CVE-2023-28229

CVE-2023-28229 is a Windows vulnerability in the Cryptographic Next Generation (CNG) Key Isolation Service described as a privilege-escalation flaw. The CVE entry is linked to active exploitation in practice (CISA KEV) and is categorized with a high impact vector (local access, total impact on co...

CVE-2023-1017

CVE-2023-1017 describes an out-of-bounds write in TPM2.0/Module Library CryptParameterDecryption. A local attacker could crash the TPM or gain arbitrary code execution in the TPM context. Affected scope includes TPM2.0 implementations via libtpms in VM TPM support and TPM modules. Public details ...

CVE-2022-38028

CVE-2022-38028 is a Windows Print Spooler privilege-escalation vulnerability. It arises from improper privilege assignment in the Print Spooler service, enabling a local attacker with low privileges and no user interaction to escalate to SYSTEM. Public exploits have been observed; CISA/KEV and MS...

CVE-2023-21708

Technical details for CVE-2023-21708 are not publicly provided in the supplied documents. No confirmed affected products, versions, or remediation are given here. Monitor for updates.

CVE-2023-29325

CVE-2023-29325 is a Windows OLE Remote Code Execution vulnerability that affects Microsoft Outlook and Explorer. The root cause is in the processing of OLE objects within RTF/documents, enabling an unauthenticated, remote attacker to execute code by delivering a specially crafted document, with t...

CVE-2023-24943

CVE-2023-24943 corresponds to a Windows Pragmatic General Multicast (PGM) Remote Code Execution vulnerability. Connected sources specify that the issue affects Windows Message Queuing when running in a PGM Server environment; a remote attacker can transmit a specially crafted file over the networ...

CVE-2023-29324

Technical details about CVE-2023-29324 are not publicly available in the provided documents. Monitor official advisories for updates.

CVE-2021-43226

CVE-2021-43226 pertains to the Windows Common Log File System (CLFS) Driver. The available documents identify a local privilege-escalation vulnerability in CLFS that could allow a privileged attacker on a Windows host to gain higher privileges. The CVE is listed in the KEV catalog as a Microsoft ...

CVE-2023-1018

CVE-2023-1018 is an out-of-bounds read in TPM 2.0’s Module Library (CryptParameterDecryption) that could allow a local attacker to read sensitive data stored in the TPM. Connected advisories confirm a local, authenticated access scenario and note TPM exposure on affected IBM Power firmware (Power...

CVE-2023-21729

Technical details about CVE-2023-21729 are not provided in the connected documents; available sources only reference the CVE without specifics. Monitor for updates.

CVE-2023-28250

Technical details about CVE-2023-28250 are not publicly provided in the supplied documents. Monitor for updates from official advisories.

CVE-2023-28293

CVE-2023-28293 is cited in connected material as one of the KTM/log-related Windows Kernel registry vulnerabilities disclosed by a Google Project Zero-style researcher. The documents place it among KTM transaction/log issues (with CVEs 2023-28271 and 2023-28272 also referenced) and discuss KTM lo...

CVE-2023-24903

CVE-2023-24903 corresponds to a Windows SSTP remote code execution vulnerability. Publicly available details in the initial document identify SSTP as the vulnerable component with network attack vector and high impact (confidentiality, integrity, and availability). The CVE is listed in multiple W...

CVE-2023-21684

CVE-2023-21684 relates to a remote code execution vulnerability in the Microsoft PostScript and PCL6 Class Printer Driver. The CVE entry identifies the affected component as a Microsoft printer driver (PostScript and PCL6) and notes a high-severity impact (CVSSv3.1 base score 8.8; Network attack,...

CVE-2023-24949

Technical details for CVE-2023-24949 (affected product/versions, root cause, impact, or fixes) are not publicly provided in the supplied documents. Monitor official advisories and updates from the connected sources for new information.

CVE-2023-28219

CVE-2023-28219 is a Windows RAS (Remote Access Server) remote code execution vulnerability. The connected Krebs commentary identifies it as a RAS RCE and notes that Microsoft addressed this family of flaws in the April 2023 Patch Tuesday updates, with exploitation more likely for certain vulnerab...

CVE-2023-29335

CVE-2023-29335 – Microsoft Word Security Feature Bypass Vulnerability is documented with concrete remediation in Microsoft Word updates. Affected product: Word (Office). The issue is a security feature bypass (not a traditional memory/remote-code-exec hole) and has a CVSSv3.1 base score of 7.5 (N...

