CVE-2024-28897

CVE-2024-28897 is referenced in connected data as a Windows Secure Boot vulnerability with the label “Circumvention of security measure.” The primary public document (NVD) lists it as a Secure Boot security feature bypass, with a CVSS v3.1 score of 6.8 (Medium) and details like attack vector adja...

CVE-2024-43533

CVE-2024-43533 is a Windows Remote Desktop Client remote code execution vulnerability. The CVSS 3.1 base vector is CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, base score 8.8 (HIGH), with network attack vector, no privileges required, and user interaction needed. Nessus and MSRC entries associat...

CVE-2023-23420

CVE-2023-23420 is a Windows Registry hive memory corruption bug (UAF) tied to transacted key rename. The exploit plan targets the HKCU hive (volatile storage) via a lightweight or KTM transaction sequence that renames a key, then frees keys in a transaction, producing a layout where freed cells c...

CVE-2023-24937

Technical details about CVE-2023-24937 are not provided in the connected documents. Please monitor for updates from official advisories and vulnerability databases.

CVE-2024-26168

CVE-2024-26168 concerns a Secure Boot security feature bypass. The entry explicitly labels it as Secure Boot bypass with a CVSSv3.1 base score of 6.8 (Medium) and a physical attack vector. The breakdown indicates HIGH impact to confidentiality, integrity, and availability, with no user interactio...

CVE-2024-29062

CVE-2024-29062 affects Windows Secure Boot and is described as a Security Feature Bypass. The vulnerability targets the Secure Boot path with an adjacent-attack surface, requiring user interaction and high complexity to exploit, and can impact confidentiality, integrity, and availability. Public ...

CVE-2023-23402

Technical details for CVE-2023-23402 are not publicly available in the provided documents. Monitor for updates from official advisories and connected sources for affected products, impact, and fixes.

CVE-2023-24884

Technical details about CVE-2023-24884 (affected product, vulnerable component, root cause, impact, and fixes) are not publicly provided in the connected documents you supplied. Monitor for updates from official advisories and CVE repositories to obtain concrete remediation guidance.

CVE-2023-24899

CVE-2023-24899 is the Windows Graphics Component Elevation of Privilege vulnerability. The provided documents identify it as a Windows graphics subsystem issue with a CVSS v3.1 base score of 7.0 (HIGH), with a local attack vector, high complexity, and the ability to defeat confidentiality, integr...

CVE-2023-28275

Technical details about CVE-2023-28275 are not publicly provided in the supplied documents. Available references mention the vulnerability title, but no affected product/version, root cause, impact, or patch information in these sources. Monitor for updates.

CVE-2023-36910

CVE-2023-36910 is a remote code execution vulnerability in Microsoft Message Queuing (MSMQ) that can be exploited remotely on affected Windows platforms (Windows 10/11 and Windows Server 2008–2022) without user interaction. The issue is formally described as MSMQ RCE with a high severity rating (...

CVE-2024-26252

CVE-2024-26252 refers to a Windows kernel vulnerability in the rndismp6.sys driver that enables remote code execution. The issue is described as affecting the Windows component rndismp6.sys with a CVSSv3.1 base score of 6.8 (Medium), and usability concerns indicate a physical attack vector, low a...

CVE-2024-43513

CVE-2024-43513 is a BitLocker security feature bypass vulnerability affecting Windows BitLocker. The entry notes a bypass of security measures with a CVSS v3.1 base score of 6.4 (Physical access, High impact for confidentiality, integrity, and availability). The connected Microsoft update guidanc...

CVE-2024-43560

CVE-2024-43560 is a Windows Storage Port Driver elevation-of-privilege vulnerability. A local attacker with low privileges could exploit it to obtain elevated rights (CVE-2024-43560 details: CVSS v3.1 7.8, high impact; affected component: Windows Storage Port Driver). The NCSC advisory confirms M...

CVE-2023-21740

CVE-2023-21740 is a Windows Media Remote Code Execution vulnerability. The CVE is listed in NVD/NVD-derived records with CVSS v3.1 metrics: AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, resulting in a base score of 7.8 (HIGH). The linked OpenVAS entries reference multiple Windows KB updates and include CV...

CVE-2023-24864

CVE-2023-24864 is described in connected documents as an elevation of privilege vulnerability affecting Microsoft PostScript and PCL6 Class Printer Driver. CNVD-2023-28110 and NVD entries reference an elevation of privilege issue in these printer drivers, identifying the vulnerable components but...

