953 matches found
CVE-2024-30035
CVE-2024-30035 impacts the Windows DWM Core Library and is an Elevation of Privilege vulnerability. Documents identify the affected component (DWM Core Library) and the impact as Obtaining elevated privileges. The CVE is listed among Windows vulnerabilities fixed by Microsoft updates; remediation...
CVE-2024-38062
Affected software: Windows Kernel-Mode Drivers. CVE-2024-38062 is described in the OpenVAS entries as a local privilege escalation vulnerability with an impact of obtaining elevated privileges (CVSS 7.80). Root cause is not detailed in the provided documents beyond the general kernel-mode driver ...
CVE-2024-38254
CVE-2024-38254 is listed by NCSc as a Windows Authentication Methods vulnerability with CVSS 5.5 (Medium) and impact: Access to sensitive data. The connected documents do not provide affected product versions or exploit details. Microsoft has fixed vulnerabilities in Windows and recommends applyi...
CVE-2022-35745
Technical details about CVE-2022-35745 are not publicly provided in the supplied documents. Please monitor official advisories for updates on affected products, vectors, impacts, and remediation.
CVE-2023-21811
Technical details for CVE-2023-21811 are not publicly provided in the supplied documents. No affected products, root cause, or remediation are specified here. Monitor for updates from the connected sources.
CVE-2023-28234
CVE-2023-28234 is a Windows Secure Channel (Schannel) Denial of Service vulnerability. Affected component is the Windows Transport Security Layer (TLS). CVSS v3.1: 7.5 (NETWORK, LOW attack complexity, NONE privileges, NONE user interaction, HIGH impact on Availability). The provided documents do ...
CVE-2023-35297
CVE-2023-35297 is the Windows Pragmatic General Multicast (PGM) Remote Code Execution vulnerability. The connected Vulristics/AVLEONOV content notes this CVE as having public exploit activity and exposure on the same-network-segment (PGM) with a network attack vector and high impact. Specific aff...
CVE-2023-35300
Technical details for CVE-2023-35300 are not provided in the supplied documents; no affected product/version/impact is specified here. Monitor for updates in connected sources.
CVE-2023-35303
CVE-2023-35303 concerns the USB Audio Class System Driver and is described as a Remote Code Execution vulnerability. The NVD entry lists a CVSS‑3.1 score of 8.8 (High) with Network attack vector, Low attack complexity, Low privileges required, and no user interaction. The impact is rated as High ...
CVE-2024-37982
Technical details about CVE-2024-37982 are not provided in the connected documents. No specifics on affected components, root cause, or fixes are available here. Monitor official advisories/updates for authoritative guidance.
CVE-2024-38079
Technical details about CVE-2024-38079 (affected component, root cause, impact, affected products/versions, and fixes) are not provided in the supplied documents; monitor for updates and disclosures from official sources.
CVE-2024-38185
Technical details about CVE-2024-38185 are not publicly available in the provided documents. No affected products, root cause, impact, or remediation details are specified here. Monitor for updates in the connected sources.
CVE-2023-35362
Technical details for CVE-2023-35362 are not publicly provided in the supplied documents. Monitor for updates from Microsoft and CVE repositories.
CVE-2023-35363
Technical details about CVE-2023-35363 are not publicly provided in the supplied documents. No affected product/version or fix is described here. Monitor for official updates from Microsoft and CVE/NVD for details.
CVE-2023-36004
CVE-2023-36004 is a Windows DPAPI spoofing vulnerability. The records indicate the DPAPI component can be abused to pretend to be another user, with high impact on confidentiality, integrity, and availability (CVSSv3.1: 7.5). Multiple sources (NVD entry and ENISA/OpenVAS listings) corroborate the...
CVE-2024-30001
CVE-2024-30001 corresponds to a Windows Mobile Broadband driver vulnerability described in connected sources as enabling remote code execution by the Windows Mobile Broadband component. The NCSC advisory groups CVE-2024-30001 under Windows Mobile Broadband with an impact of executing random code ...
CVE-2024-30003
CVE-2024-30003 is a Windows vulnerability in the Windows Mobile Broadband Driver that enables remote code execution. The issue is described in the connected sources as a vulnerability that allows execution of arbitrary code (Windows Mobile Broadband) with the attacker requiring physical access (a...
