CVE-2024-38140

CVE-2024-38140 is a Windows RMCAST (Reliable Multicast Transport Driver) remote code execution vulnerability rated CRITICAL (CVSS 3.1: 9.8). The entry indicates an in-network attacker could remotely execute arbitrary code, with no privileges required and no user interaction, under the RMCAST comp...

CVE-2025-21338

CVE-2025-21338 is a GDI+ Remote Code Execution vulnerability. The CVE affects Windows components that use GDI+ and has a CVSSv3.1 base score of 7.8 (HIGH) with LOCAL attack vector, LOW privileges required, no user interaction, and impacts to confidentiality, integrity, and availability as describ...

CVE-2026-58608

CVE-2026-58608 affects Windows Print Spooler components, where a race condition from improper synchronization on a shared resource enables remote code execution over a network. The vulnerability allows an authenticated attacker with low privileges to execute code with high impact (C/H; I/H; A/H) ...

CVE-2026-62822

CVE-2026-62822 describes an integer overflow/wraparound in Windows GDI+ that allows an unauthenticated attacker to execute code remotely over a network. The CVSSv3.1 vector (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) yields a base score of 8.8 ( HIGH ), indicating high impact for confidentiality, integ...

CVE-2023-21740

CVE-2023-21740 is a Windows Media Remote Code Execution vulnerability. The CVE is listed in NVD/NVD-derived records with CVSS v3.1 metrics: AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, resulting in a base score of 7.8 (HIGH). The linked OpenVAS entries reference multiple Windows KB updates and include CV...

CVE-2024-26205

CVE-2024-26205 is a Windows RRAS remote code execution vulnerability. Connected sources corroborate that it is network-exploitable with a high base score (8.8) and requires user interaction, enabling remote code execution with high impact on confidentiality, integrity and availability. The issue ...

CVE-2024-29061

Technical details about CVE-2024-29061 are not publicly provided in the supplied documents. The records mention a Secure Boot security feature bypass but do not specify affected products, versions, root cause, exploitability, or mitigations. Monitor for updates.

CVE-2026-62790

CVE-2026-62790 is a Windows SMB Server heap-based buffer overflow that allows an authorized network attacker to execute code remotely. The vulnerability is associated with Windows SMBv3 Server, enabling remote code execution over the network with low privileges and no user interaction (CVSSv3.1: ...

CVE-2026-69590

CVE-2026-69590 is a Remote Code Execution vulnerability in Windows Routing and Remote Access Service (RRAS) . An unauthenticated, network-based attacker can exploit it with no user interaction to gain unauthorized access to the victim's machine. The CVSS 3.1 score is 9.8 (Critical) , with high im...

CVE-2023-23402

Technical details for CVE-2023-23402 are not publicly available in the provided documents. Monitor for updates from official advisories and connected sources for affected products, impact, and fixes.

CVE-2023-23403

CVE-2023-23403 is Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability. The CVE entry describes a remote code execution flaw in Microsoft’s PostScript and PCL6 Printer Driver. Connected CNVD-2023-30868 corroborates the same driver-based RCE issue; other connected...

CVE-2023-23407

CVE-2023-23407 : Windows PPPoE remote code execution affecting the PPPoE stack. According to the CVE record, the vulnerability enables total impact on confidentiality, integrity, and availability (CVSS 3.1: 7.1, HIGH). Exploitation is classified as adjacent network access with high complexity and...

CVE-2023-35382

Technical details for CVE-2023-35382 are not provided in the connected documents; the material references registry security descriptor refcount and tombstone issues in passing, but no explicit root-cause, affected products, impact, or fixes are given.

CVE-2024-21313

CVE-2024-21313 is described as a Windows TCP/IP Information Disclosure Vulnerability. The entry provides a CVSSv3.1 base score of 5.3 (Medium) with network attack vector, high attack complexity, no privileges required, user interaction required, and a privacy-focused impact (Confidentiality: High...

CVE-2024-28901

Microsoft Windows: CVE-2024-28901 affects the Windows Remote Access Connection Manager. The vulnerability is an information disclosure in RasMan, exploitable locally with low complexity and requiring low privileges; it grants high confidentiality impact and does not affect integrity or availabili...

CVE-2023-24864

CVE-2023-24864 is described in connected documents as an elevation of privilege vulnerability affecting Microsoft PostScript and PCL6 Class Printer Driver. CNVD-2023-28110 and NVD entries reference an elevation of privilege issue in these printer drivers, identifying the vulnerable components but...

