942 matches found
CVE-2024-38057
Technical details about CVE-2024-38057 (affected product/version, root cause, exploitability, and fix) are not provided in the connected documents. Monitor for updates from vendor/security advisories.
CVE-2024-43509
CVE-2024-43509 is listed in connected advisories as affecting the Windows Graphics Component with an elevation of privilege impact. The ENISA/NCSC entries corroborate this CVE under Windows Graphics Component and assign an impact/score (7.80) and local, privilege‑required conditions. Concrete det...
CVE-2023-32043
CVE-2023-32043 is a Windows Remote Desktop Security Feature Bypass vulnerability. The available document set confirms the issue as a remote-network vulnerability with no user impact on availability, but with high confidentiality and integrity impact per CVSS v3.1 (score 6.8). The connected source...
CVE-2023-33167
Technical details about CVE-2023-33167 are not publicly provided in the supplied documents. No explicit affected products, root cause, or fixes are described here. Monitor for updates.
CVE-2023-35304
CVE-2023-35304 is a Windows Kernel Elevation of Privilege vulnerability. The NVD entry provides CVSS v3.1 metrics (LOCAL exploit, LOW complexity, LOW privileges required) with high impact on confidentiality, integrity, and availability (base score 7.8). Multiple OpenVAS entries and KB articles re...
CVE-2023-35361
CVE-2023-35361 is a Windows Kernel Elevation of Privilege vulnerability. The provided documents identify the flaw as a local-privilege escalation with high impact (confidentiality, integrity, and availability) but do not supply concrete technical details, affected versions, root cause specifics, ...
CVE-2024-26184
CVE-2024-26184 is a Windows Secure Boot security feature bypass vulnerability. Affected component: Secure Boot in Windows environments. Root cause details are not explicitly provided in the supplied documents; the entry notes a security feature bypass with a CVSSv3.1 base score of 6.8 (Adjac ent ...
CVE-2024-37971
Technical details about CVE-2024-37971 are not publicly available in the provided connected documents. Monitor for updates from Microsoft and NVD for affected products, impact, and remediation; current sources do not specify affected components or fixes within this dataset.
CVE-2024-37984
Technical details for CVE-2024-37984 are not provided in the connected documents. No affected products, root cause, impact, or remediation are specified here. Monitor for updates from Microsoft and other sources for further information.
CVE-2024-38013
Technical details about CVE-2024-38013 are not disclosed in the provided connected documents. The CVE entry exists (Windows Server Backup elevation of privilege), but no affected product versions, root cause, exploitation, or remediation are described here. Monitor for updates.
CVE-2024-38061
Technical details for CVE-2024-38061 (affected products, root cause, impact, fixes) are not provided in the supplied documents. No remediation or exploitation specifics are available here. Monitor for updates.
CVE-2024-38242
CVE-2024-38242: Kernel Streaming Service Driver Elevation of Privilege. A local attacker with low privileges can exploit this to gain SYSTEM-level access without user interaction (per CVSS 3.1: AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H; base 7.8). Microsoft has released updates to fix the issue (e.g., ...
CVE-2024-38246
CVE-2024-38246 affects Windows Win32K (GRFX) with elevation of privilege. The initial record notes local, high-severity context with low privileges required and no user interaction. Connected docs reference Microsoft Windows updates fixing Win32K issues (e.g., KBs 5043064/5043067/5042880/5043080/...
CVE-2022-35747
Technical details for CVE-2022-35747 are not provided in the connected documents. No affected products, root cause, impacts, or fixes are specified beyond the generic description. Monitor for updates for public disclosure and remediation guidance.
CVE-2022-35759
Technical details for CVE-2022-35759 (affected product, root cause, impact, and fix) are not provided in the connected documents. Monitor for updates.
CVE-2023-32037
CVE-2023-32037 is a Windows Layer-2 Bridge Network Driver information disclosure vulnerability. The vulnerability is described as high confidentiality impact with adjacent-network exploitation, no privileges required, and no user interaction. The connected documents do not provide explicit exploi...
CVE-2023-35358
CVE-2023-35358 refers to a Windows kernel registry vulnerability where an unexpected -1 cell index was observed in KCB.KeyCell, indicating that the code assumed at least one key with an allocated node in the key node stack, but differed when using layered/differencing hives and transactions. The ...
CVE-2024-30067
Technical details for CVE-2024-30067 are not provided in the supplied documents. Monitor official disclosures for affected products, impact, and remediation guidance.
CVE-2024-37989
Technical details and affected products for CVE-2024-37989 are not publicly provided in the supplied documents. Monitor for vendor advisories and CVE repositories for updates.
CVE-2024-38046
CVE-2024-38046 is described as a local privilege-escalation vulnerability in PowerShell. The primary public documentation (NVD/NCSC) confirms a local attacker with low privileges could elevate privileges on affected Windows components, with a CVSS v3.1 base score of 7.8 (LOCAL, Privileges Require...
CVE-2024-38065
Technical details about CVE-2024-38065 (affected product/component/impact) are not provided in the supplied documents. No concrete exploit or remediation information is available here. Monitor for official disclosures and updated advisories.
CVE-2024-38248
Technical details for CVE-2024-38248 are not publicly provided in the supplied connected documents. Monitor for updates and authoritative advisories from Microsoft/NVD for affected product, impact, and fixes.
CVE-2023-32034
Technical details for CVE-2023-32034 are not publicly available in the provided documents. No specifics on affected products, versions, root cause, impact, or mitigations are included here. Monitor for updates.
CVE-2023-35339
CVE-2023-35339 is a Windows CryptoAPI Denial of Service vulnerability with a CVSS v3.1 base score of 7.5 (NETWORK, LOW attack complexity, NONE privileges, NONE user interaction, HIGH availability impact). The provided records do not specify affected versions, root cause details, exploitation stat...
