CVE-2023-35314

Technical details for CVE-2023-35314 are not provided in the connected documents. The materials here only reiterate the vulnerability title. No affected products, root cause, or fixes are specified. Monitor for updates.

CVE-2023-35341

Technical details for CVE-2023-35341 are not publicly available in the provided documents. Monitor for updates from official sources (e.g., vendor advisories, CVE records) to obtain affected products, impact, and remediation information.

CVE-2024-35270

Technical details about CVE-2024-35270 (Windows iSCSI Service DoS) are not provided in the connected documents. Monitor for official advisories and Microsoft updates for affected products and remediation.

CVE-2024-37970

Technical details about CVE-2024-37970 are not provided in the connected documents. The initial description notes a Secure Boot security feature bypass, but no affected product/version/root cause/fix is disclosed here. Monitor for updates.

CVE-2024-43514

Technical details about CVE-2024-43514 are not publicly provided in the connected documents; they reference fixes but do not describe root cause, vectors, or affected versions. Monitor for updates.

CVE-2024-43535

CVE-2024-43535 is a Windows Kernel-Mode Driver Elevation of Privilege affecting Windows Kernel-Mode Drivers (tm.sys cited in public discussions). The CVE entry lists a HIGH base impact (Privilege escalation) with LOCAL access and HIGH confidentiality/integrity/availability impact. A GitHub repo i...

CVE-2024-43615

CVE-2024-43615 affects OpenSSH for Windows and is categorized as a remote code execution vulnerability with NETWORK attacker access, requiring user interaction and low privileges. The CVSS 3.1 vector indicates Network access, high confidentiality/integrity/availability impact, and required user i...

CVE-2025-21212

CVE-2025-21212 corresponds to an Internet Connection Sharing (ICS) Denial of Service vulnerability in Windows. Reported impact is DoS, with an adjacent attack vector, low attack complexity, no user interaction required, and no confidentiality/integrity impact, but availability is affected (CVSS 3...

CVE-2025-21359

Technical details (affected product, root cause, impact, or fix) for CVE-2025-21359 are not provided in the supplied documents. Please monitor official advisories (Microsoft/MSRC updates) for concrete vulnerability specifics and remediation guidance.

CVE-2025-26669

CVE-2025-26669 is listed in RRAS (Windows Routing and Remote Access Service) with the impact described as Access to sensitive data and a severity score of 8.80. The RRAS entry indicates an information-disclosure risk via an out-of-bounds read, attributed to a vulnerability in RRAS. Connected sour...

CVE-2026-50369

CVE-2026-50369 is a Windows Remote Desktop Services vulnerability identified as a use-after-free that enables an authorized attacker to elevate privileges over the network. The initial entry and multiple connected sources describe the issue consistently and confirm the affected component as Windo...

CVE-2026-54992

CVE-2026-54992 is a heap-based buffer overflow affecting the Windows Message Queuing Queue Manager that allows a local attacker to execute code. The vulnerability is described in NVD/MSRC references as enabling local arbitrary code execution. The public entries consistently describe the same unde...

CVE-2026-62712

CVE-2026-62712 is a Windows Win32K heap-based buffer overflow that enables local privilege escalation by an authorized attacker. Affected component: Windows kernel user-mode win32k; root cause is a heap overflow in Win32K handling. Impact per provided metrics: Confidentiality, Integrity, and Avai...

CVE-2023-33168

CVE-2023-33168 is a Remote Procedure Call Runtime Denial of Service vulnerability. The connected documents provide only a generic description and CVSS metrics; they do not reveal affected product/vendor/component/versions, root cause, exploit details, or a fix. OpenVAS entries reference the CVE b...

CVE-2023-35343

CVE-2023-35343 is a Windows Geolocation Service remote code execution vulnerability. The initial entry confirms an OS component (Windows Geolocation Service) with a CVSS v3.1 base score of 7.8 (High); attack vector listed as Local with User Interaction required, and impacts to confidentiality, in...

CVE-2023-35644

CVE-2023-35644 is a Windows SysMain service elevation of privilege vulnerability (CVSS v3.1: 7.8). It is a local privilege escalation with low privileges required and no user interaction; impact is elevated rights. Connected sources confirm related Microsoft Windows vulnerabilities and indicate u...

CVE-2023-36011

CVE-2023-36011 is a Windows Win32k elevation-of-privilege vulnerability. Affected: Windows Win32K component (kernel-related). Nature: local exploit with low attack complexity and no user interaction; enables total impact on confidentiality, integrity, and availability. CVSSv3.1 base score 7.8 (HI...

