CVE-2026-58594

CVE-2026-58594 is a Windows Remote Desktop Client RCE vulnerability caused by an integer overflow/wraparound in the RDP client. Public sources (NVD/NCSC/CIRCL) attribute network-based exploitation with potential arbitrary code execution on vulnerable Windows systems. Connected entries confirm the...

CVE-2026-62727

A race condition in Windows Telephony Service allows a locally authenticated low-privilege attacker to elevate privileges to SYSTEM. CVSS 3.1 base score 7.0 (HIGH). Microsoft has published an update guide; apply the patch from the MSRC link. No exploitation details or in-the-wild activity are pro...

CVE-2023-32019

CVE-2023-32019 is a Windows kernel registry vulnerability arising from hive memory corruption via out-of-bounds registry cell indexes. The provided research shows that with a crafted hive (notably HKCU and app hives) a local attacker can trigger UAF- and memory-corruption primitives that enable r...

CVE-2026-57089

Summary : CVE-2026-57089 affects the Windows SMB Server Network Transport Driver (srvnet.sys). The issue is a use-after-free memory corruption bug that can be triggered by an unauthenticated attacker over the network to achieve remote code execution. The vulnerability is listed with high to criti...

CVE-2026-44803

CVE-2026-44803 describes an integer overflow/wraparound in Windows Win32K - GRFX that can allow a local attacker to execute code. The vulnerability is identified across multiple sources (NVD, CVE listing, and MSRC update page) and is classified with a high impact: local code execution, requiring ...

CVE-2023-21769

CVE-2023-21769 is reported as a Microsoft Message Queuing (MSMQ) Denial of Service vulnerability. The initial entry provides a CVSSv3.1 base score of 7.5 (HIGH) with an attack vector of NETWORK, attack complexity LOW, no privileges required, no user interaction, and an impact of NONE for confiden...

CVE-2023-36903

No technical details for CVE-2023-36903 are provided in the supplied documents; only the vulnerability title is present. Monitor for updates.

CVE-2024-20693

CVE-2024-20693 is a Windows Kernel local privilege escalation vulnerability. Documents corroborate that the Windows Kernel component is affected and that the vulnerability enables obtaining elevated/privileged execution from a local attacker, with high confidentiality, integrity, and availability...

CVE-2026-62781

CVE-2026-62781 is a heap-based buffer overflow in the RPC Runtime Library that enables remote code execution over the network. The vulnerability allows an unauthenticated attacker to run code on affected systems via network interaction. Current documents confirm the issue but do not provide produ...

CVE-2023-32015

CVE-2023-32015 is a Windows Pragmatic General Multicast (PGM) Remote Code Execution vulnerability. The issue affects Windows where the Message Queuing service is enabled; a remote, unauthenticated attacker can exploit it by sending a crafted file over the network to achieve code execution. The CV...

CVE-2024-38153

CVE-2024-38153 is a Windows Kernel elevation-of-privilege vulnerability. The CVSSv3.1 base score is 7.8 (High) with Local attack vector, Low attack complexity, Privileges Required: Low, User Interaction: None, and impact on Confidentiality, Integrity, and Availability: High. The vulnerability aff...

CVE-2023-28218

The Windows Ancillary Function Driver for WinSock (AFD.sys ) is vulnerable to a Double fetch and Integer overflow condition, which can lead to a pool overflow in the kernel. The issue occurs in the Afd!AfdComputeCMSGLength and Afd!AfdCopyCMSGBuffer functions when processing a usermode-controlled ...

CVE-2023-36393

Technical details about CVE-2023-36393, including affected products, root cause, and fixes, are not publicly provided in the supplied documents. Monitor for updates from Microsoft and NVD.

CVE-2023-23405

Technical details such as affected products, versions, root cause, impact, and fixes are not publicly provided in the supplied documents. Monitor for updates from official advisories.

CVE-2023-23416

Technical details about CVE-2023-23416 are not publicly available in the provided connected documents; monitor official disclosures and vendor advisories for impact, affected products, and fixes.

CVE-2023-36398

Technical details about CVE-2023-36398 are not provided in the connected documents. No explicit information on affected products, versions, root cause, or remediation is present. Monitor for updates and rely on the initial vulnerability summary for context.

