942 matches found
CVE-2023-36571
CVE-2023-36571 is described as a Microsoft Message Queuing (MSMQ) Remote Code Execution vulnerability. The connected documents confirm MSMQ is the affected component and (from the NVD metrics) the CVSS v3.1 base score is 7.3 (HIGH) with LOCAL attack vector, LOW attack complexity, LOW privileges r...
CVE-2023-41765
Technical details about CVE-2023-41765 (affected products, root cause, impact, or fixes) are not provided in the supplied documents. Monitor for updates and additional disclosures to assess applicability and remediation.
CVE-2023-36591
Technical details (affected product versions, root cause, exploit information) are not publicly available in the provided documents; monitor for updates from official advisories and vendor advisories.
CVE-2023-36431
CVE-2023-36431 concerns Microsoft Message Queuing (MSMQ) with a Denial of Service impact. The connected CNVD/NVD entries identify MSMQ as the affected component and classify it as a DoS vulnerability, but do not provide concrete root-cause details, vulnerable versions, or remediation steps within...
CVE-2023-36570
Technical details for CVE-2023-36570 are not publicly available in the provided documents. Monitor for updates.
CVE-2023-36718
CVE-2023-36718: Microsoft Virtual Trusted Platform Module Remote Code Execution Vulnerability. CVSS 3.1: Attack Vector LOCAL, Attack Complexity HIGH, Privileges Required LOW, User Interaction NONE, Scope CHANGED, with Confidentiality, Integrity, and Availability impacts rated HIGH. Exploitation s...
CVE-2023-36731
CVE-2023-36731 is a Windows Win32k Elevation of Privilege vulnerability. The CVE entry appears in multiple Microsoft KBs (notably KB5031362) and is listed across OpenVAS checks, indicating it is addressed by Windows security updates in those advisories. The core detail in the provided documents i...
CVE-2023-41774
CVE-2023-41774 describes a Remote Code Execution vulnerability in the Layer 2 Tunneling Protocol (L2TP) for Windows. The vulnerability is identified as a high-severity, network-exposed issue with no user interaction required. Public materials here do not provide explicit exploitation details, aff...
CVE-2023-36573
Technical details (affected products, vulnerable components, exploitability, and remediation) are not publicly provided in the connected documents. Monitor for updates from official CVE/NVD/MSRC sources to obtain concrete details and fixes.
CVE-2023-36723
CVE-2023-36723 is a Windows Container Manager Service Elevation of Privilege vulnerability. Documented by NVD/MSRC and mirrored in ENISA/CNNVD entries, it affects Windows Container Manager Service with local attacker access (CVSS: LOCAL, PR:L, UI:N, C/I/A:H) and low attack complexity, requiring L...
CVE-2023-41772
CVE-2023-41772 is a Win32k Elevation of Privilege vulnerability. A GitHub exploit demonstrates gaining SYSTEM privileges on Windows 10 (from 1809) and Windows 11 via improper access control in Win32k. Public details confirm local privilege escalation, with exploit code provided and no explicit in...
CVE-2023-36575
CVE-2023-36575 corresponds to a Microsoft Message Queuing (MSMQ) Remote Code Execution vulnerability. The NVD entry lists a CVSS v3.1 base score of 7.3 ( HIGH ), with a LOCAL attack vector, LOW privileges required, and USER INTERACTION NEEDED; all three impact metrics (confidentiality, integrity,...
CVE-2023-36590
Technical details about CVE-2023-36590 (affected MSMQ RCE) are not publicly provided in the supplied connected documents. Please monitor for updates from official advisories and vulnerability databases for affected products, vulnerable components, impact, and fixes.
CVE-2023-36594
CVE-2023-36594 affects Windows via a vulnerability in the Windows Graphics Component that enables Elevation of Privilege. The CVSS v3.1 metrics indicate a Local attack vector, Low attack complexity, Low privileges required, and no user interaction, with Confidentiality, Integrity, and Availabilit...
CVE-2023-36710
CVE-2023-36710 is a Windows Media Foundation Core Remote Code Execution vulnerability. The connected sources describe a two-step chain: a WAV file processing flaw in Windows Media Foundation allows two out-of-bounds writes, which an attacker can trigger via a specially crafted WAV played as part ...
