CVE-2024-38245

CVE-2024-38245 is a Windows Kernel Streaming Service Driver elevation-of-privilege flaw. A local attacker could exploit it with low privileges and no user interaction to gain SYSTEM-level access; CVSS v3.1/3.1 vector indicates local access, low complexity, with high impact to confidentiality, int...

CVE-2024-43501

CVE-2024-43501 affects the Windows Common Log File System Driver and is a local elevation-of-privilege vulnerability. Triggers could allow an attacker with low privileges to escalate to obtain high-level privileges, with the issue categorized as high severity (CVSS v3.1 base score 7.8). The CVE i...

CVE-2024-43563

CVE-2024-43563 affects Windows Ancillary Function Driver for WinSock. The vulnerability is an Elevation of Privilege in the driver, with local attack vector, low privileges required, no user interaction, and high impact to confidentiality, integrity, and availability. Connected sources corroborat...

CVE-2024-43565

CVE-2024-43565 corresponds to a Windows NAT Denial of Service vulnerability with a CVSS v3.1 base score of 7.5 (NETWORK attack, LOW attack complexity, NO privileges, NO user interaction). The issue is tied to the Windows NAT component and is listed among multiple Microsoft Windows vulnerabilities...

CVE-2025-21239

Technical details about CVE-2025-21239 (affected component, root cause, exploitability, affected products) are not publicly provided in the connected documents. Monitor for updates from Microsoft/NVD CVE entries for new details and fixes.

CVE-2025-21289

CVE-2025-21289 is a denial-of-service vulnerability in Microsoft Message Queuing (MSMQ). Public details in the provided documents show a network‑accessible issue with a CVSS 3.1 base score of 7.5 (HIGH) where no user interaction is required and no privileges are needed to trigger the impact of de...

CVE-2025-21306

CVE-2025-21306 corresponds to a remote code execution vulnerability in Windows Telephony Service. The issue is mapped to Windows Telephony Service and is rated high (CVSSv3.1: 8.8, AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H). Connected sources confirm the affected component and vulnerability type; root ...

CVE-2025-21320

CVE-2025-21320 is a Windows kernel memory information disclosure vulnerability. The CVE is documented as a local, memory-information leakage issue with low attack complexity and low privileges required, potentially exposing high-confidentiality data. Public details provided in connected sources a...

CVE-2026-34339

Technical details about CVE-2026-34339 (Windows LDAP denial of service) are not publicly available in the provided connected documents. Monitor for updates from Microsoft/NVD for affected products, vectors, and fixes.

CVE-2026-44812

CVE-2026-44812 affects Windows graphics component Win32K GRFX, where an integer overflow/wraparound in GRFX can allow an unauthorized attacker to execute code locally. The CVSS v3.1 vector is AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H with a base score of 7.8 (HIGH). Exploitation details are not provide...

CVE-2026-50688

CVE-2026-50688 is a Windows Win32k elevation-of-privilege vulnerability described as a use-after-free in the Win32k subsystem that allows a locally authenticated attacker to gain higher privileges. The connected documents confirm the CVE title and its Windows kernel context, with advisories and C...

CVE-2026-69463

CVE-2026-69463 is a heap-based buffer overflow in the Windows NTFS filesystem component that allows an unauthorized attacker to achieve remote code execution over a network without requiring prior authentication or user interaction. The vulnerability is rated CVSS 3.1: 9.8 (Critical) by the CNA (...

CVE-2024-38136

Technical details about CVE-2024-38136 (Windows Resource Manager PSM Service Extension Elevation of Privilege) are not publicly provided in the connected documents. Monitor for updates from Microsoft and CVE records for affected products and fixes.

CVE-2025-21246

CVE-2025-21246 is a Windows Telephony Service remote code execution vulnerability with a CVSS v3.1 base score of 8.8 (HIGH) and network attack vector. The provided connected documents confirm this CVE and indicate Microsoft has released updates to address it (e.g., KB5050009 and related January 2...

CVE-2025-27467

CVE-2025-27467 affects Windows Digital Media, with a use-after-free flaw that enables local privilege escalation for an authenticated user with low privileges and no user interaction. The CVSS 3.1 base metrics provided by Microsoft indicate AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, base score 7.8 (HIG...

CVE-2025-49691

CVE-2025-49691 is a heap-based buffer overflow in Windows Media that could allow an adjacent-network attacker to execute code. CVSSv3.1 base score 8.0 (AV: Adjacent, AC: Low, PR: None, UI: Required, S: Unchanged, C/I/A: High). The connected documents indicate this affects Windows Media and has co...