CVE-2023-24954

Public technical details (affected product, root cause, impact, or fixes) for CVE-2023-24954 are not provided in the connected documents. Monitor for updates from official advisories.

CVE-2023-24876

Summary (supported by CNVD-2023-30866): Microsoft PostScript and PCL6 Class Printer Driver has a remote code execution vulnerability. The CNVD entry describes a remote code execution flaw in these Microsoft printer drivers. The CVE-2023-24876 listing on NVD also identifies this as a Remote Code E...

CVE-2023-21692

CVE-2023-21692 is described as a Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution vulnerability. The connected documents provide limited details: they cite PEAP RCE and do not specify affected products, versions, or root cause beyond the general Microsoft PEAP c...

CVE-2023-21769

CVE-2023-21769 is reported as a Microsoft Message Queuing (MSMQ) Denial of Service vulnerability. The initial entry provides a CVSSv3.1 base score of 7.5 (HIGH) with an attack vector of NETWORK, attack complexity LOW, no privileges required, no user interaction, and an impact of NONE for confiden...

CVE-2023-28232

Technical details about CVE-2023-28232 are not publicly provided in the connected documents. Public information is limited to the description; monitor for official advisories and updates from Microsoft for fixes, affected products, and mitigations.

CVE-2023-23404

Technical details about CVE-2023-23404 are not publicly provided in the connected documents. The available sources summarize the vulnerability at a high level; monitor for updated advisories or vendor patch information for affected products and remediation.

CVE-2023-23416

Technical details about CVE-2023-23416 are not publicly available in the provided connected documents; monitor official disclosures and vendor advisories for impact, affected products, and fixes.

CVE-2023-21690

Technical details about CVE-2023-21690 are not publicly available in the provided documents. Monitor for updates.

CVE-2023-28218

CVE-2023-28218 relates to a local Elevation of Privilege in the Windows Ancillary Function Driver for WinSock. The vulnerability is described as affecting Windows components with a high impact on confidentiality, integrity, and availability, and requires local access with high attack complexity a...

CVE-2023-23405

Technical details such as affected products, versions, root cause, impact, and fixes are not publicly provided in the supplied documents. Monitor for updates from official advisories.

CVE-2023-24869

Technical details about CVE-2023-24869 are not publicly disclosed in the provided documents; no affected product/version/impact/fix are specified here. Monitor for updates from official CVE/NVD entries and related advisories.

CVE-2023-24900

CVE-2023-24900 corresponds to a Windows NTLM Security Support Provider Information Disclosure Vulnerability. The provided documents confirm the vulnerability title and CVSS 3.1 base metrics (5.9, MEDIUM) with Network attack vector and no user interaction, but do not supply detailed root-cause des...

CVE-2023-21727

Technical details (affected product/versions/root cause/fix) are not provided in the connected documents; monitor for updates.

CVE-2023-21712

CVE-2023-21712 describes a Windows PPTP/RAS Remote Code Execution vulnerability. A race condition in the Point-to-Point Tunneling Protocol could allow unauthenticated, network-based attackers to execute arbitrary code in the RAS environment. The issue affects Windows Remote Access Service compone...

CVE-2023-24905

CVE-2023-24905 is a Microsoft Windows Remote Desktop Client remote code execution vulnerability. The CVE entry shows a Local attack vector with no privileges required and user interaction needed, rated CVSS v3.1 7.8 (High). Connected sources indicate affected component is Windows Remote Desktop C...

CVE-2023-21817

The provided documents do not contain technical details about CVE-2023-21817 (affected product/component, root cause, impact, or remediation). Technical specifics are not publicly available here. Monitor for updates and authoritative disclosures.

CVE-2023-28220

Technical details about CVE-2023-28220 (Layer 2 Tunneling Protocol RCE) are not provided in the supplied connected documents. No affected products, impact, fixes, or exploitation data are present here. Monitor for updates.

CVE-2022-26934

CVE-2022-26934 is a Windows Graphics Component information disclosure vulnerability. Affects Windows graphics handling (Windows Graphics Component) and is disclosed as a network-exposed information disclosure with a base CVSSv3.1 score of 6.5 (vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N)...

