CVE-2024-43581

CVE-2024-43581 is associated with Microsoft OpenSSH for Windows and is described as a Remote Code Execution vulnerability. The Initial document provides a CVSS v3.1 score of 7.1 ( HIGH ) with network attack vector, high impact to confidentiality, integrity, and availability, and requires user int...

CVE-2024-43615

CVE-2024-43615 affects OpenSSH for Windows and is categorized as a remote code execution vulnerability with NETWORK attacker access, requiring user interaction and low privileges. The CVSS 3.1 vector indicates Network access, high confidentiality/integrity/availability impact, and required user i...

CVE-2025-21212

CVE-2025-21212 corresponds to an Internet Connection Sharing (ICS) Denial of Service vulnerability in Windows. Reported impact is DoS, with an adjacent attack vector, low attack complexity, no user interaction required, and no confidentiality/integrity impact, but availability is affected (CVSS 3...

CVE-2025-47955

CVE-2025-47955 involves improper privilege management in Windows Remote Access Connection Manager, enabling local privilege escalation for an authorized attacker. CVSS 3.1 base 7.8 (HIGH): Local, low complexity, no user interaction, with high impact on confidentiality, integrity, and availability...

CVE-2025-49740

CVE-2025-49740 is a protection mechanism failure in Windows Defender SmartScreen that can allow an unauthenticated attacker to bypass the SmartScreen protection over the network. This vulnerability affects the SmartScreen security feature in Windows and can lead to executing or delivering untrust...

CVE-2026-42909

CVE-2026-42909 involves a heap-based buffer overflow in the Remote Desktop Client that enables a remote attacker to execute code over the network. The vulnerability arises from improper handling of data during remote desktop operations, leading to memory corruption. The CVSS-3.1 vector (AV:N/AC:H...

CVE-2026-65775

CVE-2026-65775 maps to a local privilege escalation due to a use-after-free in Windows Win32K. The affected component is Win32k in Windows; the underlying flaw is use-after-free, enabling an authorized attacker to elevate privileges locally (CVSS v3.1: 7.8, HIGH). The impact stated includes high ...

CVE-2023-33168

CVE-2023-33168 is a Remote Procedure Call Runtime Denial of Service vulnerability. The connected documents provide only a generic description and CVSS metrics; they do not reveal affected product/vendor/component/versions, root cause, exploit details, or a fix. OpenVAS entries reference the CVE b...

CVE-2023-35309

MSMQ Remote Code Execution vulnerability CVE-2023-35309 is discussed in the connected AVLEONOV article as an MSMQ RCE requiring an attacker to send a malicious MSMQ packet to an MSMQ server. The article also suggests blocking TCP port 1801 as a mitigation and notes the vulnerability context among...

CVE-2023-35314

Technical details for CVE-2023-35314 are not provided in the connected documents. The materials here only reiterate the vulnerability title. No affected products, root cause, or fixes are specified. Monitor for updates.

CVE-2023-35343

CVE-2023-35343 is a Windows Geolocation Service remote code execution vulnerability. The initial entry confirms an OS component (Windows Geolocation Service) with a CVSS v3.1 base score of 7.8 (High); attack vector listed as Local with User Interaction required, and impacts to confidentiality, in...

CVE-2023-35644

CVE-2023-35644 is a Windows SysMain service elevation of privilege vulnerability (CVSS v3.1: 7.8). It is a local privilege escalation with low privileges required and no user interaction; impact is elevated rights. Connected sources confirm related Microsoft Windows vulnerabilities and indicate u...

CVE-2023-36011

CVE-2023-36011 is a Windows Win32k elevation-of-privilege vulnerability. Affected: Windows Win32K component (kernel-related). Nature: local exploit with low attack complexity and no user interaction; enables total impact on confidentiality, integrity, and availability. CVSSv3.1 base score 7.8 (HI...

CVE-2024-29999

CVE-2024-29999 is listed as Windows Mobile Broadband Driver Remote Code Execution vulnerability. Connected sources identify it under Windows Mobile Broadband as allowing execution of code, with CVSS-like rating around 6.8/10 and a local-access context in some mappings. Technical details (affected...

CVE-2024-37970

Technical details about CVE-2024-37970 are not provided in the connected documents. The initial description notes a Secure Boot security feature bypass, but no affected product/version/root cause/fix is disclosed here. Monitor for updates.

CVE-2024-37975

Technical details for CVE-2024-37975 are not provided in the connected documents. The available materials only label it as a Secure Boot bypass without product, vector, impact, or remediation specifics. Monitor for updates for publicly disclosed details.

