942 matches found
CVE-2023-28274
Technical details (affected product/version, root cause, exploitability) are not provided in the supplied documents; no CVE-specific technical details are included. Monitor for updates from these sources.
CVE-2023-29370
Technical details about CVE-2023-29370 are not publicly provided in the supplied documents. No affected products, root cause, impact, or remediation specifics are disclosed here. Monitor for updates in connected sources.
CVE-2023-35313
CVE-2023-35313 is a Windows OCSP SnapIn Remote Code Execution vulnerability. Multiple sources confirm a local-execution flaw in the Windows OCSP SnapIn component that could allow an attacker to remotely execute code on a vulnerable system, with impact listed as high (CVSS 7.8). Affected platforms...
CVE-2023-35315
CVE-2023-35315 corresponds to the Windows Layer-2 Bridge Network Driver remote code execution vulnerability. According to the connected AVUL document, an unauthenticated attacker must be on a network segment with a Windows Server acting as a Layer-2 Bridge and send specially crafted file operatio...
CVE-2023-36898
CVE-2023-36898 concerns the Tablet Windows User Interface component. Affected software is described as the Tablet Windows User Interface Application, with a Core Remote Code Execution vulnerability. The public records list a CVSS v3.1 base score of 7.8 (HIGH), with Local attack vector, low attack...
CVE-2023-36904
Technical details (affected product/version, root cause, impact, fixes) are not publicly available in the provided connected documents. Monitor for updates from official CVE sources; no exploit or mitigation details are included here.
CVE-2024-38184
CVE-2024-38184 is a Windows kernel-mode driver elevation of privilege vulnerability. The CVE affects Windows kernel-mode drivers and is exploitable locally with LOW privileges required and no user interaction, with a HIGH impact on confidentiality, integrity, and availability per the CVSS 3.1 met...
CVE-2023-21688
Technical details about CVE-2023-21688 are not publicly provided in the supplied documents. No concrete information on affected products, root cause, or remediation is available here. Monitor for updates from official sources.
CVE-2023-21739
Technical details about CVE-2023-21739 are not provided in the connected documents. The supplied items reference other CVEs and updates; please monitor official vulnerability notes from Microsoft/NVD for details and remediation.
CVE-2023-24902
Technical details about CVE-2023-24902 (affected components, exploit vectors, root cause, or mitigation) are not publicly provided in the supplied documents. Monitor for official advisories and updates from Microsoft and national CERTs for new information.
CVE-2023-32013
CVE-2023-32013 is documented as a Windows Hyper-V Denial of Service vulnerability. The connected sources confirm a network-reachable issue causing availability impact (CVSS 5.3) with exploitation requiring some environment preparation and a high attack complexity, compatible with a network attack...
CVE-2023-32038
CVE-2023-32038 concerns the Microsoft ODBC Driver Remote Code Execution vulnerability. The connected data identifies the affected component as the Microsoft ODBC Driver and classifies the impact as Remote Code Execution with a high severity (CVSS v3.1 base score 8.8). Attack vectors are NETWORK w...
CVE-2024-30024
CVE-2024-30024 is listed by ENISA NCSC as a Windows RRAS vulnerability with a CVSS v3.1 score of 7.5 (HIGH) and a base impact of executing random code. It is part of the Windows Routing and Remote Access Service (RRAS) family and is described in the connected document as a network-exposed issue t...
CVE-2024-38133
CVE-2024-38133 is a Windows Kernel Elevation of Privilege vulnerability. The connected NCSC advisory confirms it affects the Windows Kernel and enables a local, authenticated attacker to obtain SYSTEM privileges by exploiting the kernel component; CVSS v3.1 base score 7.8 (HIGH). The NCSC note al...
CVE-2022-35752
Technical details about CVE-2022-35752 are not publicly available in the provided connected documents. Monitor for updates.
CVE-2023-28221
Technical details about CVE-2023-28221 are not publicly available in the provided documents. Monitor for updates from Microsoft and vulnerability feeds.