CVE-2023-28283

CVE-2023-28283 is a Windows LDAP remote code execution vulnerability. Connected sources describe an unauthenticated RCE in the Windows LDAP service triggered by specially crafted LDAP requests, with the issue classified as high/critical in May 2023 updates. Root cause and exact impact are not dee...

CVE-2023-23414

CVE-2023-23414 is a Windows PPPoE Remote Code Execution vulnerability. The CVSS 3.1 base score is 7.1 (HIGH) with Adjacent attack vector, high attack complexity, no privileges required, user interaction required, and impacts to confidentiality, integrity, and availability (all high). Exploitation...

CVE-2023-24929

CVE-2023-24929 corresponds to a Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution vulnerability. Connected documents confirm this is a remote-code-execution issue affecting the printer driver stack, with a high-severity CVSS and network attack potential, but do not provide ...

CVE-2023-23410

CVE-2023-23410 is described as a Windows HTTP.sys Elevation of Privilege Vulnerability. The initial document provides CVSS 3.1 metrics: local attack vector, low attack complexity, privileges required low, and impact high on confidentiality, integrity, and availability, with a base score of 7.8. C...

CVE-2023-23388

CVE-2023-23388 corresponds to a Windows Bluetooth Driver Elevation of Privilege vulnerability (bthserv) with a local privilege escalation path. A GitHub repo documents a PoC targeting Windows 10/11 Bluetooth service (bthserv) that enables escalation from an unprivileged user to LOCAL SERVICE; the...

CVE-2023-24948

CVE-2023-24948 is a Windows Bluetooth Driver Elevation of Privilege vulnerability. Documents indicate affected component as the Windows Bluetooth driver and classify impact as privilege escalation with high confidentiality/integrity/availability risk (CVSS: AV:A/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H). P...

CVE-2023-28302

Technical details for CVE-2023-28302 are not publicly available in the provided documents. Monitor for updates from the listed sources (NVD, OSV, OpenVAS references) for affected products, impact, and fixes.

CVE-2023-24910

CVE-2023-24910 is a Windows Graphics Component Elevation of Privilege vulnerability. Affected: Windows graphics subsystem components (local component/privilege escalation surface). Root cause: Elevation of privileges with a local attack vector (attack vector Local, low complexity, privileges requ...

CVE-2023-28251

CVE-2023-28251 is described as a Windows Driver Revocation List Security Feature Bypass vulnerability. The consolidated data shows a CVSSv3.1 base score of 5.5 (Medium) with a Local attack vector, Low attack complexity, Low privileges required, no user interaction, and Confidentiality Impact None...

CVE-2022-21871

Technical details about CVE-2022-21871 are not publicly provided in the supplied documents; no affected product/version, root cause, or remediation are described here. Monitor for official disclosures and updates.

CVE-2023-24947

CVE-2023-24947 is a Windows Bluetooth Driver remote code execution vulnerability. Connected sources confirm it affects the Microsoft Bluetooth Driver and enables arbitrary code execution, with high impact (CVSS 3.1: AV Adjacent, AC L, PR None, UI None, C/H I/H A/H). Exploitation details are not i...

CVE-2023-28297

CVE-2023-28297 is a Windows RPCSS Elevation of Privilege vulnerability. The consolidated records identify the affected component as the Windows Remote Procedure Call Service (RPCSS) with a high-severity CVSS 3.1 vector (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) and a base score of 8.8. The explicit ro...

CVE-2023-24859

CVE-2023-24859 is a Windows vulnerability described as a denial-of-service issue in the Windows Internet Key Exchange (IKE) extension. The available data identifies the affected component as the IKE extension and notes impact as availability degradation (DoS) with network attack vector and no use...

CVE-2023-24945

CVE-2023-24945 concerns Windows iSCSI Target Service Information Disclosure. Data shows CVSS v3.1 base score 5.5 (Medium) with LOCAL attacker, LOW complexity, LOW privileges required, and high confidentiality impact. The description names the Windows iSCSI Target Service but does not provide spec...

CVE-2023-23420

CVE-2023-23420 is a Windows Registry hive memory corruption bug (UAF) tied to transacted key rename. The exploit plan targets the HKCU hive (volatile storage) via a lightweight or KTM transaction sequence that renames a key, then frees keys in a transaction, producing a layout where freed cells c...