CVE-2023-24887

CVE-2023-24887 is a Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution vulnerability. Affected component: Microsoft PostScript and PCL6 Class Printer Driver. Root cause/impact: remote code execution with NETWORK attack vector, low complexity, low privileges, no user interact...

CVE-2024-21417

CVE-2024-21417 is a Windows Text Services Framework elevation of privilege vulnerability. The connected records confirm the affected component as Windows Text Services Framework (with CVE-2024-21417 listed as impacting Windows CoreMessaging in one entry) and describe the impact as obtaining incre...

CVE-2024-26244

CVE-2024-26244 is a remote code execution vulnerability in the Microsoft WDAC OLE DB provider for SQL Server. According to the CVSS 3.1 vector, it is exploitable over the network with no privileges required, but requires user interaction, and has high impact on confidentiality, integrity, and ava...

CVE-2024-28899

Technical details for CVE-2024-28899 are not publicly available in the provided documents. No affected products, root cause, exploit info, or remediation are specified here; monitor for updates.

CVE-2025-48799

CVE-2025-48799 is an Elevation of Privilege flaw in Windows Update Service (wuauserv) described as: improper link resolution before file access ('link following') can allow an authorized local attacker to elevate to NT AUTHORITY\SYSTEM when Windows 10/11 systems have at least two drives and Stora...

CVE-2026-62778

CVE-2026-62778 refers to a Windows DNS vulnerability described as a use-after-free in the DNS service that enables a remote attacker to elevate privileges over a network. The affected component is the Windows DNS service; the root cause is a use-after-free condition in DNS processing. The impact ...

CVE-2026-62889

CVE-2026-62889 is a Windows SSTP remote code execution vulnerability caused by a double free in the SSTP implementation. The available descriptions from NVD and CVE records state that an unauthenticated attacker could exploit this over a network to execute arbitrary code. The CVSS 3.1 base score ...

CVE-2026-65679

Summary: CVE-2026-65679 is a heap-based buffer overflow in the Windows iSCSI Target Service that allows remote code execution over a network. The vulnerability arises from an out-of-bounds write handling, enabling an unauthenticated attacker to execute code on affected systems. The CVSSv3.1 vecto...

CVE-2023-23406

CVE-2023-23406 corresponds to a remote code execution vulnerability in the Microsoft PostScript and PCL6 Class Printer Driver. Connected sources confirm this CVE affects Microsoft’s PostScript and PCL6 printer drivers and describe a remote code execution outcome. The CVSS 3.1 data shows an extern...

CVE-2023-23413

Technical details about CVE-2023-23413 (affected product, root cause, versions, exploitability) are not provided in the connected documents. Public details are limited to the initial description; monitor for updates.

CVE-2023-28238

CVE-2023-28238 is a Windows vulnerability in the IKE protocol extensions that enables remote code execution over the network. The CVSSv3.1 vector (AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) yields a base score of 7.5 (HIGH). It requires no user interaction, uses a network attack vector, and the attacke...

CVE-2023-35386

Technical details specific to CVE-2023-35386 are not publicly provided in the supplied documents. The connected materials reference the CVE in log-file handling context, but no concrete product/version/impact data is disclosed. Monitor for updates.

CVE-2023-36408

Technical details for CVE-2023-36408 are not publicly available in the provided documents. No affected products, impact, or fixes are specified here; monitor official advisories and vendor updates for confirmation and remediation guidance.

CVE-2024-26171

CVE-2024-26171 is reported as a Windows Secure Boot vulnerability with the impact labeled as circumvention of a security measure (CVSS-like score 6.70). The connected documents corroborate its placement under Windows Secure Boot in the security advisories and vulnerability feeds, but they do not ...

CVE-2024-26194

CVE-2024-26194 is a Secure Boot security feature bypass vulnerability. The CVSS vector indicates Local access, high attack complexity, and no privileges/UI required, with high confidentiality, integrity, and availability impact. Microsoft’s MSRC page is referenced for a potential fix, and ENISA/N...

CVE-2026-25177

CVE-2026-25177 is an elevation-of-privilege vulnerability in Active Directory Domain Services. The CVE affects AD DS and permits an authorized attacker to elevate privileges over the network (CVSS v3.1: 8.8, Network, Privileges Required: Low, User Interaction: None, Confidentiality/Integrity/Avai...

CVE-2026-35421

CVE-2026-35421 describes a heap-based buffer overflow in Windows GDI that permits a local attacker to execute arbitrary code. The entry lists a CVSS v3.1 base score of 7.8 (HIGH) with LOCAL attack vector, LOW attack complexity, NO privileges required, user interaction required, and impacts to con...

