942 matches found
CVE-2023-24926
CVE-2023-24926: Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability. Affects the PostScript and PCL6 class printer driver; underlying impact is remote code execution over the network. The CVSS 3.1 base score is 8.8 (High) with high confidentiality, integrity, an...
CVE-2023-24944
CVE-2023-24944 is described as a Windows Bluetooth Driver Information Disclosure Vulnerability. The provided documents confirm the CVE ID and its association with Windows Bluetooth, but do not include concrete technical details in the accessible materials (no published affected versions, root cau...
CVE-2023-32008
CVE-2023-32008: Windows Resilient File System (ReFS) Remote Code Execution vulnerability. Affects Windows with ReFS; exploitation is LOCAL with user interaction and no privileges required. CVSS v3.1 base score 7.8 (HIGH); impact on confidentiality, integrity, and availability is HIGH. Remediation...
CVE-2023-36006
The CVE-2023-36006 entry concerns Microsoft WDAC OLE DB provider for SQL Server and is a Remote Code Execution vulnerability. The OpenVAS and NCSC records confirm the affected component as the WDAC OLE DB provider for SQL Server and classify the impact as high, with CVSS3.1 base metrics indicatin...
CVE-2024-30023
CVE-2024-30023 affects the Windows Routing and Remote Access Service (RRAS). The RRAS remote code execution vulnerability is listed under Windows RRAS with CVSS details indicating Network attack vector, high impact to confidentiality, integrity, and availability, and requiring user interaction. T...
CVE-2024-30099
Technical details for CVE-2024-30099 are not present in the provided documents. No affected products, root cause, exploit information, or remediation are stated here. Please monitor for updates from Microsoft and related security advisories to obtain confirmed details.
CVE-2024-38127
CVE-2024-38127 is a Windows Hyper-V Elevation of Privilege vulnerability. The initial description identifies it as a Windows Hyper-V EoP with local attack vector, low privileges required, no user interaction, and an impact of high confidentiality, integrity, and availability. The CVSS 3.1 vector ...
CVE-2022-35754
Technical details (affected product, version, root cause, and remediation) are not publicly available in the provided documents. Monitor for updates.
CVE-2023-21693
Technical details about CVE-2023-21693 are not publicly provided in the supplied connected documents. No specifics on affected products, root cause, or remediation are included here. Monitor for updates from official sources.
CVE-2023-28217
CVE-2023-28217 is a Windows NAT Denial of Service vulnerability. The NVD entry lists CVSSv3.1 base score 7.5 (HIGH) with vector CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H. It is network-exploitable with no user interaction, no privileges required, and affects availability only. The connected do...
CVE-2023-28272
Technical details for CVE-2023-28272 are not provided in the connected documents. Public exploitability, affected components, and remediation are not disclosed here; monitor official advisories for updates.
CVE-2023-29368
CVE-2023-29368 corresponds to a Windows Filtering Platform elevation-of-privilege issue. The CVE entry lists the affected component as Windows Filtering Platform, with a CVSSv3.1 base score of 7.0 (HIGH), indicating local attack vector, high impact to confidentiality, integrity, and availability,...
CVE-2024-38180
CVE-2024-38180 relates to a security feature bypass in Windows SmartScreen. Affected product: Windows SmartScreen (Windows). The CVE is described as a Security Feature Bypass with high impact (C/H/I/A) and a network attack vector requiring user interaction. The initial documents do not provide de...
CVE-2021-40463
CVE-2021-40463 is a Windows NAT Denial of Service vulnerability. The connected OpenVAS entries map this CVE to multiple Microsoft KBs (KB5006667, KB5006669, KB5006670, KB5006674, KB5006675, etc.), indicating it is considered in Windows security update contexts, but the provided documents do not d...
CVE-2023-21819
CVE-2023-21819 is a Windows Secure Channel Denial of Service vulnerability. The NVD entry lists a CVSSv3.1 base score of 7.5 (HIGH), with network attack vector, low attack complexity, no privileges required, no user interaction, and impact limited to availability (I: NONE, A: HIGH). The Connectiv...
