2443 matches found
CVE-2023-21697
Technical details about CVE-2023-21697 are not publicly available in the provided documents. Monitor for updates from Microsoft/NVD and Vulners for affected products, exploit information, and remediation.
CVE-2023-21797
Technical details about CVE-2023-21797 are not publicly provided in the supplied documents; no affected product/version or exploit information is present here. Monitor for updates from official sources.
CVE-2023-35324
Technical details about CVE-2023-35324 are not publicly available in the provided documents; no affected products, root cause, or remediation are specified here. Monitor for updates.
CVE-2024-30005
CVE-2024-30005 relates to the Windows Mobile Broadband Driver remote code execution. Per NCSC, it is listed under Windows Mobile Broadband with a CVSS around 6.8/6.80 and impact described as executing random code. No root-cause or remediation details are provided in the available documents; monit...
CVE-2024-30034
CVE-2024-30034 affects Windows Cloud Files Mini Filter Driver and is an information disclosure vulnerability. CVSSv3.1 provides a base score of 5.5 (MEDIUM), attack vector LOCAL, attack complexity LOW, privileges required LOW, no user interaction, with confidentiality impact HIGH. Exploitation st...
CVE-2024-38043
Technical details for CVE-2024-38043 are not publicly provided in the supplied documents. No affected product/version or root cause is specified here. Monitor for updates from Microsoft and CVE repositories.
CVE-2024-43628
According to the NCSC advisory, CVE-2024-43628 is a Windows Telephony Service Remote Code Execution vulnerability with a CVSS v3.1 base score of 8.8 (HIGH) and an impact described as Execute random code. The vulnerability is listed under Windows Telephony Service with a remediation path through M...
CVE-2024-49079
Technical details for CVE-2024-49079 are not provided in the supplied documents. Monitor for updates from Microsoft, NVD, CVE List, and other official sources as disclosures evolve.
CVE-2025-21200
CVE-2025-21200 is listed by ENISA/NCSC as a vulnerability affecting the Windows Telephony Service with high impact and the ability to execute arbitrary code. The linked material specifies a CVSSv3.1 base score of 8.8 (Network attack, No user privileges, User interaction required; High confidentia...
CVE-2025-21316
Technical details for CVE-2025-21316 are not publicly available in the provided documents. Monitor for updates from Microsoft and threat intelligence sources.
CVE-2025-21317
CVE-2025-21317 is a Windows Kernel Memory Information Disclosure vulnerability with CVSS 3.1/5.5 (LOCAL, LOW complexity, LOW privileges) and has the potential to expose confidential data from kernel memory. Connected documents confirm a Windows Kernel Memory Information Disclosure issue and indic...
CVE-2026-40415
Technical details (affected product, component, root cause, impact, remediation) are not publicly available in the provided documents. Monitor for updates from official advisories.
CVE-2023-24906
CVE-2023-24906 concerns a vulnerability in the Microsoft PostScript and PCL6 Class Printer Driver that can lead to information disclosure. The affected component is the PostScript and PCL6 Class Printer Driver; root cause and detailed technical steps are not elaborated in the provided documents b...
CVE-2023-32039
Technical details about CVE-2023-32039 are not provided in the connected documents. Please monitor for updates.
CVE-2023-33166
No public technical details for CVE-2023-33166 are provided in the connected documents. The initial description offers a generic RPC DoS label; monitor for updates for any affected products, versions, or fixes.
CVE-2023-36871
Technical details for CVE-2023-36871 are not publicly available in the provided connected documents. No vendor/product/version specifics, exploit information, or remediation are included here. Monitor for updates from official sources.
CVE-2024-38048
Technical details for CVE-2024-38048 are not publicly provided in the connected documents. Please monitor for updates; the supplied sources do not include affected products, root cause, impact, or remediation specifics.
CVE-2024-38085
Technical details about CVE-2024-38085 are not provided in the supplied documents; no affected products, root cause, or mitigations are disclosed here. Monitor for updates from Microsoft and related CVE references.
