CVE-2024-38198

CVE-2024-38198 is a Windows Print Spooler elevation-of-privilege vulnerability. The connected data confirms the issue affects Windows Print Spooler Components and is categorized with a HIGH base severity (CVSS 3.1: 7.5) and impact as obtaining elevated privileges. The vulnerability is documented ...

CVE-2024-38223

Technical details for CVE-2024-38223 are not publicly available in the provided documents. No information on affected products, root cause, or fixes is supplied here. Monitor sources for updates.

CVE-2024-49126

CVE-2024-49126 affects Windows Local Security Authority Subsystem Service (LSASS) and enables remote code execution. The CVSS v3.1 base context shows Network attack vector, high impact on confidentiality, integrity, and availability, with no privileges required and no user interaction. Connected ...

CVE-2025-21376

CVE-2025-21376 is described as a Windows LDAP remote code execution vulnerability. The connected AVLEONOV article lists CVE-2025-21376 under Windows LDAP RCE but provides no vendor/product/versions, root cause, exploit details, or patch information in the supplied documents. Therefore, no concret...

CVE-2025-27487

CVE-2025-27487 is a heap-based buffer overflow in Windows Remote Desktop Client that allows an authenticated attacker to execute code over the network (CVSSv3.1: 8.0 HIGH; AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H). Connected sources confirm this vulnerability and reference remote desktop RCE updates. ...

CVE-2025-48817

Technical details about CVE-2025-48817 are not publicly provided in the supplied documents. No vendor/product/versions or mitigations are disclosed here. Monitor official advisories for updates.

CVE-2023-21691

Technical details about CVE-2023-21691 are not provided in the supplied documents. Public information here only reiterates the vulnerability title; no affected products, root cause, impact, or remediation details are included. Monitor for updates.

CVE-2023-24944

CVE-2023-24944 is described as a Windows Bluetooth Driver Information Disclosure Vulnerability. The provided documents confirm the CVE ID and its association with Windows Bluetooth, but do not include concrete technical details in the accessible materials (no published affected versions, root cau...

CVE-2023-28217

CVE-2023-28217 is a Windows NAT Denial of Service vulnerability. The NVD entry lists CVSSv3.1 base score 7.5 (HIGH) with vector CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H. It is network-exploitable with no user interaction, no privileges required, and affects availability only. The connected do...

CVE-2023-29371

Technical details about CVE-2023-29371 are not publicly available in the provided documents. Monitor for updates from vendors and security bulletins.

CVE-2024-30095

Technical details about CVE-2024-30095 (affected products, root cause, exploitability, or fixes) are not provided in the connected documents. Monitor for updates.

CVE-2024-38060

CVE-2024-38060 is a Windows Imaging Component remote code execution vulnerability. Public documents indicate it is addressed via the July 9, 2024 security updates (e.g., KBs in the July 2024 cycle). The connected MSKB entries reference security updates that address related components (e.g., RADIU...

CVE-2025-26679

CVE-2025-26679 is described as a use-after-free in the RPC Endpoint Mapper Service that allows a locally authenticated attacker to escalate privileges. Connected sources corroborate its existence and categorize the impact as a privilege-escalation flaw within Windows’ RPC Endpoint Mapper componen...

CVE-2025-27475

CVE-2025-27475 is a Windows Update Stack elevation-of-privilege vulnerability. Description: sensitive data stored in improperly locked memory within the Windows Update Stack can enable a locally authenticated attacker to escalate privileges. CVSS v3.1 metrics indicate LOCAL attack vector, HIGH im...

CVE-2025-27732

CVE-2025-27732 is a Windows Graphics Component Elevation of Privilege vulnerability in the Win32K GRFX subsystem. The flaw stems from Sensitive data stored in improperly locked memory in the GRFX path, enabling an authorized, local attacker to elevate privileges. The vulnerability affects Windows...

CVE-2023-35639

CVE-2023-35639 — Microsoft ODBC Driver Remote Code Execution is documented in the CVE entry and corroborated by multiple sources in the connected set as a Windows component vulnerability. In NVD, the CVSSv3.1 base score is 8.8 (HIGH) with a network attack vector, requiring user interaction, and r...

