CVE-2024-26178

CVE-2024-26178 is a Windows Kernel elevation-of-privilege vulnerability with a CVSS v3.1 base score of 7.8 (HIGH). It is a local attack that requires LOW privileges and has no user interaction, with high impact on confidentiality, integrity, and availability. The Initial Description lists it as a...

CVE-2024-29052

CVE-2024-29052 is a Windows Storage Elevation of Privilege vulnerability. Connected sources confirm an LP (local) exploit path affecting Windows storage components, with a CVSS v3.1 base vector of AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H and a base score of 7.8 (HIGH). Microsoft OS updates KB5036892 (...

CVE-2024-20678

Public documents in the Connected set do not provide concrete technical details (affected product, root cause, impact, or remediation) for CVE-2024-20678; monitor for updates.

CVE-2024-20700

CVE-2024-20700 affects Windows Hyper-V and is a remote code execution vulnerability in Hyper-V. Connected sources describe exploitation as a race condition requiring access to a restricted network; attack vector is adjacent with no user interaction and no privileges required, yielding high impact...

CVE-2024-29050

CVE-2024-29050 is confirmed to affect Windows Cryptographic Services and is categorized as a Remote Code Execution (RCE) vulnerability. The connected documents identify the component and vulnerability name but do not provide explicit root-cause specifics, affected product versions, or remediation...

CVE-2023-21524

Technical details about CVE-2023-21524 (affected product/component/root cause/impact/fix) are not provided in the connected documents. The materials only reference the vulnerability title and general advisories; monitor for updates.

CVE-2024-21343

CVE-2024-21343 is a Windows NAT Denial of Service vulnerability. The provided documents identify it as network‑based with impact on availability (NVD CVSSv3.1: 7.5 base, HIGH; CNA: 5.9, MEDIUM) but do not provide concrete affected product versions, root cause details, exploit information, or a sp...

CVE-2024-21436

CVE-2024-21436 is a Windows Installer elevation of privilege vulnerability. The CVE entry reports a CVSS v3.1 base score of 7.8 (high) with local attack vector, low attack complexity, requiring low privileges and no user interaction; impact is high on confidentiality, integrity, and availability....

CVE-2024-26181

CVE-2024-26181 is a Windows kernel vulnerability where exhausting the global registry quota can damage the HKLM\SAM hive, enabling local attackers to trigger a denial-of-service by blocking registry operations. The CVE is tied to out-of-resources/OOM paths in hive memory management and registry q...

CVE-2024-21356

CVE-2024-21356 is listed with concrete identifiers in OpenVAS entries; it corresponds to a Windows LDAP Denial of Service vulnerability with CVSS v3.1 metrics: AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H (base score 6.5, MEDIUM). The connected records confirm it as part of Microsoft Windows vulnerability...

CVE-2024-26159

Technical details about CVE-2024-26159 are not provided in the supplied documents. The references here only reiterate the vulnerability name; monitor official advisories for updated specifics and remediation guidance.

CVE-2024-26170

CVE-2024-26170 is a Windows Composite Image File System (CimFS) elevation of privilege vulnerability. The initial record confirms local, low‑complexity access with high impact, but the provided documents do not describe the exact root cause, vulnerable component details, or affected product versi...

CVE-2024-21348

Technical details for CVE-2024-21348 are not provided in the supplied documents; the ICS DoS description is generic. Monitor for updates.

CVE-2024-30063

Technical details for CVE-2024-30063 are not provided in the connected documents. The initial description notes a DFS RCE vulnerability but there are no explicit affected products/versions or fixes in the supplied materials. Monitor for updates.

CVE-2024-21307

The CVE-2024-21307 entry identifies a Remote Desktop Client Remote Code Execution vulnerability with a CVSS v3.1 score of 7.5 (HIGH) . Attack vector is Network and the exploit requires User Interaction ; impact is rated as Confidentiality: High, Integrity: High, Availability: High . The available...

CVE-2024-21371

Technical details about CVE-2024-21371 are not provided in the supplied documents. Please monitor for updates from official advisories to learn affected products, root cause, impact, and remediation.

CVE-2026-48576

CVE-2026-48576 is a Windows Secure Boot vulnerability described as a protection mechanism failure enabling a local attacker with high privileges to bypass a security feature. The available documents specify a local attack vector with low complexity and no user interaction, and a base CVSS 3.1 sco...