CVE-2024-43524

CVE-2024-43524 is a Windows Mobile Broadband Driver Remote Code Execution vulnerability. The available connected documents confirm the affected component as the Windows Mobile Broadband driver and indicate that updates from Microsoft were released to address vulnerabilities in the Windows update ...

CVE-2024-49098

CVE-2024-49098 affects Windows WWAN Service (WwanSvc). The vulnerability allows information disclosure in WWAN, with CVSS 3.1: AV Physical, AC Low, PR Low, UI None, S Unchanged, C High, I None, A None. Exploitation requires physical access and low complexity; attacker needs low privileges. Remedi...

CVE-2025-21314

Technical details on CVE-2025-21314 are not publicly provided in the supplied documents. The materials reference Windows updates addressing vulnerabilities and general guidance, but do not specify affected components, root cause, or remediation for this CVE. Monitor for updates.

CVE-2025-21359

Technical details (affected product, root cause, impact, or fix) for CVE-2025-21359 are not provided in the supplied documents. Please monitor official advisories (Microsoft/MSRC updates) for concrete vulnerability specifics and remediation guidance.

CVE-2025-26669

CVE-2025-26669 is listed in RRAS (Windows Routing and Remote Access Service) with the impact described as Access to sensitive data and a severity score of 8.80. The RRAS entry indicates an information-disclosure risk via an out-of-bounds read, attributed to a vulnerability in RRAS. Connected sour...

CVE-2025-30388

Technical details about CVE-2025-30388 are not provided in the connected documents. Public information remains limited to the initial description. Monitor for updates from official advisories for affected products, impacts, and remediation.

CVE-2025-32719

CVE-2025-32719 is a Windows Storage Management Provider vulnerability described as an out-of-bounds read that allows an authorized, local attacker to disclose information. The CVE has a CVSS v3.1 base score of 5.5 (Local, Low attack complexity, Privileges Required: Low) with high confidentiality ...

CVE-2026-33838

Technical details about CVE-2026-33838 are not publicly available in the provided documents. Monitor for updates from vendors and advisories before assessing impact or remediation.

CVE-2026-34345

CVE-2026-34345 describes a race condition in the Windows Ancillary Function Driver for WinSock that allows local privilege escalation when a shared resource is improperly synchronized. Connected sources confirm the vulnerability affects Windows components and has been addressed by the May 2026 up...

CVE-2026-62743

CVE-2026-62743 describes an out-of-bounds read in Windows Win32K that can lead to local information disclosure by an authorized attacker. The vulnerability affects the Win32K component and is exploitable with low privileges and no user interaction, with a local attack vector. The CVSS3.1 base sco...

CVE-2024-38032

CVE-2024-38032 is connected to OpenVAS entries that list it under the Windows/Xbox stack, specifically tied to the component “XBox Crypto Graphic Services.” The OpenVAS NASL shows CVE-2024-38032 with a CVSS of 7.10 and impact described as “Execute random code.” No detailed exploit vectors or firm...

CVE-2024-38091

Technical details for CVE-2024-38091 are not provided in the connected documents. Monitor for updates; no affected products, root cause, vectors, or fixes are stated here.

CVE-2024-38149

CVE-2024-38149 is a Windows BranchCache Denial of Service vulnerability. Documents indicate a network-exploitable issue (CVSS v3.1: 7.5, AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) affecting BranchCache components. Microsoft provides fixes via security updates (KB/MSRC guidance); no explicit root-cause ...

CVE-2024-49121

CVE-2024-49121 is an LDAP Denial-of-Service vulnerability in Windows LDAP (Domain Controller). The connected advisory confirms the LDAP issue as a DoS risk and notes that Microsoft has released fixes via updates; applying the relevant Windows security updates is the recommended remediation. MITRE...

CVE-2025-21252

Technical details about CVE-2025-21252 are not publicly available in the provided documents. Monitor for updates from Microsoft and NVD for affected products, impact, and remediation.

CVE-2025-21265

Technical details about CVE-2025-21265 are not provided in the supplied documents. Public information on affected products, root cause, and fixes is missing here. Monitor for updates from Microsoft and NVD for concrete vulnerability specifics.

CVE-2025-21266

CVE-2025-21266 is a Windows Telephony Service remote code execution vulnerability. The linked data shows a network-exposed impact with CVSS v3.1 base score 8.8 (HIGH), requiring user interaction for exploitation and affecting confidentiality, integrity, and availability. Affected component is the...

CVE-2026-32202

CVE-2026-32202 is a Windows Shell vulnerability described as a protection mechanism failure that enables spoofing over a network. Connected sources label the issue under Windows Shell with the capability for an attacker to pretend to be another user (e.g., “Pretend to be another user”) and refere...

