CVE-2023-36407

CVE-2023-36407 – Windows Hyper-V Elevation of Privilege : Exploitation details show an improper input validation in winhvr.sys (WinHvSetVpState) allowing a local attacker to copy user-controlled data into Non-paged Pool via memcpy, causing a BOF and a BSOD on Hyper-V Host. The PoC targets Windows...

CVE-2024-20660

CVE-2024-20660 concerns Microsoft Message Queuing (MSMQ) with an information disclosure vulnerability. Connected CNVD-2024-04951 states MSMQ contains a heap memory information disclosure vulnerability that an attacker could exploit to obtain sensitive data. The NVD entry for CVE-2024-20660 lists ...

CVE-2024-26208

CVE-2024-26208 affects Microsoft Message Queuing (MSMQ) on Windows. The OpenVAS entries list MSMQ under Windows Message Queuing with CVE-2024-26208 and indicate a vulnerability that allows executing arbitrary code (remote code execution) over the network, without user interaction, and with high p...

CVE-2024-26239

COVID: CVE-2024-26239 is a Windows Telephony Server Elevation of Privilege vulnerability with LOCAL attack vector, requiring LOW privileges and no user interaction. The CVSS 3.1 base score is 7.8 (HIGH), with CONFIDENTIALITY, INTEGRITY, and AVAILABILITY impacts rated HIGH. The initial description...

CVE-2024-43533

CVE-2024-43533 is a Windows Remote Desktop Client remote code execution vulnerability. The CVSS 3.1 base vector is CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, base score 8.8 (HIGH), with network attack vector, no privileges required, and user interaction needed. Nessus and MSRC entries associat...

CVE-2024-43585

Technical details about CVE-2024-43585 are not publicly available in the provided connected documents. No specifics on affected products, root cause, or fixes are present here. Monitor for updates from official advisories.

CVE-2023-28302

Technical details for CVE-2023-28302 are not publicly available in the provided documents. Monitor for updates from the listed sources (NVD, OSV, OpenVAS references) for affected products, impact, and fixes.

CVE-2023-36406

CVE-2023-36406 is described in the NVD as a Windows Hyper-V Information Disclosure vulnerability with CVSS v3.1 base score 5.5 (Local, Low complexity, Privileges required: Low, User interaction: None; Confidentiality Impact: High). The connected documents note Microsoft security updates (KB503219...

CVE-2024-26210

CVE-2024-26210 describes a remote code execution vulnerability in the Microsoft WDAC OLE DB provider for SQL Server. The issue is classified as CVSS 3.1 Base Score 8.8 (High) with network attack vector, no privileges required, and user interaction needed. The vulnerability affects the WDAC OLE DB...

CVE-2024-28923

CVE-2024-28923 is described as a Secure Boot security feature bypass in the Windows Secure Boot subsystem. The provided documents indicate it allows bypassing Secure Boot and potentially executing code by a malicious party, with the CVSS-like data in the initial record showing local exploitation,...

CVE-2022-21871

Technical details about CVE-2022-21871 are not publicly provided in the supplied documents; no affected product/version, root cause, or remediation are described here. Monitor for official disclosures and updates.

CVE-2024-26200

CVE-2024-26200 is a Windows Routing and Remote Access Service (RRAS) remote code execution vulnerability. Connected sources list RRAS as vulnerable and indicate the impact as executing random code, with CVE-2024-26200 appearing under RRAS in the Microsoft Windows vulnerabilities compilation. The ...

CVE-2024-26255

CVE-2024-26255 is a Windows RRAS/Windows Remote Access Connection Manager information disclosure vulnerability. The affected component is Windows Remote Access Connection Manager; the underlying issue yields leakage of sensitive data (confidentiality impact). The CVSS 3.1 vector from the initial ...

CVE-2023-21750

CVE-2023-21750 is a Windows Kernel EoP issue tied to registry virtualization: a logic bug in CmKeyBodyRemapToVirtual allowed deleting HKLM\Software keys using only KEY_READ and KEY_SET_VALUE rights, bypassing expected DELETE checks. This is a local, privilege-escalation vulnerability within the r...

CVE-2024-26172

CVE-2024-26172 affects Windows DWM Core Library. Affects the Windows DWM Core Library component; root cause described as information disclosure. Documented impact is access to sensitive data with a CVSS v3.1 base score of 5.5 (LOCAL, LOW privileges required, user interaction none, availability im...

CVE-2024-29994

CVE-2024-29994 is Microsoft Windows SCSI Class System File Elevation of Privilege. Connected sources (NCSC advisory) list CVE-2024-29994 with CVSS v3.1 base 7.8 (high), Local attack vector, Low privileges required, no user interaction, and impact to confidentiality, integrity, and availability. T...