CVE-2024-26182

CVE-2024-26182 is a Windows registry/hive memory corruption issue. The connected material documents a local-elevation path via hive memory corruption that targets the HKCU hive, including volatile storage, by abusing out-of-bounds cell indexes in the hive cell map. The attacker can craft a memory...

CVE-2025-21204

CVE-2025-21204 affects Windows Update Stack with improper link resolution before file access, enabling local privilege elevation for an authenticated user. Public documentation confirms the vulnerability and that Microsoft released fixes as part of April 2025 updates; patches include OS updates t...

CVE-2026-20931

CVE-2026-20931 is a Windows Telephony Service elevation-of-privilege vulnerability described as external control of a file name or path. The connected sources confirm the affected component as Windows Telephony Service and the issue enables an attacker on an adjacent network to obtain increased p...

CVE-2024-21341

Technical details about CVE-2024-21341 are not publicly provided in the supplied documents. Monitor for updates from NVD, Microsoft, or CVE listings for affected products, root cause, impact, and remediation.

CVE-2024-26176

CVE-2024-26176 is described in connected sources as a Windows Kernel vulnerability that causes an out-of-bounds read during symbolic-link validation in the registry path (CmpCheckValueList/CmpCheckValueList validation of symbolic links). The issue is tied to Windows kernel registry code paths and...

CVE-2024-26214

CVE-2024-26214 affects the Microsoft WDAC ODBC Driver and is described as a remote code execution vulnerability. According to the CVE entry, the vulnerability has a CVSS v3.1 base score of 8.8 (HIGH) with Network attack vector, No privileges required, User interaction required, and impacts to con...

CVE-2023-35359

CVE-2023-35359 is a Windows kernel local privilege-escalation vulnerability with a CVSS v3.1 base score of 7.8 (High). The provided record indicates a LOCAL attack vector, LOW attack complexity, LOW privileges required, and NONE user interaction, with the impact described as High for confidential...

CVE-2024-21440

CVE-2024-21440 is a Microsoft ODBC Driver remote code execution vulnerability. The entry identifies affected software as Microsoft ODBC Driver and states an RCE impact with high severity (CVSS v3.1: 8.8, Network attack vector, no privileges required, user interaction required, confidentiality, in...

CVE-2026-62800

CVE-2026-62800 is a Windows SMB Server vulnerability characterized by a heap-based buffer overflow in SMBv3 Server. An authorized attacker can trigger code execution over a network, with network attack vector, low privileges required, and no user interaction. The impact is described as high for c...

CVE-2024-21366

CVE-2024-21366 affects the Microsoft WDAC OLE DB provider for SQL Server and is rated CVSS v3.1 base score 8.8 (High). The vulnerability has a network attack vector with no privileges required, but user interaction is required, and the impact is High on confidentiality, integrity, and availabilit...

CVE-2024-21443

The CVE-2024-21443 entry describes a Windows Kernel Elevation of Privilege vulnerability with a LOCAL attack vector, requiring LOW privileges and USER interaction, and has HIGH impact on confidentiality, integrity, and availability. Connected documents confirm a Windows kernel/macOS? No, Windows ...

CVE-2026-50425

CVE-2026-50425: A use-after-free in Windows Internal System User Profile leads to local privilege escalation for an authorized attacker. Affected component: Windows Internal System User Profile; root cause: use-after-free; impact: gain high privileges locally with no user interaction (CVSSv3.1: A...

CVE-2024-21444

CVE-2024-21444 concerns Microsoft WDAC OLE DB provider for SQL Server and is described as a remote code execution vulnerability. The NVD entry assigns CVSS v3.1: AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H with a base score of 8.8 (HIGH). Exploitation is network-based, requires user interaction, and impa...

CVE-2026-33828

CVE-2026-33828 affects Windows Device Health Attestation (DHA). The vulnerability is a trust boundary violation in Windows Attestation that allows an authorized local attacker to elevate privileges. CVSS v3.1 base metrics indicate high impact to confidentiality, integrity, and availability with l...

CVE-2026-56188

CVE-2026-56188: A race-condition in the Windows Server Network driver (concurrent access to a shared resource) can allow an unauthenticated attacker to execute code over the network. The vulnerability affects the Windows Server Network driver and is described as a remote code execution flaw with ...

CVE-2024-21304

Technical details about CVE-2024-21304 are not provided in the supplied documents. Monitor for updates as new public information becomes available.

