CVE-2024-38131

Technical details about CVE-2024-38131 are not publicly provided in the connected documents. The available material lacks product/version/root-cause/remediation specifics. Monitor official advisories/updates for concrete information.

CVE-2024-49072

Technical details about CVE-2024-49072 are not publicly available in the provided documents. Monitor for updates from official advisories; no covered exploit specifics, affected products, versions, or mitigations are provided here.

CVE-2026-23670

CVE-2026-23670 affects Windows Virtualization-Based Security (VBS) security feature. The issue is a local, high-privilege bypass of VBS protections, with no user interaction required (UI: NONE). Exploitation is possible with local access and may impact confidentiality and integrity (both HIGH), w...

CVE-2023-23407

CVE-2023-23407 : Windows PPPoE remote code execution affecting the PPPoE stack. According to the CVE record, the vulnerability enables total impact on confidentiality, integrity, and availability (CVSS 3.1: 7.1, HIGH). Exploitation is classified as adjacent network access with high complexity and...

CVE-2023-23417

Technical details about CVE-2023-23417 are not publicly available in the provided documents. No concrete information on affected products/versions, root cause, impact, or fixes is provided here. Monitor for updates from the connected sources.

CVE-2023-32016

Technical details about CVE-2023-32016 are not publicly available in the provided connected documents. Monitor for updates from Microsoft and security feeds for affected products, vulnerable components, and fixes.

CVE-2023-33154

Technical details about CVE-2023-33154 are not publicly available in the provided connected documents. Please monitor official advisories and CVE listings for updates.

CVE-2024-26232

The CVE-2024-26232 entry describes a Remote Code Execution vulnerability in Microsoft Message Queuing (MSMQ). The available details indicate a LOCAL attack with LOW privileges required and USER INTERACTION required, with HIGH impact on confidentiality, integrity, and availability (CVSS 7.3). The ...

CVE-2024-26242

CVE-2024-26242 is a Windows Telephony Server elevation-of-privilege vulnerability. The connected documents indicate a local-privilege escalation with CVSS v3.1 base score 7.0 (AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H). Root cause and exact exploit details are not provided in the sources. Microsoft has...

CVE-2024-28901

Microsoft Windows: CVE-2024-28901 affects the Windows Remote Access Connection Manager. The vulnerability is an information disclosure in RasMan, exploitable locally with low complexity and requiring low privileges; it grants high confidentiality impact and does not affect integrity or availabili...

CVE-2025-48799

CVE-2025-48799 is an Elevation of Privilege flaw in Windows Update Service (wuauserv) described as: improper link resolution before file access ('link following') can allow an authorized local attacker to elevate to NT AUTHORITY\SYSTEM when Windows 10/11 systems have at least two drives and Stora...

CVE-2023-21526

Technical details about CVE-2023-21526 are not publicly available in the provided documents. Monitor for updates from official advisories; no specifics on affected products, root cause, impact, or mitigations are provided here.

CVE-2023-21822

Technical details for CVE-2023-21822 are not publicly available in the provided documents. Monitor for updates.

CVE-2023-23403

CVE-2023-23403 is Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability. The CVE entry describes a remote code execution flaw in Microsoft’s PostScript and PCL6 Printer Driver. Connected CNVD-2023-30868 corroborates the same driver-based RCE issue; other connected...

CVE-2023-35382

Technical details for CVE-2023-35382 are not provided in the connected documents; the material references registry security descriptor refcount and tombstone issues in passing, but no explicit root-cause, affected products, impact, or fixes are given.

CVE-2023-35386

Technical details specific to CVE-2023-35386 are not publicly provided in the supplied documents. The connected materials reference the CVE in log-file handling context, but no concrete product/version/impact data is disclosed. Monitor for updates.

CVE-2024-26254

CVE-2024-26254 is a Denial-of-Service in Microsoft Windows Virtual Machine Bus (VMBus). The provided OpenVAS listings confirm VMBus involvement, but do not disclose a concrete root cause, exploit technique, affected product versions, or a remediation in these documents. No patch details are expli...

CVE-2024-28922

CVE-2024-28922 is a Secure Boot security feature bypass vulnerability. CVSS‑3.1 metrics show a physical attack vector, low attack complexity, low privileges required, user interaction needed, with no confidentiality impact, but high integrity impact (base score 4.1, Medium). Connected sources ref...

