CVE-2024-38079

Technical details about CVE-2024-38079 (affected component, root cause, impact, affected products/versions, and fixes) are not provided in the supplied documents; monitor for updates and disclosures from official sources.

CVE-2024-38185

Technical details about CVE-2024-38185 are not publicly available in the provided documents. No affected products, root cause, impact, or remediation details are specified here. Monitor for updates in the connected sources.

CVE-2023-28234

CVE-2023-28234 is a Windows Secure Channel (Schannel) Denial of Service vulnerability. Affected component is the Windows Transport Security Layer (TLS). CVSS v3.1: 7.5 (NETWORK, LOW attack complexity, NONE privileges, NONE user interaction, HIGH impact on Availability). The provided documents do ...

CVE-2023-36004

CVE-2023-36004 is a Windows DPAPI spoofing vulnerability. The records indicate the DPAPI component can be abused to pretend to be another user, with high impact on confidentiality, integrity, and availability (CVSSv3.1: 7.5). Multiple sources (NVD entry and ENISA/OpenVAS listings) corroborate the...

CVE-2024-30001

CVE-2024-30001 corresponds to a Windows Mobile Broadband driver vulnerability described in connected sources as enabling remote code execution by the Windows Mobile Broadband component. The NCSC advisory groups CVE-2024-30001 under Windows Mobile Broadband with an impact of executing random code ...

CVE-2024-30004

CVE-2024-30004 is a Windows Mobile Broadband Driver Remote Code Execution vulnerability. The CVE affects Windows Mobile Broadband Driver components and is scored CVSS v3.1 Base 6.8 (Medium) with HIGH impact on confidentiality, integrity, and availability; exploitation requires local access or phy...

CVE-2024-30066

Technical details about CVE-2024-30066 (affected product, root cause, impact, mitigations, and fixes) are not publicly provided in the supplied documents. Monitor for updates and refer to the MSRC/MS vulnerability guidance when available.

CVE-2024-38240

CVE-2024-38240 is a Windows vulnerability affecting the Windows Remote Access Connection Manager . The connected documents identify it as an elevation-of-privilege issue with a high/critical impact (listed as CVE-2024-38240 — Obtaining elevated privileges , CVSS weights shown as part of Windows s...

CVE-2022-35751

Technical details about CVE-2022-35751 are not publicly available in the provided documents. No information on affected products, root cause, impact, or fixes is provided here; monitor for updates.

CVE-2023-32085

CVE-2023-32085 is a local information-disclosure vulnerability in the Microsoft PostScript and PCL6 Class Printer Driver. The NVD entry describes it as a PostScript/PCL6 printer driver information disclosure with a CVSS v3.1 base score of 5.5 (Medium), vector: AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N....

CVE-2023-35319

CVE-2023-35319 is a Remote Procedure Call (RPC) Runtime Denial of Service vulnerability. The NVD entry lists a network attack vector with low attack complexity, requiring low privileges and no user interaction, leading to an availability impact (C:A) of High and no confidentiality or integrity im...

CVE-2023-35362

Technical details for CVE-2023-35362 are not publicly provided in the supplied documents. Monitor for updates from Microsoft and CVE repositories.

CVE-2023-35363

Technical details about CVE-2023-35363 are not publicly provided in the supplied documents. No affected product/version or fix is described here. Monitor for official updates from Microsoft and CVE/NVD for details.

CVE-2024-30003

CVE-2024-30003 is a Windows vulnerability in the Windows Mobile Broadband Driver that enables remote code execution. The issue is described in the connected sources as a vulnerability that allows execution of arbitrary code (Windows Mobile Broadband) with the attacker requiring physical access (a...

CVE-2024-30021

CVE-2024-30021 is a Windows Mobile Broadband Driver Remote Code Execution vulnerability. Affected component: Windows Mobile Broadband (driver). Documented impact indicates potential for executing code with high confidentiality, integrity, and availability impact; CVSSv3.1 base score 6.8 (Medium) ...

CVE-2024-38068

Technical details about CVE-2024-38068 are not provided in the supplied documents. No affected products, root cause, impact, or remediation are described here; monitor for updates from official advisories.