CVE-2024-21316

CVE-2024-21316 is a Windows Server vulnerability described as a Key Distribution Service Security Feature Bypass. Documents confirm the issue affects Windows Server/KDS handling and carry a CVSS v3.1 base score of 6.1 (Network, Low attack complexity, High privileges required, User interaction req...

CVE-2023-28232

Technical details about CVE-2023-28232 are not publicly provided in the connected documents. Public information is limited to the description; monitor for official advisories and updates from Microsoft for fixes, affected products, and mitigations.

CVE-2024-28903

CVE-2024-28903 is listed under Microsoft Windows Secure Boot vulnerabilities with a circumvention of security measure impact. The connected OpenVAS/NCSC entries corroborate that Secure Boot-related fixes were released, but do not provide product/version specifics or a patch identifier. The root c...

CVE-2023-21690

Technical details about CVE-2023-21690 are not publicly available in the provided documents. Monitor for updates.

CVE-2023-23404

Technical details about CVE-2023-23404 are not publicly provided in the connected documents. The available sources summarize the vulnerability at a high level; monitor for updated advisories or vendor patch information for affected products and remediation.

CVE-2024-20691

CVE-2024-20691 is a Windows Themes Information Disclosure vulnerability. CVSS-3.1 metrics indicate Local attack with High Confidentiality impact, base score 4.7, and no user interaction required, but with high attack complexity and low privileges. Exploit details or concrete remediation are not p...

CVE-2024-26158

CVE-2024-26158 affects Microsoft Windows Install Service and is an Elevation of Privilege vulnerability. It is exploitable locally (attack vector: Local) with low privileges required and no user interaction, potentially granting complete control (confidentiality/integrity/availability impact: Hig...

CVE-2026-23670

CVE-2026-23670 affects Windows Virtualization-Based Security (VBS) security feature. The issue is a local, high-privilege bypass of VBS protections, with no user interaction required (UI: NONE). Exploitation is possible with local access and may impact confidentiality and integrity (both HIGH), w...

CVE-2023-24869

Technical details about CVE-2023-24869 are not publicly disclosed in the provided documents; no affected product/version/impact/fix are specified here. Monitor for updates from official CVE/NVD entries and related advisories.

CVE-2023-36423

Technical details about CVE-2023-36423 are not provided in the supplied documents. No affected products, root cause, or remediation are specified here. Monitor for updates in connected sources.

CVE-2024-49082

CVE-2024-49082 is a Windows File Explorer information disclosure vulnerability. The connected data lists impact as access to sensitive data with CVSS 3.1 v3.1 vector: AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N, score 6.8 (Medium). Concrete details about root cause or affected Windows versions are not fu...

CVE-2023-35384

CVE-2023-35384 is a Windows HTML Platform security feature bypass. The provided documents describe two vulnerabilities that can be chained to achieve remote code execution in Outlook: (1) the HTML security feature bypass allowing a crafted file or URL to evade security zone tagging, and (2) a Win...

CVE-2024-20657

Technical details about CVE-2024-20657 (affected product/component, root cause, impact, fixes) are not publicly provided in the supplied documents. Monitor for updates from Microsoft and security advisories.

CVE-2024-21311

Technical details for CVE-2024-21311 are not publicly available in the provided documents. No affected products, root cause, or remediation are specified here. Monitor for updates.

CVE-2024-26179

CVE-2024-26179 affects Windows Routing and Remote Access Service (RRAS) with a remote code execution vulnerability (CVSS v3.1: 8.8, HIGH). The entry specifies network attack vector with no privileges required but user interaction required, leading to execution of arbitrary code on affected system...

CVE-2024-30080

Technical details about CVE-2024-30080 are not provided in the supplied documents. No specifics on affected products, vulnerable components, root cause, or fixes are included; monitor for updates from Microsoft/security advisories.

CVE-2025-21302

CVE-2025-21302 is a Windows Telephony Service Remote Code Execution vulnerability. The CVSS 3.1 base score is 8.8 (HIGH) with network access, low attack complexity, no privileges required, and user interaction required; impacts include confidentiality, integrity, and availability. The vulnerabili...

CVE-2026-50518

CVE-2026-50518 is a heap-based buffer overflow in Windows DHCP Server that allows an unauthenticated attacker to execute code remotely over a network. Public sources (NVD, EUVD, CIRCL, MSRC update guidance) confirm the flaw and its impact as remote code execution; Talos notes exploitation in the ...

