1001 matches found
CVE-2023-21556
Technical details about CVE-2023-21556 are not publicly provided in the supplied documents; no affected products, root cause, or fixes are specified here. Monitor for updates from official sources.
CVE-2024-21362
Technical details for CVE-2024-21362 are not publicly available in the provided documents. No affected products, root cause, or remediation details are disclosed here. Monitor for updates from official sources.
CVE-2024-20663
Technical details about CVE-2024-20663 are not provided in the supplied documents. No confirmed affected products, versions, root cause, or remediation are disclosed; monitor for updates.
CVE-2024-21320
CVE-2024-21320 is a Windows themes spoofing vulnerability with public detail: Exploit-DB describes an NTLM hash-leak via a malicious Windows theme, demonstrating how a crafted .theme file can exfiltrate credentials. The NVD entry labels the issue as Windows Themes Spoofing Vulnerability with a CV...
CVE-2023-21541
Technical details about CVE-2023-21541 are not provided in the connected documents. Based on available data, no specifics on affected components, root cause, or fixes are included here. Monitor for updates from authoritative sources.
CVE-2024-20687
CVE-2024-20687 is a DoS vulnerability in the Microsoft AllJoyn API. The NVD entry notes a network-based attack with low complexity that results in availability impact (I: C, A: C? actually A). The provided metrics show CVSS 3.1 base score 7.5, vector AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H, indicatin...
CVE-2024-21314
CVE-2024-21314 relates to Microsoft Message Queuing and is described in CNVD/NVD sources as a Microsoft Message Queuing Information Disclosure Vulnerability. The connected documents explicitly state that the vulnerability allows an attacker to obtain sensitive information from heap memory. No con...
CVE-2023-21692
CVE-2023-21692 is described as a Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution vulnerability. The connected documents provide limited details: they cite PEAP RCE and do not specify affected products, versions, or root cause beyond the general Microsoft PEAP c...
CVE-2023-21769
CVE-2023-21769 is reported as a Microsoft Message Queuing (MSMQ) Denial of Service vulnerability. The initial entry provides a CVSSv3.1 base score of 7.5 (HIGH) with an attack vector of NETWORK, attack complexity LOW, no privileges required, no user interaction, and an impact of NONE for confiden...
CVE-2024-20694
CVE-2024-20694 is described as a Windows CoreMessaging Information Disclosure vulnerability. The initial description provides a CVSSv3.1 vector: Local attack vector, Low attack complexity, Low privileges required, no user interaction, with a High confidentiality impact and a Medium base score (5....
CVE-2024-26219
CVE-2024-26219 is a Denial-of-Service vulnerability in Windows HTTP.sys. The CVSSv3.1 base vector (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) yields a 7.5 HIGH rating, indicating network-based exploitation with no user interaction and potential downtime due to availability impact. Public references ide...
CVE-2024-20681
CVE-2024-20681 affects Windows Subsystem for Linux and enables local elevation of privilege. CVSS v3.1 base score 7.8 (HIGH); attack vector LOCAL, privileges required LOW, user interaction NONE; impacts on confidentiality, integrity, and availability are HIGH. Connected documents reference Window...
CVE-2024-21339
Technical details about CVE-2024-21339 are not publicly available in the provided documents; current sources only repeat the vulnerability title. Monitor for official disclosures and updates.
CVE-2023-32019
CVE-2023-32019 is a Windows kernel registry vulnerability arising from hive memory corruption via out-of-bounds registry cell indexes. The provided research shows that with a crafted hive (notably HKCU and app hives) a local attacker can trigger UAF- and memory-corruption primitives that enable r...
CVE-2023-36047
Technical details (affected product/version, root cause, exploitability, or fix) for CVE-2023-36047 are not provided in the connected documents. Monitor for updated advisories from Microsoft and related sources for specifics.
CVE-2024-20658
CVE-2024-20658 is described as a local, elevation-of-privilege vulnerability in the Microsoft Virtual Hard Disk. The CVSS3.1 base shows: attack vector LOCAL, attack complexity LOW, privileges required LOW, user interaction NONE, and impact C (confidentiality), I (integrity), and A (availability) ...