CVE-2023-21682

Technical details about CVE-2023-21682 are not publicly disclosed in the provided connected documents. The materials only reference a Windows PPP information disclosure vulnerability with CVSSv3.1 base score 5.3. Monitor for updates.

CVE-2023-24859

CVE-2023-24859 is a Windows vulnerability described as a denial-of-service issue in the Windows Internet Key Exchange (IKE) extension. The available data identifies the affected component as the IKE extension and notes impact as availability degradation (DoS) with network attack vector and no use...

CVE-2024-26252

CVE-2024-26252 refers to a Windows kernel vulnerability in the rndismp6.sys driver that enables remote code execution. The issue is described as affecting the Windows component rndismp6.sys with a CVSSv3.1 base score of 6.8 (Medium), and usability concerns indicate a physical attack vector, low a...

CVE-2023-21536

CVE-2023-21536 is described in the provided documents as a Windows Event Tracing vulnerability with the impact of access to sensitive data (CVSSv3.1 base score 4.7). The connected sources associate this CVE with Windows Event Tracing and list it among other Windows vulnerabilities, but they do no...

CVE-2023-21683

Technical details about CVE-2023-21683 are not provided in the connected documents. Public information on affected products, root cause, or fixes is not present here. Monitor for updates from official sources.

CVE-2024-26168

CVE-2024-26168 concerns a Secure Boot security feature bypass. The entry explicitly labels it as Secure Boot bypass with a CVSSv3.1 base score of 6.8 (Medium) and a physical attack vector. The breakdown indicates HIGH impact to confidentiality, integrity, and availability, with no user interactio...

CVE-2024-26217

CVE-2024-26217 affects the Windows Remote Access Connection Manager. The connected NCSC advisory documents the impact as information disclosure / access to sensitive data (CVE-2024-26217, Windows Remote Access Connection Manager). The CVSS/impact details vary across sources: NVD metrics show a lo...

CVE-2024-28897

CVE-2024-28897 is referenced in connected data as a Windows Secure Boot vulnerability with the label “Circumvention of security measure.” The primary public document (NVD) lists it as a Secure Boot security feature bypass, with a CVSS v3.1 score of 6.8 (Medium) and details like attack vector adja...

CVE-2023-24945

CVE-2023-24945 concerns Windows iSCSI Target Service Information Disclosure. Data shows CVSS v3.1 base score 5.5 (Medium) with LOCAL attacker, LOW complexity, LOW privileges required, and high confidentiality impact. The description names the Windows iSCSI Target Service but does not provide spec...

CVE-2023-36404

CVE-2023-36404 relates to a Windows kernel registry information-disclosure scenario. The bug could allow a local attacker to view the values of certain registry keys without the required permission by loading a differencing hive overlaid on a system hive and having a system component create a sec...

CVE-2024-26230

CVE-2024-26230 is a Windows Telephony Server elevation-of-privilege vulnerability. Reported as a local privilege escalation with CVSS 3.1 base score 7.8 (HIGH): vectors/local, attack complexity LOW, privileges required LOW, no user interaction. Impacts on confidentiality, integrity, and availabil...

CVE-2024-28902

CVE-2024-28902 is associated with Windows Remote Access Connection Manager and is listed in an ENISA/NCSC-style advisory as a local, low-complexity information-disclosure vulnerability with potential impact to data confidentiality (CVE-2024-28902, Windows Remote Access Connection Manager). The co...

CVE-2023-21559

Technical details about CVE-2023-21559 are not provided in the connected documents. The materials reference Windows cryptographic information disclosure generally but do not specify affected products, root cause, exploit status, or fixes. Monitor for updates.

CVE-2023-23402

Technical details for CVE-2023-23402 are not publicly available in the provided documents. Monitor for updates from official advisories and connected sources for affected products, impact, and fixes.

CVE-2023-23420

CVE-2023-23420 is a Windows Registry hive memory corruption bug (UAF) tied to transacted key rename. The exploit plan targets the HKCU hive (volatile storage) via a lightweight or KTM transaction sequence that renames a key, then frees keys in a transaction, producing a layout where freed cells c...

CVE-2023-24899

CVE-2023-24899 is the Windows Graphics Component Elevation of Privilege vulnerability. The provided documents identify it as a Windows graphics subsystem issue with a CVSS v3.1 base score of 7.0 (HIGH), with a local attack vector, high complexity, and the ability to defeat confidentiality, integr...

