CVE-2024-43528

CVE-2024-43528 is a Windows Secure Kernel Mode elevation of privilege vulnerability with local access and no user interaction required. Affects Windows Secure Kernel Mode; impact is obtaining elevated rights (high confidentiality/integrity/availability impact). The provided documents do not inclu...

CVE-2024-38059

CVE-2024-38059 is a local elevation-of-privilege affecting the Win32K subsystem in Windows. Sources show CVSS v3.1 base score 7.8 ( HIGH ), with LOCAL exploit, LOW attack complexity, LOW privileges required, and NONE for user interaction; impact is HIGH on confidentiality, integrity, and availabi...

CVE-2024-43506

CVE-2024-43506 refers to a Microsoft Windows BranchCache Denial-of-Service vulnerability. The available OpenVAS/NVD context indicates the issue is a network-exploitable DoS (CVSS 3.1: 7.5) affecting Windows BranchCache, with no user interaction required and no privilege escalation per the given d...

CVE-2023-35323

CVE-2023-35323 is a Windows OLE Remote Code Execution vulnerability. Public exploits exist per third-party advisories. Microsoft released updates (e.g., KB5028182, KB5028171 and related KBs) addressing this, affecting Windows client/server platforms; apply the updated security patches to mitigate.

CVE-2024-43574

CVE-2024-43574 is a Microsoft Speech API (SAPI) remote code execution vulnerability. Documents indicate a network-based vector with high impact (execution of code, full confidentiality/integrity/availability impact) and that user interaction is required. Affected component: Microsoft Speech API i...

CVE-2024-38148

CVE-2024-38148 is documented in the provided connected documents as a Windows Schannel/ Transport Layer Security denial-of-service vulnerability (CVSS v3.1 base score 7.5, NETWORK attack vector, no user interaction). The associated impacts in the sources indicate a DoS condition affecting Windows...

CVE-2024-38239

Microsoft Windows Kerberos CVE-2024-38239 is an Elevation of Privilege in the Windows Kerberos component. The connected Windows vulnerability listing assigns CVSS v3.1 base score 7.2 (HIGH) with network attack vector, low attack complexity, and privileges required: HIGH; impact is CONfidentiality...

CVE-2024-43551

Technical details for CVE-2024-43551 (Windows Storage Elevation of Privilege) are not publicly provided in the supplied connected documents. The records confirm the vulnerability exists, but root cause, affected products/versions, exploit specifics, or fixes are not disclosed here. Monitor MSRC u...

CVE-2024-37977

Technical details about CVE-2024-37977 are not provided in the supplied documents. The connected sources reference a Windows Secure Boot security feature bypass and MSRC updates, but no specifics on exploit vectors, affected versions, root cause, or fixes are included.

CVE-2024-38119

CVE-2024-38119 affects Windows Network Address Translation (NAT). The vulnerability allows Remote Code Execution with high impact (cctx: code execution, data/privilege impact) when an attacker on an adjacent network exploits NAT processing. CVSS 3.1 vector: AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H. Mi...

CVE-2024-38136

Technical details about CVE-2024-38136 (Windows Resource Manager PSM Service Extension Elevation of Privilege) are not publicly provided in the connected documents. Monitor for updates from Microsoft and CVE records for affected products and fixes.

CVE-2024-38147

CVE-2024-38147 is a local privilege escalation in the Windows DWM Core Library. The CVSS 3.1 base score is 7.8 (HIGH) with LOCAL attack vector, LOW privileges required, and NONE user interaction, resulting in HIGH impact to confidentiality, integrity, and availability. The initial and connected d...

CVE-2024-43515

CVE-2024-43515 is described in the provided documents as an Internet Small Computer Systems Interface (iSCSI) Denial of Service vulnerability with CVSS v3.1 base score 7.5. The NCSC advisory explicitly lists CVE-2024-43515 under Windows iSCSI as a 7.50 Denial-of-Service, indicating a DoS impact f...

CVE-2024-43523

CVE-2024-43523 refers to a Windows Mobile Broadband Driver remote code execution vulnerability. Microsoft and CVE records indicate fixes are delivered via October 2024 security updates (e.g., KB5044284 and related servicing stacks), with mitigations requiring installation of those updates. The CV...

