CVE-2024-26241

CVE-2024-26241 is a Win32k elevation-of-privilege vulnerability in Windows. The OpenVAS entries list Win32K as the affected component with local exploitation, requiring low privileges and no user interaction, and causing high confidentiality, integrity, and availability impact. The CVSSv3.1 base ...

CVE-2024-28921

CVE-2024-28921 is a Windows Secure Boot security feature bypass vulnerability. The CVE entry is supported by multiple sources (NVD/NCSC/related feeds) indicating a local-attack-path bypassing Secure Boot with elevated privileges required and no user interaction. The CVSS vector shows: Local attac...

CVE-2023-21803

CVE-2023-21803 corresponds to a Windows iSCSI Discovery Service Remote Code Execution vulnerability. The available data shows a critical 9.8 CVSSv3.1 score with network attack vector , no privileges required , and no user interaction ; impact is shown as High for confidentiality, integrity, and a...

CVE-2023-23411

CVE-2023-23411 : Windows Hyper-V Denial of Service vulnerability. The embedded metrics indicate a LOCAL attack vector with LOW privileges required, no user interaction, and an AV/C/I/A impact profile (Availability impact: HIGH). The description confirms a Hyper-V related DoS, but the supplied doc...

CVE-2023-24901

CVE-2023-24901 maps to a Windows NFS Portmapper Information Disclosure vulnerability. The NVD record lists a CVSS v3.1 base score of 7.5 (HIGH) with Network attack vector, low attack complexity, no privileges required, no user interaction, and a confidentiality impact of HIGH (I and A mostly unaf...

CVE-2023-28267

CVE-2023-28267 is the Remote Desktop Protocol Client Information Disclosure Vulnerability affecting the Microsoft Windows Remote Desktop Client (CPE: cpe:/a:microsoft:remote_desktop_connection). The CVSSv3.1 base score is 6.5 (Medium), with attack vector Network, attack complexity Low, privileges...

CVE-2024-26237

Technical details for CVE-2024-26237 are not publicly available in the provided connected documents. No concrete exploit, impact, or remediation specifics are present beyond the vulnerability title. Monitor for updates from Microsoft and security advisories.

CVE-2024-26254

CVE-2024-26254 is a Denial-of-Service in Microsoft Windows Virtual Machine Bus (VMBus). The provided OpenVAS listings confirm VMBus involvement, but do not disclose a concrete root cause, exploit technique, affected product versions, or a remediation in these documents. No patch details are expli...

CVE-2024-30031

CVE-2024-30031 is documented as a Windows elevation-of-privilege issue affecting the CNG Key Isolation Service . The available sources describe the vulnerability as a local, privilege-required issue with high impact across confidentiality, integrity, and availability, but do not provide vendor-sp...

CVE-2024-49046

CVE-2024-49046 affects the Windows Win32 Kernel Subsystem and is categorized as an Elevation of Privilege vulnerability. The CVSS 3.1 vector indicates LOCAL exploitability with LOW attack complexity and LOW privileges required, but HIGH impact to confidentiality, integrity, and availability under...

CVE-2024-49105

CVE-2024-49105 affects the Windows Remote Desktop Client. It enables remote code execution over the network; exploitation requires user interaction and high privileges, with high impacts to confidentiality, integrity, and availability. CVSS v3.1 base score 8.4 (Network, Low attack complexity, Pri...

CVE-2023-23423

CVE-2023-23423 is a Windows Kernel Elevation of Privilege vulnerability tied to hive memory corruption in the Windows Registry (HKCU/HKLM hives). The connected Project Zero analysis provides concrete exploitation details: a memory-corruption primitive in hive data can be combined with a crafted o...

CVE-2023-28253

Technical details for CVE-2023-28253 are not publicly provided in the supplied documents; no affected product/version, root cause, or remediation details are present here. Monitor for updates.

CVE-2023-29358

CVE-2023-29358 is a Windows GDI Elevation of Privilege vulnerability. Per the sources, it is a LOCAL, low-attack-complexity issue with LOW privileges required, and it has HIGH confidentiality, integrity, and availability impact. The connected documents corroborate the Windows context and do not p...

CVE-2024-20669

CVE-2024-20669 affects Microsoft Windows Secure Boot. It is a Local, High-Privilege vulnerability classed as a Secure Boot security feature bypass with a CVSS v3.1 base score of 6.7 (Impact: Confidentiality, Integrity, and Availability High). Connected sources confirm Windows Secure Boot-related ...

CVE-2024-30027

CVE-2024-30027 corresponds to an NTFS Elevation of Privilege vulnerability. Affected component: Windows NTFS (elevates privileges locally). Root cause details are not explicitly stated in the provided documents beyond the NTFS elevation claim. CVSS v3.1 base metrics indicate a High impact (7.8) w...