CVE-2023-28226
CVE-2023-28226 relates to Windows Enroll Engine Security Feature Bypass. Affected software: Windows OS (Enroll Engine component). Vulnerability type: security feature bypass. Reported metrics indicate: CVSS 3.1, attack vector Network, attack complexity High, privileges required None, user interac...
CVE-2024-30016
CVE-2024-30016 affects Windows Cryptographic Services . The vulnerability is described as an information disclosure with impact to confidentiality (high) and is listed in sources as a Windows component issue with a CVSS v3.1 base score of 5.5 (attack vector: local; privileges required: low; user ...
CVE-2024-30017
CVE-2024-30017 affects Microsoft Windows Hyper-V. It is a remote code execution vulnerability in Hyper-V with CVSSv3.1 base score 8.8 (Network, Privileges Required: Low, User Interaction: None; Confidentiality/Integrity/Availability: High). Affected: Windows Hyper-V component; likely requires net...
CVE-2024-30096
Technical details about CVE-2024-30096 (affected components, versions, root cause, impact, and remediation) are not provided in the supplied connected documents. Monitor for updates from official sources.
CVE-2024-35265
CVE-2024-35265 is described as a Windows Perception Service elevation-of-privilege vulnerability (local, CVSSv3.1 7.0). OpenVAS entries map it to Windows Perception Service with privilege-escalation impact. The connected documents show Microsoft security updates around June 2024, but there is no ...
CVE-2024-38198
CVE-2024-38198 is a Windows Print Spooler elevation-of-privilege vulnerability. The connected data confirms the issue affects Windows Print Spooler Components and is categorized with a HIGH base severity (CVSS 3.1: 7.5) and impact as obtaining elevated privileges. The vulnerability is documented ...
CVE-2023-29346
Technical details about CVE-2023-29346 are not publicly available in the provided documents. No affected product/version/impact is specified here. Monitor for updates in the connected sources.
CVE-2023-36912
Technical details about CVE-2023-36912 are not publicly available in the provided documents. Monitor for updates.
CVE-2024-30029
According to the NCSC advisory (NCSC-2024-0210), CVE-2024-30029 affects Microsoft Windows RRAS and is rated with CVSSv3.1 base score 7.5 (HIGH). The RRAS vulnerability enables remote code execution via network access, with the advisory indicating the impact as executing random code on the target....
CVE-2024-30077
Technical details are not provided in the supplied documents; no public specifics are included here. Monitor for updates from official advisories.
CVE-2024-38060
CVE-2024-38060 is a Windows Imaging Component remote code execution vulnerability. Public documents indicate it is addressed via the July 9, 2024 security updates (e.g., KBs in the July 2024 cycle). The connected MSKB entries reference security updates that address related components (e.g., RADIU...
CVE-2024-38259
CVE-2024-38259 (Microsoft Management Console Remote Code Execution) is a MMC component vulnerability with CVSS v3.1 base score 8.8 (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H). It affects MMC and is described with potential to execute code remotely when exploited. The MMC entry is listed in Microsoft/VC...
CVE-2023-21686
Technical details about CVE-2023-21686 are not publicly provided in the supplied documents. No affected product/version/root cause or remediation are described here. Monitor for updates from official sources.
CVE-2023-21820
Technical details (affected product/version, root cause, impact, or fix) are not publicly available in the provided documents. Monitor for updates.
CVE-2023-29371
Technical details about CVE-2023-29371 are not publicly available in the provided documents. Monitor for updates from vendors and security bulletins.
CVE-2024-30025
CVE-2024-30025 affects the Windows Common Log File System Driver. The Windows/KB guidance mappings list CVE-2024-30025 with a CVSS v3.1 base score of 7.8 (LOCAL attack, LOW complexity, LOW privileges required, HIGH confidentiality/integrity/availability impact) and categorize it as an privilege e...