CVE-2026-50451

CVE-2026-50451 affects Windows Routing and Remote Access Service (RRAS): missing authentication for a critical function enables local privilege escalation by an authorized attacker. Documented impact is privilege escalation (local), base CVSSv3.1 7.1 (HIGH); remediation is Microsoft security upda...

CVE-2026-50502

CVE-2026-50502 corresponds to a Windows Event Logging Service remote code execution vulnerability. The issue is described as insufficient granularity of access control in the Event Logging Service, enabling an authenticated, network-accessing attacker to run code on the vulnerable system. For con...

CVE-2026-59128

The CVE-2026-59128 entry documents an out-of-bounds read in Windows Encrypting File System (EFS) that can let an authorized local attacker disclose information. Affected component: Windows EFS. Root cause: out-of-bounds read leading to information disclosure. Impact: local disclosure of informati...

CVE-2026-61348

This CVE (CVE-2026-61348) is a local privilege escalation in the Windows Ancillary Function Driver for WinSock. The issue is a use-after-free in the driver component, enabling an authenticated attacker to elevate privileges on the affected system. The provided materials indicate a high-severity i...

CVE-2026-61926

CVE-2026-61926 : Heap-based buffer overflow in the Windows USB Driver allows an authorized local attacker to perform a local privilege escalation . Exploitation details are not provided beyond the CVSS metrics (LOCAL, LOW complexity, LOW privileges, NONE user interaction; high impact to confident...

CVE-2023-35353

CVE-2023-35353 is a Microsoft Windows elevation-of-privilege vulnerability in Connected User Experiences and Telemetry. Connected documents list affected products/versions including Windows 10/11 21H2 and 22H2 across multiple architectures (x86_64, ARM64) and Windows Server variants. The NVD entr...

CVE-2024-38235

CVE-2024-38235 is listed under Windows Hyper-V with a CVSS v3.1 score of 6.50 and impact described as a Denial-of-Service. The connected NCSC advisory confirms Windows vulnerabilities fixed in this cycle; it recommends applying the Microsoft updates per MSRC guidance. The provided documents do no...

CVE-2024-38247

CVE-2024-38247 is a Windows Graphics Component local elevation of privilege vulnerability. The CVSSv3.1 vector shows Attack Vector: Local, Privileges Required: Low, User Interaction: None, with all of Confidentiality/Integrity/Availability impacts: High. Public documents confirm a Windows patch r...

CVE-2024-43643

CVE-2024-43643 is a Windows USB Video Class System Driver elevation-of-privilege vulnerability. The vulnerability pertains to the Windows USB Video Driver component and is categorized with CVSSv3.1 vektor: physical attack, low complexity, no privileges required, no user interaction, and impacts t...

CVE-2024-49111

CVE-2024-49111 is a Windows Wireless Wide Area Network Service elevation-of-privilege vulnerability. The CVSS 3.1 base metrics show a MEDIUM severity (6.6), with the attack vector as physical and low privileges required , no user interaction, and impacts to confidentiality, integrity, and availab...

CVE-2025-21214

Technical details about CVE-2025-21214 (Windows BitLocker information disclosure) are not publicly provided in the supplied connected documents. The sources reference updates but do not specify affected versions, root cause, exploitability, or mitigation beyond patch availability. Monitor for upd...

CVE-2025-21288

Technical details about CVE-2025-21288 are not publicly provided in the supplied connected documents; the record notes a Windows COM Server information disclosure vulnerability but lacks specifics on affected products/versions or mitigations. Monitor for official disclosures.

CVE-2025-29842

Technical details (affected product, root cause, impact, fixes) for CVE-2025-29842 are not provided in the supplied connected documents. Monitor for updates from official advisories.

CVE-2025-33057

CVE-2025-33057 is a Windows Local Security Authority (LSA) vulnerability where a null pointer dereference could allow an authorized attacker to cause a network-based Denial-of-Service. Affected component is LSA; impact is DoS over the network. Documented in NVD and corroborated by NC SC/NCSC entr...

CVE-2026-47653

CVE-2026-47653 describes a heap-based buffer overflow in the Remote Desktop Client that enables code execution over a network. Affected component is the Remote Desktop Client; the issue is caused by a memory-unsafe condition leading to potential arbitrary code execution. CVSS v3.1 metrics assign ...

CVE-2026-62734

CVE-2026-62734 describes a race condition due to concurrent execution with an improper synchronization in the Windows Telephony Service, allowing an authorized attacker to locally elevate privileges. The issue is identified as a local privilege escalation with a high impact on confidentiality, in...

CVE-2026-62777

CVE-2026-62777 concerns Windows License Manager. The available documents state: a missing authentication for a critical function could allow an authorized attacker to elevate privileges locally. The CVSS 3.1 vector is Local, Low attack complexity, with Privileges Required: Low and User Interactio...