CVE-2023-21552
CVE-2023-21552 is documented in an NCSC advisory as a Windows Graphics Component vulnerability (Windows GDI) with CVSS v3.1 base score 7.80, affecting privilege escalation. The NCSC listing confirms its classification as an elevation of privileges issue in Windows Graphics/Graphics Device Interfa...
CVE-2023-24900
CVE-2023-24900 corresponds to a Windows NTLM Security Support Provider Information Disclosure Vulnerability. The provided documents confirm the vulnerability title and CVSS 3.1 base metrics (5.9, MEDIUM) with Network attack vector and no user interaction, but do not supply detailed root-cause des...
CVE-2024-28903
CVE-2024-28903 is listed under Microsoft Windows Secure Boot vulnerabilities with a circumvention of security measure impact. The connected OpenVAS/NCSC entries corroborate that Secure Boot-related fixes were released, but do not provide product/version specifics or a patch identifier. The root c...
CVE-2023-21535
CVE-2023-21535 is a Windows SSTP Remote Code Execution vulnerability. The affected component is Secure Socket Tunneling Protocol (SSTP); root cause details are not expanded beyond “SSTP RCE” in the provided documents, but the CVE is rated high (CVSS 8.1) with network access, high confidentiality/...
CVE-2023-28232
Technical details about CVE-2023-28232 are not publicly provided in the connected documents. Public information is limited to the description; monitor for official advisories and updates from Microsoft for fixes, affected products, and mitigations.
CVE-2023-36903
No technical details for CVE-2023-36903 are provided in the supplied documents; only the vulnerability title is present. Monitor for updates.
CVE-2024-21305
CVE-2024-21305 is a Hypervisor-Protected Code Integrity (HVCI) security feature bypass affecting Windows; the CVE entry notes a local attack surface with high privileges required and no user interaction (per CVSS details). Connected Microsoft documentation confirms the vulnerability and lists it ...
CVE-2023-23416
Technical details about CVE-2023-23416 are not publicly available in the provided connected documents; monitor official disclosures and vendor advisories for impact, affected products, and fixes.
CVE-2023-36398
Technical details about CVE-2023-36398 are not provided in the connected documents. No explicit information on affected products, versions, root cause, or remediation is present. Monitor for updates and rely on the initial vulnerability summary for context.
CVE-2024-38153
CVE-2024-38153 is a Windows Kernel elevation-of-privilege vulnerability. The CVSSv3.1 base score is 7.8 (High) with Local attack vector, Low attack complexity, Privileges Required: Low, User Interaction: None, and impact on Confidentiality, Integrity, and Availability: High. The vulnerability aff...
CVE-2023-21690
Technical details about CVE-2023-21690 are not publicly available in the provided documents. Monitor for updates.
CVE-2023-23404
Technical details about CVE-2023-23404 are not publicly provided in the connected documents. The available sources summarize the vulnerability at a high level; monitor for updated advisories or vendor patch information for affected products and remediation.
CVE-2023-28218
CVE-2023-28218 relates to a local Elevation of Privilege in the Windows Ancillary Function Driver for WinSock. The vulnerability is described as affecting Windows components with a high impact on confidentiality, integrity, and availability, and requires local access with high attack complexity a...
CVE-2024-20691
CVE-2024-20691 is a Windows Themes Information Disclosure vulnerability. CVSS-3.1 metrics indicate Local attack with High Confidentiality impact, base score 4.7, and no user interaction required, but with high attack complexity and low privileges. Exploit details or concrete remediation are not p...
CVE-2024-20693
CVE-2024-20693 is a Windows Kernel local privilege escalation vulnerability. Documents corroborate that the Windows Kernel component is affected and that the vulnerability enables obtaining elevated/privileged execution from a local attacker, with high confidentiality, integrity, and availability...
CVE-2023-36400
Technical details about CVE-2023-36400 are not publicly provided in the supplied documents. The Initial/Connected data lacks affected product/version/root-cause/mitigation. Monitor for updates.