CVE-2026-58594

CVE-2026-58594 is a Windows Remote Desktop Client RCE vulnerability caused by an integer overflow/wraparound in the RDP client. Public sources (NVD/NCSC/CIRCL) attribute network-based exploitation with potential arbitrary code execution on vulnerable Windows systems. Connected entries confirm the...

CVE-2023-21685

The CVE-2023-21685 entry concerns Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution. The connected NVD record provides CVSS 3.1: NETWORK attack vector, LOW attack complexity, NONE privileges required, UI required, and impacts to Confidentiality, Integrity, and Availability (all ...

CVE-2023-21812

CVE-2023-21812 is a Windows vulnerability in the Common Log File System Driver (CLFS) that enables Elevation of Privilege. The NVD entry lists a CVSS v3.1 base score of 7.8 (HIGH) with LOCAL attack vector, LOW attack complexity, LOW privileges required, and no user interaction; impact is HIGH on ...

CVE-2023-23411

CVE-2023-23411 : Windows Hyper-V Denial of Service vulnerability. The embedded metrics indicate a LOCAL attack vector with LOW privileges required, no user interaction, and an AV/C/I/A impact profile (Availability impact: HIGH). The description confirms a Hyper-V related DoS, but the supplied doc...

CVE-2023-28253

Technical details for CVE-2023-28253 are not publicly provided in the supplied documents; no affected product/version, root cause, or remediation details are present here. Monitor for updates.

CVE-2026-21519

CVE-2026-21519 is a local elevation-of-privilege flaw in Windows Desktop Window Manager caused by type confusion. An authenticated, low-privilege attacker can overwhelm DWM locally to gain SYSTEM rights, with no user interaction required. It has been identified as exploited in the wild by multipl...

CVE-2026-49798

CVE-2026-49798 is a Windows Kernel use-after-free vulnerability that enables local privilege escalation. The root cause is use-after-free in kernel code, allowing an unauthenticated attacker with local access to elevate privileges. Affected component details are limited in the provided documents;...

CVE-2023-23406

CVE-2023-23406 corresponds to a remote code execution vulnerability in the Microsoft PostScript and PCL6 Class Printer Driver. Connected sources confirm this CVE affects Microsoft’s PostScript and PCL6 printer drivers and describe a remote code execution outcome. The CVSS 3.1 data shows an extern...

CVE-2023-24887

CVE-2023-24887 is a Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution vulnerability. Affected component: Microsoft PostScript and PCL6 Class Printer Driver. Root cause/impact: remote code execution with NETWORK attack vector, low complexity, low privileges, no user interact...

CVE-2023-24940

Technical details for CVE-2023-24940 are not publicly available in the provided documents. The connected items reference the CVE but do not specify affected products, versions, root cause, or fixes. Monitor for updates.

CVE-2024-26183

CVE-2024-26183 is a Windows Kerberos Denial-of-Service vulnerability. The CVSS 3.1 base metrics (AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) indicate a NETWORK-exploitable issue with a MEDIUM severity (6.5) and a HIGH impact on availability, requiring LOW privileges and no user interaction. The descript...

CVE-2024-26244

CVE-2024-26244 is a remote code execution vulnerability in the Microsoft WDAC OLE DB provider for SQL Server. According to the CVSS 3.1 vector, it is exploitable over the network with no privileges required, but requires user interaction, and has high impact on confidentiality, integrity, and ava...

CVE-2024-28921

CVE-2024-28921 is a Windows Secure Boot security feature bypass vulnerability. The CVE entry is supported by multiple sources (NVD/NCSC/related feeds) indicating a local-attack-path bypassing Secure Boot with elevated privileges required and no user interaction. The CVSS vector shows: Local attac...

CVE-2024-30037

The CVE-2024-30037 entry affects Windows Common Log File System Driver and is categorized as a local Elevation of Privilege vulnerability (requires local access; may grant elevated privileges). The connected documents corroborate the CVE mapping and indicate it is part of a set of Windows fixes; ...

CVE-2024-43519

CVE-2024-43519 : Microsoft WDAC OLE DB provider for SQL Server is affected by a Remote Code Execution vulnerability. The CVSS v3.1 base score is 8.8 (HIGH); attack vector is NETWORK, with LOW attack complexity and no privileges required, but user interaction is required. The issue stems from the ...