CVE-2024-30004
CVE-2024-30004 is a Windows Mobile Broadband Driver Remote Code Execution vulnerability. The CVE affects Windows Mobile Broadband Driver components and is scored CVSS v3.1 Base 6.8 (Medium) with HIGH impact on confidentiality, integrity, and availability; exploitation requires local access or phy...
CVE-2024-30066
Technical details about CVE-2024-30066 (affected product, root cause, impact, mitigations, and fixes) are not publicly provided in the supplied documents. Monitor for updates and refer to the MSRC/MS vulnerability guidance when available.
CVE-2024-38240
CVE-2024-38240 is a Windows vulnerability affecting the Windows Remote Access Connection Manager . The connected documents identify it as an elevation-of-privilege issue with a high/critical impact (listed as CVE-2024-38240 — Obtaining elevated privileges , CVSS weights shown as part of Windows s...
CVE-2022-35751
Technical details about CVE-2022-35751 are not publicly available in the provided documents. No information on affected products, root cause, impact, or fixes is provided here; monitor for updates.
CVE-2023-32085
CVE-2023-32085 is a local information-disclosure vulnerability in the Microsoft PostScript and PCL6 Class Printer Driver. The NVD entry describes it as a PostScript/PCL6 printer driver information disclosure with a CVSS v3.1 base score of 5.5 (Medium), vector: AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N....
CVE-2023-35319
CVE-2023-35319 is a Remote Procedure Call (RPC) Runtime Denial of Service vulnerability. The NVD entry lists a network attack vector with low attack complexity, requiring low privileges and no user interaction, leading to an availability impact (C:A) of High and no confidentiality or integrity im...
CVE-2024-30021
CVE-2024-30021 is a Windows Mobile Broadband Driver Remote Code Execution vulnerability. Affected component: Windows Mobile Broadband (driver). Documented impact indicates potential for executing code with high confidentiality, integrity, and availability impact; CVSSv3.1 base score 6.8 (Medium) ...
CVE-2024-38068
Technical details about CVE-2024-38068 are not provided in the supplied documents. No affected products, root cause, impact, or remediation are described here; monitor for updates from official advisories.
CVE-2024-38250
CVE-2024-38250 is a Windows Graphics Component elevation-of-privilege vulnerability. The CVE entry (Microsoft product area) indicates a local attacker with low privileges and no user interaction could obtain higher privileges (CVSS 7.8, High). Connected sources corroborate that Microsoft has issu...
CVE-2024-43517
CVE-2024-43517 is a Microsoft ActiveX Data Objects Remote Code Execution vulnerability. Documented details indicate an in-the-wild risk with network access (AV:N) and user interaction required (UI:R), with a high impact on confidentiality, integrity, and availability (C/I/A: High) and a base scor...
CVE-2023-21687
CVE-2023-21687 affects Microsoft Windows HTTP.sys, enabling information disclosure with a local attack vector (CVSS: 3.1, Privileges Required: Low, User Interaction: None). Affected products include Windows HTTP.sys on Windows 11 and Windows Server 2022 families. Public details from NVD/MSRC indi...
CVE-2023-32056
CVE-2023-32056 is a Windows Server Update Services (WSUS) elevation-of-privilege vulnerability. The NVD entry lists CVSS v3.1 metrics: base score 9.8 (CRITICAL), with network attack vector, no user interaction required, and high confidentiality, integrity, and availability impacts. Microsoft KB u...
CVE-2023-36046
CVE-2023-36046 is a Windows authentication-related Denial of Service vulnerability. Available details (NVD) show an impact on availability and integrity (I:H, A:H) with a Local attack vector, no user interaction required, and low privileges needed. The connected Microsoft advisories indicate a fa...
CVE-2024-30086
Technical details about CVE-2024-30086 (affected component, root cause, impact, and fixes) are not provided in the supplied documents. Monitor for updates from Microsoft and official CVE disclosures.
CVE-2024-38047
Technical details (affected product/component, root cause, impact, and patch specifics) are not publicly provided in the supplied documents. Monitor for updates from official advisories and connected sources for CVE-2024-38047.