CVE-2023-36725
CVE-2023-36725 is a Windows kernel elevation-of-privilege vulnerability. The initial and connected records identify it as a local-privilege escalation issue with a CVSS v3.1 base score of 7.8 (HIGH), requiring LOCAL attack Vector and LOW privileges with NO user interaction; impact to confidential...
CVE-2023-36697
Technical details about CVE-2023-36697 are not publicly available in the provided documents; monitor for updates.
CVE-2023-41766
Technical details for CVE-2023-41766 are not provided in the connected documents. Public information about affected components, root cause, impact, and fixes is not available here. Monitor for updates from official sources.
CVE-2024-43583
CVE-2024-43583 is a Winlogon elevation of privilege vulnerability. Connected PoC details show an attacker with low local privileges can escalate to SYSTEM by abusing the Image File Execution Options (IFEO) registry hijack to replace a legitimate system process with a malicious payload. Affected W...
CVE-2023-36603
Technical details about CVE-2023-36603 are not publicly provided in the supplied documents. Monitor for updates from vendor advisories and vulnerability feeds.
CVE-2023-41771
Technical details about CVE-2023-41771 are not provided in the supplied documents. No concrete product/vendor/version impact or remediation is disclosed here; monitor for updates from the referenced sources.
CVE-2023-36592
CVE-2023-36592 concerns Microsoft Message Queuing (MSMQ) Remote Code Execution. Connected CNVD-2023-84129 notes a remote code execution vulnerability in MSMQ. The CVSS metrics in the Initial document indicate Local attack vector, Low privileges required, User interaction, and high impact across c...
CVE-2023-36605
Technical details for CVE-2023-36605 are not publicly provided in the connected documents. The entry notes a Windows Named Pipe Filesystem Elevation of Privilege vulnerability, but no affected product versions, root cause, or remediation are documented here. Monitor for updates.
CVE-2023-36729
CVE-2023-36729 is a Local Elevation of Privilege vulnerability related to the Named Pipe File System. CVSS 3.1 base score 7.8 (High) with LOCAL attack vector, LOW privileges required, no user interaction, and implications for confidentiality, integrity, and availability all rated High. The availa...
CVE-2023-36902
Technical details for CVE-2023-36902 are not publicly provided in the supplied documents. Monitor for updates from Microsoft and vulnerability feeds.
CVE-2023-41768
CVE-2023-41768 is a Windows Layer 2 Tunneling Protocol remote code execution vulnerability. The issue affects Microsoft Windows L2TP handling and is described as a high-severity, network-based flaw with no required user interaction. The connected sources identify Windows updates released in Oct 2...
CVE-2023-41769
Technical details for CVE-2023-41769 are not publicly provided in the supplied documents. No affected products, exploit info, or remediation confirmed here. Monitor for official disclosures and vendor advisories for concrete impact and fixes.
CVE-2023-41773
CVE-2023-41773 is described in the initial document as a Windows Layer 2 Tunneling Protocol Remote Code Execution vulnerability with high severity (CVSS v3.1: 8.1, network access, no user interaction). Connected documents corroborate that this is a Windows L2TP RCE issue; CNVD‑2023‑81881 and NVD ...
CVE-2023-36743
Technical details about CVE-2023-36743 are not provided in the supplied connected documents. The set includes general references and vulnerability listings, but no affected products, root cause, impact, or fixes. Monitor for updates as more information becomes publicly available.
CVE-2023-38166
CVE-2023-38166 is a Windows Layer 2 Tunneling Protocol remote code execution vulnerability. The supplied data states a CVSS v3.1 base score of 8.1 (HIGH), with network attack vector, high attack complexity, no privileges required, no user interaction, and impact to confidentiality, integrity, and...
CVE-2023-36581
CVE-2023-36581 corresponds to a Denial of Service vulnerability in Microsoft Message Queuing (MSMQ). Public records in the connected CNVD entry describe a MSMQ DoS issue, but the available documents do not provide concrete technical details such as affected versions, root cause, specific exploit ...
CVE-2023-36720
CVE-2023-36720 is a DoS vulnerability in Windows Mixed Reality Developer Tools with a CVSS v3.1 base score of 7.5 (HIGH). It requires network access, has no user interaction, and does not require privileges, with the impact limited to availability (I/N; A=HIGH). The available sources identify the...
