CVE-2024-38056

Technical details about CVE-2024-38056 are not publicly provided in the connected documents. The entry is listed, but no affected products, root cause, impact, or fixes are described here.

CVE-2024-38191

Technical details for CVE-2024-38191 are not publicly provided in the supplied documents. Monitor for updates from Microsoft MSRC/NVD, NVD, or CVE listings as new information becomes available.

CVE-2023-33173

Technical details about CVE-2023-33173 are not provided in the supplied documents. No specific affected products, root causes, or fixes are disclosed here. Monitor for updates from official advisories.

CVE-2023-35299

CVE-2023-35299 affects the Windows Common Log File System Driver and is an Elevation of Privilege vulnerability. CVSSv3.1 base score 7.8 (Local, Privilege Required: Low, User Interaction: None, Scope: Unchanged; Impact: Confidentiality/Integrity/Availability High). The connected sources (includin...

CVE-2024-30093

Technical details about CVE-2024-30093 are not provided in the supplied documents; no affected products, root cause, impact, or fixes are specified.

CVE-2024-37987

Technical details about CVE-2024-37987 are not provided in the given documents; no affected products, versions, root cause, impact, or fixes are described. Monitor for updates from vendors and security advisories.

CVE-2024-38050

Technical details about CVE-2024-38050 (affected software, root cause, impact, exploitability) are not provided in the supplied documents. Please monitor for updates from Microsoft or related security advisories.

CVE-2024-38105

CVE-2024-38105 details are not publicly available in the provided documents. Monitor for updates; no specifics on vulnerable components, impact, or fixes are included here.

CVE-2024-43511

Technical details about CVE-2024-43511 are not provided in the supplied documents. Public information beyond basic CVSS data is not included here; monitor for updates.

CVE-2022-35746

Technical details about CVE-2022-35746 are not provided in the supplied documents. No product/version/root-cause/impact are specified here; monitor for official updates from Microsoft/NVD to obtain concrete information and remediation.

CVE-2023-35296

Technical details for CVE-2023-35296 are not provided in the supplied documents. No information on affected products, versions, impact, or fixes. Monitor for updates from Microsoft and CVE sources.

CVE-2024-37981

Technical details are not publicly available in the provided documents. No explicit information on affected products, root cause, impact, or fixes is given here. Monitor for updates from official sources to obtain concrete vulnerability specifics and remediation guidance.

CVE-2024-37986

Technical details for CVE-2024-37986 are not publicly provided in the supplied documents. No affected products, versions, root cause, or remediation are specified here. Monitor for updates.

CVE-2024-38142

CVE-2024-38142 is a Windows Secure Kernel Mode elevation-of-privilege vulnerability (local, low-privilege prerequisite; high impact). The connected sources provide CVSS and impact only (Obtaining Increased Entitlements) and do not specify root cause details beyond the Windows kernel context. Publ...

CVE-2024-38145

CVE-2024-38145 affects the Windows Layer-2 Bridge Network Driver. The available data shows a Denial-of-Service impact with CVSS v3.1 base score 7.5 (Network attack, Low attack complexity, No privileges, No user interaction). Root cause, affected software versions, and remediation are not provided...

CVE-2024-38151

Technical details (affected product/component/root cause/impact/fix) for CVE-2024-38151 are not provided in the connected documents. Only the label “Windows Kernel Information Disclosure” with CVSS 5.5 is given; monitor for updates.

CVE-2024-38161

Technical details for CVE-2024-38161 (Windows Mobile Broadband Driver RCE) are not provided in the connected documents. Monitor for vendor advisories (MSRC/MSKB) for disclosure, affected products/versions, fixes, and mitigations.

CVE-2023-35316

Technical details about CVE-2023-35316 (affected products, root cause, impact, or fixes) are not provided in the connected documents. The initial description lacks public details. Monitor for updates and any forthcoming technical information.

CVE-2023-36011

CVE-2023-36011 is a Windows Win32k elevation-of-privilege vulnerability. Affected: Windows Win32K component (kernel-related). Nature: local exploit with low attack complexity and no user interaction; enables total impact on confidentiality, integrity, and availability. CVSSv3.1 base score 7.8 (HI...