CVE-2024-29999

CVE-2024-29999 is listed as Windows Mobile Broadband Driver Remote Code Execution vulnerability. Connected sources identify it under Windows Mobile Broadband as allowing execution of code, with CVSS-like rating around 6.8/10 and a local-access context in some mappings. Technical details (affected...

CVE-2024-37975

Technical details for CVE-2024-37975 are not provided in the connected documents. The available materials only label it as a Secure Boot bypass without product, vector, impact, or remediation specifics. Monitor for updates for publicly disclosed details.

CVE-2024-38091

Technical details for CVE-2024-38091 are not provided in the connected documents. Monitor for updates; no affected products, root cause, vectors, or fixes are stated here.

CVE-2024-38149

CVE-2024-38149 is a Windows BranchCache Denial of Service vulnerability. Documents indicate a network-exploitable issue (CVSS v3.1: 7.5, AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) affecting BranchCache components. Microsoft provides fixes via security updates (KB/MSRC guidance); no explicit root-cause ...

CVE-2024-38237

CVE-2024-38237 is a local privilege-escalation in Windows Kernel Streaming WOW Thunk Service Driver. Affected component is a Windows kernel-mode driver used by streaming services; vulnerability exploited locally with low privileges and no user interaction, leading to elevated privileges and poten...

CVE-2024-38243

CVE-2024-38243 is a Windows Streaming Service elevation of privilege vulnerability. The connected NCSC entry classifies it as impacting Windows Streaming Service with the effect of obtaining elevated privileges, consistent with a local-exploit scenario (CVSS: Local, Privileges Required Low, User ...

CVE-2024-38256

CVE-2024-38256 is a Windows kernel‑mode driver information disclosure vulnerability. The incident affects Windows kernel‑mode drivers and has a CVSSv3.1 base score of 5.5 (MEDIUM) with local attack vector, low attack complexity, and low privileges required; confidentiality impact is High, others ...

CVE-2024-43524

CVE-2024-43524 is a Windows Mobile Broadband Driver Remote Code Execution vulnerability. The available connected documents confirm the affected component as the Windows Mobile Broadband driver and indicate that updates from Microsoft were released to address vulnerabilities in the Windows update ...

CVE-2024-49090

CVE-2024-49090 affects the Windows Common Log File System Driver. The connected sources indicate an Elevation of Privilege vulnerability in the CLFS driver that could allow a local attacker with low privileges and no user interaction to obtain increased rights (high impact across confidentiality,...

CVE-2024-49098

CVE-2024-49098 affects Windows WWAN Service (WwanSvc). The vulnerability allows information disclosure in WWAN, with CVSS 3.1: AV Physical, AC Low, PR Low, UI None, S Unchanged, C High, I None, A None. Exploitation requires physical access and low complexity; attacker needs low privileges. Remedi...

CVE-2024-49101

CVE-2024-49101 covers a privilege-elevation flaw in Windows Wireless Wide Area Network Service (WwanSvc). The vulnerability affects the WWAN service component, with the CVSSv3.1 base metrics indicating Physical attack vector, Low attack complexity, Low privileges required, no user interaction, an...

CVE-2025-21243

CVE-2025-21243 affects Windows Telephony Service. The vulnerability is a remote code execution flaw caused by input validation in Windows Telephony Server, enabling network-based exploitation with required user interaction and no privileges. The CVSS v3.1 base score is 8.8 (HIGH) with network acc...

CVE-2025-21252

Technical details about CVE-2025-21252 are not publicly available in the provided documents. Monitor for updates from Microsoft and NVD for affected products, impact, and remediation.

CVE-2025-21266

CVE-2025-21266 is a Windows Telephony Service remote code execution vulnerability. The linked data shows a network-exposed impact with CVSS v3.1 base score 8.8 (HIGH), requiring user interaction for exploitation and affecting confidentiality, integrity, and availability. Affected component is the...

CVE-2025-30388

Technical details about CVE-2025-30388 are not provided in the connected documents. Public information remains limited to the initial description. Monitor for updates from official advisories for affected products, impacts, and remediation.

CVE-2026-32202

CVE-2026-32202 is a Windows Shell vulnerability described as a protection mechanism failure that enables spoofing over a network. Connected sources label the issue under Windows Shell with the capability for an attacker to pretend to be another user (e.g., “Pretend to be another user”) and refere...

