2443 matches found
CVE-2024-30096
Technical details about CVE-2024-30096 (affected components, versions, root cause, impact, and remediation) are not provided in the supplied connected documents. Monitor for updates from official sources.
CVE-2025-27731
OpenSSH for Windows (CVE-2025-27731) suffers from improper input validation that enables an authorized local attacker to escalate privileges. Affected product: OpenSSH for Windows. Impact: local privilege escalation with high severity (CVE-2025-27731). Documented remediation: Microsoft has releas...
CVE-2026-23673
Technical details are not publicly provided in the supplied documents. Monitor for updates.
CVE-2023-21686
Technical details about CVE-2023-21686 are not publicly provided in the supplied documents. No affected product/version/root cause or remediation are described here. Monitor for updates from official sources.
CVE-2023-21801
CVE-2023-21801 affects Microsoft PostScript and PCL6 Class Printer Driver and is described as a Remote Code Execution vulnerability. Connected documents confirm the vulnerability exists in these printer drivers but do not provide concrete details on affected product versions, root cause specifics...
CVE-2023-28221
Technical details about CVE-2023-28221 are not publicly available in the provided documents. Monitor for updates from Microsoft and vulnerability feeds.
CVE-2024-30029
According to the NCSC advisory (NCSC-2024-0210), CVE-2024-30029 affects Microsoft Windows RRAS and is rated with CVSSv3.1 base score 7.5 (HIGH). The RRAS vulnerability enables remote code execution via network access, with the advisory indicating the impact as executing random code on the target....
CVE-2024-30077
Technical details are not provided in the supplied documents; no public specifics are included here. Monitor for updates from official advisories.
CVE-2024-49097
CVE-2024-49097 is a Windows Elevation of Privilege affecting the Windows PrintWorkflowUserSvc component. The NC Scadvisory entry assigns CVSS 3.1/7.0 (Local, High attack complexity, Low privileges required, No user interaction; Execution against Confidentiality/Integrity/Availability at High). Co...
CVE-2025-26663
CVE-2025-26663 is a Windows LDAP remote code-execution vulnerability described as a use-after-free in the LDAP service that enables an unauthenticated attacker to run code over the network. The CVSS 3.1 base metrics indicate high impact on confidentiality, integrity, and availability (C:H, I:H, A...
CVE-2025-54100
CVE-2025-54100 is a PowerShell RCE vulnerability tied to improper neutralization during MSHTML-based HTML parsing when Invoke-WebRequest is used without -UseBasicParsing. Affected: Windows PowerShell 5.1 on Windows 10/11 and Windows Server 2008–2025; attack is locally exploitable with user intera...
CVE-2026-50507
CVE-2026-50507 concerns a Protection mechanism failure in Windows BitLocker that allows an unauthorized attacker to bypass a security feature via a physical attack . The connected documents corroborate a vulnerability affecting Windows BitLocker, with a CVSS v3.1 base score of 6.8 (Medium). The a...
CVE-2023-21820
Technical details (affected product/version, root cause, impact, or fix) are not publicly available in the provided documents. Monitor for updates.
CVE-2023-29346
Technical details about CVE-2023-29346 are not publicly available in the provided documents. No affected product/version/impact is specified here. Monitor for updates in the connected sources.
CVE-2023-32038
CVE-2023-32038 concerns the Microsoft ODBC Driver Remote Code Execution vulnerability. The connected data identifies the affected component as the Microsoft ODBC Driver and classifies the impact as Remote Code Execution with a high severity (CVSS v3.1 base score 8.8). Attack vectors are NETWORK w...
CVE-2023-35315
CVE-2023-35315 corresponds to the Windows Layer-2 Bridge Network Driver remote code execution vulnerability. According to the connected AVUL document, an unauthenticated attacker must be on a network segment with a Windows Server acting as a Layer-2 Bridge and send specially crafted file operatio...
CVE-2023-35378
CVE-2023-35378 is a Windows Projected File System Elevation of Privilege vulnerability. The provided sources identify it as affecting Windows OS via the Projected File System component and assign a high impact with local attack vector and no user interaction required (CVSSv3.1: AV=L/AC=H/PR=L/UI=...