CVE-2024-38052

Technical details for CVE-2024-38052 are not publicly available in the provided documents. No affected products, root cause, impact, or remediation are specified here. Monitor official sources for updates.

CVE-2024-38078

Technical details for CVE-2024-38078 are not publicly provided in the supplied connected documents. Monitor for updates.

CVE-2024-38102

Technical details for CVE-2024-38102 are not provided in the Connected documents. Monitor for updates.

CVE-2024-38126

CVE-2024-38126 affects Windows Network Address Translation (NAT). The provided table lists it under Windows NAT with a CVSS v3.1 score of 7.5 (HIGH) and impact as Denial-of-Service. Other connected documents reference general Microsoft Windows fixes but do not provide concrete technical details (...

CVE-2024-38137

CVE-2024-38137 is a Windows vulnerability in the Resource Manager PSM Service Extension: a local elevation of privilege with CVSS 3.1/7.0 (LOCAL, HIGH impact, attacker requires LOW privileges, no user interaction). Connected sources indicate Microsoft has released updates to fix vulnerabilities i...

CVE-2024-38241

CVE-2024-38241 is a Windows kernel streaming service driver elevation of privilege vulnerability (local, required privileges: low; attack complexity: low; user interaction: none). The NVD entry assigns CVSS v3.1: 7.8 (HIGH) with impacts to confidentiality, integrity, and availability (all HIGH) i...

CVE-2024-38244

CVE-2024-38244 is a Windows Kernel Streaming Service Driver elevation-of-privilege flaw. The CVE is rated CVSSv3.1 base score 7.8 (HIGH) with LOCAL attack vector, LOW attack complexity, and LOW privileges required; exploitation grants total compromise of confidentiality, integrity, and availabili...

CVE-2024-43514

Technical details about CVE-2024-43514 are not publicly provided in the connected documents; they reference fixes but do not describe root cause, vectors, or affected versions. Monitor for updates.

CVE-2024-43535

CVE-2024-43535 is a Windows Kernel-Mode Driver Elevation of Privilege affecting Windows Kernel-Mode Drivers (tm.sys cited in public discussions). The CVE entry lists a HIGH base impact (Privilege escalation) with LOCAL access and HIGH confidentiality/integrity/availability impact. A GitHub repo i...

CVE-2023-35314

Technical details for CVE-2023-35314 are not provided in the connected documents. The materials here only reiterate the vulnerability title. No affected products, root cause, or fixes are specified. Monitor for updates.

CVE-2023-35341

Technical details for CVE-2023-35341 are not publicly available in the provided documents. Monitor for updates from official sources (e.g., vendor advisories, CVE records) to obtain affected products, impact, and remediation information.

CVE-2024-35270

Technical details about CVE-2024-35270 (Windows iSCSI Service DoS) are not provided in the connected documents. Monitor for official advisories and Microsoft updates for affected products and remediation.

CVE-2024-37970

Technical details about CVE-2024-37970 are not provided in the connected documents. The initial description notes a Secure Boot security feature bypass, but no affected product/version/root cause/fix is disclosed here. Monitor for updates.

CVE-2024-43615

CVE-2024-43615 affects OpenSSH for Windows and is categorized as a remote code execution vulnerability with NETWORK attacker access, requiring user interaction and low privileges. The CVSS 3.1 vector indicates Network access, high confidentiality/integrity/availability impact, and required user i...

CVE-2023-33168

CVE-2023-33168 is a Remote Procedure Call Runtime Denial of Service vulnerability. The connected documents provide only a generic description and CVSS metrics; they do not reveal affected product/vendor/component/versions, root cause, exploit details, or a fix. OpenVAS entries reference the CVE b...

CVE-2023-35309

MSMQ Remote Code Execution vulnerability CVE-2023-35309 is discussed in the connected AVLEONOV article as an MSMQ RCE requiring an attacker to send a malicious MSMQ packet to an MSMQ server. The article also suggests blocking TCP port 1801 as a mitigation and notes the vulnerability context among...