CVE-2022-26934

CVE-2022-26934 is a Windows Graphics Component information disclosure vulnerability. Affects Windows graphics handling (Windows Graphics Component) and is disclosed as a network-exposed information disclosure with a base CVSSv3.1 score of 6.5 (vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N)...

CVE-2023-21712

CVE-2023-21712 describes a Windows PPTP/RAS Remote Code Execution vulnerability. A race condition in the Point-to-Point Tunneling Protocol could allow unauthenticated, network-based attackers to execute arbitrary code in the RAS environment. The issue affects Windows Remote Access Service compone...

CVE-2023-36400

Technical details about CVE-2023-36400 are not publicly provided in the supplied documents. The Initial/Connected data lacks affected product/version/root-cause/mitigation. Monitor for updates.

CVE-2024-28898

CVE-2024-28898 is listed in the connected documents as a Windows Secure Boot vulnerability described as a Secure Boot security feature bypass with a CVSS-like impact of bypassing security measures (Windows Secure Boot). The advisory notes for this CVE show it with a moderate score (around 6.3–6.3...

CVE-2025-21351

CVE-2025-21351 is a Windows AD DS API Denial of Service vulnerability. The initial record notes a network‑vector DoS impacting AD DS APIs with a CVSS v3.1 base score of 7.5 (HIGH) and no user interaction required. Connected documents indicate Microsoft has released updates addressing vulnerabilit...

CVE-2023-28220

Technical details about CVE-2023-28220 (Layer 2 Tunneling Protocol RCE) are not provided in the supplied connected documents. No affected products, impact, fixes, or exploitation data are present here. Monitor for updates.

CVE-2024-29064

Technical details (affected product/versions/root cause/impact/fix) for CVE-2024-29064 are not publicly provided in the supplied documents. Monitor for updates as more information becomes available.

CVE-2023-21727

Technical details (affected product/versions/root cause/fix) are not provided in the connected documents; monitor for updates.

CVE-2023-28283

CVE-2023-28283 is a Windows LDAP remote code execution vulnerability. Connected sources describe an unauthenticated RCE in the Windows LDAP service triggered by specially crafted LDAP requests, with the issue classified as high/critical in May 2023 updates. Root cause and exact impact are not dee...

CVE-2024-38199

Technical details about CVE-2024-38199 are not publicly provided in the connected documents. Monitor for updates from Microsoft and NVD for affected products, fixes, and exploit information.

CVE-2026-49160

The CVE-2026-49160 entry concerns HTTP.sys with an HTTP/2 resource consumption flaw leading to unauthenticated denial of service over the network. Exploitation details, affected versions or specific component paths aren’t provided in the connected documents. The NVD/MSRC entries confirm an uncont...

CVE-2023-23388

CVE-2023-23388 corresponds to a Windows Bluetooth Driver Elevation of Privilege vulnerability (bthserv) with a local privilege escalation path. A GitHub repo documents a PoC targeting Windows 10/11 Bluetooth service (bthserv) that enables escalation from an unprivileged user to LOCAL SERVICE; the...

CVE-2024-20682

CVE-2024-20682 concerns the Windows Cryptographic Services Remote Code Execution vulnerability. The available data show a vulnerability affecting Windows components, enabling a local attacker to achieve code execution with high impact on confidentiality, integrity, and availability. The CVSS 3.1 ...

CVE-2024-30006

CVE-2024-30006 affects the Microsoft WDAC OLE DB provider for SQL Server and enables Remote Code Execution. The CVSS v3.1 base score is 8.8 (HIGH) with Network attack vector, Low attack complexity, and user interaction required. Some sources list it as a high-severity Windows vulnerability (score...

CVE-2025-24035

CVE-2025-24035 affects Windows Remote Desktop Services. The connected data corroborates a remote code execution risk over a network, arising from memory handling (sensitive data stored in improperly locked memory). The impact is described as executing arbitrary code, with the network as the attac...

CVE-2023-35628

CVE-2023-35628 is a Windows MSHTML platform remote code execution vulnerability. The MSHTML rendering engine used by Windows and Outlook can be exploited by processing specially crafted email content, potentially allowing code execution on a target machine without user interaction. The CVE is rat...