CVE-2024-30098

CVE-2024-30098 is referenced in multiple October 2025 Windows security updates (KB5066791, KB5066835, KB5066793, KB5066780, KB5066836, etc.). The connected documents describe a cryptographic hardening change: moving RSA-based smart card certificates from Cryptographic Service Provider (CSP) to Ke...

CVE-2024-38257

CVE-2024-38257 affects the Windows AllJoyn API, described as an Information Disclosure vulnerability. The CVSS vector indicates network access with no user interaction, low attack complexity, and no privileges required, with confidentiality impact high and other impacts none. Connected sources co...

CVE-2026-58613

CVE-2026-58613 (Windows Cloud Files Mini Filter Driver) causes a local privilege escalation via a use-after-free in the driver. This is observed as an elevation of privileges by an authorized attacker who already has local access. Public sources in the connected documents identify the issue as a ...

CVE-2026-62792

Summary: CVE-2026-62792 is a stack-based buffer overflow in the Windows TCP/IP stack that enables a remote attacker to execute code over the network. The provided documents identify the affected component as Windows TCP/IP and confirm a RCE impact, with the exploit delivered remotely via network ...

CVE-2024-28924

Technical details about CVE-2024-28924 are not publicly provided in the connected documents. Monitor for updates from Microsoft, NVD, or CVE editors for affected products, impact, root cause, and available fixes.

CVE-2026-32157

CVE-2026-32157 affects the Remote Desktop Client and enables remote code execution over the network. The CVSSv3.1 score is 8.8 (HIGH), with confidentiality, integrity, and availability all rated High. Attack requires network access and user interaction, with privilegesN/A and exploitation current...

CVE-2026-59134

The CVE-2026-59134 entry concerns a heap-based buffer overflow in the Remote Desktop Client that enables remote code execution and requires network access (attack vector: NETWORK) with user interaction. The documented impact is high (CVSS 3.1: AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H). No explicit rem...

CVE-2026-62787

CVE-2026-62787 is a remote code execution vulnerability in Windows DNS Server caused by a use-after-free condition. An authenticated attacker could execute code over the network on a targeted host. CVSS v3.1 base score 7.5 (HIGH): AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H. The connected sources confirm...

CVE-2026-62817

CVE-2026-62817 describes an out-of-bounds write in Windows DNS Server that enables remote code execution by an unauthenticated attacker over an adjacent network. The advisory consistently identifies the affected component as Windows DNS Server and cites a high-severity impact (CVSS v3.1: 8.8, AV:...

CVE-2023-24912

Technical details for CVE-2023-24912 are not publicly provided in the supplied documents. Monitor for updates from official advisories when more information becomes available.

CVE-2023-24946

CVE-2023-24946 is described in the provided sources as a Windows Backup Engine/Backup Service Elevation of Privilege vulnerability. The CNVD entry explicitly notes an attacker could gain SYSTEM privileges, indicating a local, privilege-escalation flaw. The CVSS vector in the initial data shows: L...

CVE-2024-26180

Technical details about CVE-2024-26180 are not provided in the supplied documents. Monitor for updates from official advisories and affected vendors.

CVE-2024-26189

CVE-2024-26189 is a Secure Boot security feature bypass affecting Windows Secure Boot. The CVE is listed in the Windows Secure Boot table with CVSS v3.1 base score 8.0 (HIGH) and impact described as bypassing security measures. Connected sources corroborate a Secure Boot bypass characterization, ...

CVE-2023-21802

Technical details (affected product/component/versions/root cause and fixes) for CVE-2023-21802 are not publicly available in the provided documents. Monitor for updates from official CVE/NVD/KB sources.

CVE-2023-23412

CVE-2023-23412 is a Windows local elevation-of-privilege issue (Attack Vector: LOCAL, Privileges Required: LOW, UI: NONE) with HIGH impact on confidentiality, integrity, and availability per CVSS 3.1 metrics. Microsoft security updates released March 14, 2023 (e.g., KB5023705, KB5023764, KB502376...

CVE-2024-26220

CVE-2024-26220 affects Windows Mobile Hotspot and is described as an Information Disclosure vulnerability. The connected NCSC advisory lists CVE-2024-26220 with impact: Access to sensitive data and a CVSS v3.1 base score of 5.0 (Medium). No root-cause, affected build versions, or remediation deta...

CVE-2024-38196

CVE-2024-38196 is tied to the Windows Common Log File System Driver and is described as an Elevation of Privilege (local) vulnerability. The CVE is listed with a CVSSv3.1 base score of 7.8 (HIGH) and a local attack vector with low attack complexity, requiring low privileges and no user interactio...

