942 matches found
CVE-2023-35367
Technical details for CVE-2023-35367 are not publicly provided in the supplied documents. No specific affected products, versions, root cause, remediation, or exploit information is available here. Monitor official sources for updates.
CVE-2023-24872
CVE-2023-24872 affects the Microsoft PostScript and PCL6 Class Printer Driver. The entry documents a Remote Code Execution vulnerability with high severity (CVSS 3.1: AV=N/AC=L/PR=L/UI=N/S=U/C=H/I=H/A=H). Concrete technical details (affected product/version, root cause, exploit status, or fixes) ...
CVE-2023-29359
Technical details about CVE-2023-29359 are not provided in the connected documents. The entries identify a GDI Elevation of Privilege vulnerability but do not specify affected products/versions, root cause, impact specifics, or remediation.
CVE-2023-36882
CVE-2023-36882 concerns Microsoft WDAC OLE DB provider for SQL Server, enabling Remote Code Execution. The NVD details show a network-based exploitable flaw with CVSS v3.1: AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, score 8.8 (HIGH). Root cause and affected versions are not fully enumerated in the prov...
CVE-2023-36906
Technical details for CVE-2023-36906 are not publicly provided in the supplied documents. No affected products, root cause, or fixes are confirmed here. Monitor for updates.
CVE-2024-38186
Technical details (affected product, root cause, impact, versions, or remediation) for CVE-2024-38186 are not provided in the connected documents. Monitor for updates.
CVE-2023-21813
Technical details on CVE-2023-21813 are not provided in the furnished documents; no affected products, exploit info, or fixes are described here. Monitor for updates from official advisories.
CVE-2023-23385
Technical details for CVE-2023-23385 are not publicly available in the provided documents. Monitor for updates from official sources.
CVE-2023-23409
CVE-2023-23409 corresponds to a CSRSS Information Disclosure vulnerability. The available data indicate a local attack vector with low attack complexity and low privileges required, yielding a high confidentiality impact (CVSS 3.1: AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N). The description notes CSRSS...
CVE-2023-24861
Technical details about CVE-2023-24861 (Windows Graphics Component Elevation of Privilege Vulnerability) are not publicly available in the provided documents; no affected versions, root cause, or remediation are specified here. Monitor for official disclosures and updates.
CVE-2023-24911
The CNVD-2023-30862 entry aligns with CVE-2023-24911, describing an information-disclosure vulnerability in Microsoft PostScript and PCL6 Class Printer Driver. It notes an information disclosure exists and involves these Microsoft printer drivers, but provides no version/impact details or remedia...
CVE-2023-28227
CVE-2023-28227 concerns the Windows Bluetooth Driver and is described as a Remote Code Execution vulnerability. The NVD entry lists a CVSS v3.1 base score of 7.5 (High) with vector AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H, indicating an adjacent attacker with no user interaction could achieve compromi...
CVE-2023-28273
CVE-2023-28273 is a Windows Clip Service Elevation of Privilege vulnerability. The initial data lists a local attack vector with high impact and exploitation conditions: local access, high attack complexity, low privileges required, no user interaction, and impact to confidentiality, integrity, a...
CVE-2023-28228
CVE-2023-28228 is documented as a Windows spoofing vulnerability. Based on the CVE entry, its CVSS v3.1 base score is 5.5 (Medium) with a Local attack vector, Low attack complexity, No privileges required, User interaction required, and Impact mainly on integrity (High) with no confidentiality/av...
CVE-2023-35365
CVE-2023-35365 affects Windows RRAS with remote code execution potential. Exploitation, per the linked discussion, requires an attacker to send crafted packets to an affected RRAS server. The RRAS feature is not installed or enabled by default on Windows systems, which reduces exposure for users ...
CVE-2023-24865
CVE-2023-24865 corresponds to a vulnerability in the Microsoft PostScript and PCL6 Class Printer Driver that results in an information disclosure. The CVE is characterized by a network-accessible vector with low attack complexity and low privileges required, but with high confidentiality impact a...