CVE-2024-43546
CVE-2024-43546 is a Windows Cryptographic Information Disclosure Vulnerability affecting Windows Cryptographic Services. The connected documents confirm Microsoft released October 2024 security updates (e.g., KB5044284, KB5044285, KB5044273, KB5044288, etc.) to fix this issue across Windows 11/10...
CVE-2025-21224
CVE-2025-21224 refers to a Windows Line Printer Daemon (LPD) Service remote code execution vulnerability. The primary connected sources indicate an attacker could exploit a network remote vector to achieve code execution with no user interaction, with a CVSSv3.1 base score of 8.1 (AV:N/AC:H/PR:N/...
CVE-2025-21247
CVE-2025-21247 is a MapUrlToZone security bypass in Windows. Description: Improper resolution of path equivalence allows a network attacker to bypass a security feature. CVSS: 3.1, Network attack, Low complexity, No privileges required, User interaction required, Confidentiality impact Low; Integ...
CVE-2025-21269
CVE-2025-21269 is described as a Windows HTML Platforms Security Feature Bypass vulnerability. Connected CNVD/NCSC/KB entries reference a Windows HTML Platforms security feature bypass without detailed exploit steps; the Initial metrics show CVSS 3.1 (4.3, Network, UI: Required). Exploitation spe...
CVE-2025-24062
CVE-2025-24062 describes an input-validation flaw in Windows DWM Core Library that enables local elevation of privileges by an authenticated attacker. The incident is documented by Microsoft and CVE listings, which indicate a high-severity, local-privilege-elevation issue. Remediation is provided...
CVE-2025-24995
CVE-2025-24995 is a heap-based buffer overflow in the Kernel Streaming WOW Thunk Service Driver that allows a locally authorized attacker to elevate privileges. The NVD entry confirms the vulnerable component and impact (local privilege elevation; high severity). Public references point to Micros...
CVE-2023-21702
CVE-2023-21702 refers to a Windows iSCSI Service Denial of Service vulnerability. The initial description notes a HIGH (7.5) CVSS v3.1 impact with network attack vector and no user interaction, but the connected documents do not provide additional technical details, affected software versions, ro...
CVE-2023-32041
CVE-2023-32041 concerns a Windows Update Orchestrator Service information disclosure vulnerability. The provided documents do not include concrete technical details (affected products/versions, root cause, exploitability, or fixes). Monitor for updates.
CVE-2023-35312
The CVE-2023-35312 entry concerns Microsoft VOLSNAP.SYS with local access privilege escalation. Based on the provided metrics, the vulnerability supports LOCAL attack vector, requiring LOW privileges and no user interaction, with HIGH impact on confidentiality, integrity, and availability (CVSS 3...
CVE-2023-35318
Technical details about CVE-2023-35318 are not provided in the supplied documents; no affected products, root cause, or remediation are disclosed here. Monitor for updates.
CVE-2023-35320
CVE-2023-35320 corresponds to a Windows vulnerability described as an elevation of privilege in Connected User Experiences and Telemetry. Connected documents provide a high‑level reference and list this CVE among Windows vulnerabilities, noting an elevation of privilege with vague, non‑specific d...
CVE-2023-35357
CVE-2023-35357 is a Windows Kernel local privilege escalation stemming from registry hive memory corruption. The material shows how an attacker can leverage an out-of-bounds hive cell index to manipulate the CMHIVE/HHIVE, potentially reading/writing kernel memory via hacks like the registry value...
CVE-2024-30076
Technical details for CVE-2024-30076 are not publicly available in the provided documents; no affected products, root cause, or remediation are specified here. Monitor for updates from official vulnerability databases.
CVE-2024-30082
Technical details about CVE-2024-30082 are not provided in the connected documents. The supplied materials contain no concrete product/version/root-cause/impact/fix information. Monitor official advisories for updates and remediation guidance.
CVE-2024-38028
Technical details for CVE-2024-38028 are not publicly available in the provided documents; no affected products, root cause, or remediation are specified. Monitor for updates.
CVE-2024-38066
Technical details about CVE-2024-38066 (affected product, root cause, impact, or fix) are not publicly available in the provided connected documents. Monitor for updates from official advisories and vendor pages.