CVE-2024-30024
CVE-2024-30024 is listed by ENISA NCSC as a Windows RRAS vulnerability with a CVSS v3.1 score of 7.5 (HIGH) and a base impact of executing random code. It is part of the Windows Routing and Remote Access Service (RRAS) family and is described in the connected document as a network-exposed issue t...
CVE-2024-38127
CVE-2024-38127 is a Windows Hyper-V Elevation of Privilege vulnerability. The initial description identifies it as a Windows Hyper-V EoP with local attack vector, low privileges required, no user interaction, and an impact of high confidentiality, integrity, and availability. The CVSS 3.1 vector ...
CVE-2024-38133
CVE-2024-38133 is a Windows Kernel Elevation of Privilege vulnerability. The connected NCSC advisory confirms it affects the Windows Kernel and enables a local, authenticated attacker to obtain SYSTEM privileges by exploiting the kernel component; CVSS v3.1 base score 7.8 (HIGH). The NCSC note al...
CVE-2025-27742
CVE-2025-27742 corresponds to an out-of-bounds read in Windows NTFS that can allow a local attacker to disclose information. The NVD entry lists a CVSS v3.1 base score of 5.5 (LOCAL, LOW attack complexity, NONE privileges, UI REQUIRED) with High confidentiality impact and no impact to integrity/a...
CVE-2026-23667
CVE-2026-23667 is described as a Local privilege-escalation vulnerability affecting Broadcast DVR. The available data show a CVSS 3.1 base score of 7.0 (HIGH) with local attack vector, high impact on confidentiality, integrity, and availability, and no user interaction required. Exploitation is l...
CVE-2023-29373
Technical details about CVE-2023-29373 are not publicly provided in the supplied documents; monitor for updates from Microsoft and vulnerability feeds.
CVE-2023-32008
CVE-2023-32008: Windows Resilient File System (ReFS) Remote Code Execution vulnerability. Affects Windows with ReFS; exploitation is LOCAL with user interaction and no privileges required. CVSS v3.1 base score 7.8 (HIGH); impact on confidentiality, integrity, and availability is HIGH. Remediation...
CVE-2023-35376
Technical details for CVE-2023-35376 are not publicly available in the provided documents; monitor for updates.
CVE-2023-36912
Technical details about CVE-2023-36912 are not publicly available in the provided documents. Monitor for updates.
CVE-2024-30016
CVE-2024-30016 affects Windows Cryptographic Services . The vulnerability is described as an information disclosure with impact to confidentiality (high) and is listed in sources as a Windows component issue with a CVSS v3.1 base score of 5.5 (attack vector: local; privileges required: low; user ...
CVE-2024-30023
CVE-2024-30023 affects the Windows Routing and Remote Access Service (RRAS). The RRAS remote code execution vulnerability is listed under Windows RRAS with CVSS details indicating Network attack vector, high impact to confidentiality, integrity, and availability, and requiring user interaction. T...
CVE-2024-30025
CVE-2024-30025 affects the Windows Common Log File System Driver. The Windows/KB guidance mappings list CVE-2024-30025 with a CVSS v3.1 base score of 7.8 (LOCAL attack, LOW complexity, LOW privileges required, HIGH confidentiality/integrity/availability impact) and categorize it as an privilege e...
CVE-2024-38030
Technical details for CVE-2024-38030 are not publicly disclosed in the provided documents. No affected products, root cause, impact, or fixes are specified. Monitor for updates as more information becomes available.
CVE-2024-38115
Technical details for CVE-2024-38115 are not publicly available in the provided documents. Monitor for updates.
CVE-2024-43554
CVE-2024-43554 corresponds to a Windows Kernel-Mode Driver Information Disclosure vulnerability with an impact described as Access to sensitive data (CVSS ~5.5). Affected component is a kernel-mode driver; root cause details are not fully disclosed in the provided documents. Microsoft has issued ...
CVE-2024-49077
CVE-2024-49077 concerns the Windows Mobile Broadband Driver and is categorized as an elevation-of-privilege vulnerability. The available documents identify the affected component as the Windows Mobile Broadband driver and classify the impact as escalation of privileges with a base CVSSv3.1 score ...