CVE-2024-38134

Technical details about CVE-2024-38134 (Kernel Streaming WOW Thunk Service Driver Elevation of Privilege) are not provided in the included documents. Monitor for updates from Microsoft and CVE databases for affected products, remediation, and known exploits.

CVE-2024-43599

CVE-2024-43599 is listed under Windows Remote Desktop Client as a high-severity (CVSS 8.8) Remote Code Execution vulnerability with impact described as Execute random code. Connected sources confirm this CVE affects the Remote Desktop Client and note that Microsoft has released updates to fix vul...

CVE-2024-49118

CVE-2024-49118 is listed in connected sources as a Windows component vulnerability affecting Microsoft Message Queuing (MSMQ). The entry is documented with an ability to execute arbitrary code (impact: 8.10; attack vector: network) and is categorized under Windows Message Queuing in the CVE lists...

CVE-2025-21307

CVE-2025-21307 concerns the Windows Reliable Multicast Transport Driver (RMCAST) and is described as a remote code execution vulnerability. The CVSS vector indicates network access, no user interaction, and a high impact across confidentiality, integrity, and availability (base score 9.8, CRITICA...

CVE-2025-24055

CVE-2025-24055 is a Windows USB Video Driver vulnerability described as an out-of-bounds read that could allow an authorized attacker to disclose information with a physical attack. The CVSSv3.1 base score is 4.3 (Medium), with privileges required as Low, attack vector Physical, and impact restri...

CVE-2025-25004

CVE-2025-25004 affects Microsoft PowerShell. The connected documents corroborate a local privilege escalation vulnerability due to improper access control, enabling an authorized attacker to obtain elevated privileges on the host. The advisory entries (including NCSC-2025-0313) assign CVSS v3.1/3...

CVE-2025-27727

CVE-2025-27727 affects Windows Installer through an improper link resolution before file access ("link following"), enabling local privilege elevation on an authorized attacker. The issue is evidenced by the CVE record and associated assessments (high impact, local access, user interaction none)....

CVE-2025-50154

CVE-2025-50154 is a Windows File Explorer spoofing vulnerability where Explorer may disclose NTLMv2-SSP hashes by rendering a remote icon for a .LNK or Library-MS that's hosted on SMB, triggering authentication. Multiple connected documents describe attacker-controlled .LNK/.library-ms payloads a...

CVE-2023-29368

CVE-2023-29368 corresponds to a Windows Filtering Platform elevation-of-privilege issue. The CVE entry lists the affected component as Windows Filtering Platform, with a CVSSv3.1 base score of 7.0 (HIGH), indicating local attack vector, high impact to confidentiality, integrity, and availability,...

CVE-2023-36913

Technical details about CVE-2023-36913 are not publicly provided in the supplied documents. No specific affected products, root cause, or remediation are described here. Monitor for updates as new information may be released.

CVE-2024-38101

Technical details about CVE-2024-38101 are not publicly provided in the supplied connected documents. Information about affected components, impact, and fixes is unavailable here. Monitor for updates from official sources to obtain confirmed technical specifics and remediation guidance.

CVE-2024-43629

CVE-2024-43629 affects the Windows DWM Core Library and is an Elevation of Privilege vulnerability. The connected KB/MSRC data confirms the affected component (DWM Core Library) and labels the CVE with a high severity (base score 7.8, local attack, low complexity, privileges required: low) and im...

CVE-2025-21226

Technical details about CVE-2025-21226 are not provided in the supplied documents. No concrete affected components or fixes are stated; monitor for updates.

CVE-2025-24065

CVE-2025-24065 is a vulnerability in the Windows Storage Management Provider causing an out-of-bounds read that can disclose information locally when exploited by an authorized user. The issue is documented with a CVSS v3.1 base score of 5.5 (Medium) and requires local access with low privileges ...

