942 matches found
CVE-2023-32008
CVE-2023-32008: Windows Resilient File System (ReFS) Remote Code Execution vulnerability. Affects Windows with ReFS; exploitation is LOCAL with user interaction and no privileges required. CVSS v3.1 base score 7.8 (HIGH); impact on confidentiality, integrity, and availability is HIGH. Remediation...
CVE-2023-35376
Technical details for CVE-2023-35376 are not publicly available in the provided documents; monitor for updates.
CVE-2023-36006
The CVE-2023-36006 entry concerns Microsoft WDAC OLE DB provider for SQL Server and is a Remote Code Execution vulnerability. The OpenVAS and NCSC records confirm the affected component as the WDAC OLE DB provider for SQL Server and classify the impact as high, with CVSS3.1 base metrics indicatin...
CVE-2024-38134
Technical details about CVE-2024-38134 (Kernel Streaming WOW Thunk Service Driver Elevation of Privilege) are not provided in the included documents. Monitor for updates from Microsoft and CVE databases for affected products, remediation, and known exploits.
CVE-2023-24944
CVE-2023-24944 is described as a Windows Bluetooth Driver Information Disclosure Vulnerability. The provided documents confirm the CVE ID and its association with Windows Bluetooth, but do not include concrete technical details in the accessible materials (no published affected versions, root cau...
CVE-2023-29368
CVE-2023-29368 corresponds to a Windows Filtering Platform elevation-of-privilege issue. The CVE entry lists the affected component as Windows Filtering Platform, with a CVSSv3.1 base score of 7.0 (HIGH), indicating local attack vector, high impact to confidentiality, integrity, and availability,...
CVE-2023-29373
Technical details about CVE-2023-29373 are not publicly provided in the supplied documents; monitor for updates from Microsoft and vulnerability feeds.
CVE-2023-35639
CVE-2023-35639 — Microsoft ODBC Driver Remote Code Execution is documented in the CVE entry and corroborated by multiple sources in the connected set as a Windows component vulnerability. In NVD, the CVSSv3.1 base score is 8.8 (HIGH) with a network attack vector, requiring user interaction, and r...
CVE-2024-30091
Technical details are not publicly provided in the supplied documents. No affected product, vulnerable component, version, root cause, impact, or fix information is included beyond the CVE ID and the generic description.
CVE-2022-35743
CVE-2022-35743 is a Microsoft Windows MSDT Remote Code Execution vulnerability. Documents indicate an exploitation path that is Local with Low Attack Complexity and requires User Interaction, yielding high confidentiality, integrity, and availability impact. CVSS 3.1 base score 7.8 (HIGH). No exp...
CVE-2022-35754
Technical details (affected product, version, root cause, and remediation) are not publicly available in the provided documents. Monitor for updates.
CVE-2023-21700
Technical details for CVE-2023-21700 are not publicly available in the provided documents. No concrete affected products, root cause, or remediation are confirmed here. Monitor official sources for updates and published fixes.
CVE-2023-32054
CVE-2023-32054 is referenced in connected content as a local elevation-of-privilege vulnerability related to Shadow Copy restoration. The MagicDot tooling (GitHub: SafeBreach-Labs/MagicDot) includes a Shadow Copy restoration exploit specifically for CVE-2023-32054, described among a package of ro...
CVE-2023-36905
CVE-2023-36905 affects Windows Wireless Wide Area Network Service (WwanSvc). The NVD entry shows a High-severity information disclosure (CVSS 3.1 base 7.5) with network attack vector and no user interaction; confidentiality impact is High. Connected docs reference Microsoft MSRC/KB guidance but d...
CVE-2024-35265
CVE-2024-35265 is described as a Windows Perception Service elevation-of-privilege vulnerability (local, CVSSv3.1 7.0). OpenVAS entries map it to Windows Perception Service with privilege-escalation impact. The connected documents show Microsoft security updates around June 2024, but there is no ...
CVE-2024-38030
Technical details for CVE-2024-38030 are not publicly disclosed in the provided documents. No affected products, root cause, impact, or fixes are specified. Monitor for updates as more information becomes available.
CVE-2024-38101
Technical details about CVE-2024-38101 are not publicly provided in the supplied connected documents. Information about affected components, impact, and fixes is unavailable here. Monitor for updates from official sources to obtain confirmed technical specifics and remediation guidance.