CVE-2024-49114
Technical details for CVE-2024-49114 are not publicly provided in the supplied documents; no affected products, vectors, or fixes are specified. Monitor for updates and rely on official advisories for specifics.
CVE-2025-24061
CVE-2025-24061 : Windows Mark of the Web (MOTW) protection mechanism has a local bypass vulnerability (CVSS 3.1/LOCAL) that could allow an attacker to circumnavigate security protections with user interaction required. The issue is categorized as a local elevation/problem in the MOTW feature and ...
CVE-2025-25004
CVE-2025-25004 affects Microsoft PowerShell. The connected documents corroborate a local privilege escalation vulnerability due to improper access control, enabling an authorized attacker to obtain elevated privileges on the host. The advisory entries (including NCSC-2025-0313) assign CVSS v3.1/3...
CVE-2025-27487
CVE-2025-27487 is a heap-based buffer overflow in Windows Remote Desktop Client that allows an authenticated attacker to execute code over the network (CVSSv3.1: 8.0 HIGH; AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H). Connected sources confirm this vulnerability and reference remote desktop RCE updates. ...
CVE-2026-58613
CVE-2026-58613 (Windows Cloud Files Mini Filter Driver) causes a local privilege escalation via a use-after-free in the driver. This is observed as an elevation of privileges by an authorized attacker who already has local access. Public sources in the connected documents identify the issue as a ...
CVE-2026-61368
CVE-2026-61368 is a Windows Hyper-V heap-based buffer overflow that enables a locally authenticated attacker (low privileges, user interaction required) to disclose information. Affected component: Hyper-V; root cause is a heap overflow leading to information disclosure. CVSS 3.1 base score 5.0 (...
CVE-2023-24926
CVE-2023-24926: Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability. Affects the PostScript and PCL6 class printer driver; underlying impact is remote code execution over the network. The CVSS 3.1 base score is 8.8 (High) with high confidentiality, integrity, an...
CVE-2023-33164
CVE-2023-33164 is described as a Remote Procedure Call Runtime Denial of Service vulnerability. The provided data show CVSS v3.1 base score 6.5 (Medium) with network attack vector, low attack complexity, privilege requirement Low, no user interaction, and availability impact High. The connected d...
CVE-2023-36006
The CVE-2023-36006 entry concerns Microsoft WDAC OLE DB provider for SQL Server and is a Remote Code Execution vulnerability. The OpenVAS and NCSC records confirm the affected component as the WDAC OLE DB provider for SQL Server and classify the impact as high, with CVSS3.1 base metrics indicatin...
CVE-2024-30091
Technical details are not publicly provided in the supplied documents. No affected product, vulnerable component, version, root cause, impact, or fix information is included beyond the CVE ID and the generic description.
CVE-2024-30095
Technical details about CVE-2024-30095 (affected products, root cause, exploitability, or fixes) are not provided in the connected documents. Monitor for updates.
CVE-2024-30099
Technical details for CVE-2024-30099 are not present in the provided documents. No affected products, root cause, exploit information, or remediation are stated here. Please monitor for updates from Microsoft and related security advisories to obtain confirmed details.
CVE-2024-38223
Technical details for CVE-2024-38223 are not publicly available in the provided documents. No information on affected products, root cause, or fixes is supplied here. Monitor sources for updates.
CVE-2025-21286
CVE-2025-21286 is a Windows Telephony Service Remote Code Execution vulnerability. The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) yields a high impact with network attack vector and user interaction required. Connected sources confirm Microsoft fixes are available: KB5050009 (OS Build ...
CVE-2025-24988
The CVE-2025-24988 entry affects the Windows USB Video Driver, with an out-of-bounds read vulnerability that enables an authorized attacker with physical access to elevate privileges. Connected sources confirm this CVE name and context and indicate Microsoft has released updates to fix Windows US...
CVE-2025-33059
CVE-2025-33059 is an information-disclosure vulnerability in Windows Storage Management Provider caused by an out-of-bounds read. An authorized, low-privilege attacker can disclose information locally (CONFIDENTIALITY: HIGH; VECT: LOCAL; IMPACT: NONE on integrity/availability). Affected Microsoft...