CVE-2026-62819

CVE-2026-62819 corresponds to a Remote Code Execution vulnerability in Windows Routing and Remote Access Service (RRAS). Available details indicate that the vulnerability resides in RRAS and could allow an attacker to gain unauthorized code execution on a victim’s machine via a network attack. Th...

CVE-2023-23393

CVE-2023-23393 is a Windows BrokerInfrastructure Service elevation-of-privilege issue. Documented impact is local, with high confidentiality, integrity, and availability impact; requires low privileges and no user interaction. Remediation details in provided sources point to Microsoft security up...

CVE-2024-26248

CVE-2024-26248 is a Windows Kerberos Elevation of Privilege vulnerability with a CVSS v3.1 base score of 7.5 (Impact: High; Privileges Required: Low; Attack Vector: Network; User Interaction: None). The connected sources list this CVE under Windows Kerberos and assign an impact of Obtaining Incre...

CVE-2024-38131

Technical details about CVE-2024-38131 are not publicly provided in the connected documents. The available material lacks product/version/root-cause/remediation specifics. Monitor official advisories/updates for concrete information.

CVE-2023-21685

The CVE-2023-21685 entry concerns Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution. The connected NVD record provides CVSS 3.1: NETWORK attack vector, LOW attack complexity, NONE privileges required, UI required, and impacts to Confidentiality, Integrity, and Availability (all ...

CVE-2023-21689

CVE-2023-21689 is a Microsoft PEAP Remote Code Execution vulnerability with a CVSS v3.1 base score of 9.8. The vulnerability is network-exploitable with no user interaction and requires no privileges; it potentially impacts confidentiality, integrity, and availability. Connected sources confirm t...

CVE-2023-21812

CVE-2023-21812 is a Windows vulnerability in the Common Log File System Driver (CLFS) that enables Elevation of Privilege. The NVD entry lists a CVSS v3.1 base score of 7.8 (HIGH) with LOCAL attack vector, LOW attack complexity, LOW privileges required, and no user interaction; impact is HIGH on ...

CVE-2024-28920

CVE-2024-28920 is a Secure Boot security feature bypass vulnerability. The connected ENISA/NCSC records indicate this CVE is associated with Microsoft Windows Secure Boot components and is classified as bypassing a security measure. The NVD entry confirms a Secure Boot bypass description, and rel...

CVE-2024-28925

CVE-2024-28925 is listed in the Microsoft Windows Secure Boot family as a Secure Boot security feature bypass with high impact (CVSS 3.1: 8.0; Adjacent access, no privileges required, user interaction required). The connected advisory (NCSC) confirms a Windows Secure Boot bypass in the same CVE g...

CVE-2024-43519

CVE-2024-43519 : Microsoft WDAC OLE DB provider for SQL Server is affected by a Remote Code Execution vulnerability. The CVSS v3.1 base score is 8.8 (HIGH); attack vector is NETWORK, with LOW attack complexity and no privileges required, but user interaction is required. The issue stems from the ...

CVE-2026-23667

CVE-2026-23667 is described as a Local privilege-escalation vulnerability affecting Broadcast DVR. The available data show a CVSS 3.1 base score of 7.0 (HIGH) with local attack vector, high impact on confidentiality, integrity, and availability, and no user interaction required. Exploitation is l...

CVE-2023-21798

Technical details about CVE-2023-21798 are not publicly provided in the connected documents. Monitor for updates.

CVE-2023-21803

CVE-2023-21803 corresponds to a Windows iSCSI Discovery Service Remote Code Execution vulnerability. The available data shows a critical 9.8 CVSSv3.1 score with network attack vector , no privileges required , and no user interaction ; impact is shown as High for confidentiality, integrity, and a...

CVE-2023-21805

Technical details about CVE-2023-21805 are not publicly provided in the supplied documents. Monitor for updates.

CVE-2023-23394

Technical details for CVE-2023-23394 are not provided in the connected documents. They reference CSRSS generally and Windows updates (DCOM hardening, LSASS, domain join issues) but do not specify affected products/versions or exploit details. Monitor for updates.

CVE-2023-23417

Technical details about CVE-2023-23417 are not publicly available in the provided documents. No concrete information on affected products/versions, root cause, impact, or fixes is provided here. Monitor for updates from the connected sources.

CVE-2024-26183

CVE-2024-26183 is a Windows Kerberos Denial-of-Service vulnerability. The CVSS 3.1 base metrics (AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) indicate a NETWORK-exploitable issue with a MEDIUM severity (6.5) and a HIGH impact on availability, requiring LOW privileges and no user interaction. The descript...