CVE-2026-71331

The CVE-2026-71331 entry describes an Integer overflow or wraparound in the Microsoft Azure Attestation service and the Device Health Attestation Service . The underlying issue is a numeric overflow that can be triggered by an attacker over a network, allowing a remote code execution scenario. Af...

CVE-2024-20674

CVE-2024-20674 is a Windows Kerberos security feature bypass vulnerability. The connected exploit doc describes a logic bug in the client-side handling of Kerberos U2U TGT-REP that can enable authentication bypass via a network MITM and spoofing, potentially allowing an attacker to impersonate th...

CVE-2024-26207

CVE-2024-26207 is a Windows Remote Access Connection Manager information disclosure vulnerability. Affected component: Windows Remote Access Connection Manager (local attacker? per CVSS v3.1 shows LOCAL with low complexity and low privileges). Documented impact in the connected NCSC advisory (NCS...

CVE-2025-30397

CVE-2025-30397 is a memory-corruption/Use-After-Free style vulnerability in the Microsoft Scripting Engine (jscript.dll) that enables remote code execution via specially crafted web content. The CVE’s affected component is the JScript/Windows Scripting Engine, with an attack vector over the netwo...

CVE-2021-43226

CVE-2021-43226 pertains to the Windows Common Log File System (CLFS) Driver. The available documents identify a local privilege-escalation vulnerability in CLFS that could allow a privileged attacker on a Windows host to gain higher privileges. The CVE is listed in the KEV catalog as a Microsoft ...

CVE-2023-29324

The Windows MSHTML platform is affected by a security configuration error that allows a malicious actor to bypass security restrictions remotely. No specific technical details regarding the root cause, affected file paths, or specific versions are provided beyond the general platform description....

CVE-2023-29363

CVE-2023-29363 is a Windows Pragmatic General Multicast (PGM) Remote Code Execution vulnerability. The issue affects Windows message queuing in PGM server scenarios, where a remote, unauthenticated attacker could send a crafted file over the network to achieve code execution if the message-queuin...

CVE-2024-20659

CVE-2024-20659 is a Windows Hyper-V security feature bypass vulnerability. The connected records place this CVE under Windows Hyper-V with an impact described as “Circumvention of security measure” and a base assessment around High severity, indicating an attacker could bypass security features i...

CVE-2023-36394

Technical details about CVE-2023-36394 (Windows Search Service elevation of privilege) are not provided in the supplied documents. Monitor for updates; no vendor, impact, or remediation details are disclosed here.

CVE-2024-30073

CVE-2024-30073 is a Windows Security Zone Mapping security feature bypass vulnerability. The public records show a CVSS v3.1 base score of 7.8 (High) with Local attack vector, low attack complexity, no privileges required, but user interaction required, and impact to confidentiality, integrity, a...

CVE-2023-36424

CVE-2023-36424 is documented as a Windows kernel-level out-of-bounds read vulnerability in the Common Log File System Driver (clfs.sys) that enables privilege escalation. Connected sources describe a pool overflow/record-validation flaw in clfs.sys (Windows Kernel pool management) exploited via c...

CVE-2023-1018

CVE-2023-1018 is an out-of-bounds read in TPM 2.0’s Module Library (CryptParameterDecryption) that could allow a local attacker to read sensitive data stored in the TPM. Connected advisories confirm a local, authenticated access scenario and note TPM exposure on affected IBM Power firmware (Power...

CVE-2025-32701

CVE-2025-32701 is a Windows CLFS driver use-after-free vulnerability that can allow an authorized attacker to elevate privileges locally. The weakness affects the Windows Common Log File System Driver and has a base CVSS v3.1 score of 7.8 (HIGH) with LOCAL attack vector, LOW attack complexity, an...

CVE-2026-57092

CVE-2026-57092 — Windows VMSwitch use-after-free can lead to a network-based Elevation of Privilege. The issue is triggered in the Windows VMSwitch component and, per sources, enables an authorized attacker to escalate privileges over the network. The CVE is listed as critical (CVSS v3.1: AV:N/AC...

CVE-2025-30400

CVE-2025-30400 is a Windows DWM Core Library use-after-free vulnerability that enables local privilege escalation. Affected: Windows DWM Core Library components; exploit could grant SYSTEM-level privileges. CVSS v3.1 indicates high risk (local, user interaction none, privileges required low, conf...

