CVE-2023-36574

CVE-2023-36574 affects Microsoft Message Queuing (MSMQ) with a local, user-interaction–dependent remote code execution vulnerability (CVSS v3.1: AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H; base 7.3). Exploitation status and remediation details are not provided in the supplied connected documents.

CVE-2023-41774

CVE-2023-41774 describes a Remote Code Execution vulnerability in the Layer 2 Tunneling Protocol (L2TP) for Windows. The vulnerability is identified as a high-severity, network-exposed issue with no user interaction required. Public materials here do not provide explicit exploitation details, aff...

CVE-2023-36571

CVE-2023-36571 is described as a Microsoft Message Queuing (MSMQ) Remote Code Execution vulnerability. The connected documents confirm MSMQ is the affected component and (from the NVD metrics) the CVSS v3.1 base score is 7.3 (HIGH) with LOCAL attack vector, LOW attack complexity, LOW privileges r...

CVE-2023-36723

CVE-2023-36723 is a Windows Container Manager Service Elevation of Privilege vulnerability. Documented by NVD/MSRC and mirrored in ENISA/CNNVD entries, it affects Windows Container Manager Service with local attacker access (CVSS: LOCAL, PR:L, UI:N, C/I/A:H) and low attack complexity, requiring L...

CVE-2023-36731

CVE-2023-36731 is a Windows Win32k Elevation of Privilege vulnerability. The CVE entry appears in multiple Microsoft KBs (notably KB5031362) and is listed across OpenVAS checks, indicating it is addressed by Windows security updates in those advisories. The core detail in the provided documents i...

CVE-2023-36701

Technical details for CVE-2023-36701 are not publicly available in the provided documents. Monitor for updates from authoritative sources.

CVE-2023-36710

CVE-2023-36710 is a Windows Media Foundation Core Remote Code Execution vulnerability. The connected sources describe a two-step chain: a WAV file processing flaw in Windows Media Foundation allows two out-of-bounds writes, which an attacker can trigger via a specially crafted WAV played as part ...

CVE-2023-36697

Technical details about CVE-2023-36697 are not publicly available in the provided documents; monitor for updates.

CVE-2023-41765

Technical details about CVE-2023-41765 (affected products, root cause, impact, or fixes) are not provided in the supplied documents. Monitor for updates and additional disclosures to assess applicability and remediation.

CVE-2023-41767

Technical details about CVE-2023-41767 are not publicly provided in the supplied documents. No concrete affected products, root cause, or remediation are specified. Monitor for updates from official sources.

CVE-2023-41772

CVE-2023-41772 is a Win32k Elevation of Privilege vulnerability. A GitHub exploit demonstrates gaining SYSTEM privileges on Windows 10 (from 1809) and Windows 11 via improper access control in Win32k. Public details confirm local privilege escalation, with exploit code provided and no explicit in...

CVE-2023-36594

CVE-2023-36594 affects Windows via a vulnerability in the Windows Graphics Component that enables Elevation of Privilege. The CVSS v3.1 metrics indicate a Local attack vector, Low attack complexity, Low privileges required, and no user interaction, with Confidentiality, Integrity, and Availabilit...

CVE-2025-21420

CVE-2025-21420 is evidenced by PoCs showing a Disk Cleanup Tool (cleanmgr.exe) elevation via a DLL sideload approach. The GitHub PoCs demonstrate loading dokan1.dll/dokannp1.dll to trigger arbitrary code paths, with the exploit chain listing SetProcessMitigationPolicy (ProcessRedirectionTrustPoli...

CVE-2023-36575

CVE-2023-36575 corresponds to a Microsoft Message Queuing (MSMQ) Remote Code Execution vulnerability. The NVD entry lists a CVSS v3.1 base score of 7.3 ( HIGH ), with a LOCAL attack vector, LOW privileges required, and USER INTERACTION NEEDED; all three impact metrics (confidentiality, integrity,...

CVE-2023-36729

CVE-2023-36729 is a Local Elevation of Privilege vulnerability related to the Named Pipe File System. CVSS 3.1 base score 7.8 (High) with LOCAL attack vector, LOW privileges required, no user interaction, and implications for confidentiality, integrity, and availability all rated High. The availa...

CVE-2023-36591

Technical details (affected product versions, root cause, exploit information) are not publicly available in the provided documents; monitor for updates from official advisories and vendor advisories.