CVE-2023-36593
Technical details for CVE-2023-36593 are not publicly provided in the supplied documents. Monitor for updates from official advisories (MSRC/NVD) to obtain affected products, impact, and fixes.
CVE-2023-36606
Technical details for CVE-2023-36606 are not publicly available in the provided documents. Monitor for updates from vendor/security advisories.
CVE-2023-36564
Technical details about CVE-2023-36564 are not publicly available in the provided documents. Monitor official advisories for updates on affected products, impact, and available fixes.
CVE-2024-29988
CVE-2024-29988 is a Microsoft Windows SmartScreen security feature bypass vulnerability (MotW bypass) that enables arbitrary code execution when a user opens a zip/executable delivered in a crafted file. Public exploit activity exists (GitHub exploit repository) and reports indicate in-the-wild u...
CVE-2023-36712
Technical details for CVE-2023-36712 are not publicly disclosed in the provided connected documents. Based on available records, no affected products, root cause, or remediation are specified here. Monitor for updates from official advisories.
CVE-2023-36578
CVE-2023-36578: Microsoft Message Queuing (MSMQ) Remote Code Execution vulnerability. The NVD entry confirms MSMQ is affected with a local exploit vector, requiring user interaction, and a CVSS v3.1 base score of 7.3 (HIGH) affecting confidentiality, integrity, and availability. The provided docu...
CVE-2023-36713
The CVE-2023-36713 entry concerns a vulnerability in the Windows Common Log File System Driver that leads to Information Disclosure. According to the NVD entry, the issue has a CVSSv3.1 base score of 5.5 (Medium) with Confidentiality Impact High, and it is a Local, Low-Complexity attack requiring...
CVE-2023-41770
Technical details about CVE-2023-41770 are not provided in the supplied documents. No information on affected products, versions, root cause, impact, or fixes is available. Monitor for updates in the connected feeds.
CVE-2023-36438
Technical details about CVE-2023-36438 are not publicly provided in the connected documents. The OpenVAS entries reference this CVE among many Windows vulnerabilities but do not supply affected products, versions, root cause, or remediation specifics. Monitor for updates.
CVE-2023-36776
Technical details for CVE-2023-36776 are not provided in the supplied documents. No product/version/root-cause/impact/fix details are publicly disclosed here. Monitor for updates from sources in Connected Documents (KBs/OS updates) for remediation.
CVE-2023-36579
Technical details about CVE-2023-36579 (MSMQ DoS) are not publicly provided in the supplied documents. Monitor for updates from official advisories; no affected products, exploitability, or remediation details are stated here.
CVE-2023-36585
Technical details for CVE-2023-36585 are not publicly available in the provided documents. Monitor for updates in official advisories; no affected products, impact, vectors, or fixes can be confirmed from the supplied content.
CVE-2023-36724
CVE-2023-36724 corresponds to a Windows Power Management Service Information Disclosure vulnerability. Affected component: Windows Power Management Service. Root cause and impact: information disclosure with high confidentiality impact; attack vector LOCAL, low complexity, no user interaction req...
CVE-2023-36557
CVE-2023-36557 is identified as a PrintHTML API Remote Code Execution Vulnerability. The primary document describes it as a PrintHTML API RCE with CVSS v3.1 metrics (AV:L, AC:L, PR:N, UI:R, S:U, C:H, I:H, A:H) totaling a base score of 7.8 (HIGH). The exploitation field is listed as null in the in...
CVE-2023-36582
Technical details about CVE-2023-36582 are not publicly available in the provided connected documents. Monitor for updates from official advisories.
CVE-2023-36732
CVE-2023-36732 is a Win32k elevation-of-privilege vulnerability affecting Windows, with a local attack vector, low attack complexity, and low privileges required, and it has a high impact on confidentiality, integrity, and availability per CVSS 3.1 (7.8). The provided records identify the vulnera...
CVE-2023-36572
CVE-2023-36572 is the Microsoft Message Queuing (MSMQ) Remote Code Execution vulnerability. The CNVD entry explicitly notes a remote code execution flaw in MSMQ that an attacker could exploit to run arbitrary code on a targeted system. The MSMQ issue is corroborated by the NVD/NVD-derived descrip...
CVE-2023-36698
Public technical details for CVE-2023-36698 are not provided in the connected documents. The available sources only confirm the vulnerability title/ID; monitor for official disclosures and vendor advisories for precise impact, affected products, and fixes.