CVE-2024-38180
CVE-2024-38180 relates to a security feature bypass in Windows SmartScreen. Affected product: Windows SmartScreen (Windows). The CVE is described as a Security Feature Bypass with high impact (C/H/I/A) and a network attack vector requiring user interaction. The initial documents do not provide de...
CVE-2024-43599
CVE-2024-43599 is listed under Windows Remote Desktop Client as a high-severity (CVSS 8.8) Remote Code Execution vulnerability with impact described as Execute random code. Connected sources confirm this CVE affects the Remote Desktop Client and note that Microsoft has released updates to fix vul...
CVE-2021-40463
CVE-2021-40463 is a Windows NAT Denial of Service vulnerability. The connected OpenVAS entries map this CVE to multiple Microsoft KBs (KB5006667, KB5006669, KB5006670, KB5006674, KB5006675, etc.), indicating it is considered in Windows security update contexts, but the provided documents do not d...
CVE-2023-24857
Technical details for CVE-2023-24857 are not present in the provided connected documents. The materials reference the vulnerability name and Microsoft advisory, but no product/version/impact/fix specifics are included. Monitor for updates.
CVE-2023-32044
Technical details for CVE-2023-32044 are not provided in the connected documents; only the vulnerability name is cited. Monitor for updates.
CVE-2023-36913
Technical details about CVE-2023-36913 are not publicly provided in the supplied documents. No specific affected products, root cause, or remediation are described here. Monitor for updates as new information may be released.
CVE-2024-30002
CVE-2024-30002 is listed in multiple feeds as a Windows Mobile Broadband Driver remote code execution vulnerability affecting the Windows Mobile Broadband component. Connected sources confirm the CVE ID appears under the Windows Mobile Broadband category with a CVSS-like indication of code execut...
CVE-2024-30032
CVE-2024-30032 affects Windows DWM Core Library. The vulnerability enables local elevation of privilege with vector LOCAL, requiring LOW privileges and no user interaction; impact is elevated privileges potentially up to SYSTEM, with confidentiality/integrity/availability rated HIGH. The CVE is l...
CVE-2023-21819
CVE-2023-21819 is a Windows Secure Channel Denial of Service vulnerability. The NVD entry lists a CVSSv3.1 base score of 7.5 (HIGH), with network attack vector, low attack complexity, no privileges required, no user interaction, and impact limited to availability (I: NONE, A: HIGH). The Connectiv...
CVE-2023-36907
Technical details about CVE-2023-36907 are not publicly available in the provided documents; no affected products, root cause, impact, or fixes are described here. Monitor official updates from NVD/Microsoft for remediation.
CVE-2024-30071
Technical details for CVE-2024-30071 are not provided in the connected documents. The Initial entry mentions Windows Remote Access Connection Manager information disclosure but lacks specific affected products/versions, root cause, impact, or remediation in the supplied materials. Monitor for upd...
CVE-2024-38054
Technical details for CVE-2024-38054 are not provided in the connected documents. No affected product, component, version, root cause, or remediation specifics are available here; monitor for updates.
CVE-2023-35302
CVE-2023-35302 corresponds to a Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution vulnerability. The NVD entry specifies a CVSS v3.1 base score of 8.8 (Network attack vector, Low attack complexity, Privileges Required: Low, User Interaction: None, Scope: Unchanged) with hig...
CVE-2024-30000
CVE-2024-30000 affects Windows Mobile Broadband Driver and enables remote code execution (Execution of random code) with a base CVSS around 6.8 (AV: Physical, AC: Low, PR: None, UI: None, C/I/A: High). Connected guidance indicates Microsoft has updates available; applying the May 2024 Windows upd...
CVE-2024-30097
Technical details for CVE-2024-30097 are not provided in the supplied connected documents. Public information in these sources is limited to update references; monitor for official advisories and technical details as they become available.
CVE-2024-38254
CVE-2024-38254 is listed by NCSc as a Windows Authentication Methods vulnerability with CVSS 5.5 (Medium) and impact: Access to sensitive data. The connected documents do not provide affected product versions or exploit details. Microsoft has fixed vulnerabilities in Windows and recommends applyi...