CVE-2023-24885
CVE-2023-24885 corresponds to a remote code execution vulnerability in Microsoft PostScript and PCL6 Class Printer Driver. The connected CNVD entry confirms a remote code execution flaw in the PostScript and PCL6 class printer drivers; however, the documents do not provide detailed root cause ana...
CVE-2023-35380
Technical details for CVE-2023-35380 are not publicly available in the provided documents. The initial sources list the vulnerability title but do not specify affected products, versions, root cause, or remediation. Monitor for updates.
CVE-2024-38104
Technical details for CVE-2024-38104 are not provided in the supplied connected documents; no affected products, root cause, impact, or remediation are specified here. Monitor for official updates to disclose specifics.
CVE-2022-35756
Technical details about CVE-2022-35756 (affected products, root cause, impact, fix) are not provided in the connected documents. Monitor for official disclosures and updates from Microsoft and CVE listings.
CVE-2023-24939
Technical details about CVE-2023-24939 are not publicly provided in the supplied documents; no affected products, vectors, or fixes are described here. Monitor for updates.
CVE-2024-38041
CVE-2024-38041 is a Windows Kernel information disclosure vulnerability. The connected sources confirm the affected component as Windows Kernel with impact on confidentiality (C:H) and local attack vector (AV:L) with low attack complexity (AC:L) and no user interaction (UI:N). Privileges required...
CVE-2024-38058
CVE-2024-38058 is tied to BitLocker: Microsoft security updates (KB5040430, KB5040431, KB5040437, etc.) add PCRs 4–7 and 11 to the default Secure Boot validation profile. This is described as a BitLocker-related change with CVE-2024-38058 referenced for the PCR extension in multiple OS updates. T...
CVE-2022-35755
Technical details about CVE-2022-35755 (affected software, root cause, impact, or patch specifics) are not provided in the connected documents; monitor official CVE/NVD updates for details.
CVE-2023-29352
CVE-2023-29352 is a Windows Remote Desktop Security Feature Bypass vulnerability. The CVSS 3.1 vector indicates network access with low attack complexity, no privileges, and user interaction required, resulting in potential integrity impact (I: High) but no confidentiality or availability impact ...
CVE-2023-35630
CVE-2023-35630 is a Microsoft Windows Internet Connection Sharing (ICS) remote code execution vulnerability. The NVD entry lists CVSS v3.1 base score 8.8 (HIGH) with AV:A, AC:L, PR:N, UI:N, S:U, C:H, I:H, A:H, indicating adjacent-network exploitation with no user interaction. Multiple OpenVAS ent...
CVE-2024-43562
CVE-2024-43562 is a Windows NAT Denial-of-Service vulnerability with CVSSv3.1 base score 7.5 (Network vector, no user interaction, no privileges required). Exploitation is possible remotely over the network and can lead to a high impact: denial of service. Connected sources list Windows NAT as af...
CVE-2023-28298
Technical details for CVE-2023-28298 are not provided in the connected documents. OpenVAS entries reference the CVE across KB updates but do not describe affected components, root cause, impact, or remediation. Monitor for updates.
CVE-2023-35377
Technical details for CVE-2023-35377 are not publicly available in the provided documents. Monitor for updates.
CVE-2023-24883
Technical details about CVE-2023-24883 are not provided in the supplied documents. Public information on affected product/versions, root cause, impact, and fixes is not available here. Monitor for updates.
CVE-2023-24886
CVE-2023-24886 corresponds to a Remote Code Execution vulnerability in Microsoft’s PostScript and PCL6 Class Printer Driver. Connected sources confirm the affected component (PostScript and PCL6 printer driver) and that security updates were released in the April 2023 cycle (KB5025221, KB5025224,...
CVE-2023-28248
CVE-2023-28248 is a Windows kernel EoP vulnerability rooted in hive memory corruption. The linked material details a chain from hive memory corruption to OOB cell indexes that bypass typical bounds checks, enabling arbitrary kernel read/write through crafted regf data and controlled cell indices....
CVE-2023-28266
Technical details (affected product/component, root cause, impact, fix) are not provided in the connected documents. Monitor for updates.
CVE-2023-35381
Technical details about CVE-2023-35381 (Windows Fax Service Remote Code Execution) are not publicly provided in the supplied documents; no affected product/version/root-cause/exploit information is available here. Monitor for updates and refer to official advisories for specifics.