CVE-2026-61930

CVE-2026-61930 describes a heap-based buffer overflow in the Windows kernel that allows an authorized attacker to elevate privileges locally. The available documents identify the affected component as the Windows Kernel and characterize the vulnerability as a local privilege escalation with a hig...

CVE-2026-62894

CVE-2026-62894 describes a heap-based buffer overflow in the Windows DWM Core Library that allows an authenticated local attacker to elevate privileges. The vulnerability is documented across CVE/NVD listings with a CVSSv3.1 base score of 7.8 (HIGH), vector: LOCAL, LOW attack complexity, and NONE...

CVE-2024-38070

Technical details about CVE-2024-38070 are not publicly provided in the supplied documents. Please monitor for updates from Microsoft and NVD; current entries reference WLDP but do not disclose exploit paths or affected products.

CVE-2024-38238

CVE-2024-38238 is listed in the Windows Streaming Service category as a local elevation-of-privileges vulnerability affecting the Windows kernel streaming service. The connected documents corroborate an elevated-privilege risk for this CVE within Windows components, without providing full exploit...

CVE-2024-38239

Microsoft Windows Kerberos CVE-2024-38239 is an Elevation of Privilege in the Windows Kerberos component. The connected Windows vulnerability listing assigns CVSS v3.1 base score 7.2 (HIGH) with network attack vector, low attack complexity, and privileges required: HIGH; impact is CONfidentiality...

CVE-2024-38245

CVE-2024-38245 is a Windows Kernel Streaming Service Driver elevation-of-privilege flaw. A local attacker could exploit it with low privileges and no user interaction to gain SYSTEM-level access; CVSS v3.1/3.1 vector indicates local access, low complexity, with high impact to confidentiality, int...

CVE-2025-21214

Technical details about CVE-2025-21214 (Windows BitLocker information disclosure) are not publicly provided in the supplied connected documents. The sources reference updates but do not specify affected versions, root cause, exploitability, or mitigation beyond patch availability. Monitor for upd...

CVE-2025-21238

CVE-2025-21238 affects the Windows Telephony Service and is a remote code execution vulnerability. The initial data lists CVSS 3.1 with NETWORK attack vector, LOW attack complexity, no privileges required, and user interaction required; impact is high on confidentiality, integrity, and availabili...

CVE-2025-21243

CVE-2025-21243 affects Windows Telephony Service. The vulnerability is a remote code execution flaw caused by input validation in Windows Telephony Server, enabling network-based exploitation with required user interaction and no privileges. The CVSS v3.1 base score is 8.8 (HIGH) with network acc...

CVE-2025-21256

Technical details for CVE-2025-21256 are not provided in the connected documents. Public information here is limited to general Windows updates references; no product, exploit, or root-cause specifics are disclosed. Monitor for updates and additional disclosures.

CVE-2025-21282

Technical details about CVE-2025-21282 are not publicly provided in the supplied documents. No affected product/version or exploit information is disclosed here. Monitor for updates from official advisories and CVE/NVD entries.

CVE-2025-48822

CVE-2025-48822 is an out-of-bounds read vulnerability in Windows Hyper-V that could enable local code execution. The connected NCSC entry explicitly lists the impact as Execution of arbitrary code on Windows Hyper‑V, with CVSS base score 8.6 (LOCAL, HIGH). The documents do not provide additional ...

CVE-2025-59254

Summary: CVE-2025-59254 is a heap-based buffer overflow in the Windows DWM Core Library that enables a locally authenticated attacker to escalate privileges. Affected component: DWM Core Library on Windows. Impact: Local privilege escalation with high potential impact; CVSS 3.1 score 7.8 (LOCAL, ...

CVE-2026-59127

CVE-2026-59127: Affected software is Windows Installer; vulnerability is an integer overflow/wraparound in Windows Installer that enables a locally authenticated attacker to elevate privileges. The issue stems from the overflow in a Windows Installer component, with CVSS v3.1 base score 7.8 (High...

CVE-2026-61928

An issue affecting Windows Hello : sensitive information is stored in cleartext, allowing an authorized local attacker to tamper with the system. The CVSSv3.1 vector indicates a local, low-complexity attack requiring low privileges with a high integrity impact (I:H). Base score 5.5 (Medium). No e...

CVE-2026-62877

CVE-2026-62877 is a Windows Win32K vulnerability described as a stack-based buffer overflow that enables local privilege escalation by an authorized user. The affected component is the Windows Win32K subsystem; the root cause is a stack-based buffer overflow within Win32K code paths. The CVSS vec...