CVE-2024-38130
Technical details for CVE-2024-38130 are not publicly available in the provided documents. No vendor/dependent specifics (product version, root cause, impact, or fixes) are given here. Monitor for official disclosures and updated advisories.
CVE-2024-38143
CVE-2024-38143 is a Windows WLAN AutoConfig Service elevation of privilege vulnerability. The CVSS 3.1 vector indicates an attacker must have physical access (AV:P) and exploit with high complexity, no user interaction, and local access (PR:N, UI:N). The vulnerability could yield elevated privile...
CVE-2024-49104
The connected NCSC advisory (EUVD/NCSC) lists CVE-2024-49104 under Windows Routing and Remote Access Service (RRAS) with a high impact: Execution of arbitrary code (CVSS 8.80). The RRAS entry is described as vulnerable to arbitrary code execution, but the document does not provide root cause spec...
CVE-2025-21280
CVE-2025-21280 is a Windows Virtual Trusted Platform Module Denial of Service vulnerability. Connected documents identify the affected component as the Windows Virtual TPM and note an impact on availability. The NCSC advisory lists a CVSS v3.1 base score of 5.5 (LOCAL attack, LOW privileges requi...
CVE-2025-21319
CVE-2025-21319 is a Windows kernel memory information disclosure vulnerability. The issue is tracked in multiple vulnerabilities and discussed by Microsoft, with a CVSSv3.1 base score of 5.5 (Local attack, Low attack complexity, Low privileges required, no user interaction, High confidentiality i...
CVE-2025-26674
CVE-2025-26674 is a Windows Media heap-based buffer overflow vulnerability that could allow an authorized, locally present attacker to execute code on the system. The CVE has a base score of 7.8 ( HIGH ) and is addressed by Microsoft security updates (e.g., KBs from the April 2025 cycle). See Mic...
CVE-2026-62792
Summary: CVE-2026-62792 is a stack-based buffer overflow in the Windows TCP/IP stack that enables a remote attacker to execute code over the network. The provided documents identify the affected component as Windows TCP/IP and confirm a RCE impact, with the exploit delivered remotely via network ...
CVE-2023-32035
Technical details for CVE-2023-32035 (affected product/component/version/root cause/mitigation) are not provided in the connected documents. The initial description only notes a Remote Procedure Call Runtime Denial of Service vulnerability without concrete details. Monitor updates from official s...
CVE-2023-33155
CVE-2023-33155 is a local elevation-of-privilege vulnerability in the Windows Cloud Files Mini Filter Driver. The NVD entry lists a CVSS v3.1 base score of 7.8 (High) with Local attack vector, Low attack complexity, Privileges Required: Low, and no user interaction, affecting the Cloud Files Mini...
CVE-2023-33169
Technical details about CVE-2023-33169 are not publicly provided in the supplied documents. Monitor for updates from official sources; no product/vendor/version/impact information or fixes are included here.
CVE-2023-35319
CVE-2023-35319 is a Remote Procedure Call (RPC) Runtime Denial of Service vulnerability. The NVD entry lists a network attack vector with low attack complexity, requiring low privileges and no user interaction, leading to an availability impact (C:A) of High and no confidentiality or integrity im...
CVE-2023-35642
CVE-2023-35642 corresponds to a Denial-of-Service vulnerability in Windows’ Internet Connection Sharing (ICS) feature. The NVD entry explicitly labels this as an ICS DoS issue, with CVSS 3.1 indicating Adjacent attack vector, no privileges required, no user interaction, and high impact on availab...
CVE-2024-38011
Technical details about CVE-2024-38011 (affected products, vulnerable components, root cause, impact, fixes) are not provided in the supplied documents. Monitor for updates from the vendor and security advisories for confirmation and remediation guidance.
CVE-2024-38017
Technical details about CVE-2024-38017 are not provided in the supplied documents. The dataset includes related Windows KBs and other CVEs, but no explicit affected product, root cause, impact, or fix for CVE-2024-38017.