CVE-2025-21319

CVE-2025-21319 is a Windows kernel memory information disclosure vulnerability. The issue is tracked in multiple vulnerabilities and discussed by Microsoft, with a CVSSv3.1 base score of 5.5 (Local attack, Low attack complexity, Low privileges required, no user interaction, High confidentiality i...

CVE-2025-24069

CVE-2025-24069 is an out-of-bounds read in the Windows Storage Management Provider that permits an authorized local attacker to disclose information. Affected component: Windows Storage Management Provider. CVSS: Local attack, Low privileges required, no user interaction, Confidentiality impact H...

CVE-2025-26672

CVE-2025-26672 is described as a buffer over-read in Windows Routing and Remote Access Service (RRAS) that allows an unauthenticated attacker to disclose information over the network. Connected sources corroborate that RRAS is the affected component and frame the impact as an information disclosu...

CVE-2026-23668

CVE-2026-23668 affects the Windows Graphics Component and is an elevation-of-privilege vulnerability. The advisory indicates a local attack vector with high attack complexity, requiring low privileges and no user interaction (UI: NONE). The vulnerability impacts confidentiality, integrity, and av...

CVE-2026-34345

CVE-2026-34345 describes a race condition in the Windows Ancillary Function Driver for WinSock that allows local privilege escalation when a shared resource is improperly synchronized. Connected sources confirm the vulnerability affects Windows components and has been addressed by the May 2026 up...

CVE-2026-59125

Use-after-free in the Virtual Hard Disk (VHD) Miniport Driver can allow an authorized local attacker to elevate privileges. The vulnerability is described as a local privilege escalation with high impact to confidentiality, integrity, and availability. The CVSS vector indicates LOCAL access, user...

CVE-2026-61928

An issue affecting Windows Hello : sensitive information is stored in cleartext, allowing an authorized local attacker to tamper with the system. The CVSSv3.1 vector indicates a local, low-complexity attack requiring low privileges with a high integrity impact (I:H). Base score 5.5 (Medium). No e...

CVE-2026-69431

CVE-2026-69431 is a heap-based buffer overflow in Microsoft's Telnet Client that allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability is rated CVSS 9.8 (Critical) with a vector of network-accessible, low complexity, no privileges or user interaction r...

CVE-2023-35304

CVE-2023-35304 is a Windows Kernel Elevation of Privilege vulnerability. The NVD entry provides CVSS v3.1 metrics (LOCAL exploit, LOW complexity, LOW privileges required) with high impact on confidentiality, integrity, and availability (base score 7.8). Multiple OpenVAS entries and KB articles re...

CVE-2024-38010

Technical details (affected product, root cause, impact, fixes) for CVE-2024-38010 are not provided in the supplied documents. Monitor for updates from official advisories.

CVE-2024-38019

Technical details about CVE-2024-38019 are not provided in the supplied documents. Public sources in Connected documents do not specify affected products, root cause, exploit status or remediation. Monitor for official advisories and Microsoft update notes for confirmation.

CVE-2024-38025

Technical details about CVE-2024-38025 are not provided in the supplied connected documents; no vendor/product/version/root-cause/impact/fix details are visible. Monitor for updates in case additional information becomes available.

CVE-2024-38046

CVE-2024-38046 is described as a local privilege-escalation vulnerability in PowerShell. The primary public documentation (NVD/NCSC) confirms a local attacker with low privileges could elevate privileges on affected Windows components, with a CVSS v3.1 base score of 7.8 (LOCAL, Privileges Require...

CVE-2024-38244

CVE-2024-38244 is a Windows Kernel Streaming Service Driver elevation-of-privilege flaw. The CVE is rated CVSSv3.1 base score 7.8 (HIGH) with LOCAL attack vector, LOW attack complexity, and LOW privileges required; exploitation grants total compromise of confidentiality, integrity, and availabili...

CVE-2024-43509

CVE-2024-43509 is listed in connected advisories as affecting the Windows Graphics Component with an elevation of privilege impact. The ENISA/NCSC entries corroborate this CVE under Windows Graphics Component and assign an impact/score (7.80) and local, privilege‑required conditions. Concrete det...

CVE-2024-43511

Technical details about CVE-2024-43511 are not provided in the supplied documents. Public information beyond basic CVSS data is not included here; monitor for updates.

CVE-2024-43535

CVE-2024-43535 is a Windows Kernel-Mode Driver Elevation of Privilege affecting Windows Kernel-Mode Drivers (tm.sys cited in public discussions). The CVE entry lists a HIGH base impact (Privilege escalation) with LOCAL access and HIGH confidentiality/integrity/availability impact. A GitHub repo i...

CVE-2025-21250

CVE-2025-21250 is a Windows Telephony Service Remote Code Execution vulnerability with CVSS 3.1 base score 8.8 (Network, Low attack complexity, No privileges, User interaction required). Connected sources reference the Windows Telephony Service as the affected component and indicate in CIRCL that...

