CVE-2024-30031

CVE-2024-30031 is documented as a Windows elevation-of-privilege issue affecting the CNG Key Isolation Service . The available sources describe the vulnerability as a local, privilege-required issue with high impact across confidentiality, integrity, and availability, but do not provide vendor-sp...

CVE-2024-30089

Technical details about CVE-2024-30089 are not publicly provided in the supplied documents; no explicit affected products, root cause, or remediation are present. Monitor for updates.

CVE-2024-38132

Technical details about CVE-2024-38132 are not publicly provided in the supplied connected documents. The NAT DoS entry is listed, but no affected product/version, root cause, or remediation is described. Monitor for updates.

CVE-2024-38152

CVE-2024-38152 is listed under Windows WDAC OLE DB provider for SQL with a CVSS and impact of 7.80 (Execute Random Code). The connected documents confirm the affected component and the vulnerability’s label, but do not provide concrete details on root cause, affected versions, exploit scenarios, ...

CVE-2023-24862

CVE-2023-24862 is a Windows Schannel (Secure Channel) Denial of Service vulnerability. The available data identifies the flaw as local with low privileges required and a high availability impact (CVSS v3.1: AV=L/AC=L/PR=L/UI=N/S=U/C=N/I=N/A=H). Public documents do not provide granular technical d...

CVE-2024-30018

CVE-2024-30018 is a Windows Kernel Elevation of Privilege vulnerability. The CVSS indicates local access with low privileges required and no user interaction, yielding a high impact on confidentiality, integrity, and availability (base score 7.8). Microsoft has released updates addressing Windows...

CVE-2024-30081

Technical details for CVE-2024-30081 are not provided in the supplied documents. The connected Microsoft KB updates reference unrelated issues (RADIUS, BitLocker, LNK policy) and do not disclose affected products, root cause, impact, or fixes for this CVE. Monitor for updates.

CVE-2023-28243

CVE-2023-28243 is a remote code execution vulnerability in the Microsoft PostScript and PCL6 Class Printer Driver. The CVE entry notes a high-severity (CVSS 3.1 base 8.8) issue with network attack vector and no user interaction required, applicable to affected printer driver components. Connected...

CVE-2023-21804

Technical details about CVE-2023-21804 are not publicly available in the provided documents. Monitor for updates from Microsoft and related CVE references to obtain affected products, impact, and remediation.

CVE-2023-23401

Technical details (affected components, root cause, impact, and remediation) for CVE-2023-23401 are not publicly provided in the supplied documents. Monitor for updates from official advisories and vulnerability databases.

CVE-2023-24863

The CVE-2023-24863 entry concerns a vulnerability in the Microsoft PostScript and PCL6 Class Printer Driver described as an Information Disclosure Vulnerability . The public data provided does not specify the exact root cause details, vulnerable file/function, affected product versions, or the ex...

CVE-2024-30022

CVE-2024-30022 pertains to the Windows RRAS component and is listed in the ENISA/NCSC compilation with a CVSSv3.1 base score of 7.5 (high). The adverse impact is remote code execution with network access, requiring user interaction and no privileges. Connected sources explicitly associate CVE-202...

CVE-2024-43561

Technical details about CVE-2024-43561 (affected products/versions, root cause, impact, and fix) are not provided in the connected documents. Monitor for updates from Microsoft and CVE records.

CVE-2021-40462

Technical details (affected product, component, version, root cause, or fixes) for CVE-2021-40462 are not provided in the connected documents; monitor for updates.

CVE-2023-24866

Technical details about CVE-2023-24866 are not publicly provided in the supplied documents. No affected products, versions, or remediation specifics are confirmed here. Monitor for updates from official sources.

CVE-2023-24927

CVE-2023-24927 affects Microsoft PostScript and PCL6 Class Printer Driver and is described as a Remote Code Execution vulnerability. The connected CNVD entry confirms remote code execution exists, but the provided documents do not specify the exact root cause, affected versions, or exploit detail...

CVE-2023-28271

CVE-2023-28271 is discussed within registry and KTM-transaction logging context in the connected documents, indicating a kernel memory-related information disclosure linked to KTM logs and registry transaction handling. The material notes exposure of uninitialized kernel data and pointers to KTM ...

