CVE-2023-21802

Technical details (affected product/component/versions/root cause and fixes) for CVE-2023-21802 are not publicly available in the provided documents. Monitor for updates from official CVE/NVD/KB sources.

CVE-2023-24861

Technical details about CVE-2023-24861 (Windows Graphics Component Elevation of Privilege Vulnerability) are not publicly available in the provided documents; no affected versions, root cause, or remediation are specified here. Monitor for official disclosures and updates.

CVE-2023-35367

Technical details for CVE-2023-35367 are not publicly provided in the supplied documents. No specific affected products, versions, root cause, remediation, or exploit information is available here. Monitor official sources for updates.

CVE-2023-36882

CVE-2023-36882 concerns Microsoft WDAC OLE DB provider for SQL Server, enabling Remote Code Execution. The NVD details show a network-based exploitable flaw with CVSS v3.1: AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, score 8.8 (HIGH). Root cause and affected versions are not fully enumerated in the prov...

CVE-2025-21273

Technical details are not publicly provided in the supplied documents. The CVE-2025-21273 entry lacks explicit affected product versions, root cause, or remediation specifics in this set; monitor for updates from Microsoft/MSRC.

CVE-2023-21813

Technical details on CVE-2023-21813 are not provided in the furnished documents; no affected products, exploit info, or fixes are described here. Monitor for updates from official advisories.

CVE-2023-23385

Technical details for CVE-2023-23385 are not publicly available in the provided documents. Monitor for updates from official sources.

CVE-2023-28227

CVE-2023-28227 concerns the Windows Bluetooth Driver and is described as a Remote Code Execution vulnerability. The NVD entry lists a CVSS v3.1 base score of 7.5 (High) with vector AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H, indicating an adjacent attacker with no user interaction could achieve compromi...

CVE-2024-26241

CVE-2024-26241 is a Win32k elevation-of-privilege vulnerability in Windows. The OpenVAS entries list Win32K as the affected component with local exploitation, requiring low privileges and no user interaction, and causing high confidentiality, integrity, and availability impact. The CVSSv3.1 base ...

CVE-2023-21803

CVE-2023-21803 corresponds to a Windows iSCSI Discovery Service Remote Code Execution vulnerability. The available data shows a critical 9.8 CVSSv3.1 score with network attack vector , no privileges required , and no user interaction ; impact is shown as High for confidentiality, integrity, and a...

CVE-2023-23409

CVE-2023-23409 corresponds to a CSRSS Information Disclosure vulnerability. The available data indicate a local attack vector with low attack complexity and low privileges required, yielding a high confidentiality impact (CVSS 3.1: AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N). The description notes CSRSS...

CVE-2023-23422

CVE-2023-23422 is a Windows kernel elevation-of-privilege vulnerability described in the Registry hive memory‑corruption research. The exposed flaw is a local, kernel‑level issue where memory corruption in a registry hive (notably HKCU) can be triggered to craft an out‑of‑bounds cell index that r...

CVE-2023-28273

CVE-2023-28273 is a Windows Clip Service Elevation of Privilege vulnerability. The initial data lists a local attack vector with high impact and exploitation conditions: local access, high attack complexity, low privileges required, no user interaction, and impact to confidentiality, integrity, a...

CVE-2023-35365

CVE-2023-35365 affects Windows RRAS with remote code execution potential. Exploitation, per the linked discussion, requires an attacker to send crafted packets to an affected RRAS server. The RRAS feature is not installed or enabled by default on Windows systems, which reduces exposure for users ...

CVE-2025-21211

Technical details about CVE-2025-21211 are not publicly provided in the supplied connected documents. Monitor for updates from official advisories; no confirmed affected products, vectors, or fixes are described here.

CVE-2026-66799

CVE-2026-66799 describes a heap-based buffer overflow in Windows Key Guard that allows an authenticated, local attacker to elevate privileges. Affected component: Windows Key Guard. Root cause: heap-based buffer overflow (as stated). Impact: local privilege escalation with high confidentiality, i...

CVE-2022-35744

Technical details (affected product, root cause, impact, or fixes) are not provided in the supplied documents. Monitor for updates from official CVE sources; no specifics about exploitation, vectors, or mitigations are included here.