CVE-2026-50694

CVE-2026-50694 is a Windows SSTP use-after-free vulnerability that could allow an unauthenticated attacker to execute code remotely over the network. The issue affects Windows Secure Socket Tunneling Protocol (SSTP) and is rated high/critical in external assessments, with exploitation possible wi...

CVE-2026-62800

CVE-2026-62800 is a Windows SMB Server vulnerability characterized by a heap-based buffer overflow in SMBv3 Server. An authorized attacker can trigger code execution over a network, with network attack vector, low privileges required, and no user interaction. The impact is described as high for c...

CVE-2026-62823

CVE-2026-62823 affects Windows DHCP Server and is caused by a heap-based buffer overflow in the DHCP service. This vulnerability enables remote code execution by an attacker on an adjacent network, with an attack vector of Adjacent Network and no user interaction required. The CVSS 3.1 base score...

CVE-2024-21438

Technical details for CVE-2024-21438 are not provided in the supplied documents. Monitor for updates from the connected sources to obtain affected product, root cause, impact, and remediation information.

CVE-2023-36719

Technical details about CVE-2023-36719, including affected products, root cause, impact, or fixes, are not publicly provided in the supplied documents. Monitor for updates from official sources.

CVE-2026-85880

CVE-2026-85880 is a heap-based buffer overflow in Windows ALPC (Advanced Local Procedure Call) that enables a locally authorized attacker to escalate privileges with full impact on confidentiality, integrity, and availability (CVSS 7.8 HIGH). CISA added this CVE to the Known Exploited Vulnerabili...

CVE-2024-21437

CVE-2024-21437 is a Windows Graphics Component elevation-of-privilege vulnerability (local access, low attack complexity) affecting Windows OS. Public references corroborate it as a Windows Graphics Component issue discussed among Patch Tuesday updates, highlighting it among elevated-risk vulnera...

CVE-2025-32706

CVE-2025-32706 is an elevation-of-privilege flaw in Windows CLFS Driver (heap-based buffer overflow) that enables local privilege escalation. Affected product: Windows Common Log File System Driver. Base CVSS v3.1: 7.8 (HIGH); attack vector LOCAL, requires LOW privileges, no user interaction. Pub...

CVE-2026-50380

CVE-2026-50380 is a Windows GDI+ heap-based buffer overflow that enables a remote attacker to execute code over a network. The CVE is listed among highly critical Windows vulnerabilities in July 2026 patch advisories, with Microsoft updating GDI+ and related components in the July security releas...

CVE-2026-62818

CVE-2026-62818 affects Microsoft Windows Active Directory Certificate Services (AD CS). The vulnerability is a use-after-free in AD CS that allows an authorized attacker to execute arbitrary code over a network. CVSS v3.1 base metrics indicate a HIGH severity (8.8) with Network attack vector, Low...

CVE-2023-28250

Technical details about CVE-2023-28250 are not publicly provided in the supplied documents. Monitor for updates from official advisories.

CVE-2024-20652

Technical details about CVE-2024-20652 are not publicly provided in the supplied documents; no affected products, root cause, or fixes are specified. Monitor for updates.

CVE-2023-28293

CVE-2023-28293 is cited in connected material as one of the KTM/log-related Windows Kernel registry vulnerabilities disclosed by a Google Project Zero-style researcher. The documents place it among KTM transaction/log issues (with CVEs 2023-28271 and 2023-28272 also referenced) and discuss KTM lo...

CVE-2024-26162

CVE-2024-26162 corresponds to a remote code execution vulnerability in the Microsoft ODBC Driver. The CVSS 3.1 base metrics indicate: Network attack vector, low attack complexity, no privileges required, user interaction is required, and there is a High impact to confidentiality, integrity, and a...

CVE-2026-49164

CVE-2026-49164 affects Active Directory Domain Services (AD DS). The vulnerability is described as a heap-based buffer overflow in AD DS that allows an unauthenticated, network-based attacker to execute code remotely. Public sources in the provided documents consistently label this as an executio...

CVE-2023-36405

Technical details about CVE-2023-36405 (affected software, impact, root cause, or fixes) are not provided in the connected documents. Monitor for official disclosures or vendor advisories for concrete information.

CVE-2024-21433

Technical details for CVE-2024-21433 are not publicly available in the provided documents. No affected products, root cause, or remediation are specified here. Monitor for updates.

CVE-2023-36397

Technical details about CVE-2023-36397 are not provided in the supplied documents. No affected products, versions, root cause, impact, or remediation are specified here. Monitor for future updates from official advisories.