CVE-2023-29372

CVE-2023-29372 affects the Microsoft WDAC OLE DB provider for SQL Server and is described as a Remote Code Execution vulnerability. The available information lists a CVSS v3.1 base score of 8.8 (HIGH) with NETWORK attack vector, LOW attack complexity, NO privileges required, UI required, and impa...

CVE-2024-30084

Technical details (affected product/versions/root cause/impact) for CVE-2024-30084 are not publicly available in the provided documents. Monitor for updates.

CVE-2024-30090

CVE-2024-30090 is an elevation-of-privilege vulnerability affecting the Windows Kernel Streaming framework, specifically the msrks.ks.sys component used for processing streaming data (e.g., microphone/webcam input). The public materials indicate exploitation potential via a memory-bounds/buffer h...

CVE-2023-28270

Technical details about CVE-2023-28270 are not publicly available in the provided documents. Monitor for updates from Microsoft and vulnerability feeds.

CVE-2024-38117

CVE-2024-38117 affects the Windows NTFS component and is labeled as an elevation-of-privilege vulnerability with the impact “Obtaining Increased Rights” and a CVSS v3.1 base score of 7.8 (High). The connected documents provide the impact and the component but do not disclose the exact root cause ...

CVE-2024-43582

CVE-2024-43582 is a Windows Remote Desktop Protocol Server remote code execution vulnerability. Affected: Windows Remote Desktop (RDP) Server. Severity: high (CVSS ~8.1). Mitigation: apply Microsoft security update KB5044284 (OS Build 26100.2033) or later; patching is advised per Microsoft adviso...

CVE-2023-21816

No concrete technical details about CVE-2023-21816 are present in the connected documents. The initial description only notes a Windows AD DS DoS. Monitor official advisories and vendor updates for remediation, affected versions, impact, and patch information.

CVE-2023-24909

CNVD-2023-30863 describes CVE-2023-24909 as a remote code execution vulnerability in Microsoft PostScript and PCL6 Class Printer Driver. The CNVD entry states the vulnerability exists and affects the printer drivers from Microsoft, but it does not provide detailed root cause, affected versions, o...

CVE-2023-24942

Technical details (affected products, root cause, impact, or remediation) are not publicly available in the provided documents for CVE-2023-24942. Monitor for updates.

CVE-2023-36908

CVE-2023-36908 details are not publicly provided in the supplied documents. No explicit affected products, root cause, or remediation are described. Monitor for updates from official sources.

CVE-2024-29998

CVE-2024-29998 is a Windows Mobile Broadband Driver Remote Code Execution vulnerability. The available documents confirm the affected product area (Windows Mobile Broadband Driver) and that exploitation could lead to code execution with high impact on confidentiality, integrity, and availability,...

CVE-2024-30009

CVE-2024-30009 corresponds to a Windows RRAS remote code execution vulnerability. The RRAS service is affected, with the issue enabling execution of arbitrary code on a network-accessible target. The CVSS vector indicates network access, low attack complexity, no privileges required, user interac...

CVE-2024-30015

CVE-2024-30015 affects Windows Routing and Remote Access Service (RRAS). The connected NCSC advisory lists CVE-2024-30015 under RRAS with impact described as Execution of random code (CVSS v3.1: 7.5, Network attack vector, high complexity, no privileges required, user interaction required, impact...

CVE-2024-30049

CVE-2024-30049 is a Windows Win32 Kernel Subsystem elevation-of-privilege vulnerability affecting the Win32K component. Public details in connected sources indicate the issue enables elevated privileges with local access (CVSSv3.1: AV=L/AC=L/PR=L/UI=N/S=U/C=H/I=H/A=H; base score 7.8), and multipl...

CVE-2023-21694

Technical details about CVE-2023-21694 are not publicly provided in the supplied documents. The connected records do not specify affected products, root cause, remediation, or exploit status. Monitor for official disclosures and updates.

CVE-2023-21695

Technical details about CVE-2023-21695 are not publicly available in the provided documents. Monitor for updates from official sources; no concrete exploit/vector/impact details are provided here.

CVE-2023-24928

CVE-2023-24928 relates to a remote code execution vulnerability in Microsoft PostScript and PCL6 Class Printer Driver. The issue affects the PostScript/PCL6 printer driver components, enabling an attacker to remotely execute code by crafting data sent to a printer shared resource. The available c...