CVE-2024-26230

CVE-2024-26230 is a Windows Telephony Server elevation-of-privilege vulnerability. Reported as a local privilege escalation with CVSS 3.1 base score 7.8 (HIGH): vectors/local, attack complexity LOW, privileges required LOW, no user interaction. Impacts on confidentiality, integrity, and availabil...

CVE-2023-28238

CVE-2023-28238 is a Windows vulnerability in the IKE protocol extensions that enables remote code execution over the network. The CVSSv3.1 vector (AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) yields a base score of 7.5 (HIGH). It requires no user interaction, uses a network attack vector, and the attacke...

CVE-2023-36404

CVE-2023-36404 relates to a Windows kernel registry information-disclosure scenario. The bug could allow a local attacker to view the values of certain registry keys without the required permission by loading a differencing hive overlaid on a system hive and having a system component create a sec...

CVE-2023-36408

Technical details for CVE-2023-36408 are not publicly available in the provided documents. No affected products, impact, or fixes are specified here; monitor official advisories and vendor updates for confirmation and remediation guidance.

CVE-2024-26253

CVE-2024-26253 corresponds to a Windows rndismp6.sys remote code execution vulnerability. The entry notes an affected Windows component (rndismp6.sys) and an exploit path that could allow remote code execution with a high impact on confidentiality, integrity, and availability, while the attack ve...

CVE-2023-28237

Technical details for CVE-2023-28237 are not publicly provided in the supplied documents; monitor for updates.

CVE-2024-28902

CVE-2024-28902 is associated with Windows Remote Access Connection Manager and is listed in an ENISA/NCSC-style advisory as a local, low-complexity information-disclosure vulnerability with potential impact to data confidentiality (CVE-2024-28902, Windows Remote Access Connection Manager). The co...

CVE-2024-29061

Technical details about CVE-2024-29061 are not publicly provided in the supplied documents. The records mention a Secure Boot security feature bypass but do not specify affected products, versions, root cause, exploitability, or mitigations. Monitor for updates.

CVE-2024-38144

CVE-2024-38144 is a local elevation-of-privilege vulnerability in the Windows Kernel Streaming WOW Thunk Service Driver. The connected sources state a local attacker could obtain SYSTEM privileges and that exploit code appeared in the TyphoonPWN 2024 event, with a write‑up from SSD Secure Disclos...

CVE-2023-23407

CVE-2023-23407 : Windows PPPoE remote code execution affecting the PPPoE stack. According to the CVE record, the vulnerability enables total impact on confidentiality, integrity, and availability (CVSS 3.1: 7.1, HIGH). Exploitation is classified as adjacent network access with high complexity and...

CVE-2023-32016

Technical details about CVE-2023-32016 are not publicly available in the provided connected documents. Monitor for updates from Microsoft and security feeds for affected products, vulnerable components, and fixes.

CVE-2024-26205

CVE-2024-26205 is a Windows RRAS remote code execution vulnerability. Connected sources corroborate that it is network-exploitable with a high base score (8.8) and requires user interaction, enabling remote code execution with high impact on confidentiality, integrity and availability. The issue ...

CVE-2024-26243

CVE-2024-26243 affects the Windows USB Print Driver and is an elevation of privilege vulnerability. The provided details identify the affected component as Windows USB Print Driver, with CVSSv3.1 base metrics: Local access, High impact on confidentiality, integrity, and availability, Attack Compl...

CVE-2024-26248

CVE-2024-26248 is a Windows Kerberos Elevation of Privilege vulnerability with a CVSS v3.1 base score of 7.5 (Impact: High; Privileges Required: Low; Attack Vector: Network; User Interaction: None). The connected sources list this CVE under Windows Kerberos and assign an impact of Obtaining Incre...

CVE-2024-38131

Technical details about CVE-2024-38131 are not publicly provided in the connected documents. The available material lacks product/version/root-cause/remediation specifics. Monitor official advisories/updates for concrete information.

CVE-2024-21313

CVE-2024-21313 is described as a Windows TCP/IP Information Disclosure Vulnerability. The entry provides a CVSSv3.1 base score of 5.3 (Medium) with network attack vector, high attack complexity, no privileges required, user interaction required, and a privacy-focused impact (Confidentiality: High...