CVE-2023-36718

CVE-2023-36718: Microsoft Virtual Trusted Platform Module Remote Code Execution Vulnerability. CVSS 3.1: Attack Vector LOCAL, Attack Complexity HIGH, Privileges Required LOW, User Interaction NONE, Scope CHANGED, with Confidentiality, Integrity, and Availability impacts rated HIGH. Exploitation s...

CVE-2023-41766

Technical details for CVE-2023-41766 are not provided in the connected documents. Public information about affected components, root cause, impact, and fixes is not available here. Monitor for updates from official sources.

CVE-2025-21418

CVE-2025-21418 is a heap-based buffer overflow in the Windows Ancillary Function Driver for WinSock that enables local privilege escalation to SYSTEM. Affected: Windows components exposed to local attack surface; exploitability is local with low attack complexity and no user interaction. Public r...

CVE-2023-36570

Technical details for CVE-2023-36570 are not publicly available in the provided documents. Monitor for updates.

CVE-2023-36725

CVE-2023-36725 is a Windows kernel elevation-of-privilege vulnerability. The initial and connected records identify it as a local-privilege escalation issue with a CVSS v3.1 base score of 7.8 (HIGH), requiring LOCAL attack Vector and LOW privileges with NO user interaction; impact to confidential...

CVE-2023-36902

Technical details for CVE-2023-36902 are not publicly provided in the supplied documents. Monitor for updates from Microsoft and vulnerability feeds.

CVE-2024-26229

CVE-2024-26229 is a Windows local privilege-escalation vulnerability in the CSC service (csc.sys) that can enable kernel R/W access via a vulnerable IOCTL, permitting DKOM-based token replacement to achieve SYSTEM-level LPE. Exploitation details in connected docs describe using kernel memory acce...

CVE-2023-36590

Technical details about CVE-2023-36590 (affected MSMQ RCE) are not publicly provided in the supplied connected documents. Please monitor for updates from official advisories and vulnerability databases for affected products, vulnerable components, impact, and fixes.

CVE-2023-36603

Technical details about CVE-2023-36603 are not publicly provided in the supplied documents. Monitor for updates from vendor advisories and vulnerability feeds.

CVE-2023-20588

CVE-2023-20588 is a division-by-zero vulnerability on some AMD Zen1 CPUs that could cause speculative data leakage and affect confidentiality. The connected Amazon Linux 2 advisory (ALAS2KERNEL-5.4-2025-116) confirms the Linux kernel fix for kernel-5.4 series (e.g., 5.4.254-169.358.amzn2.aarch64/...

CVE-2023-36605

Technical details for CVE-2023-36605 are not publicly provided in the connected documents. The entry notes a Windows Named Pipe Filesystem Elevation of Privilege vulnerability, but no affected product versions, root cause, or remediation are documented here. Monitor for updates.

CVE-2023-36606

Technical details for CVE-2023-36606 are not publicly available in the provided documents. Monitor for updates from vendor/security advisories.

CVE-2023-38166

CVE-2023-38166 is a Windows Layer 2 Tunneling Protocol remote code execution vulnerability. The supplied data states a CVSS v3.1 base score of 8.1 (HIGH), with network attack vector, high attack complexity, no privileges required, no user interaction, and impact to confidentiality, integrity, and...

CVE-2023-36743

Technical details about CVE-2023-36743 are not provided in the supplied connected documents. The set includes general references and vulnerability listings, but no affected products, root cause, impact, or fixes. Monitor for updates as more information becomes publicly available.

CVE-2023-41771

Technical details about CVE-2023-41771 are not provided in the supplied documents. No concrete product/vendor/version impact or remediation is disclosed here; monitor for updates from the referenced sources.

CVE-2023-36592

CVE-2023-36592 concerns Microsoft Message Queuing (MSMQ) Remote Code Execution. Connected CNVD-2023-84129 notes a remote code execution vulnerability in MSMQ. The CVSS metrics in the Initial document indicate Local attack vector, Low privileges required, User interaction, and high impact across c...

CVE-2023-36720

CVE-2023-36720 is a DoS vulnerability in Windows Mixed Reality Developer Tools with a CVSS v3.1 base score of 7.5 (HIGH). It requires network access, has no user interaction, and does not require privileges, with the impact limited to availability (I/N; A=HIGH). The available sources identify the...

CVE-2023-41769

Technical details for CVE-2023-41769 are not publicly provided in the supplied documents. No affected products, exploit info, or remediation confirmed here. Monitor for official disclosures and vendor advisories for concrete impact and fixes.