CVE-2025-54100

CVE-2025-54100 is a PowerShell RCE vulnerability tied to improper neutralization during MSHTML-based HTML parsing when Invoke-WebRequest is used without -UseBasicParsing. Affected: Windows PowerShell 5.1 on Windows 10/11 and Windows Server 2008–2025; attack is locally exploitable with user intera...

CVE-2025-62221

CVE-2025-62221 is a local-elevation vulnerability in the Windows Cloud Files Mini Filter Driver (CLOUD FILES MINIFILTER DRIVER). It is a use-after-free condition in the driver that can allow an authorized local attacker to escalate to SYSTEM privileges. Public PoCs/Exploits exist (GitHub repos AB...

CVE-2026-21513

CVE-2026-21513 is a security feature bypass vulnerability in the MSHTML Framework. Affected component: MSHTML/MSHTML Framework used by Windows’ browsing/rendering stack. Root cause details are described in vendor advisories and security blogs as a protection mechanism bypass that can be triggered...

CVE-2023-28216

Technical details about CVE-2023-28216 are not publicly available in the provided documents. Monitor for updates.

CVE-2024-26250

CVE-2024-26250 is a Windows Secure Boot vulnerability categorized as a circumvention of security measures. The connected advisory (NCSC) lists CVE-2024-26250 under the Windows Secure Boot section with that impact. The available documents do not provide product version ranges or exact vulnerable c...

CVE-2025-21245

CVE-2025-21245 is a Windows Telephony Service remote code execution vulnerability. The CIRCL feed and CVE listings indicate it affects Windows Telephony Service with potential for executing code from an attacker-supplied payload (impact: execution of arbitrary code) and a CVSS v3.1 base score of ...

CVE-2025-47981

CVE-2025-47981 is a heap-based buffer overflow in Windows SPNEGO Extended Negotiation that enables pre-auth remote code execution over the network. It affects Windows clients (e.g., Windows 10 1607+) and Windows Server platforms. The initial doc provides a 9.8 CVSSv3.1 score (NETWORK, NONE/LOW/NO...

CVE-2023-32057

CVE-2023-32057 is a Microsoft Message Queuing (MSMQ) Remote Code Execution vulnerability. The connected sources indicate an attacker can trigger RCE by sending a malicious MSMQ packet to an MSMQ server, enabling remote code execution on the server side. A mitigation documented in the sources is t...

CVE-2023-36003

CVE-2023-36003 is a Microsoft Windows XAML Diagnostics Elevation of Privilege vulnerability. The XAML Diagnostics API can be abused to obtain elevated privileges locally. Public material confirms exploits/POCs exist (e.g., GitHub PoCs) and that patches were released during December 2023 Patch Tue...

CVE-2024-38033

Technical details about CVE-2024-38033 are not provided in the supplied documents. Monitor for updates from Microsoft and vulnerability feeds for affected products, versions, and fixes.

CVE-2023-23422

CVE-2023-23422 is a Windows kernel elevation-of-privilege vulnerability described in the Registry hive memory‑corruption research. The exposed flaw is a local, kernel‑level issue where memory corruption in a registry hive (notably HKCU) can be triggered to craft an out‑of‑bounds cell index that r...

CVE-2023-36900

CVE-2023-36900 affects the Windows Common Log File System (CLFS) driver, enabling Elevation of Privilege via an integer overflow/wraparound vulnerability. The connected exploit repository documents a PoC labeled as an exploit for an Integer Overflow or Wraparound in Microsoft CLFS, with a Denial-...

CVE-2025-24068

CVE-2025-24068 describes a buffer over-read in the Windows Storage Management Provider that can lead to local information disclosure for an authenticated user. The issue affects Windows Storage Management Provider components and is rated with a local attack vector and a confidentiality impact. Co...

CVE-2023-23385

Technical details for CVE-2023-23385 are not publicly available in the provided documents. Monitor for updates from official sources.

CVE-2023-28224

CVE-2023-28224 is described as a Windows PPPoE Remote Code Execution vulnerability. The entry provides a CVSS 3.1 score of 7.1 (HIGH) with attack vector Adjacent, high complexity, no privileges required, user interaction required, and impacts to confidentiality, integrity, and availability. Explo...

CVE-2024-26240

CVE-2024-26240 is a Windows Secure Boot vulnerability rated CVSS v3.1 base score 8.0 (AV: Adjacent, AC: Low, PR: None, UI: Required, S: Unchanged, C/I/A: High). The connected documents corroborate that this CVE involves bypassing or circumvention of Secure Boot security measures, with explicit no...

CVE-2025-21191

CVE-2025-21191 affects Windows Local Security Authority (LSA) with a time-of-check/time-of-use race condition that enables an authorized local attacker to elevate privileges (obtaining increased entitlements). The vulnerability is categorized under local privilege escalation and is documented in ...