CVE-2024-43529

CVE-2024-43529 is a Windows Print Spooler Elevation of Privilege vulnerability. The available connected documents confirm impact in Windows Print Spooler/Print Spooler Components with the CVSSv3.1 base score around 7.3 (HIGH) and local, low-privilege, user-interaction-requiring conditions. Exploi...

CVE-2024-43557

CVE-2024-43557 is a Windows Mobile Broadband Driver vulnerability categorized as a Denial-of-Service. The initial entry assigns a CVSS 3.1 base score of 6.5 (AV:A, AC:L, PR:N, UI:N, S:U, C:N, I:N, A:H). Connected documents confirm Windows-wide advisories and fixes addressing this family of issues...

CVE-2024-43565

CVE-2024-43565 corresponds to a Windows NAT Denial of Service vulnerability with a CVSS v3.1 base score of 7.5 (NETWORK attack, LOW attack complexity, NO privileges, NO user interaction). The issue is tied to the Windows NAT component and is listed among multiple Microsoft Windows vulnerabilities...

CVE-2024-38235

CVE-2024-38235 is listed under Windows Hyper-V with a CVSS v3.1 score of 6.50 and impact described as a Denial-of-Service. The connected NCSC advisory confirms Windows vulnerabilities fixed in this cycle; it recommends applying the Microsoft updates per MSRC guidance. The provided documents do no...

CVE-2024-43501

CVE-2024-43501 affects the Windows Common Log File System Driver and is a local elevation-of-privilege vulnerability. Triggers could allow an attacker with low privileges to escalate to obtain high-level privileges, with the issue categorized as high severity (CVSS v3.1 base score 7.8). The CVE i...

CVE-2024-43516

Technical details about CVE-2024-43516 are not provided in the connected documents. Public details appear limited in the supplied sources. Monitor for updates.

CVE-2022-44684

CVE-2022-44684 affects Windows Local Session Manager (LSM). The issue stems from insufficient input validation in the LSM component, enabling denial-of-service via remote exploitation. Impact is a system denial of service; CVSS v3.1 base score 6.5 (Network, Low privileges, No user interaction). A...

CVE-2023-35337

CVE-2023-35337 is a Windows Win32k elevation-of-privilege vulnerability. Connected sources indicate that public exploits exist for this vulnerability and that it affects multiple Windows products/versions (e.g., Windows 10/11 variants and Windows Server 2022) with the Win32k component implicated....

CVE-2024-38247

CVE-2024-38247 is a Windows Graphics Component local elevation of privilege vulnerability. The CVSSv3.1 vector shows Attack Vector: Local, Privileges Required: Low, User Interaction: None, with all of Confidentiality/Integrity/Availability impacts: High. Public documents confirm a Windows patch r...

CVE-2024-38252

Technical details about CVE-2024-38252 are not publicly provided in the supplied documents. The records reference a Windows kernel privilege-elevation issue but do not disclose affected components, root cause, or fixes. Monitor for updates.

CVE-2024-43537

CVE-2024-43537 is a denial-of-service vulnerability in the Windows Mobile Broadband Driver. Public sources confirm an availability impact (DoS) with the CVSS=3.1 vector: Adjacent attacker, Low attack complexity, No privileges required, No user interaction, Scope unchanged, Confidentiality/Integri...

CVE-2023-35329

Technical details about CVE-2023-35329 (affected product, vulnerable component, impact, exploitability, or fix) are not publicly provided in the connected documents. Monitor for updates to disclose concrete specifics.

CVE-2024-43547

CVE-2024-43547 is listed in the Windows Kerberos category as a Windows Kerberos Information Disclosure vulnerability with impact described as Access to sensitive data. The connected documents identify the CVE and its general risk context but do not provide concrete details on affected product ver...

CVE-2024-38234

CVE-2024-38234 is a Windows Network Virtualization vulnerability rated CVSS v3.1 base score 6.5 (Medium) with Adjacent attack vector, Low attack complexity, No privileges, No user interaction, and a High availability impact (Denial of Service). The connected documents confirm the CVE-ID and its D...