CVE-2023-41773

CVE-2023-41773 is described in the initial document as a Windows Layer 2 Tunneling Protocol Remote Code Execution vulnerability with high severity (CVSS v3.1: 8.1, network access, no user interaction). Connected documents corroborate that this is a Windows L2TP RCE issue; CNVD‑2023‑81881 and NVD ...

CVE-2023-36581

CVE-2023-36581 corresponds to a Denial of Service vulnerability in Microsoft Message Queuing (MSMQ). Public records in the connected CNVD entry describe a MSMQ DoS issue, but the available documents do not provide concrete technical details such as affected versions, root cause, specific exploit ...

CVE-2023-36712

Technical details for CVE-2023-36712 are not publicly disclosed in the provided connected documents. Based on available records, no affected products, root cause, or remediation are specified here. Monitor for updates from official advisories.

CVE-2023-36713

The CVE-2023-36713 entry concerns a vulnerability in the Windows Common Log File System Driver that leads to Information Disclosure. According to the NVD entry, the issue has a CVSSv3.1 base score of 5.5 (Medium) with Confidentiality Impact High, and it is a Local, Low-Complexity attack requiring...

CVE-2023-41768

CVE-2023-41768 is a Windows Layer 2 Tunneling Protocol remote code execution vulnerability. The issue affects Microsoft Windows L2TP handling and is described as a high-severity, network-based flaw with no required user interaction. The connected sources identify Windows updates released in Oct 2...

CVE-2023-36564

Technical details about CVE-2023-36564 are not publicly available in the provided documents. Monitor official advisories for updates on affected products, impact, and available fixes.

CVE-2025-29974

Technical details about CVE-2025-29974 are not publicly provided in the supplied documents. Monitor for updates from Microsoft and other security bulletins to obtain confirmed affected products, scope, and remediation.

CVE-2023-36593

Technical details for CVE-2023-36593 are not publicly provided in the supplied documents. Monitor for updates from official advisories (MSRC/NVD) to obtain affected products, impact, and fixes.

CVE-2025-24054

CVE-2025-24054 is a Windows NTLM vulnerability allowing an attacker to induce NTLMv2-SSP hash disclosure by leveraging explorer.exe to fetch remote SMB resources via crafted file types (notably .library-ms and .lnk/.library-ms payloads). Public PoCs and exploits demonstrate creating malicious .li...

CVE-2024-38193

CVE-2024-38193 concerns the Windows Ancillary Function Driver for WinSock (AFD) used by Winsock. The vulnerability is a local privilege-escalation issue in the AFD/WinSock stack, with a resource-management error cited by CNNVD and a privilege-escalation capability described by CISA KEV. Public ex...

CVE-2023-36438

Technical details about CVE-2023-36438 are not publicly provided in the connected documents. The OpenVAS entries reference this CVE among many Windows vulnerabilities but do not supply affected products, versions, root cause, or remediation specifics. Monitor for updates.

CVE-2025-21189

CVE-2025-21189 is listed as MapUrlToZone Security Feature Bypass. Connected sources categorize its impact as circumvention of a security measure. Public technical detail in the provided documents is limited; no explicit root-cause, vulnerable product/version, or exploitation information is given....

CVE-2026-42990

CVE-2026-42990 affects the SQL Server ODBC driver, where a heap-based buffer overflow enables code execution over the network. The vulnerability is exploitable remotely (network vector) and is rated high severity (CVSS 3.1: 9.8, CRITICAL) with no privileges required and no user interaction. The a...

CVE-2023-36585

Technical details for CVE-2023-36585 are not publicly available in the provided documents. Monitor for updates in official advisories; no affected products, impact, vectors, or fixes can be confirmed from the supplied content.

CVE-2023-36732

CVE-2023-36732 is a Win32k elevation-of-privilege vulnerability affecting Windows, with a local attack vector, low attack complexity, and low privileges required, and it has a high impact on confidentiality, integrity, and availability per CVSS 3.1 (7.8). The provided records identify the vulnera...

CVE-2024-30092

CVE-2024-30092 corresponds to a Windows Hyper-V remote code execution vulnerability. Connected sources corroborate a Hyper-V RCE issue affecting Windows Hyper-V with an entry showing 8.0 base-vector severity and adjacent attack vector; Microsoft has released updates to fix vulnerabilities in Wind...