CVE-2026-50380

CVE-2026-50380 is a Windows GDI+ heap-based buffer overflow that enables a remote attacker to execute code over a network. The CVE is listed among highly critical Windows vulnerabilities in July 2026 patch advisories, with Microsoft updating GDI+ and related components in the July security releas...

CVE-2024-21355

CVE-2024-21355 is a Microsoft Message Queuing (MSMQ) Elevation of Privilege vulnerability. The initial entry indicates a local attack vector with high impact: CVSS 3.1 base score 7.0, attack vector Local, attack complexity High, privileges Required LOW, no user interaction, and impact on confiden...

CVE-2024-20653

Technical details about CVE-2024-20653 (affected product, specific component, root cause, impact, and remediation) are not publicly provided in the connected documents you supplied. Monitor for updates from official advisories to confirm affected software and fixes.

CVE-2024-21377

Technical details for CVE-2024-21377 are not available in the provided documents. The entries reference the CVE but do not specify affected products, root cause, impact, or fixes. Monitor for official disclosures and published remediation guidance.

CVE-2024-29995

CVE-2024-29995 is a Windows Kerberos Elevation of Privilege vulnerability. The connected data shows it affects the Windows Kerberos component and is rated with CVSSv3.1 base score 8.1 (vector: AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H), indicating network-prone access with high impact and no user inter...

CVE-2023-32014

CVE-2023-32014 is a Windows Pragmatic General Multicast (PGM) Remote Code Execution vulnerability. The issue affects Windows message-queuing facilities in PGM environments; when the Windows message queuing service is running, a remote, unauthenticated attacker can send a malicious file over the n...

CVE-2024-20654

Technical details for CVE-2024-20654 are not publicly provided in the supplied documents. The materials acknowledge a Microsoft ODBC Driver remote code execution vulnerability but do not specify affected products, versions, impact, or remediation. Monitor for updates.

CVE-2024-21439

CVE-2024-21439 is a Windows Telephony Server Elevation of Privilege vulnerability with a CVSS v3.1 base score of 7.0 (HIGH). Attack vector is LOCAL with HIGH impact on confidentiality, integrity, and availability, and the exploit requires LOW privileges and no user interaction, but the document n...

CVE-2023-35385

Technical details about CVE-2023-35385 are not publicly provided in the supplied documents; no affected products, root cause, or remediation are confirmed here. Monitor for updates from official advisories.

CVE-2024-29996

CVE-2024-29996 affects the Windows Common Log File System Driver. The vulnerability is an Elevation of Privilege issue in CLFS, with a high base CVSS score (3.1, 7.8). It is exploitable locally, requires low privileges, and does not require user interaction. The impact is rated as high for confid...

CVE-2023-24949

Technical details for CVE-2023-24949 (affected product/versions, root cause, impact, or fixes) are not publicly provided in the supplied documents. Monitor official advisories and updates from the connected sources for new information.

CVE-2023-28219

CVE-2023-28219 is a Windows RAS (Remote Access Server) remote code execution vulnerability. The connected Krebs commentary identifies it as a RAS RCE and notes that Microsoft addressed this family of flaws in the April 2023 Patch Tuesday updates, with exploitation more likely for certain vulnerab...

CVE-2023-29335

CVE-2023-29335 – Microsoft Word Security Feature Bypass Vulnerability is documented with concrete remediation in Microsoft Word updates. Affected product: Word (Office). The issue is a security feature bypass (not a traditional memory/remote-code-exec hole) and has a CVSSv3.1 base score of 7.5 (N...

CVE-2023-29362

Technical details about CVE-2023-29362 (affected product, vulnerable component, root cause, impact, or fix) are not provided in the supplied documents. Monitor for updates from official advisories and vulnerability databases.

CVE-2026-33829

CVE-2026-33829 concerns the Windows Snipping Tool and is assigned a CVSSv3.1 base score of 4.3 (Medium). The vulnerability is described with a network attack vector but requires user interaction and does not affect integrity or availability, with confidentiality impact listed as Low. The metric i...

CVE-2023-24954

Public technical details (affected product, root cause, impact, or fixes) for CVE-2023-24954 are not provided in the connected documents. Monitor for updates from official advisories.

CVE-2023-21557

CVE-2023-21557 concerns the Windows LDAP (Lightweight Directory Access Protocol) Denial of Service vulnerability. The provided documents identify the affected component as Windows LDAP but do not specify affected product versions, root cause details, exploitation methods, or a concrete fix. Conne...