CVE-2026-42909

CVE-2026-42909 involves a heap-based buffer overflow in the Remote Desktop Client that enables a remote attacker to execute code over the network. The vulnerability arises from improper handling of data during remote desktop operations, leading to memory corruption. The CVSS-3.1 vector (AV:N/AC:H...

CVE-2026-59130

AMD Zen CPUs are affected by CVE-2026-59130, described as an information disclosure vulnerability that allows an authorized user to disclose information locally. The NVD/CVE description notes no CWE mapping and that the attack vector is LOCAL with LOW privileges required and HIGH confidentiality ...

CVE-2023-35309

MSMQ Remote Code Execution vulnerability CVE-2023-35309 is discussed in the connected AVLEONOV article as an MSMQ RCE requiring an attacker to send a malicious MSMQ packet to an MSMQ server. The article also suggests blocking TCP port 1801 as a mitigation and notes the vulnerability context among...

CVE-2024-38070

Technical details about CVE-2024-38070 are not publicly provided in the supplied documents. Please monitor for updates from Microsoft and NVD; current entries reference WLDP but do not disclose exploit paths or affected products.

CVE-2024-43553

CVE-2024-43553 is an NT OS Kernel elevation-of-privilege vulnerability associated with Windows NT OS Kernel. The connected data explicitly maps this CVE to Windows NT OS Kernel with a high impact (privilege escalation). The NCSC advisory notes that vulnerabilities in Windows have been fixed, and ...

CVE-2024-43645

CVE-2024-43645 is a Windows Defender Application Control (WDAC) security feature bypass described in connected advisories. The vulnerability permits bypassing WDAC protections via a local attacker, with high potential impact to confidentiality, integrity, and availability. Microsoft has published...

CVE-2024-49121

CVE-2024-49121 is an LDAP Denial-of-Service vulnerability in Windows LDAP (Domain Controller). The connected advisory confirms the LDAP issue as a DoS risk and notes that Microsoft has released fixes via updates; applying the relevant Windows security updates is the recommended remediation. MITRE...

CVE-2025-21214

Technical details about CVE-2025-21214 (Windows BitLocker information disclosure) are not publicly provided in the supplied connected documents. The sources reference updates but do not specify affected versions, root cause, exploitability, or mitigation beyond patch availability. Monitor for upd...

CVE-2025-21238

CVE-2025-21238 affects the Windows Telephony Service and is a remote code execution vulnerability. The initial data lists CVSS 3.1 with NETWORK attack vector, LOW attack complexity, no privileges required, and user interaction required; impact is high on confidentiality, integrity, and availabili...

CVE-2025-21239

Technical details about CVE-2025-21239 (affected component, root cause, exploitability, affected products) are not publicly provided in the connected documents. Monitor for updates from Microsoft/NVD CVE entries for new details and fixes.

CVE-2025-21256

Technical details for CVE-2025-21256 are not provided in the connected documents. Public information here is limited to general Windows updates references; no product, exploit, or root-cause specifics are disclosed. Monitor for updates and additional disclosures.

CVE-2025-21265

Technical details about CVE-2025-21265 are not provided in the supplied documents. Public information on affected products, root cause, and fixes is missing here. Monitor for updates from Microsoft and NVD for concrete vulnerability specifics.

CVE-2025-21277

CVE-2025-21277 affects Microsoft Message Queuing (MSMQ). A Denial of Service vulnerability exists in MSMQ, exploitable over the network without user interaction, with CVSSv3.1 base score 7.5 (HIGH). The affected component is MSMQ; the initial description confirms a DoS impact. Publicly available ...

CVE-2025-21282

Technical details about CVE-2025-21282 are not publicly provided in the supplied documents. No affected product/version or exploit information is disclosed here. Monitor for updates from official advisories and CVE/NVD entries.

CVE-2025-26673

CVE-2025-26673 is Windows LDAP (LDAP) Denial-of-Service. The connected data confirms that the LDAP service can be abused to exhaust resources and disable service over the network (DoS). Remediation, where provided, points to Microsoft security updates; update Windows to the April 2025 bundle (KB5...

CVE-2026-34345

CVE-2026-34345 describes a race condition in the Windows Ancillary Function Driver for WinSock that allows local privilege escalation when a shared resource is improperly synchronized. Connected sources confirm the vulnerability affects Windows components and has been addressed by the May 2026 up...

CVE-2023-35353

CVE-2023-35353 is a Microsoft Windows elevation-of-privilege vulnerability in Connected User Experiences and Telemetry. Connected documents list affected products/versions including Windows 10/11 21H2 and 22H2 across multiple architectures (x86_64, ARM64) and Windows Server variants. The NVD entr...