CVE-2023-35343

CVE-2023-35343 is a Windows Geolocation Service remote code execution vulnerability. The initial entry confirms an OS component (Windows Geolocation Service) with a CVSS v3.1 base score of 7.8 (High); attack vector listed as Local with User Interaction required, and impacts to confidentiality, in...

CVE-2023-35644

CVE-2023-35644 is a Windows SysMain service elevation of privilege vulnerability (CVSS v3.1: 7.8). It is a local privilege escalation with low privileges required and no user interaction; impact is elevated rights. Connected sources confirm related Microsoft Windows vulnerabilities and indicate u...

CVE-2024-29999

CVE-2024-29999 is listed as Windows Mobile Broadband Driver Remote Code Execution vulnerability. Connected sources identify it under Windows Mobile Broadband as allowing execution of code, with CVSS-like rating around 6.8/10 and a local-access context in some mappings. Technical details (affected...

CVE-2024-37975

Technical details for CVE-2024-37975 are not provided in the connected documents. The available materials only label it as a Secure Boot bypass without product, vector, impact, or remediation specifics. Monitor for updates for publicly disclosed details.

CVE-2024-38091

Technical details for CVE-2024-38091 are not provided in the connected documents. Monitor for updates; no affected products, root cause, vectors, or fixes are stated here.

CVE-2024-38149

CVE-2024-38149 is a Windows BranchCache Denial of Service vulnerability. Documents indicate a network-exploitable issue (CVSS v3.1: 7.5, AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) affecting BranchCache components. Microsoft provides fixes via security updates (KB/MSRC guidance); no explicit root-cause ...

CVE-2024-38237

CVE-2024-38237 is a local privilege-escalation in Windows Kernel Streaming WOW Thunk Service Driver. Affected component is a Windows kernel-mode driver used by streaming services; vulnerability exploited locally with low privileges and no user interaction, leading to elevated privileges and poten...

CVE-2024-38243

CVE-2024-38243 is a Windows Streaming Service elevation of privilege vulnerability. The connected NCSC entry classifies it as impacting Windows Streaming Service with the effect of obtaining elevated privileges, consistent with a local-exploit scenario (CVSS: Local, Privileges Required Low, User ...

CVE-2024-43524

CVE-2024-43524 is a Windows Mobile Broadband Driver Remote Code Execution vulnerability. The available connected documents confirm the affected component as the Windows Mobile Broadband driver and indicate that updates from Microsoft were released to address vulnerabilities in the Windows update ...

CVE-2024-43553

CVE-2024-43553 is an NT OS Kernel elevation-of-privilege vulnerability associated with Windows NT OS Kernel. The connected data explicitly maps this CVE to Windows NT OS Kernel with a high impact (privilege escalation). The NCSC advisory notes that vulnerabilities in Windows have been fixed, and ...

CVE-2024-38032

CVE-2024-38032 is connected to OpenVAS entries that list it under the Windows/Xbox stack, specifically tied to the component “XBox Crypto Graphic Services.” The OpenVAS NASL shows CVE-2024-38032 with a CVSS of 7.10 and impact described as “Execute random code.” No detailed exploit vectors or firm...

CVE-2024-38070

Technical details about CVE-2024-38070 are not publicly provided in the supplied documents. Please monitor for updates from Microsoft and NVD; current entries reference WLDP but do not disclose exploit paths or affected products.

CVE-2024-38253

Technical details about CVE-2024-38253 (Windows Win32 Kernel Subsystem Elevation of Privilege) are not publicly provided in the supplied documents; monitor for updates from Microsoft and CVE repositories.

CVE-2024-43581

CVE-2024-43581 is associated with Microsoft OpenSSH for Windows and is described as a Remote Code Execution vulnerability. The Initial document provides a CVSS v3.1 score of 7.1 ( HIGH ) with network attack vector, high impact to confidentiality, integrity, and availability, and requires user int...

CVE-2022-40732

CVE-2022-40732 affects Microsoft Windows DirectComposition in the win32kbase.sys driver (Windows 11 10.0.22000.593; Windows Server 2022 10.0.20348.643). Talos details a NULL pointer dereference in DirectComposition::CCompositionSurfaceBitmapMarshaler when setting integer property 0x3, which leads...