CVE-2024-38250

CVE-2024-38250 is a Windows Graphics Component elevation-of-privilege vulnerability. The CVE entry (Microsoft product area) indicates a local attacker with low privileges and no user interaction could obtain higher privileges (CVSS 7.8, High). Connected sources corroborate that Microsoft has issu...

CVE-2024-43517

CVE-2024-43517 is a Microsoft ActiveX Data Objects Remote Code Execution vulnerability. Documented details indicate an in-the-wild risk with network access (AV:N) and user interaction required (UI:R), with a high impact on confidentiality, integrity, and availability (C/I/A: High) and a base scor...

CVE-2023-21687

CVE-2023-21687 affects Microsoft Windows HTTP.sys, enabling information disclosure with a local attack vector (CVSS: 3.1, Privileges Required: Low, User Interaction: None). Affected products include Windows HTTP.sys on Windows 11 and Windows Server 2022 families. Public details from NVD/MSRC indi...

CVE-2024-38047

Technical details (affected product/component, root cause, impact, and patch specifics) are not publicly provided in the supplied documents. Monitor for updates from official advisories and connected sources for CVE-2024-38047.

CVE-2024-38150

Technical details about CVE-2024-38150 are not provided in the connected documents. The Initial Description only notes a Windows DWM Core Library elevation vulnerability. Monitor for updates and new disclosures before assessing impact or remediation.

CVE-2023-28233

CVE-2023-28233 is a Windows Secure Channel Denial-of-Service vulnerability. The connected records confirm a DoS impact with CVSS v3.1 base score 7.5 (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H), requiring network access and no privileges or user interaction. The evidence does not provide a root-cause de...

CVE-2023-28241

Technical details on CVE-2023-28241 are not publicly provided in the supplied documents; monitor for updates.

CVE-2023-28246

CVE-2023-28246 is a Windows Registry Elevation of Privilege vulnerability. The NC SC advisory groups this CVE under Windows Registry issues with a high impact (score up to 7.80) and assigns it to the category of obtaining increased rights, indicating local privilege escalation. Connected sources ...

CVE-2023-29366

Technical details about CVE-2023-29366 are not publicly provided in the supplied documents. No concrete information on affected product versions, root cause, impact, or remediation is included here. Monitor for updates from official sources.

CVE-2023-32056

CVE-2023-32056 is a Windows Server Update Services (WSUS) elevation-of-privilege vulnerability. The NVD entry lists CVSS v3.1 metrics: base score 9.8 (CRITICAL), with network attack vector, no user interaction required, and high confidentiality, integrity, and availability impacts. Microsoft KB u...

CVE-2023-35332

Technical details for CVE-2023-35332 are not publicly provided in the supplied documents. No affected products, root cause, impact, or fixes are stated here. Monitor for updates from the connected sources for concrete technical information.

CVE-2023-36046

CVE-2023-36046 is a Windows authentication-related Denial of Service vulnerability. Available details (NVD) show an impact on availability and integrity (I:H, A:H) with a Local attack vector, no user interaction required, and low privileges needed. The connected Microsoft advisories indicate a fa...

CVE-2024-30039

CVE-2024-30039 affects the Windows Remote Access Connection Manager. The connected documents map this CVE to Windows components and indicate an information-disclosure risk with CVSS 3.1/3.5-like characteristics: local access required, low attack complexity, no user interaction, confidentiality im...

CVE-2024-30065

Technical details (affected product, root cause, impact, and fix) are not provided in the supplied documents. Monitor for updates from Microsoft/MSRC as more information becomes available.

CVE-2024-30086

Technical details about CVE-2024-30086 (affected component, root cause, impact, and fixes) are not provided in the supplied documents. Monitor for updates from Microsoft and official CVE disclosures.

CVE-2024-37969

Technical details about CVE-2024-37969 (affected product, root cause, exploitability, and remediation) are not publicly provided in the supplied documents. Monitor for updates from official advisories.

CVE-2024-43532

CVE-2024-43532 is a Remote Registry Service Elevation of Privilege vulnerability with a documented exploit path in a private GitHub post, alleging interception of NTLM data via RPC_A uthon level CONNECT and a Machine‑in‑the‑Middle attack against advapi32.dll behavior. Affected: Windows 10/11 and ...