CVE-2023-21811
Technical details for CVE-2023-21811 are not publicly provided in the supplied documents. No affected products, root cause, or remediation are specified here. Monitor for updates from the connected sources.
CVE-2023-35300
Technical details for CVE-2023-35300 are not provided in the supplied documents; no affected product/version/impact is specified here. Monitor for updates in connected sources.
CVE-2023-35366
Technical details for CVE-2023-35366 (RRAS RCE) are not provided in the connected documents. Monitor for updates; no specific products, vectors, exploit status, or remediations are described in the supplied materials.
CVE-2023-35383
Technical details (affected component, root cause, affected versions, impact, or fixes) for CVE-2023-35383 are not provided in the supplied documents. Monitor for updates from official sources.
CVE-2024-38215
The CVE CVE-2024-38215 concerns the Windows Cloud Files Mini Filter Driver and is labeled as an Elevation of Privilege vulnerability with high impact. The available connected data indicates a local-execution vector (attackVector: LOCAL, attackComplexity: LOW) requiring LOW privileges and no user ...
CVE-2023-24938
Technical details for CVE-2023-24938 are not provided in the supplied documents; no explicit affected product, root cause, impact, or fix is stated here. Monitor for updates.
CVE-2023-28234
CVE-2023-28234 is a Windows Secure Channel (Schannel) Denial of Service vulnerability. Affected component is the Windows Transport Security Layer (TLS). CVSS v3.1: 7.5 (NETWORK, LOW attack complexity, NONE privileges, NONE user interaction, HIGH impact on Availability). The provided documents do ...
CVE-2023-32085
CVE-2023-32085 is a local information-disclosure vulnerability in the Microsoft PostScript and PCL6 Class Printer Driver. The NVD entry describes it as a PostScript/PCL6 printer driver information disclosure with a CVSS v3.1 base score of 5.5 (Medium), vector: AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N....
CVE-2024-30004
CVE-2024-30004 is a Windows Mobile Broadband Driver Remote Code Execution vulnerability. The CVE affects Windows Mobile Broadband Driver components and is scored CVSS v3.1 Base 6.8 (Medium) with HIGH impact on confidentiality, integrity, and availability; exploitation requires local access or phy...
CVE-2024-30066
Technical details about CVE-2024-30066 (affected product, root cause, impact, mitigations, and fixes) are not publicly provided in the supplied documents. Monitor for updates and refer to the MSRC/MS vulnerability guidance when available.
CVE-2024-38062
Affected software: Windows Kernel-Mode Drivers. CVE-2024-38062 is described in the OpenVAS entries as a local privilege escalation vulnerability with an impact of obtaining elevated privileges (CVSS 7.80). Root cause is not detailed in the provided documents beyond the general kernel-mode driver ...
CVE-2023-35303
CVE-2023-35303 concerns the USB Audio Class System Driver and is described as a Remote Code Execution vulnerability. The NVD entry lists a CVSS‑3.1 score of 8.8 (High) with Network attack vector, Low attack complexity, Low privileges required, and no user interaction. The impact is rated as High ...
CVE-2023-36004
CVE-2023-36004 is a Windows DPAPI spoofing vulnerability. The records indicate the DPAPI component can be abused to pretend to be another user, with high impact on confidentiality, integrity, and availability (CVSSv3.1: 7.5). Multiple sources (NVD entry and ENISA/OpenVAS listings) corroborate the...
CVE-2024-30021
CVE-2024-30021 is a Windows Mobile Broadband Driver Remote Code Execution vulnerability. Affected component: Windows Mobile Broadband (driver). Documented impact indicates potential for executing code with high confidentiality, integrity, and availability impact; CVSSv3.1 base score 6.8 (Medium) ...
CVE-2023-28246
CVE-2023-28246 is a Windows Registry Elevation of Privilege vulnerability. The NC SC advisory groups this CVE under Windows Registry issues with a high impact (score up to 7.80) and assigns it to the category of obtaining increased rights, indicating local privilege escalation. Connected sources ...
CVE-2023-35297
CVE-2023-35297 is the Windows Pragmatic General Multicast (PGM) Remote Code Execution vulnerability. The connected Vulristics/AVLEONOV content notes this CVE as having public exploit activity and exposure on the same-network-segment (PGM) with a network attack vector and high impact. Specific aff...