CVE-2023-21798

Technical details about CVE-2023-21798 are not publicly provided in the connected documents. Monitor for updates.

CVE-2023-23413

Technical details about CVE-2023-23413 (affected product, root cause, versions, exploitability) are not provided in the connected documents. Public details are limited to the initial description; monitor for updates.

CVE-2023-21689

CVE-2023-21689 is a Microsoft PEAP Remote Code Execution vulnerability with a CVSS v3.1 base score of 9.8. The vulnerability is network-exploitable with no user interaction and requires no privileges; it potentially impacts confidentiality, integrity, and availability. Connected sources confirm t...

CVE-2023-21805

Technical details about CVE-2023-21805 are not publicly provided in the supplied documents. Monitor for updates.

CVE-2023-23423

CVE-2023-23423 is a Windows Kernel Elevation of Privilege vulnerability tied to hive memory corruption in the Windows Registry (HKCU/HKLM hives). The connected Project Zero analysis provides concrete exploitation details: a memory-corruption primitive in hive data can be combined with a crafted o...

CVE-2023-24901

CVE-2023-24901 maps to a Windows NFS Portmapper Information Disclosure vulnerability. The NVD record lists a CVSS v3.1 base score of 7.5 (HIGH) with Network attack vector, low attack complexity, no privileges required, no user interaction, and a confidentiality impact of HIGH (I and A mostly unaf...

CVE-2023-24946

CVE-2023-24946 is described in the provided sources as a Windows Backup Engine/Backup Service Elevation of Privilege vulnerability. The CNVD entry explicitly notes an attacker could gain SYSTEM privileges, indicating a local, privilege-escalation flaw. The CVSS vector in the initial data shows: L...

CVE-2024-20669

CVE-2024-20669 affects Microsoft Windows Secure Boot. It is a Local, High-Privilege vulnerability classed as a Secure Boot security feature bypass with a CVSS v3.1 base score of 6.7 (Impact: Confidentiality, Integrity, and Availability High). Connected sources confirm Windows Secure Boot-related ...

CVE-2024-26189

CVE-2024-26189 is a Secure Boot security feature bypass affecting Windows Secure Boot. The CVE is listed in the Windows Secure Boot table with CVSS v3.1 base score 8.0 (HIGH) and impact described as bypassing security measures. Connected sources corroborate a Secure Boot bypass characterization, ...

CVE-2024-28899

Technical details for CVE-2024-28899 are not publicly available in the provided documents. No affected products, root cause, exploit info, or remediation are specified here; monitor for updates.

CVE-2024-28920

CVE-2024-28920 is a Secure Boot security feature bypass vulnerability. The connected ENISA/NCSC records indicate this CVE is associated with Microsoft Windows Secure Boot components and is classified as bypassing a security measure. The NVD entry confirms a Secure Boot bypass description, and rel...

CVE-2024-30038

CVE-2024-30038 is a Win32k local privilege escalation vulnerability. The issue exists in Win32k’s kernel-user boundary; exploitation would require local access with low privileges and no user interaction, potentially granting HIGH confidentiality/integrity/availability impact. Microsoft has issue...

CVE-2026-34348

CVE-2026-34348 affects the Windows Event Logging Service. The issue is a protection mechanism failure that can allow an authorized attacker to disclose information over a network. According to the available records, the exploit surface is network-based with low privileges required and no user int...

CVE-2023-24871

CVE-2023-24871 is a Windows Bluetooth Service remote code execution vulnerability affecting the Windows Bluetooth Service. The provided data lists CVSS v3.1 metrics (AV:A, AC:L, PR:N, UI:N, S:U, C/H/I/A: H) with a base score of 8.8 ( HIGH ), indicating adjacent network access with no user interac...

CVE-2023-28216

Technical details about CVE-2023-28216 are not publicly available in the provided documents. Monitor for updates.

CVE-2024-28924

Technical details about CVE-2024-28924 are not publicly provided in the connected documents. Monitor for updates from Microsoft, NVD, or CVE editors for affected products, impact, root cause, and available fixes.

CVE-2025-24044

CVE-2025-24044 is a local privilege-escalation in the Windows Win32 Kernel Subsystem caused by a use-after-free condition. Connected docs classify it as an EoP risk with local exploitability and note fixes in Microsoft Windows updates (e.g., March 2025 cycle). No product/version specifics beyond ...