CVE-2013-3900

CVE-2013-3900 describes a remote code execution in the WinVerifyTrust Authenticode verification for PE files. An attacker could modify a signed executable to execute code without invalidating the signature, potentially gaining full control of the system. Microsoft republished this CVE in the Secu...

CVE-2023-36025

CVE-2023-36025 is a Windows SmartScreen Security Feature Bypass vulnerability. Affected product context is Microsoft Windows (SmartScreen). Root cause and impact are described as bypass of SmartScreen with high severity (CVSS v3.1: 8.8, HIGH) affecting confidentiality, integrity, and availability...

CVE-2024-38202

CVE-2024-38202 describes an elevation of privilege in Windows Update that could allow a user with basic privileges to reintroduce mitigated vulnerabilities or bypass some VBS protections. The vulnerability requires an attacker to coax an Administrator or delegated user into performing a system re...

CVE-2023-21549

Technical details for CVE-2023-21549 are not present in the provided documents. The connected entries do not describe affected products/versions or remediation. Monitor official sources for updates on this CVE.

CVE-2023-21563

Technical details (affected product, vulnerable component, root cause, impact, or fixes) are not provided in the connected documents. Please monitor for updates from official advisories.

CVE-2023-21726

Technical details for CVE-2023-21726 are not provided in the supplied documents. No explicit information on affected products, root cause, impact, or fixes. Monitor for updates from official sources.

CVE-2023-21557

CVE-2023-21557 concerns the Windows LDAP (Lightweight Directory Access Protocol) Denial of Service vulnerability. The provided documents identify the affected component as Windows LDAP but do not specify affected product versions, root cause details, exploitation methods, or a concrete fix. Conne...

CVE-2023-21551

Technical details about CVE-2023-21551 are not provided in the supplied documents. Monitor official advisories for updates; no specifics on affected products, impact, or remediation are available here.

CVE-2023-21541

Technical details about CVE-2023-21541 are not provided in the connected documents. Based on available data, no specifics on affected components, root cause, or fixes are included here. Monitor for updates from authoritative sources.

CVE-2023-21556

Technical details about CVE-2023-21556 are not publicly provided in the supplied documents; no affected products, root cause, or fixes are specified here. Monitor for updates from official sources.

CVE-2023-21552

CVE-2023-21552 is documented in an NCSC advisory as a Windows Graphics Component vulnerability (Windows GDI) with CVSS v3.1 base score 7.80, affecting privilege escalation. The NCSC listing confirms its classification as an elevation of privileges issue in Windows Graphics/Graphics Device Interfa...

CVE-2023-21535

CVE-2023-21535 is a Windows SSTP Remote Code Execution vulnerability. The affected component is Secure Socket Tunneling Protocol (SSTP); root cause details are not expanded beyond “SSTP RCE” in the provided documents, but the CVE is rated high (CVSS 8.1) with network access, high confidentiality/...

CVE-2023-21676

CVE-2023-21676 is a Windows LDAP Remote Code Execution vulnerability. The threat involves the Windows LDAP component, with network access as the attack vector and a high-severity impact profile (score 8.8/10; confidentiality, integrity, and availability impact). The available connected documents ...

CVE-2023-21547

CVE-2023-21547 is a vulnerability in the Windows Internet Key Exchange (IKE) Extension causing a Denial-of-Service. Multiple connected sources identify it as a network-‑accessible issue in the IKE protocol that can be triggered remotely without user interaction, with the root cause described as a...

CVE-2023-21561

Technical details about CVE-2023-21561 (affected product/component, root cause, impact, or remediation) are not provided in the connected documents. Monitor for updates from official sources.

CVE-2023-21560

Technical details about CVE-2023-21560 (affected products, root cause, impact, remediation) are not provided in the supplied connected documents. Monitor for official disclosures and vendor advisories; the current set does not specify affected systems or fixes.

CVE-2023-21732

Technical details about CVE-2023-21732 are not publicly provided in the connected documents. Monitor for updates for affected products, versions, payloads, and mitigations as they become available.