CVE-2023-35302
CVE-2023-35302 corresponds to a Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution vulnerability. The NVD entry specifies a CVSS v3.1 base score of 8.8 (Network attack vector, Low attack complexity, Privileges Required: Low, User Interaction: None, Scope: Unchanged) with hig...
CVE-2023-35639
CVE-2023-35639 — Microsoft ODBC Driver Remote Code Execution is documented in the CVE entry and corroborated by multiple sources in the connected set as a Windows component vulnerability. In NVD, the CVSSv3.1 base score is 8.8 (HIGH) with a network attack vector, requiring user interaction, and r...
CVE-2024-38054
Technical details for CVE-2024-38054 are not provided in the connected documents. No affected product, component, version, root cause, or remediation specifics are available here; monitor for updates.
CVE-2024-38215
The CVE CVE-2024-38215 concerns the Windows Cloud Files Mini Filter Driver and is labeled as an Elevation of Privilege vulnerability with high impact. The available connected data indicates a local-execution vector (attackVector: LOCAL, attackComplexity: LOW) requiring LOW privileges and no user ...
CVE-2024-43599
CVE-2024-43599 is listed under Windows Remote Desktop Client as a high-severity (CVSS 8.8) Remote Code Execution vulnerability with impact described as Execute random code. Connected sources confirm this CVE affects the Remote Desktop Client and note that Microsoft has released updates to fix vul...
CVE-2023-36905
CVE-2023-36905 affects Windows Wireless Wide Area Network Service (WwanSvc). The NVD entry shows a High-severity information disclosure (CVSS 3.1 base 7.5) with network attack vector and no user interaction; confidentiality impact is High. Connected docs reference Microsoft MSRC/KB guidance but d...
CVE-2024-30032
CVE-2024-30032 affects Windows DWM Core Library. The vulnerability enables local elevation of privilege with vector LOCAL, requiring LOW privileges and no user interaction; impact is elevated privileges potentially up to SYSTEM, with confidentiality/integrity/availability rated HIGH. The CVE is l...
CVE-2024-37983
Technical details (affected products, vulnerable components, root cause, exploit specifics) are not provided in the connected documents. The CVE entry references a Windows EFI security feature bypass; monitor official disclosures and updates for concrete information.
CVE-2023-21700
Technical details for CVE-2023-21700 are not publicly available in the provided documents. No concrete affected products, root cause, or remediation are confirmed here. Monitor official sources for updates and published fixes.
CVE-2023-24938
Technical details for CVE-2023-24938 are not provided in the supplied documents; no explicit affected product, root cause, impact, or fix is stated here. Monitor for updates.
CVE-2023-32044
Technical details for CVE-2023-32044 are not provided in the connected documents; only the vulnerability name is cited. Monitor for updates.
CVE-2023-32054
CVE-2023-32054 is referenced in connected content as a local elevation-of-privilege vulnerability related to Shadow Copy restoration. The MagicDot tooling (GitHub: SafeBreach-Labs/MagicDot) includes a Shadow Copy restoration exploit specifically for CVE-2023-32054, described among a package of ro...
CVE-2023-36907
Technical details about CVE-2023-36907 are not publicly available in the provided documents; no affected products, root cause, impact, or fixes are described here. Monitor official updates from NVD/Microsoft for remediation.
CVE-2024-38101
Technical details about CVE-2024-38101 are not publicly provided in the supplied connected documents. Information about affected components, impact, and fixes is unavailable here. Monitor for updates from official sources to obtain confirmed technical specifics and remediation guidance.
CVE-2023-36913
Technical details about CVE-2023-36913 are not publicly provided in the supplied documents. No specific affected products, root cause, or remediation are described here. Monitor for updates as new information may be released.
CVE-2024-30002
CVE-2024-30002 is listed in multiple feeds as a Windows Mobile Broadband Driver remote code execution vulnerability affecting the Windows Mobile Broadband component. Connected sources confirm the CVE ID appears under the Windows Mobile Broadband category with a CVSS-like indication of code execut...
CVE-2024-30071
Technical details for CVE-2024-30071 are not provided in the connected documents. The Initial entry mentions Windows Remote Access Connection Manager information disclosure but lacks specific affected products/versions, root cause, impact, or remediation in the supplied materials. Monitor for upd...