CVE-2024-26171

CVE-2024-26171 is reported as a Windows Secure Boot vulnerability with the impact labeled as circumvention of a security measure (CVSS-like score 6.70). The connected documents corroborate its placement under Windows Secure Boot in the security advisories and vulnerability feeds, but they do not ...

CVE-2024-28900

CVE-2024-28900 is a Windows vulnerability affecting the Windows Remote Access Connection Manager, with information disclosure (confidentiality impact). It is exploitable locally (attack vector: LOCAL) and requires LOW privileges with no user interaction. The CVSS vector in the Initial Description...

CVE-2023-21812

CVE-2023-21812 is a Windows vulnerability in the Common Log File System Driver (CLFS) that enables Elevation of Privilege. The NVD entry lists a CVSS v3.1 base score of 7.8 (HIGH) with LOCAL attack vector, LOW attack complexity, LOW privileges required, and no user interaction; impact is HIGH on ...

CVE-2023-23403

CVE-2023-23403 is Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability. The CVE entry describes a remote code execution flaw in Microsoft’s PostScript and PCL6 Printer Driver. Connected CNVD-2023-30868 corroborates the same driver-based RCE issue; other connected...

CVE-2023-33154

Technical details about CVE-2023-33154 are not publicly available in the provided connected documents. Please monitor official advisories and CVE listings for updates.

CVE-2024-26183

CVE-2024-26183 is a Windows Kerberos Denial-of-Service vulnerability. The CVSS 3.1 base metrics (AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) indicate a NETWORK-exploitable issue with a MEDIUM severity (6.5) and a HIGH impact on availability, requiring LOW privileges and no user interaction. The descript...

CVE-2024-26254

CVE-2024-26254 is a Denial-of-Service in Microsoft Windows Virtual Machine Bus (VMBus). The provided OpenVAS listings confirm VMBus involvement, but do not disclose a concrete root cause, exploit technique, affected product versions, or a remediation in these documents. No patch details are expli...

CVE-2024-28901

Microsoft Windows: CVE-2024-28901 affects the Windows Remote Access Connection Manager. The vulnerability is an information disclosure in RasMan, exploitable locally with low complexity and requiring low privileges; it grants high confidentiality impact and does not affect integrity or availabili...

CVE-2024-28925

CVE-2024-28925 is listed in the Microsoft Windows Secure Boot family as a Secure Boot security feature bypass with high impact (CVSS 3.1: 8.0; Adjacent access, no privileges required, user interaction required). The connected advisory (NCSC) confirms a Windows Secure Boot bypass in the same CVE g...

CVE-2023-21526

Technical details about CVE-2023-21526 are not publicly available in the provided documents. Monitor for updates from official advisories; no specifics on affected products, root cause, impact, or mitigations are provided here.

CVE-2023-21822

Technical details for CVE-2023-21822 are not publicly available in the provided documents. Monitor for updates.

CVE-2023-23417

Technical details about CVE-2023-23417 are not publicly available in the provided documents. No concrete information on affected products/versions, root cause, impact, or fixes is provided here. Monitor for updates from the connected sources.

CVE-2023-24940

Technical details for CVE-2023-24940 are not publicly available in the provided documents. The connected items reference the CVE but do not specify affected products, versions, root cause, or fixes. Monitor for updates.

CVE-2023-35382

Technical details for CVE-2023-35382 are not provided in the connected documents; the material references registry security descriptor refcount and tombstone issues in passing, but no explicit root-cause, affected products, impact, or fixes are given.

CVE-2024-26242

CVE-2024-26242 is a Windows Telephony Server elevation-of-privilege vulnerability. The connected documents indicate a local-privilege escalation with CVSS v3.1 base score 7.0 (AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H). Root cause and exact exploit details are not provided in the sources. Microsoft has...

CVE-2024-28922

CVE-2024-28922 is a Secure Boot security feature bypass vulnerability. CVSS‑3.1 metrics show a physical attack vector, low attack complexity, low privileges required, user interaction needed, with no confidentiality impact, but high integrity impact (base score 4.1, Medium). Connected sources ref...

CVE-2023-21685

The CVE-2023-21685 entry concerns Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution. The connected NVD record provides CVSS 3.1: NETWORK attack vector, LOW attack complexity, NONE privileges required, UI required, and impacts to Confidentiality, Integrity, and Availability (all ...