CVE-2026-72979

CVE-2026-72979 is a use after free vulnerability in Windows DHCP Server that allows an unauthorized attacker to execute code over a network . The flaw is rated CVSS 9.8 (Critical) with a network attack vector, low complexity, and no privileges or user interaction required, resulting in high impac...

CVE-2024-30079

Technical details about CVE-2024-30079 are not provided in the connected documents. No affected product/version, root cause, or remediation details are disclosed here. Monitor for updates.

CVE-2024-38119

CVE-2024-38119 affects Windows Network Address Translation (NAT). The vulnerability allows Remote Code Execution with high impact (cctx: code execution, data/privilege impact) when an attacker on an adjacent network exploits NAT processing. CVSS 3.1 vector: AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H. Mi...

CVE-2024-43620

CVE-2024-43620 corresponds to a Windows Telephony Service remote code execution vulnerability with a high impact (base CVSS 8.8; network access; user interaction required). In the connected documents, it is listed under Windows Telephony Service with an impact described as Execute arbitrary code ...

CVE-2024-49073

CVE-2024-49073 affects the Windows Mobile Broadband Driver and is an elevation-of-privilege vulnerability. The CVSS 3.1 vector (AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) indicates physical access is required, with low attack complexity and no privileges required, but with high impact to confidentialit...

CVE-2025-21201

CVE-2025-21201 is cited by NCSC as a Windows Telephony Server remote code execution vulnerability with CVSS-like severity of 8.8 (high) andImpact described as executing random code. The connected NCSC advisory confirms the vulnerability exists in Windows Telephony Server and provides an explicit ...

CVE-2025-21240

CVE-2025-21240 is a Windows Telephony Service remote code execution vulnerability. The CIRCL sighting data lists Windows Telephony Service with CVSS 8.80 (High) and impact: Execute random code, consistent with the CVSS vector in the Initial Description (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H). Conne...

CVE-2025-21300

CVE-2025-21300 affects Windows UPnP Device Host. Connected CNVD data ties the issue to the Windows upnphost.dll component and a Denial of Service impact. Microsoft has published January 2025 security updates to address this family of issues; applying KB5050021 (and related January 2025 updates) i...

CVE-2025-21339

CVE-2025-21339 corresponds to a Windows Telephony Service remote code execution vulnerability. The NCSC listing confirms a high-severity impact (CVSS 3.1: AV Network, AC L, PR None, UI Required, S U, C/H/I/A H) with an overall score of 8.80 and notes that exploitation can lead to executing code i...

CVE-2025-27468

Technical details about CVE-2025-27468 (affected product, root cause, and patch status) are not publicly provided in the supplied Connected documents. Monitor for official updates from MSRC/Microsoft for specifics.

CVE-2025-29969

Technical details about CVE-2025-29969 (affected product/version, root cause, exploitability, and remediation) are not provided in the supplied documents; monitor for updates.

CVE-2025-49734

CVE-2025-49734 affects Windows PowerShell. The root cause is an improper restriction of the communication channel to intended endpoints, enabling an authorized local attacker to elevate privileges. The CVE maps to a local privilege escalation with high impact (C:H/I:H/A:H) and requires local acce...

CVE-2026-61350

Windows NTFS contains a buffer over-read that can disclose information when an attacker performs a physical attack. Affected component: NTFS; root cause: buffer over-read. CVSSv3.1 metrics indicate AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N with base score 4.6 (Medium). Impact is limited to confidential...

CVE-2026-62733

CVE-2026-62733 is an out-of-bounds read in Windows Win32K that allows a locally authenticated attacker to elevate privileges. The vulnerability affects Win32K components and yields a Local Privilege Escalation (LPE) with HIGH impact to confidentiality, integrity, and availability (per CVSS 3.1: A...

CVE-2026-62785

CVE-2026-62785: Heap-based buffer overflow in Windows LDAP (Lightweight Directory Access Protocol) allows unauthenticated remote code execution over the network. Affected: Windows LDAP service. Root cause: improper heap handling leading to overflow. Impact: remote code execution with high severit...

CVE-2026-72981

CVE-2026-72981 is a use-after-free vulnerability in Microsoft's IP Helper component that allows an unauthorized attacker to achieve remote code execution over a network. The Microsoft CNA assigns a CVSS 3.1 score of 8.1 (HIGH) with a vector of AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H, indicating that ...

CVE-2023-35325

Technical details for CVE-2023-35325 are not publicly available in the provided documents. Monitor for updates from official advisories; no concrete affected products, root cause, impact, or fixes are specified here.