CVE-2023-21539

CVE-2023-21539 is described as a Windows Remote Code Execution vulnerability in the Windows authentication path. The connected sources confirm a network-exposed attack surface (vector: network; privileges required: low; user interaction: none) with a high impact on confidentiality, integrity, and...

CVE-2023-38186

CVE-2023-38186 refers to a Windows Mobile Device Management elevation of privilege vulnerability. The vulnerability is discussed in multiple sources (NVD, CVE list, MSRC). Affected software is Windows Mobile Device Management components; underlying root cause details are not fully disclosed in th...

CVE-2023-21543

According to NCSC-2023-0017, CVE-2023-21543 is a Windows Layer 2 Tunneling Protocol (L2TP) remote code execution vulnerability with CVSS v3.1 score 8.10 (impact: executing random code) affecting Windows L2TP components. The CVE is listed among other Windows network‑facing RCE bugs; no specific ex...

CVE-2023-21548

CVE-2023-21548 is a Windows SSTP remote code execution vulnerability. The connected NC Sc doc lists it under Windows SSTP with CVSS 8.10 (network context) and labels it as a SSTP issue; no explicit root-cause details or affected product versions are provided beyond “Windows SSTP.” The initial doc...

CVE-2023-21683

Technical details about CVE-2023-21683 are not provided in the connected documents. Public information on affected products, root cause, or fixes is not present here. Monitor for updates from official sources.

CVE-2023-21750

CVE-2023-21750 is a Windows Kernel EoP issue tied to registry virtualization: a logic bug in CmKeyBodyRemapToVirtual allowed deleting HKLM\Software keys using only KEY_READ and KEY_SET_VALUE rights, bypassing expected DELETE checks. This is a local, privilege-escalation vulnerability within the r...

CVE-2023-21536

CVE-2023-21536 is described in the provided documents as a Windows Event Tracing vulnerability with the impact of access to sensitive data (CVSSv3.1 base score 4.7). The connected sources associate this CVE with Windows Event Tracing and list it among other Windows vulnerabilities, but they do no...

CVE-2023-21682

Technical details about CVE-2023-21682 are not publicly disclosed in the provided connected documents. The materials only reference a Windows PPP information disclosure vulnerability with CVSSv3.1 base score 5.3. Monitor for updates.

CVE-2023-21559

Technical details about CVE-2023-21559 are not provided in the connected documents. The materials reference Windows cryptographic information disclosure generally but do not specify affected products, root cause, exploit status, or fixes. Monitor for updates.

CVE-2023-21681

Technical details about CVE-2023-21681 are not present in the provided connected documents. The supplied items cover generic Microsoft KB updates and an unrelated ENISA entry; monitor for updates and future technical disclosures.

CVE-2023-21555

Technical details for CVE-2023-21555 are not publicly available in the provided Connected Documents or Initial Description. No concrete affected products, root cause, or remediation can be confirmed here. Monitor for updates from official advisories.

CVE-2023-21730

Technical details about CVE-2023-21730 are not provided in the supplied documents; no affected products, versions, root cause, or fixes are disclosed here. Monitor for updates from official sources for further information.

CVE-2023-21537

Technical details about CVE-2023-21537 (affected products, root cause, impact, and fixes) are not provided in the connected documents. Monitor for updates from authoritative sources.

CVE-2023-21527

CVE-2023-21527 is a Denial-of-Service vulnerability in the Windows iSCSI Service. The connected NCSc advisory explicitly lists CVE-2023-21527 under Windows iSCSI with a DoS impact. The initial record assigns CVSS v3.1: 7.5 (Network, High, Availability impact) with no documented exploitation statu...

CVE-2023-21675

CVE-2023-21675 is described in the connected documents as a Windows kernel vulnerability rooted in hive/registry memory corruption. The attack targets HKCU (volatile/hive storage) using out-of-bounds cell indexes to access the _CMHIVE/_HHIVE structures from kernel pool, enabling arbitrary read/wr...

CVE-2023-21679

Technical details about CVE-2023-21679 are not provided in the supplied documents. The connected EUVD/KB entries do not describe affected products, versions, or remediation for this CVE. Monitor for updates from official advisories.