CVE-2024-20699
CVE-2024-20699 is a Windows Hyper-V Denial of Service vulnerability. The available data identifies the affected component as Hyper-V on Windows, with a local attack vector and low privileges required, and the impact described as denial of service (availability impact). The CVSS 3.1 vector indicat...
CVE-2024-21306
CVE-2024-21306 is a Microsoft Bluetooth Driver Spoofing vulnerability. It relates to spoofing a Bluetooth HID device and, under certain conditions (e.g., pairing flow), could enable unauthorized keystroke injections. Public PoCs referenced in connected documents show HID-based exploitation via Bl...
CVE-2024-21310
Technical details about CVE-2024-21310 are not provided in the connected documents. The sources confirm existence and vulnerability class but do not disclose affected product versions, root cause, exploit, or remediation. Monitor for updates.
CVE-2023-24869
Technical details about CVE-2023-24869 are not publicly disclosed in the provided documents; no affected product/version/impact/fix are specified here. Monitor for updates from official CVE/NVD entries and related advisories.
CVE-2023-32015
CVE-2023-32015 is a Windows Pragmatic General Multicast (PGM) Remote Code Execution vulnerability. The issue affects Windows where the Message Queuing service is enabled; a remote, unauthenticated attacker can exploit it by sending a crafted file over the network to achieve code execution. The CV...
CVE-2024-21311
Technical details for CVE-2024-21311 are not publicly available in the provided documents. No affected products, root cause, or remediation are specified here. Monitor for updates.
CVE-2023-21547
CVE-2023-21547 is a vulnerability in the Windows Internet Key Exchange (IKE) Extension causing a Denial-of-Service. Multiple connected sources identify it as a network-‑accessible issue in the IKE protocol that can be triggered remotely without user interaction, with the root cause described as a...
CVE-2023-21561
Technical details about CVE-2023-21561 (affected product/component, root cause, impact, or remediation) are not provided in the connected documents. Monitor for updates from official sources.
CVE-2023-21732
Technical details about CVE-2023-21732 are not publicly provided in the connected documents. Monitor for updates for affected products, versions, payloads, and mitigations as they become available.
CVE-2023-23405
Technical details such as affected products, versions, root cause, impact, and fixes are not publicly provided in the supplied documents. Monitor for updates from official advisories.
CVE-2023-36393
Technical details about CVE-2023-36393, including affected products, root cause, and fixes, are not publicly provided in the supplied documents. Monitor for updates from Microsoft and NVD.
CVE-2024-20657
Technical details about CVE-2024-20657 (affected product/component, root cause, impact, fixes) are not publicly provided in the supplied documents. Monitor for updates from Microsoft and security advisories.
CVE-2024-20690
Technical details for CVE-2024-20690 are not publicly provided in the supplied documents. Available items reference the vulnerability name and advisories, but do not disclose affected products, root cause, impact, or fixes. Monitor for updates.
CVE-2024-21316
CVE-2024-21316 is a Windows Server vulnerability described as a Key Distribution Service Security Feature Bypass. Documents confirm the issue affects Windows Server/KDS handling and carry a CVSS v3.1 base score of 6.1 (Network, Low attack complexity, High privileges required, User interaction req...
CVE-2023-21676
CVE-2023-21676 is a Windows LDAP Remote Code Execution vulnerability. The threat involves the Windows LDAP component, with network access as the attack vector and a high-severity impact profile (score 8.8/10; confidentiality, integrity, and availability impact). The available connected documents ...
CVE-2024-28898
CVE-2024-28898 is listed in the connected documents as a Windows Secure Boot vulnerability described as a Secure Boot security feature bypass with a CVSS-like impact of bypassing security measures (Windows Secure Boot). The advisory notes for this CVE show it with a moderate score (around 6.3–6.3...
CVE-2023-21560
Technical details about CVE-2023-21560 (affected products, root cause, impact, remediation) are not provided in the supplied connected documents. Monitor for official disclosures and vendor advisories; the current set does not specify affected systems or fixes.