CVE-2024-30091
Technical details are not publicly provided in the supplied documents. No affected product, vulnerable component, version, root cause, impact, or fix information is included beyond the CVE ID and the generic description.
CVE-2024-38030
Technical details for CVE-2024-38030 are not publicly disclosed in the provided documents. No affected products, root cause, impact, or fixes are specified. Monitor for updates as more information becomes available.
CVE-2024-38115
Technical details for CVE-2024-38115 are not publicly available in the provided documents. Monitor for updates.
CVE-2024-38134
Technical details about CVE-2024-38134 (Kernel Streaming WOW Thunk Service Driver Elevation of Privilege) are not provided in the included documents. Monitor for updates from Microsoft and CVE databases for affected products, remediation, and known exploits.
CVE-2023-29373
Technical details about CVE-2023-29373 are not publicly provided in the supplied documents; monitor for updates from Microsoft and vulnerability feeds.
CVE-2023-33164
CVE-2023-33164 is described as a Remote Procedure Call Runtime Denial of Service vulnerability. The provided data show CVSS v3.1 base score 6.5 (Medium) with network attack vector, low attack complexity, privilege requirement Low, no user interaction, and availability impact High. The connected d...
CVE-2023-35376
Technical details for CVE-2023-35376 are not publicly available in the provided documents; monitor for updates.
CVE-2024-30014
CVE-2024-30014 is a Windows RRAS (Routing and Remote Access Service) Remote Code Execution vulnerability. Connected sources confirm the RRAS entry with CVSS v3.1 base score 7.5 (HIGH): Network attack vector, high impact on confidentiality, integrity and availability, with user interaction require...
CVE-2024-30095
Technical details about CVE-2024-30095 (affected products, root cause, exploitability, or fixes) are not provided in the connected documents. Monitor for updates.
CVE-2024-38223
Technical details for CVE-2024-38223 are not publicly available in the provided documents. No information on affected products, root cause, or fixes is supplied here. Monitor sources for updates.
CVE-2024-43554
CVE-2024-43554 corresponds to a Windows Kernel-Mode Driver Information Disclosure vulnerability with an impact described as Access to sensitive data (CVSS ~5.5). Affected component is a kernel-mode driver; root cause details are not fully disclosed in the provided documents. Microsoft has issued ...
CVE-2022-35749
Technical details about CVE-2022-35749 are not provided in the supplied documents. Available references confirm the CVE title and severity, but no affected product/version or root cause are detailed here. Monitor for official disclosures and updates.
CVE-2023-21801
CVE-2023-21801 affects Microsoft PostScript and PCL6 Class Printer Driver and is described as a Remote Code Execution vulnerability. Connected documents confirm the vulnerability exists in these printer drivers but do not provide concrete details on affected product versions, root cause specifics...
CVE-2023-24944
CVE-2023-24944 is described as a Windows Bluetooth Driver Information Disclosure Vulnerability. The provided documents confirm the CVE ID and its association with Windows Bluetooth, but do not include concrete technical details in the accessible materials (no published affected versions, root cau...
CVE-2023-29365
Technical details about CVE-2023-29365 are not publicly available in the provided documents. Monitor official sources (Microsoft MSRC/NVD) for updates on affected products, impact, and fixes.
CVE-2024-30013
Technical details for CVE-2024-30013 are not provided in the supplied documents. No information about affected product/version, root cause, impact, or fixes is available here. Monitor for updates from official advisories to obtain concrete details.
CVE-2024-30023
CVE-2024-30023 affects the Windows Routing and Remote Access Service (RRAS). The RRAS remote code execution vulnerability is listed under Windows RRAS with CVSS details indicating Network attack vector, high impact to confidentiality, integrity, and availability, and requiring user interaction. T...
CVE-2024-38127
CVE-2024-38127 is a Windows Hyper-V Elevation of Privilege vulnerability. The initial description identifies it as a Windows Hyper-V EoP with local attack vector, low privileges required, no user interaction, and an impact of high confidentiality, integrity, and availability. The CVSS 3.1 vector ...