CVE-2024-43550

CVE-2024-43550 is described in connected sources as a Windows Secure Channel vulnerability with an impact described as impersonation of another user. The NCSC advisory groups it with other Windows CVEs and notes that Microsoft has released security updates to fix affected components (e.g., Octobe...

CVE-2023-21756

Technical details for CVE-2023-21756 are not publicly provided in the supplied documents. Monitor for updates to obtain affected products, root cause, impact, and fixes.

CVE-2023-32035

Technical details for CVE-2023-32035 (affected product/component/version/root cause/mitigation) are not provided in the connected documents. The initial description only notes a Remote Procedure Call Runtime Denial of Service vulnerability without concrete details. Monitor updates from official s...

CVE-2023-32040

CVE-2023-32040 corresponds to a Microsoft PostScript and PCL6 Class Printer Driver information disclosure vulnerability. The NVD entry indicates a CONFIDENTIALITY impact of High with a Local attack vector and Low privileges required, and no user interaction. The documentation does not provide exp...

CVE-2023-35342

Technical details for CVE-2023-35342 are not provided in the supplied documents; no affected product/version/root-cause/mitigation is specified here. Monitor for updates in the connected sources.

CVE-2024-30094

Technical details about CVE-2024-30094 (RRAS remote code execution) are not publicly provided in the supplied connected documents. No affected products/versions, exploit information, root cause, or remediation details are present. Monitor for updates.

CVE-2024-38049

Technical details (affected components, exploit vectors, or patch specifics) for CVE-2024-38049 are not provided in the connected documents. No public details are present in the supplied sources; monitor for updates.

CVE-2024-38125

CVE-2024-38125 affects the Windows Kernel Streaming WOW Thunk Service Driver and enables local elevation of privileges. The vulnerability is associated with the Kernel Streaming WOW Thunk Service Driver and can lead to obtaining elevated privileges (SYSTEM). Microsoft has issued fixes in August 2...

CVE-2023-21702

CVE-2023-21702 refers to a Windows iSCSI Service Denial of Service vulnerability. The initial description notes a HIGH (7.5) CVSS v3.1 impact with network attack vector and no user interaction, but the connected documents do not provide additional technical details, affected software versions, ro...

CVE-2023-28276

Technical details for CVE-2023-28276 are not publicly provided in the connected documents; only the NVD entry description is visible. Monitor for updates.

CVE-2023-32055

CVE-2023-32055 is an Active Template Library Elevation of Privilege vulnerability with CVSSv3.1 base score 6.7 (Medium). It is a Local attack requiring HIGH privileges and no user interaction, with impact to confidentiality, integrity, and availability rated High. The entry references a Microsoft...

CVE-2023-35328

Technical details for CVE-2023-35328 are not provided in the supplied documents. No product/version/root-cause/impact/fix information is present here. Monitor for updates from official advisories and connected sources.

CVE-2024-38045

Technical details about CVE-2024-38045 are not publicly provided in the supplied documents. References acknowledge a Windows TCP/IP remote code execution vulnerability but do not specify affected products, root cause, versions, or fixes; monitor for updates.

CVE-2024-38055

Technical details for CVE-2024-38055 (affected component, root cause, impact or fix) are not provided in the connected documents. Monitor for updates from Microsoft and coordinating sources for public details.

CVE-2024-38069

Technical details about CVE-2024-38069 (Windows Enroll Engine Security Feature Bypass) are not provided in the connected documents. The initial description is generic; no affected products/versions or remediation are disclosed here. Monitor for updates from official advisories.

CVE-2024-38114

Technical details for CVE-2024-38114 are not provided in the connected documents. The initial description notes a Windows IP Routing Management Snapin Remote Code Execution vulnerability with CVSS 3.1/8.8, but no affected versions, root cause, or mitigations are included here.

CVE-2024-38141

CVE-2024-38141 is a Windows vulnerability in the Ancillary Function Driver for WinSock that enables local privilege escalation to SYSTEM. Connected sources indicate the issue is tied to the WinSock AF Dvr and that exploitation would require local access with low privileges and no user interaction...