CVE-2023-24931

Technical details for CVE-2023-24931 are not provided in the connected documents. Public information about affected products, root cause, impact, and fixes is not present here; monitor for official advisories and updates from vendors and CERTs.

CVE-2023-28274

Technical details (affected product/version, root cause, exploitability) are not provided in the supplied documents; no CVE-specific technical details are included. Monitor for updates from these sources.

CVE-2023-32009

Technical details for CVE-2023-32009 are not publicly available in the provided documents. No affected products, root cause, or remediation are stated here. Monitor for updates.

CVE-2023-35330

CVE-2023-35330 is a Windows vulnerability described as a Windows Extended Negotiation Denial of Service. According to the provided data, the CVSS 3.1 base score is 7.5 (High), with network attack vector, low parallel complexity, no privileges required, no user interaction, and impact limited to A...

CVE-2023-36909

Technical details for CVE-2023-36909 are not publicly provided in the supplied documents. No affected products, root cause, or remediation details are present here. Monitor for updates.

CVE-2023-21688

Technical details about CVE-2023-21688 are not publicly provided in the supplied documents. No concrete information on affected products, root cause, or remediation is available here. Monitor for updates from official sources.

CVE-2023-28236

CVE-2023-28236 is a Windows kernel elevation-of-privilege vulnerability. The description indicates a local-privilege escalation affecting the Windows kernel with a high impact on confidentiality, integrity, and availability (CVSS 3.1: AV:L, AC:L, PR:L, UI:N, S:U, C:H, I:H, A:H). The available con...

CVE-2023-28269

CVE-2023-28269 describes a Security Feature Bypass in Windows Boot Manager. Affected: Windows Boot Manager. Impact: confidentiality, integrity, and availability rated high. Exploitation characteristics (per NVD): physical access required (attack vector Physical), low attack complexity, no privile...

CVE-2023-35313

CVE-2023-35313 is a Windows OCSP SnapIn Remote Code Execution vulnerability. Multiple sources confirm a local-execution flaw in the Windows OCSP SnapIn component that could allow an attacker to remotely execute code on a vulnerable system, with impact listed as high (CVSS 7.8). Affected platforms...

CVE-2024-30017

CVE-2024-30017 affects Microsoft Windows Hyper-V. It is a remote code execution vulnerability in Hyper-V with CVSSv3.1 base score 8.8 (Network, Privileges Required: Low, User Interaction: None; Confidentiality/Integrity/Availability: High). Affected: Windows Hyper-V component; likely requires net...

CVE-2024-38184

CVE-2024-38184 is a Windows kernel-mode driver elevation of privilege vulnerability. The CVE affects Windows kernel-mode drivers and is exploitable locally with LOW privileges required and no user interaction, with a HIGH impact on confidentiality, integrity, and availability per the CVSS 3.1 met...

CVE-2024-43520

CVE-2024-43520 is a Windows Kernel Denial-of-Service vulnerability. The initial records classify it as a Windows kernel issue affecting availability, with a CVSS v3.1 base score of 5.0 (LOCAL, LOW privileges, LOW attack complexity, UI: REQUIRED, S: U, C/N/I with A:H). Connected sources indicate t...

CVE-2024-43559

In the connected documents, CVE-2024-43559 is listed under Windows Mobile Broadband with CVSS 6.50 Denial-of-Service, indicating a DoS impact in that subsystem. The sources do not provide the root cause, affected specific versions, exploit details, or remediation for this CVE within the documents...

CVE-2023-28226

CVE-2023-28226 relates to Windows Enroll Engine Security Feature Bypass. Affected software: Windows OS (Enroll Engine component). Vulnerability type: security feature bypass. Reported metrics indicate: CVSS 3.1, attack vector Network, attack complexity High, privileges required None, user interac...

CVE-2023-29370

Technical details about CVE-2023-29370 are not publicly provided in the supplied documents. No affected products, root cause, impact, or remediation specifics are disclosed here. Monitor for updates in connected sources.

CVE-2023-36904

Technical details (affected product/version, root cause, impact, fixes) are not publicly available in the provided connected documents. Monitor for updates from official CVE sources; no exploit or mitigation details are included here.