CVE-2023-36910

CVE-2023-36910 is a remote code execution vulnerability in Microsoft Message Queuing (MSMQ) that can be exploited remotely on affected Windows platforms (Windows 10/11 and Windows Server 2008–2022) without user interaction. The issue is formally described as MSMQ RCE with a high severity rating (...

CVE-2024-26253

CVE-2024-26253 corresponds to a Windows rndismp6.sys remote code execution vulnerability. The entry notes an affected Windows component (rndismp6.sys) and an exploit path that could allow remote code execution with a high impact on confidentiality, integrity, and availability, while the attack ve...

CVE-2024-29062

CVE-2024-29062 affects Windows Secure Boot and is described as a Security Feature Bypass. The vulnerability targets the Secure Boot path with an adjacent-attack surface, requiring user interaction and high complexity to exploit, and can impact confidentiality, integrity, and availability. Public ...

CVE-2024-43560

CVE-2024-43560 is a Windows Storage Port Driver elevation-of-privilege vulnerability. A local attacker with low privileges could exploit it to obtain elevated rights (CVE-2024-43560 details: CVSS v3.1 7.8, high impact; affected component: Windows Storage Port Driver). The NCSC advisory confirms M...

CVE-2023-24884

Technical details about CVE-2023-24884 (affected product, vulnerable component, root cause, impact, and fixes) are not publicly provided in the connected documents you supplied. Monitor for updates from official advisories and CVE repositories to obtain concrete remediation guidance.

CVE-2023-28275

Technical details about CVE-2023-28275 are not publicly provided in the supplied documents. Available references mention the vulnerability title, but no affected product/version, root cause, impact, or patch information in these sources. Monitor for updates.

CVE-2023-21537

Technical details about CVE-2023-21537 (affected products, root cause, impact, and fixes) are not provided in the connected documents. Monitor for updates from authoritative sources.

CVE-2023-21681

Technical details about CVE-2023-21681 are not present in the provided connected documents. The supplied items cover generic Microsoft KB updates and an unrelated ENISA entry; monitor for updates and future technical disclosures.

CVE-2023-24864

CVE-2023-24864 is described in connected documents as an elevation of privilege vulnerability affecting Microsoft PostScript and PCL6 Class Printer Driver. CNVD-2023-28110 and NVD entries reference an elevation of privilege issue in these printer drivers, identifying the vulnerable components but...

CVE-2024-28900

CVE-2024-28900 is a Windows vulnerability affecting the Windows Remote Access Connection Manager, with information disclosure (confidentiality impact). It is exploitable locally (attack vector: LOCAL) and requires LOW privileges with no user interaction. The CVSS vector in the Initial Description...

CVE-2024-29061

Technical details about CVE-2024-29061 are not publicly provided in the supplied documents. The records mention a Secure Boot security feature bypass but do not specify affected products, versions, root cause, exploitability, or mitigations. Monitor for updates.

CVE-2023-21555

Technical details for CVE-2023-21555 are not publicly available in the provided Connected Documents or Initial Description. No concrete affected products, root cause, or remediation can be confirmed here. Monitor for updates from official advisories.

CVE-2023-28237

Technical details for CVE-2023-28237 are not publicly provided in the supplied documents; monitor for updates.

CVE-2023-36408

Technical details for CVE-2023-36408 are not publicly available in the provided documents. No affected products, impact, or fixes are specified here; monitor official advisories and vendor updates for confirmation and remediation guidance.

CVE-2024-21313

CVE-2024-21313 is described as a Windows TCP/IP Information Disclosure Vulnerability. The entry provides a CVSSv3.1 base score of 5.3 (Medium) with network attack vector, high attack complexity, no privileges required, user interaction required, and a privacy-focused impact (Confidentiality: High...

CVE-2024-26171

CVE-2024-26171 is reported as a Windows Secure Boot vulnerability with the impact labeled as circumvention of a security measure (CVSS-like score 6.70). The connected documents corroborate its placement under Windows Secure Boot in the security advisories and vulnerability feeds, but they do not ...

CVE-2024-26205

CVE-2024-26205 is a Windows RRAS remote code execution vulnerability. Connected sources corroborate that it is network-exploitable with a high base score (8.8) and requires user interaction, enabling remote code execution with high impact on confidentiality, integrity and availability. The issue ...

CVE-2024-26242

CVE-2024-26242 is a Windows Telephony Server elevation-of-privilege vulnerability. The connected documents indicate a local-privilege escalation with CVSS v3.1 base score 7.0 (AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H). Root cause and exact exploit details are not provided in the sources. Microsoft has...