CVE-2023-21546

CVE-2023-21546 is a Windows Layer 2 Tunneling Protocol (L2TP) remote code execution vulnerability. The entry provides a network-exposed, high-severity issue (CVSSv3.1: 8.1, AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H). The initial description and connected documents identify the affected vector as networ...

CVE-2023-38184

CVE-2023-38184 is a Windows LDAP Remote Code Execution vulnerability. The NVD entry lists a CVSS v3.1 base score of 7.5 (High) with Network attack vector, high attack complexity, low privileges required, no user interaction, and impacts to confidentiality, integrity, and availability. The provide...

CVE-2023-21540

CVE-2023-21540 targets Windows Cryptographic Services. The Connected OpenVAS entries corroborate that this CVE is associated with Windows cryptographic components and describe an information-disclosure impact (confidentiality) with a local attack vector. The Initial Description also labels it as ...

CVE-2023-21678

Technical details about CVE-2023-21678 are not publicly provided in the supplied documents. Please monitor for updates from Microsoft and related advisories.

CVE-2023-21733

CVE-2023-21733 affects the Windows Bind Filter Driver and is described as an Elevation of Privilege vulnerability. The CVSS 3.1 metrics indicate LOCAL attack vector, HIGH impact to confidentiality, integrity, and availability, with LOW privileges required and HIGH attack complexity. The connected...

CVE-2023-21680

Technical details about CVE-2023-21680 (Windows Win32k elevation) are not publicly available in the connected documents. Monitor for updates from Microsoft and other sources; wait for confirmed affected products/versions and remediation when disclosed.

CVE-2023-21772

CVE-2023-21772 is a Windows kernel EoP rooted in the registry’s security descriptor lifecycle. The registry virtualization path could free the old security descriptor and then attempt to allocate a new one; if allocation failed, the key could be left without a security descriptor, violating memor...

CVE-2023-21774

CVE-2023-21774 is a Windows Kernel elevation-of-privilege vulnerability tied to Windows Registry security descriptors. The connected analysis notes it stemmed from incorrect security refresh in the Key Control Block (KCB) for certain keys, enabling incorrect access state after hive-related operat...

CVE-2023-21773

Technical details for CVE-2023-21773 are not provided in the supplied documents. Monitor for official advisories for updates and remediation.

CVE-2023-21532

Technical details about CVE-2023-21532 (product, root cause, impact, fixed version) are not publicly provided in the connected documents you supplied. Monitor for updates and additional vulnerability specifics.

CVE-2023-21728

Technical details about CVE-2023-21728 are not publicly provided in the supplied documents. Please monitor for updates from official sources.

CVE-2023-21747

CVE-2023-21747 is a Windows kernel registry vulnerability caused by an out-of-memory error during a highly sensitive hive-unload operation. The issue allowed an attacker with local access to trigger memory allocation failures in a critical path, risking instability and potential misuse of hive st...

CVE-2023-21550

Technical details for CVE-2023-21550 are not provided in the supplied documents. Monitoring for updates is recommended; no specific affected products, impact, or remediation are disclosed here.

CVE-2023-38254

CVE-2023-38254 corresponds to a Denial of Service vulnerability in Microsoft Message Queuing (MSMQ). The available documents identify MSMQ as the affected component and indicate the vulnerability causes availability impact (A) with no confidentiality or integrity impact, and do not provide exploi...

CVE-2023-21525

Technical details for CVE-2023-21525 are not publicly provided in the supplied documents; no affected product/version/exploit information is available here. Monitor for updates from official advisories to obtain specifics and remediation guidance.

CVE-2023-21748

CVE-2023-21748 is a Windows kernel local EoP vulnerability rooted in registry hive memory corruption (HKCU, volatile storage). The blog post chain explains an attack primitive using out-of-bounds hive cell indexes that map to _CMHIVE/_HHIVE structures via a 32-bit cell index, enabling precise der...

CVE-2023-38172

Technical details about CVE-2023-38172 are not present in the provided connected documents. The MSMQ DoS vulnerability is listed, but no affected versions, root cause, exploit information, or remediation are included. Monitor for updates.