CVE-2024-30050
CVE-2024-30050 is a Windows Mark of the Web security feature bypass vulnerability. Public sources label it as a security bypass issue in MOTW, with a CVSS v3.1 base score of 5.4 (Network, Low complexity, User interaction required; I and A impacts: I = Low, A = Low). The condition allows bypass of...
CVE-2024-30081
Technical details for CVE-2024-30081 are not provided in the supplied documents. The connected Microsoft KB updates reference unrelated issues (RADIUS, BitLocker, LNK policy) and do not disclose affected products, root cause, impact, or fixes for this CVE. Monitor for updates.
CVE-2024-38117
CVE-2024-38117 affects the Windows NTFS component and is labeled as an elevation-of-privilege vulnerability with the impact “Obtaining Increased Rights” and a CVSS v3.1 base score of 7.8 (High). The connected documents provide the impact and the component but do not disclose the exact root cause ...
CVE-2024-43582
CVE-2024-43582 is a Windows Remote Desktop Protocol Server remote code execution vulnerability. Affected: Windows Remote Desktop (RDP) Server. Severity: high (CVSS ~8.1). Mitigation: apply Microsoft security update KB5044284 (OS Build 26100.2033) or later; patching is advised per Microsoft adviso...
CVE-2023-21799
Technical details about CVE-2023-21799 are not publicly provided in the supplied documents. Monitor for updates.
CVE-2023-24908
Technical details for CVE-2023-24908 are not publicly available in the provided documents. Monitor for updates to obtain affected products, root cause, impact, and fixes.
CVE-2023-24913
CNVD-2023-30861 describes CVE-2023-24913 as a remote code execution vulnerability in Microsoft PostScript and PCL6 Class Printer Driver. Affected components are Microsoft PostScript Printer Driver and Microsoft PCL6 Class Printer Driver, with exploitation described as remote code execution by an ...
CVE-2023-28225
CVE-2023-28225 is described as a Windows NTLM Elevation of Privilege vulnerability. The provided data indicate a local attack vector with low privileges required, no user interaction, and a high impact on confidentiality, integrity, and availability (CVSS 3.1: AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)...
CVE-2023-29364
Technical details for CVE-2023-29364 are not provided in the supplied documents. Monitor for updates from Microsoft and CVE records.
CVE-2023-32011
Technical details about CVE-2023-32011 are not publicly provided in the supplied documents. The available sources confirm the vulnerability name and related MS updates but do not disclose affected products, versions, root cause, or fixes.
CVE-2023-32017
CVE-2023-32017 concerns the Microsoft PostScript Printer Driver and allows Remote Code Execution tied to a driver component. The IOCs/impact in the provided materials indicate a LOCAL attack vector with no user interaction, and confidentiality, integrity, and availability impacts rated HIGH. No e...
CVE-2023-35387
CVE-2023-35387 affects the Windows Bluetooth A2DP driver, described as an Elevation of Privilege vulnerability. The CVSSv3.1 metrics indicate an adjacent attack vector, no privileges required, low attack complexity, user interaction required, and a CHANGED scope with HIGH impacts to confidentiali...
CVE-2024-30020
CVE-2024-30020 corresponds to a Remote Code Execution vulnerability in Windows Cryptographic Services. Affected: Windows Cryptographic Services component; vulnerability type is RCE. From the CVE entry, the CVSS v3.1 base score is 8.1 (High) with Network attack vector, high attack complexity, no p...
CVE-2024-30084
Technical details (affected product/versions/root cause/impact) for CVE-2024-30084 are not publicly available in the provided documents. Monitor for updates.
CVE-2024-38132
Technical details about CVE-2024-38132 are not publicly provided in the supplied connected documents. The NAT DoS entry is listed, but no affected product/version, root cause, or remediation is described. Monitor for updates.
CVE-2023-21818
Technical details for CVE-2023-21818 are not publicly provided in the supplied documents. The available sources reference the CVE within larger Windows vulnerability lists but do not disclose affected products, root cause, impact, or fixes.