CVE-2024-38254
CVE-2024-38254 is listed by NCSc as a Windows Authentication Methods vulnerability with CVSS 5.5 (Medium) and impact: Access to sensitive data. The connected documents do not provide affected product versions or exploit details. Microsoft has fixed vulnerabilities in Windows and recommends applyi...
CVE-2023-24857
Technical details for CVE-2023-24857 are not present in the provided connected documents. The materials reference the vulnerability name and Microsoft advisory, but no product/version/impact/fix specifics are included. Monitor for updates.
CVE-2023-35356
CVE-2023-35356 is a Windows kernel/registry vulnerability where releasing a security descriptor for a predefined key without honoring the reference count caused by refcounting changes can lead to hive/descriptor inconsistencies. Documented as a security descriptor refcounting issue tied to regist...
CVE-2024-38062
Affected software: Windows Kernel-Mode Drivers. CVE-2024-38062 is described in the OpenVAS entries as a local privilege escalation vulnerability with an impact of obtaining elevated privileges (CVSS 7.80). Root cause is not detailed in the provided documents beyond the general kernel-mode driver ...
CVE-2024-38185
Technical details about CVE-2024-38185 are not publicly available in the provided documents. No affected products, root cause, impact, or remediation details are specified here. Monitor for updates in the connected sources.
CVE-2023-32042
Technical details about CVE-2023-32042 are not publicly provided in the supplied documents. No affected products, root cause, or remediation are specified here. Monitor for updates as connected sources do not elaborate.
CVE-2023-35366
Technical details for CVE-2023-35366 (RRAS RCE) are not provided in the connected documents. Monitor for updates; no specific products, vectors, exploit status, or remediations are described in the supplied materials.
CVE-2023-35383
Technical details (affected component, root cause, affected versions, impact, or fixes) for CVE-2023-35383 are not provided in the supplied documents. Monitor for updates from official sources.
CVE-2024-30000
CVE-2024-30000 affects Windows Mobile Broadband Driver and enables remote code execution (Execution of random code) with a base CVSS around 6.8 (AV: Physical, AC: Low, PR: None, UI: None, C/I/A: High). Connected guidance indicates Microsoft has updates available; applying the May 2024 Windows upd...
CVE-2024-30035
CVE-2024-30035 impacts the Windows DWM Core Library and is an Elevation of Privilege vulnerability. Documents identify the affected component (DWM Core Library) and the impact as Obtaining elevated privileges. The CVE is listed among Windows vulnerabilities fixed by Microsoft updates; remediation...
CVE-2024-30097
Technical details for CVE-2024-30097 are not provided in the supplied connected documents. Public information in these sources is limited to update references; monitor for official advisories and technical details as they become available.
CVE-2024-38079
Technical details about CVE-2024-38079 (affected component, root cause, impact, affected products/versions, and fixes) are not provided in the supplied documents; monitor for updates and disclosures from official sources.
CVE-2022-35745
Technical details about CVE-2022-35745 are not publicly provided in the supplied documents. Please monitor official advisories for updates on affected products, vectors, impacts, and remediation.
CVE-2023-32012
CVE-2023-32012 affects Windows Container Manager Service in Windows. According to ENISA/NCSC data, the vulnerability has an impact category of Obtaining Increased Entitlements with CVSS v3.1 base score 6.30 (from NCSC) and is listed under Windows Container Manager Service in their vulnerability c...
CVE-2023-35300
Technical details for CVE-2023-35300 are not provided in the supplied documents; no affected product/version/impact is specified here. Monitor for updates in connected sources.
CVE-2023-35303
CVE-2023-35303 concerns the USB Audio Class System Driver and is described as a Remote Code Execution vulnerability. The NVD entry lists a CVSS‑3.1 score of 8.8 (High) with Network attack vector, Low attack complexity, Low privileges required, and no user interaction. The impact is rated as High ...
CVE-2023-35320
CVE-2023-35320 corresponds to a Windows vulnerability described as an elevation of privilege in Connected User Experiences and Telemetry. Connected documents provide a high‑level reference and list this CVE among Windows vulnerabilities, noting an elevation of privilege with vague, non‑specific d...