CVE-2024-38150
Technical details about CVE-2024-38150 are not provided in the connected documents. The Initial Description only notes a Windows DWM Core Library elevation vulnerability. Monitor for updates and new disclosures before assessing impact or remediation.
CVE-2023-21756
Technical details for CVE-2023-21756 are not publicly provided in the supplied documents. Monitor for updates to obtain affected products, root cause, impact, and fixes.
CVE-2023-28233
CVE-2023-28233 is a Windows Secure Channel Denial-of-Service vulnerability. The connected records confirm a DoS impact with CVSS v3.1 base score 7.5 (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H), requiring network access and no privileges or user interaction. The evidence does not provide a root-cause de...
CVE-2023-28241
Technical details on CVE-2023-28241 are not publicly provided in the supplied documents; monitor for updates.
CVE-2023-28246
CVE-2023-28246 is a Windows Registry Elevation of Privilege vulnerability. The NC SC advisory groups this CVE under Windows Registry issues with a high impact (score up to 7.80) and assigns it to the category of obtaining increased rights, indicating local privilege escalation. Connected sources ...
CVE-2023-29366
Technical details about CVE-2023-29366 are not publicly provided in the supplied documents. No concrete information on affected product versions, root cause, impact, or remediation is included here. Monitor for updates from official sources.
CVE-2023-35332
Technical details for CVE-2023-35332 are not publicly provided in the supplied documents. No affected products, root cause, impact, or fixes are stated here. Monitor for updates from the connected sources for concrete technical information.
CVE-2024-30039
CVE-2024-30039 affects the Windows Remote Access Connection Manager. The connected documents map this CVE to Windows components and indicate an information-disclosure risk with CVSS 3.1/3.5-like characteristics: local access required, low attack complexity, no user interaction, confidentiality im...
CVE-2024-30065
Technical details (affected product, root cause, impact, and fix) are not provided in the supplied documents. Monitor for updates from Microsoft/MSRC as more information becomes available.
CVE-2024-37969
Technical details about CVE-2024-37969 (affected product, root cause, exploitability, and remediation) are not publicly provided in the supplied documents. Monitor for updates from official advisories.
CVE-2024-38125
CVE-2024-38125 affects the Windows Kernel Streaming WOW Thunk Service Driver and enables local elevation of privileges. The vulnerability is associated with the Kernel Streaming WOW Thunk Service Driver and can lead to obtaining elevated privileges (SYSTEM). Microsoft has issued fixes in August 2...
CVE-2024-43532
CVE-2024-43532 is a Remote Registry Service Elevation of Privilege vulnerability with a documented exploit path in a private GitHub post, alleging interception of NTLM data via RPC_A uthon level CONNECT and a Machine‑in‑the‑Middle attack against advapi32.dll behavior. Affected: Windows 10/11 and ...
CVE-2024-43550
CVE-2024-43550 is described in connected sources as a Windows Secure Channel vulnerability with an impact described as impersonation of another user. The NCSC advisory groups it with other Windows CVEs and notes that Microsoft has released security updates to fix affected components (e.g., Octobe...
CVE-2023-32035
Technical details for CVE-2023-32035 (affected product/component/version/root cause/mitigation) are not provided in the connected documents. The initial description only notes a Remote Procedure Call Runtime Denial of Service vulnerability without concrete details. Monitor updates from official s...
CVE-2023-32040
CVE-2023-32040 corresponds to a Microsoft PostScript and PCL6 Class Printer Driver information disclosure vulnerability. The NVD entry indicates a CONFIDENTIALITY impact of High with a Local attack vector and Low privileges required, and no user interaction. The documentation does not provide exp...
CVE-2023-32055
CVE-2023-32055 is an Active Template Library Elevation of Privilege vulnerability with CVSSv3.1 base score 6.7 (Medium). It is a Local attack requiring HIGH privileges and no user interaction, with impact to confidentiality, integrity, and availability rated High. The entry references a Microsoft...
CVE-2023-35328
Technical details for CVE-2023-35328 are not provided in the supplied documents. No product/version/root-cause/impact/fix information is present here. Monitor for updates from official advisories and connected sources.