CVE-2024-21349

Technical details for CVE-2024-21349 (Microsoft ActiveX Data Objects remote code execution) are not provided in the connected documents; no affected versions, root cause, impact, or remediation are cited. Monitor for updates.

CVE-2024-21350

CVE-2024-21350 corresponds to a Remote Code Execution vulnerability in the Microsoft WDAC OLE DB provider for SQL Server. The entry lists a CVSS v3.1 base score of 8.8 (HIGH), with attack vector NETWORK, privileges required NONE, user interaction REQUIRED, and both confidentiality, integrity, and...

CVE-2024-26174

CVE-2024-26174 is a Windows Kernel Information Disclosure Vulnerability. The connected sources specify the issue as an out-of-bounds read of key node security in CmpValidateHiveSecurityDescriptors when loading corrupted registry hives, enabling potential leakage of kernel/registry data. Affected ...

CVE-2024-21372

Technical details for CVE-2024-21372 are not publicly available in the provided documents. The connected items only reference the CVE among broader Windows vulnerability listings; no affected product/version, root cause, impact, or fixes are stated.

CVE-2026-49172

The CVE-2026-49172 entry describes a heap-based buffer overflow in Windows FTP Service that allows an unauthenticated, network-based attacker to execute code remotely. Documents confirm the vulnerability exists in Windows FTP Service and enables remote code execution with network access and no re...

CVE-2023-36017

Technical details about CVE-2023-36017 are not publicly provided in the connected documents. The available materials only show the CVE entry with a Windows Scripting Engine memory corruption description and CVSS data. Monitor for updates from official sources.

CVE-2024-26166

Technical details about CVE-2024-26166 (affected software, root cause, impact, or fixes) are not provided in the connected documents. Please monitor for official advisories from Microsoft and CVE records for updates.

CVE-2024-38118

Technical details (affected component, root cause, exploit info, patch status) for CVE-2024-38118 are not provided in the connected documents. The initial description notes LSA server information disclosure but lacks concrete specifics; monitor for updates.

CVE-2024-20665

CVE-2024-20665 is described as a BitLocker Security Feature Bypass vulnerability. Per the NVD entry, the exploit requires local access (AV: Local) with high privileges (PR: High) and no user interaction (UI: None), with a impact profile of high in confidentiality, integrity, and availability, and...

CVE-2024-21420

Technical details about CVE-2024-21420 are not publicly provided in the supplied documents. The connected sources reference the CVE ID and Microsoft patches but do not disclose affected product specifics, root cause, impact, or remediation beyond generic update context. Monitor for updates.

CVE-2024-20696

CVE-2024-20696 affects Windows: a Remote Code Execution vulnerability in the libarchive component. The root cause is a heap-based buffer overflow in libarchive handling Windows inputs, enabling a local attacker with low privileges and user interaction to potentially execute code. The referenced m...

CVE-2024-21358

Technical details about CVE-2024-21358 (Microsoft WDAC OLE DB provider for SQL Server remote code execution) are not provided in the supplied documents. Monitor for official updates from Microsoft and trusted security advisories for affected products, mitigations, and fixes.

CVE-2024-49113

CVE-2024-49113 is a Windows LDAP Denial-of-Service vulnerability affecting the LDAP client. Public PoCs exist (e.g., LDAPNightmare) and show proof-of-concept testing integrated with Metasploit and other repositories; multiple exploit/checker projects also reference testing for this CVE. The descr...

CVE-2026-69493

CVE-2026-69493 is a critical (CVSS 9.8) out-of-bounds read vulnerability in Windows Event Logging Service , as assigned by Microsoft . The flaw allows an unauthorized, network-based attacker to achieve remote code execution without user interaction, with high impact to confidentiality, integrity,...

CVE-2024-21370

Public technical details for CVE-2024-21370 are not provided in the connected documents; the OpenVAS entries enumerate the CVE across multiple Microsoft KBs without product/version specifics. Monitor for updates.

CVE-2023-21684

CVE-2023-21684 relates to a remote code execution vulnerability in the Microsoft PostScript and PCL6 Class Printer Driver. The CVE entry identifies the affected component as a Microsoft printer driver (PostScript and PCL6) and notes a high-severity impact (CVSSv3.1 base score 8.8; Network attack,...

CVE-2026-66799

CVE-2026-66799 describes a heap-based buffer overflow in Windows Key Guard that allows an authenticated, local attacker to elevate privileges. Affected component: Windows Key Guard. Root cause: heap-based buffer overflow (as stated). Impact: local privilege escalation with high confidentiality, i...