CVE-2024-21405

CVE-2024-21405 is a Microsoft Message Queuing (MSMQ) elevation of privilege vulnerability listed among February 2024 Windows security updates (KB5034830/KB5034819/etc.). Affected component: MSMQ on Windows. Root cause and exact exploit mechanism are not detailed in the provided documents beyond t...

CVE-2024-21347

Technical details for CVE-2024-21347 are not provided in the connected documents. Monitor for updates and published fixes or advisories once available.

CVE-2024-21360

Technical details for CVE-2024-21360 are not publicly provided in the supplied documents. Monitor for updates from Microsoft and the CVE entry.

CVE-2024-21368

Technical details (affected product, versions, root cause, impact, or fixes) are not provided in the supplied documents for CVE-2024-21368; no concrete details available. Monitor for updates.

CVE-2024-38155

Technical details about CVE-2024-38155 are not publicly provided in the connected documents. The available sources only identify the vulnerability name and general context. Monitor for updates from official advisories to obtain affected products, impact, and fixes.

CVE-2024-21367

Technical details for CVE-2024-21367 are not provided in the connected documents. Public information about affected components, root cause, or fixes is not included here. Monitor for updates from the vendor/Microsoft and add any official advisories when available.

CVE-2026-49164

CVE-2026-49164 affects Active Directory Domain Services (AD DS). The vulnerability is described as a heap-based buffer overflow in AD DS that allows an unauthenticated, network-based attacker to execute code remotely. Public sources in the provided documents consistently label this as an executio...

CVE-2025-21230

CVE-2025-21230 is a Denial-of-Service vulnerability in Microsoft Message Queuing (MSMQ). Connected CNVD entries explicitly describe a vulnerability in MSMQ that can be exploited to cause a DoS on the system, aligning with the CVSS vector in the CVE entry (Network, Privileges=None, User interactio...

CVE-2024-21434

Technical details about CVE-2024-21434 are not provided in the supplied documents. Monitor for updates from Microsoft and security feeds for affected components, root cause, impact, and fixes.

CVE-2024-21406

Technical details about CVE-2024-21406 are not publicly provided in the supplied documents. No affected product/version/impact specifics are given beyond the generic description. Monitor for updates from official advisories.

CVE-2024-21432

Technical details about CVE-2024-21432 are not publicly available in the provided documents. Monitor for updates from official advisories to obtain affected products, impact, and remediation guidance.

CVE-2024-21451

No public technical details about CVE-2024-21451 are provided in the connected documents. The NVD entry notes RCE via Microsoft ODBC Driver, but remediation/affected versions are not disclosed here. Monitor for updates.

CVE-2026-57092

CVE-2026-57092 — Windows VMSwitch use-after-free can lead to a network-based Elevation of Privilege. The issue is triggered in the Windows VMSwitch component and, per sources, enables an authorized attacker to escalate privileges over the network. The CVE is listed as critical (CVSS v3.1: AV:N/AC...

CVE-2023-21551

Technical details about CVE-2023-21551 are not provided in the supplied documents. Monitor official advisories for updates; no specifics on affected products, impact, or remediation are available here.

CVE-2024-21354

Technical details for CVE-2024-21354 are not publicly provided in the connected documents. No vendor/product specifics or remediation are included. Monitor for updates.

CVE-2024-20678

Public documents in the Connected set do not provide concrete technical details (affected product, root cause, impact, or remediation) for CVE-2024-20678; monitor for updates.

CVE-2024-20700

CVE-2024-20700 affects Windows Hyper-V and is a remote code execution vulnerability in Hyper-V. Connected sources describe exploitation as a race condition requiring access to a restricted network; attack vector is adjacent with no user interaction and no privileges required, yielding high impact...

CVE-2024-29050

CVE-2024-29050 is confirmed to affect Windows Cryptographic Services and is categorized as a Remote Code Execution (RCE) vulnerability. The connected documents identify the component and vulnerability name but do not provide explicit root-cause specifics, affected product versions, or remediation...