CVE-2023-24867

The CVE, CVE-2023-24867, is described in connected sources as a remote code execution vulnerability in Microsoft’s PostScript and PCL6 Class Printer Driver. CNVD-2023-28103 explicitly notes a remote code execution flaw in the Microsoft PostScript Printer Driver; NVD/NIST entries corroborate the v...

CVE-2023-24872

CVE-2023-24872 affects the Microsoft PostScript and PCL6 Class Printer Driver. The entry documents a Remote Code Execution vulnerability with high severity (CVSS 3.1: AV=N/AC=L/PR=L/UI=N/S=U/C=H/I=H/A=H). Concrete technical details (affected product/version, root cause, exploit status, or fixes) ...

CVE-2023-24911

The CNVD-2023-30862 entry aligns with CVE-2023-24911, describing an information-disclosure vulnerability in Microsoft PostScript and PCL6 Class Printer Driver. It notes an information disclosure exists and involves these Microsoft printer drivers, but provides no version/impact details or remedia...

CVE-2023-28224

CVE-2023-28224 is described as a Windows PPPoE Remote Code Execution vulnerability. The entry provides a CVSS 3.1 score of 7.1 (HIGH) with attack vector Adjacent, high complexity, no privileges required, user interaction required, and impacts to confidentiality, integrity, and availability. Explo...

CVE-2023-29359

Technical details about CVE-2023-29359 are not provided in the connected documents. The entries identify a GDI Elevation of Privilege vulnerability but do not specify affected products/versions, root cause, impact specifics, or remediation.

CVE-2024-38033

Technical details about CVE-2024-38033 are not provided in the supplied documents. Monitor for updates from Microsoft and vulnerability feeds for affected products, versions, and fixes.

CVE-2025-21310

Technical details for CVE-2025-21310 are not publicly available in the provided documents. Monitor for updates from Microsoft and NVD.

CVE-2025-21369

CVE-2025-21369 is listed by the NCSC advisory as a vulnerability in Microsoft Windows’ Digest Authentication that enables executing arbitrary code. The advisory attributes an overall high severity (CVSS v3.1 base 8.80) with a network attack vector and impact. The connected document confirms the v...

CVE-2023-24939

Technical details about CVE-2023-24939 are not publicly provided in the supplied documents; no affected products, vectors, or fixes are described here. Monitor for updates.

CVE-2023-28228

CVE-2023-28228 is documented as a Windows spoofing vulnerability. Based on the CVE entry, its CVSS v3.1 base score is 5.5 (Medium) with a Local attack vector, Low attack complexity, No privileges required, User interaction required, and Impact mainly on integrity (High) with no confidentiality/av...

CVE-2024-38104

Technical details for CVE-2024-38104 are not provided in the supplied connected documents; no affected products, root cause, impact, or remediation are specified here. Monitor for official updates to disclose specifics.

CVE-2024-38186

Technical details (affected product, root cause, impact, versions, or remediation) for CVE-2024-38186 are not provided in the connected documents. Monitor for updates.

CVE-2026-42985

CVE-2026-42985 is described in connected sources as a heap-based buffer overflow in the Remote Desktop Client that allows an unauthenticated attacker to execute code over the network. The initial and connected docs provide the vulnerability description and a high CVSS score (8.8, HIGH) with netwo...

CVE-2026-50343

CVE-2026-50343, a Microsoft Install Service Elevation of Privilege vulnerability, arises from improper privilege management. An authorized local attacker could elevate privileges on affected Windows systems. The vulnerability is listed among several critical Windows privilege-escalation issues di...

CVE-2023-24865

CVE-2023-24865 corresponds to a vulnerability in the Microsoft PostScript and PCL6 Class Printer Driver that results in an information disclosure. The CVE is characterized by a network-accessible vector with low attack complexity and low privileges required, but with high confidentiality impact a...

CVE-2023-24885

CVE-2023-24885 corresponds to a remote code execution vulnerability in Microsoft PostScript and PCL6 Class Printer Driver. The connected CNVD entry confirms a remote code execution flaw in the PostScript and PCL6 class printer drivers; however, the documents do not provide detailed root cause ana...

CVE-2025-21260

Technical details about CVE-2025-21260 are not publicly provided in the connected documents. Monitor for updates from Microsoft and CVE sources for affected components, impact, and remediation.