CVE-2023-35347
Technical details about CVE-2023-35347 are not provided in the supplied documents. Monitor official sources (Microsoft/MSRC) for updates on affected products, impact, and remediation.
CVE-2023-35364
Technical details about CVE-2023-35364 (affected product, root cause, impact, mitigations) are not publicly provided in the supplied documents. Monitor for updates from official advisories; current sources here do not disclose concrete specifics.
CVE-2023-36399
CVE-2023-36399 is a Windows Storage Elevation of Privilege vulnerability with a CVSS v3.1 base score of 7.1 (HIGH). It requires local access (AV:L) with low attack complexity (AC:L) and low privileges (PR:L), no user interaction (UI:N). Impact is high on integrity and availability, with no confid...
CVE-2024-30069
Technical details for CVE-2024-30069 are not provided in the connected documents. Public information about affected products, root cause, exploitation, and remediation is not present here. Monitor official sources for updates.
CVE-2024-37973
Technical details about CVE-2024-37973 are not provided in the connected documents. The supplied materials reference related items (e.g., CVE-2024-38058) but do not disclose affected products, root cause, impact, or fixes for CVE-2024-37973. Monitor for updates.
CVE-2024-38010
Technical details (affected product, root cause, impact, fixes) for CVE-2024-38010 are not provided in the supplied documents. Monitor for updates from official advisories.
CVE-2024-38025
Technical details about CVE-2024-38025 are not provided in the supplied connected documents; no vendor/product/version/root-cause/impact/fix details are visible. Monitor for updates in case additional information becomes available.
CVE-2024-43518
CVE-2024-43518 is associated with Windows Telephony Server, categorized (in the ENISA/NCSC context) as a high-severity remote code execution vulnerability with an 8.80 CVSS score and impact of executing arbitrary code. The connected advisory set indicates Microsoft has issued updates to fix Windo...
CVE-2023-35338
Technical details for CVE-2023-35338 (affected components, root cause, exploits, or fixes) are not provided in the connected documents. Monitor for updates from official sources.
CVE-2023-35641
CVE-2023-35641 is an Internet Connection Sharing (ICS) remote code execution in Windows. Connected sources confirm affected component (Windows ICS) and classify the impact as remote code execution with the attacker needing adjacent network access, no user interaction, and no privileges required (...
CVE-2023-36696
CVE-2023-36696 affects the Windows Cloud Files Mini Filter Driver and is described as an Elevation of Privilege vulnerability. The issue is exploitable locally (AV:L, PR:L) with no user interaction required and could lead to high impact (C:H/I:H/A:H) as per CVSS3.1. Connected sources (ENISA EUVD,...
CVE-2024-30093
Technical details about CVE-2024-30093 are not provided in the supplied documents; no affected products, root cause, impact, or fixes are specified.
CVE-2024-38034
Public technical details for CVE-2024-38034 are not provided in the connected documents. The sources reference related updates and other CVEs but do not specify affected products, versions, root cause, or remediation for this CVE. Monitor for updates.
CVE-2024-38146
CVE-2024-38146 affects the Windows Layer-2 Bridge Network Driver. The CVSS 3.1 base score is 7.5 (HIGH) with Network attack, low complexity, no privileges, no user interaction, and high availability impact. Descriptions in connected OpenVAS items corroborate a DoS impact on Windows Layer-2 Bridge...
CVE-2024-43511
Technical details about CVE-2024-43511 are not provided in the supplied documents. Public information beyond basic CVSS data is not included here; monitor for updates.
CVE-2024-43514
Technical details about CVE-2024-43514 are not publicly provided in the connected documents; they reference fixes but do not describe root cause, vectors, or affected versions. Monitor for updates.
CVE-2023-33173
Technical details about CVE-2023-33173 are not provided in the supplied documents. No specific affected products, root causes, or fixes are disclosed here. Monitor for updates from official advisories.
CVE-2023-35298
CVE-2023-35298 is a HTTP.sys Denial of Service vulnerability affecting Windows, with the HTTP.sys component as the vulnerable element. The provided documents identify the vulnerability as a DoS risk (CVSS v3.1 base score 7.5, HIGH) and confirm exposure via network without user interaction. Public...
CVE-2023-35326
CVE-2023-35326 (Windows CDP User Components Information Disclosure) affects Windows CDP User Components and is rated CVSS v3.1 base 5.5 (LOCAL, Privileges Low, Confidentiality High). Evidence from NVD shows Information Disclosure vulnerability with Local access and high confidentiality impact; Mi...
CVE-2024-37974
Technical details about CVE-2024-37974 are not provided in the given documents. The connected items mention related issues (e.g., BitLocker / Secure Boot references) but do not reveal affected products, root cause, or remediation for this CVE. Monitor for updates.
CVE-2024-37988
Technical details for CVE-2024-37988 are not publicly available in the provided documents. No information on affected products, root cause, impact, or fixes is present here. Monitor for updates from the referenced sources and connected advisories.
CVE-2024-38051
Technical details about CVE-2024-38051 (Windows Graphics Component RCE) are not provided in the connected documents. Monitor for updates from official advisories to obtain affected products, root cause, and remediation information.
CVE-2023-32045
Technical details about CVE-2023-32045 are not provided in the supplied documents. For updates and potential remediation, monitor official advisories (MSRC) and NVD entries.
CVE-2023-35341
Technical details for CVE-2023-35341 are not publicly available in the provided documents. Monitor for updates from official sources (e.g., vendor advisories, CVE records) to obtain affected products, impact, and remediation information.