CVE-2024-21436

CVE-2024-21436 is a Windows Installer elevation of privilege vulnerability. The CVE entry reports a CVSS v3.1 base score of 7.8 (high) with local attack vector, low attack complexity, requiring low privileges and no user interaction; impact is high on confidentiality, integrity, and availability....

CVE-2024-26181

CVE-2024-26181 is a Windows kernel vulnerability where exhausting the global registry quota can damage the HKLM\SAM hive, enabling local attackers to trigger a denial-of-service by blocking registry operations. The CVE is tied to out-of-resources/OOM paths in hive memory management and registry q...

CVE-2023-21524

Technical details about CVE-2023-21524 (affected product/component/root cause/impact/fix) are not provided in the connected documents. The materials only reference the vulnerability title and general advisories; monitor for updates.

CVE-2024-21343

CVE-2024-21343 is a Windows NAT Denial of Service vulnerability. The provided documents identify it as network‑based with impact on availability (NVD CVSSv3.1: 7.5 base, HIGH; CNA: 5.9, MEDIUM) but do not provide concrete affected product versions, root cause details, exploit information, or a sp...

CVE-2024-21356

CVE-2024-21356 is listed with concrete identifiers in OpenVAS entries; it corresponds to a Windows LDAP Denial of Service vulnerability with CVSS v3.1 metrics: AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H (base score 6.5, MEDIUM). The connected records confirm it as part of Microsoft Windows vulnerability...

CVE-2024-26159

Technical details about CVE-2024-26159 are not provided in the supplied documents. The references here only reiterate the vulnerability name; monitor official advisories for updated specifics and remediation guidance.

CVE-2024-21348

Technical details for CVE-2024-21348 are not provided in the supplied documents; the ICS DoS description is generic. Monitor for updates.

CVE-2024-21357

Technical details for CVE-2024-21357 are not provided in the connected documents. Monitor for updates and new disclosures.

CVE-2024-30063

Technical details for CVE-2024-30063 are not provided in the connected documents. The initial description notes a DFS RCE vulnerability but there are no explicit affected products/versions or fixes in the supplied materials. Monitor for updates.

CVE-2024-21307

The CVE-2024-21307 entry identifies a Remote Desktop Client Remote Code Execution vulnerability with a CVSS v3.1 score of 7.5 (HIGH) . Attack vector is Network and the exploit requires User Interaction ; impact is rated as Confidentiality: High, Integrity: High, Availability: High . The available...

CVE-2024-21371

Technical details about CVE-2024-21371 are not provided in the supplied documents. Please monitor for updates from official advisories to learn affected products, root cause, impact, and remediation.

CVE-2026-48576

CVE-2026-48576 is a Windows Secure Boot vulnerability described as a protection mechanism failure enabling a local attacker with high privileges to bypass a security feature. The available documents specify a local attack vector with low complexity and no user interaction, and a base CVSS 3.1 sco...

CVE-2024-26182

CVE-2024-26182 is a Windows registry/hive memory corruption issue. The connected material documents a local-elevation path via hive memory corruption that targets the HKCU hive, including volatile storage, by abusing out-of-bounds cell indexes in the hive cell map. The attacker can craft a memory...

CVE-2024-21341

Technical details about CVE-2024-21341 are not publicly provided in the supplied documents. Monitor for updates from NVD, Microsoft, or CVE listings for affected products, root cause, impact, and remediation.

CVE-2025-21204

CVE-2025-21204 affects Windows Update Stack with improper link resolution before file access, enabling local privilege elevation for an authenticated user. Public documentation confirms the vulnerability and that Microsoft released fixes as part of April 2025 updates; patches include OS updates t...

CVE-2024-26176

CVE-2024-26176 is described in connected sources as a Windows Kernel vulnerability that causes an out-of-bounds read during symbolic-link validation in the registry path (CmpCheckValueList/CmpCheckValueList validation of symbolic links). The issue is tied to Windows kernel registry code paths and...

CVE-2024-26214

CVE-2024-26214 affects the Microsoft WDAC ODBC Driver and is described as a remote code execution vulnerability. According to the CVE entry, the vulnerability has a CVSS v3.1 base score of 8.8 (HIGH) with Network attack vector, No privileges required, User interaction required, and impacts to con...