CVE-2024-43543

CVE-2024-43543 is a Windows Mobile Broadband Driver Remote Code Execution vulnerability. The initial document states it affects Windows Mobile Broadband Driver and provides CVSS v3.1 metrics: AV/Physical, AC/Low, PR/None, UI/None, S/Unchanged; impacts Confidentiality, Integrity, Availability all ...

CVE-2023-36005

CVE-2023-36005 is documented in connected sources as a Windows Telephony Server Elevation of Privilege vulnerability with a base impact of obtaining increased privileges. The NC SC advisory lists the CVE with a base CVSS-like rating of 7.5 (HIGH) and notes a network-associated context, but the pr...

CVE-2023-33172

Technical details about CVE-2023-33172 are not publicly provided in the supplied documents; no affected products, versions, impact, or mitigations are specified. Monitor for updates.

CVE-2024-43525

CVE-2024-43525 refers to a Windows Mobile Broadband Driver Remote Code Execution vulnerability. The CVE entry lists a CVSS v3.1 base score of 6.8 (Medium) with an attack vector of Physical, requiring no privileges and no user interaction, and impacting confidentiality, integrity, and availability...

CVE-2023-35631

CVE-2023-35631 is a Win32k Elevation of Privilege vulnerability disclosed for Windows. According to the sources, it can be exploited locally with low privileges and no user interaction to achieve high impact on confidentiality, integrity, and availability (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H; CVS...

CVE-2024-43536

CVE-2024-43536 affects the Windows Mobile Broadband driver and enables remote code execution through the driver component (execute random code). The CVSS vector from the initial data shows physical attack vector, no user interaction, and no privileges required, with high impact to confidentiality...

CVE-2024-43542

CVE-2024-43542 affects the Windows Mobile Broadband Driver. The vulnerability is described as a Denial-of-Service issue (impact: Availability) with an adjacent attacker and low attack complexity; no root-cause details are provided in the supplied documents. Mitigation/fix: Microsoft has released ...

CVE-2024-43526

Technical details (affected product/version, root cause, impact, or fix) for CVE-2024-43526 are not publicly provided in the supplied connected documents. Monitor for updates from official advisories.

CVE-2024-43555

CVE-2024-43555 is listed in the connected documents as affecting the Windows Mobile Broadband Driver with a Denial-of-Service impact (CVSS approx. 6.5). The materials do not provide a detailed root cause, affected subcomponent, exploit vectors, or explicit patch/version information for this CVE. ...

CVE-2024-43534

CVE-2024-43534 is a Windows Graphics Component Information Disclosure vulnerability. The affected product is Windows Graphics Component; the entry indicates an information disclosure impact (confidentiality) with network attack vector, no integrity/availability impact, and user interaction requir...

CVE-2024-43538

CVE-2024-43538 affects the Windows Mobile Broadband Driver and is categorized as a Denial-of-Service vulnerability. The connected documents confirm the vulnerability and indicate that Microsoft has published updates related to Windows vulnerabilities, but they do not provide a specific patch deta...

CVE-2024-43540

CVE-2024-43540 corresponds to a Windows Mobile Broadband Driver Denial of Service vulnerability. Affected component: Windows Mobile Broadband Driver. Root cause/impact: DoS vulnerability; base CVSS not exceeding MEDIUM in the provided metrics, with impact limited to availability. Mitigation: Micr...

CVE-2023-35634

CVE-2023-35634 is a Windows Bluetooth Driver remote code execution vulnerability. The CVE affects the Microsoft Bluetooth driver in Windows 10/11 environments; attacker adjacent to the target could potentially execute code with high impact on confidentiality, integrity, and availability (C/H/I/A)...

CVE-2024-43558

CVE-2024-43558 is a Windows Mobile Broadband Driver Denial of Service vulnerability. Affected component: Windows Mobile Broadband Driver. Underlying impact: Denial of Service (availability impact stated). CVSSv3.1 base score 6.5 (Adjac ent attack vector, Low attack complexity, No privileges, No u...