CVE-2025-21371

CVE-2025-21371 is a remote code execution vulnerability in Windows Telephony Service. Connected documents identify the affected component as Windows Telephony Service and annotate the CVE with a high severity (CVSS v3.1: 8.8, NETWORK attack, no privileges required, user interaction required, C/H/...

CVE-2025-21407

According to the provided documents, CVE-2025-21407 is associated with Windows Telephony Service and is listed with a high impact (CVSS 8.80) involving the execution of arbitrary code. The NCSC advisory explicitly catalogs CVE-2025-21407 under Windows Telephony Service with an impact of executing...

CVE-2025-32715

CVE-2025-32715 is a vulnerability in the Windows Remote Desktop Client described as an out-of-bounds read that can lead to information disclosure . The connected NCSC advisory lists CVSS v3.1/6.50 with an impact of Access to sensitive data . Exploitation details, affected product versions, and sp...

CVE-2026-50368

CVE-2026-50368 refers to a stack-based buffer overflow in Active Directory Federation Services (AD FS) that allows an unauthenticated attacker to cause a denial of service over the network. The vulnerability arises in the AD FS component and is described in multiple sources as enabling a DS impac...

CVE-2026-59127

CVE-2026-59127: Affected software is Windows Installer; vulnerability is an integer overflow/wraparound in Windows Installer that enables a locally authenticated attacker to elevate privileges. The issue stems from the overflow in a Windows Installer component, with CVSS v3.1 base score 7.8 (High...

CVE-2026-62698

The CVE-2026-62698 entry concerns a numeric truncation error in Microsoft Digest Authentication. The vulnerability is described as enabling a locally authenticated attacker to achieve privilege elevation (base score 7.8, CVSS 3.1, LOCAL, LOW privileges required, NONE user interaction, HIGH impact...

CVE-2026-69586

CVE-2026-69586 is a critical (CVSS 9.8) integer overflow or wraparound vulnerability in Microsoft Windows PDF that allows an unauthorized attacker to execute code over a network with no privileges required and no user interaction. The attack vector is network-based with low complexity , yielding ...

CVE-2022-35747

Technical details for CVE-2022-35747 are not provided in the connected documents. No affected products, root cause, impacts, or fixes are specified beyond the generic description. Monitor for updates for public disclosure and remediation guidance.

CVE-2023-32043

CVE-2023-32043 is a Windows Remote Desktop Security Feature Bypass vulnerability. The available document set confirms the issue as a remote-network vulnerability with no user impact on availability, but with high confidentiality and integrity impact per CVSS v3.1 (score 6.8). The connected source...

CVE-2023-33167

Technical details about CVE-2023-33167 are not publicly provided in the supplied documents. No explicit affected products, root cause, or fixes are described here. Monitor for updates.

CVE-2023-35305

Technical details about CVE-2023-35305 are not publicly provided in the supplied documents. Monitor for updates from Microsoft and security bulletins for affected product/version, impact, and remediation.

CVE-2024-30067

Technical details for CVE-2024-30067 are not provided in the supplied documents. Monitor official disclosures for affected products, impact, and remediation guidance.

CVE-2024-37971

Technical details about CVE-2024-37971 are not publicly available in the provided connected documents. Monitor for updates from Microsoft and NVD for affected products, impact, and remediation; current sources do not specify affected components or fixes within this dataset.

CVE-2024-38013

Technical details about CVE-2024-38013 are not disclosed in the provided connected documents. The CVE entry exists (Windows Server Backup elevation of privilege), but no affected product versions, root cause, exploitation, or remediation are described here. Monitor for updates.

CVE-2024-38057

Technical details about CVE-2024-38057 (affected product/version, root cause, exploitability, and fix) are not provided in the connected documents. Monitor for updates from vendor/security advisories.

CVE-2024-38146

CVE-2024-38146 affects the Windows Layer-2 Bridge Network Driver. The CVSS 3.1 base score is 7.5 (HIGH) with Network attack, low complexity, no privileges, no user interaction, and high availability impact. Descriptions in connected OpenVAS items corroborate a DoS impact on Windows Layer-2 Bridge...

CVE-2024-43449

CVE-2024-43449 is a Windows USB Video Class System Driver elevation-of-privilege vulnerability. The CVE entry lists a CVSSv3.1 base score of 6.8 (Medium) with attack vector as Physical, no user interaction required, and an impact profile of High on confidentiality, integrity, and availability. Mi...

CVE-2024-43487

CVE-2024-43487 corresponds to a Windows Mark of the Web (MOTW) security feature bypass. The MOTW component itself is identified as the vulnerable area, enabling bypass of the MOTW protection. Public materials in the connected documents indicate the vulnerability is addressed by Microsoft security...

CVE-2024-43553

CVE-2024-43553 is an NT OS Kernel elevation-of-privilege vulnerability associated with Windows NT OS Kernel. The connected data explicitly maps this CVE to Windows NT OS Kernel with a high impact (privilege escalation). The NCSC advisory notes that vulnerabilities in Windows have been fixed, and ...