CVE-2026-20931

CVE-2026-20931 is a Windows Telephony Service elevation-of-privilege vulnerability described as external control of a file name or path. The connected sources confirm the affected component as Windows Telephony Service and the issue enables an attacker on an adjacent network to obtain increased p...

CVE-2023-35359

CVE-2023-35359 is a Windows kernel local privilege-escalation vulnerability with a CVSS v3.1 base score of 7.8 (High). The provided record indicates a LOCAL attack vector, LOW attack complexity, LOW privileges required, and NONE user interaction, with the impact described as High for confidential...

CVE-2024-21440

CVE-2024-21440 is a Microsoft ODBC Driver remote code execution vulnerability. The entry identifies affected software as Microsoft ODBC Driver and states an RCE impact with high severity (CVSS v3.1: 8.8, Network attack vector, no privileges required, user interaction required, confidentiality, in...

CVE-2026-62800

CVE-2026-62800 is a Windows SMB Server vulnerability characterized by a heap-based buffer overflow in SMBv3 Server. An authorized attacker can trigger code execution over a network, with network attack vector, low privileges required, and no user interaction. The impact is described as high for c...

CVE-2026-62818

CVE-2026-62818 affects Microsoft Windows Active Directory Certificate Services (AD CS). The vulnerability is a use-after-free in AD CS that allows an authorized attacker to execute arbitrary code over a network. CVSS v3.1 base metrics indicate a HIGH severity (8.8) with Network attack vector, Low...

CVE-2024-21366

CVE-2024-21366 affects the Microsoft WDAC OLE DB provider for SQL Server and is rated CVSS v3.1 base score 8.8 (High). The vulnerability has a network attack vector with no privileges required, but user interaction is required, and the impact is High on confidentiality, integrity, and availabilit...

CVE-2024-21443

The CVE-2024-21443 entry describes a Windows Kernel Elevation of Privilege vulnerability with a LOCAL attack vector, requiring LOW privileges and USER interaction, and has HIGH impact on confidentiality, integrity, and availability. Connected documents confirm a Windows kernel/macOS? No, Windows ...

CVE-2024-21444

CVE-2024-21444 concerns Microsoft WDAC OLE DB provider for SQL Server and is described as a remote code execution vulnerability. The NVD entry assigns CVSS v3.1: AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H with a base score of 8.8 (HIGH). Exploitation is network-based, requires user interaction, and impa...

CVE-2026-56188

CVE-2026-56188: A race-condition in the Windows Server Network driver (concurrent access to a shared resource) can allow an unauthenticated attacker to execute code over the network. The vulnerability affects the Windows Server Network driver and is described as a remote code execution flaw with ...

CVE-2024-21304

Technical details about CVE-2024-21304 are not provided in the supplied documents. Monitor for updates as new public information becomes available.

CVE-2026-33828

CVE-2026-33828 affects Windows Device Health Attestation (DHA). The vulnerability is a trust boundary violation in Windows Attestation that allows an authorized local attacker to elevate privileges. CVSS v3.1 base metrics indicate high impact to confidentiality, integrity, and availability with l...

CVE-2026-50380

CVE-2026-50380 is a Windows GDI+ heap-based buffer overflow that enables a remote attacker to execute code over a network. The CVE is listed among highly critical Windows vulnerabilities in July 2026 patch advisories, with Microsoft updating GDI+ and related components in the July security releas...

CVE-2024-20653

Technical details about CVE-2024-20653 (affected product, specific component, root cause, impact, and remediation) are not publicly provided in the connected documents you supplied. Monitor for updates from official advisories to confirm affected software and fixes.

CVE-2024-21355

CVE-2024-21355 is a Microsoft Message Queuing (MSMQ) Elevation of Privilege vulnerability. The initial entry indicates a local attack vector with high impact: CVSS 3.1 base score 7.0, attack vector Local, attack complexity High, privileges Required LOW, no user interaction, and impact on confiden...

CVE-2024-21377

Technical details for CVE-2024-21377 are not available in the provided documents. The entries reference the CVE but do not specify affected products, root cause, impact, or fixes. Monitor for official disclosures and published remediation guidance.