CVE-2025-21329

CVE-2025-21329 is a MapUrlToZone Security Feature Bypass in Windows. Public docs identify it as a bypass of a security feature (CVE-2025-21329) with CVSS v3.1 base metrics indicating NETWORK attack vector, low attack complexity, no privileges required, user interaction required, and a MEDIUM seve...

CVE-2025-21340

Technical details about CVE-2025-21340 are not provided in the supplied Connected documents. The entry concerns Windows VBS security feature bypass; no affected products/versions or patch specifics are disclosed here. Monitor for updates from Microsoft.

CVE-2025-24068

CVE-2025-24068 describes a buffer over-read in the Windows Storage Management Provider that can lead to local information disclosure for an authenticated user. The issue affects Windows Storage Management Provider components and is rated with a local attack vector and a confidentiality impact. Co...

CVE-2023-29352

CVE-2023-29352 is a Windows Remote Desktop Security Feature Bypass vulnerability. The CVSS 3.1 vector indicates network access with low attack complexity, no privileges, and user interaction required, resulting in potential integrity impact (I: High) but no confidentiality or availability impact ...

CVE-2025-21191

CVE-2025-21191 affects Windows Local Security Authority (LSA) with a time-of-check/time-of-use race condition that enables an authorized local attacker to elevate privileges (obtaining increased entitlements). The vulnerability is categorized under local privilege escalation and is documented in ...

CVE-2026-35421

CVE-2026-35421 describes a heap-based buffer overflow in Windows GDI that permits a local attacker to execute arbitrary code. The entry lists a CVSS v3.1 base score of 7.8 (HIGH) with LOCAL attack vector, LOW attack complexity, NO privileges required, user interaction required, and impacts to con...

CVE-2022-35756

Technical details about CVE-2022-35756 (affected products, root cause, impact, fix) are not provided in the connected documents. Monitor for official disclosures and updates from Microsoft and CVE listings.

CVE-2023-28266

Technical details (affected product/component, root cause, impact, fix) are not provided in the connected documents. Monitor for updates.

CVE-2023-35377

Technical details for CVE-2023-35377 are not publicly available in the provided documents. Monitor for updates.

CVE-2024-38196

CVE-2024-38196 is tied to the Windows Common Log File System Driver and is described as an Elevation of Privilege (local) vulnerability. The CVE is listed with a CVSSv3.1 base score of 7.8 (HIGH) and a local attack vector with low attack complexity, requiring low privileges and no user interactio...

CVE-2024-43641

CVE-2024-43641 is a Windows Registry Elevation of Privilege issue. The connected documents reveal a sophisticated exploitation path based on hive memory corruption and out-of-bounds cell indexes, enabling an unprivileged actor to obtain arbitrary kernel read/write access and, ultimately, SYSTEM-l...

CVE-2026-62778

CVE-2026-62778 refers to a Windows DNS vulnerability described as a use-after-free in the DNS service that enables a remote attacker to elevate privileges over a network. The affected component is the Windows DNS service; the root cause is a use-after-free condition in DNS processing. The impact ...

CVE-2023-24913

CNVD-2023-30861 describes CVE-2023-24913 as a remote code execution vulnerability in Microsoft PostScript and PCL6 Class Printer Driver. Affected components are Microsoft PostScript Printer Driver and Microsoft PCL6 Class Printer Driver, with exploitation described as remote code execution by an ...

CVE-2023-28298

Technical details for CVE-2023-28298 are not provided in the connected documents. OpenVAS entries reference the CVE across KB updates but do not describe affected components, root cause, impact, or remediation. Monitor for updates.

CVE-2023-35630

CVE-2023-35630 is a Microsoft Windows Internet Connection Sharing (ICS) remote code execution vulnerability. The NVD entry lists CVSS v3.1 base score 8.8 (HIGH) with AV:A, AC:L, PR:N, UI:N, S:U, C:H, I:H, A:H, indicating adjacent-network exploitation with no user interaction. Multiple OpenVAS ent...

CVE-2023-36906

Technical details for CVE-2023-36906 are not publicly provided in the supplied documents. No affected products, root cause, or fixes are confirmed here. Monitor for updates.