CVE-2025-24988

The CVE-2025-24988 entry affects the Windows USB Video Driver, with an out-of-bounds read vulnerability that enables an authorized attacker with physical access to elevate privileges. Connected sources confirm this CVE name and context and indicate Microsoft has released updates to fix Windows US...

CVE-2025-29812

CVE-2025-29812 is described in connected sources as an Untrusted pointer dereference in Windows Kernel Memory that allows an authorized local attacker to elevate privileges. The vulnerability is associated with Windows Kernel Memory (and, per CVE listings, DirectX Graphics Kernel) and has a base ...

CVE-2023-21700

Technical details for CVE-2023-21700 are not publicly available in the provided documents. No concrete affected products, root cause, or remediation are confirmed here. Monitor official sources for updates and published fixes.

CVE-2023-24857

Technical details for CVE-2023-24857 are not present in the provided connected documents. The materials reference the vulnerability name and Microsoft advisory, but no product/version/impact/fix specifics are included. Monitor for updates.

CVE-2023-32010

CVE-2023-32010 is a Windows Bus Filter Driver elevation-of-privilege vulnerability. Affects Windows components including the Bus Filter Driver; root cause is an elevation of privileges to obtain increased entitlements. Exploitation exists publicly per connected sources; however, the initial docum...

CVE-2023-32044

Technical details for CVE-2023-32044 are not provided in the connected documents; only the vulnerability name is cited. Monitor for updates.

CVE-2024-30002

CVE-2024-30002 is listed in multiple feeds as a Windows Mobile Broadband Driver remote code execution vulnerability affecting the Windows Mobile Broadband component. Connected sources confirm the CVE ID appears under the Windows Mobile Broadband category with a CVSS-like indication of code execut...

CVE-2024-35265

CVE-2024-35265 is described as a Windows Perception Service elevation-of-privilege vulnerability (local, CVSSv3.1 7.0). OpenVAS entries map it to Windows Perception Service with privilege-escalation impact. The connected documents show Microsoft security updates around June 2024, but there is no ...

CVE-2024-38180

CVE-2024-38180 relates to a security feature bypass in Windows SmartScreen. Affected product: Windows SmartScreen (Windows). The CVE is described as a Security Feature Bypass with high impact (C/H/I/A) and a network attack vector requiring user interaction. The initial documents do not provide de...

CVE-2024-38215

The CVE CVE-2024-38215 concerns the Windows Cloud Files Mini Filter Driver and is labeled as an Elevation of Privilege vulnerability with high impact. The available connected data indicates a local-execution vector (attackVector: LOCAL, attackComplexity: LOW) requiring LOW privileges and no user ...

CVE-2024-43627

CVE-2024-43627 affects the Windows Telephony Service and enables Remote Code Execution. Affected component: Windows Telephony Service (Windows OS). Attack vector: network; prerequisites: none; user interaction required (UI: R). Impact per CVSS 3.1: Confidentiality, Integrity, and Availability are...

CVE-2025-21219

CVE-2025-21219 corresponds to a MapUrlToZone Security Feature Bypass in Windows. The Connected data lists this CVE with a CVSS v3.1 base score of 4.3 (Network, Low) and a

CVE-2025-21285

Technical details (affected products, root cause, impact or fixes for CVE-2025-21285 MSMQ DoS) are not included in the provided documents. Monitor updates from Microsoft and CVE/CIRCL references for remedies and exposure.

CVE-2025-21292

CVE-2025-21292 affects Windows Search Service (Windows Search Component) and is categorized as an elevation-of-privilege vulnerability with a CVSS v3.1 base score of 8.8 (HIGH). The connected sources identify the impact as obtaining increased privileges and confirm the vulnerability within Window...

CVE-2025-21318

Technical details for CVE-2025-21318 are not publicly available in the provided documents. Monitor official advisories and vendor bulletins for updates.

CVE-2025-24058

CVE-2025-24058 describes an elevation-of-privilege in the Windows DWM Core Library caused by improper input validation. The vulnerability enables a locally authenticated attacker to escalate privileges (local vector, no user interaction required per CVSS: High, with base score 7.8). Connected sou...

CVE-2025-24084

CVE-2025-24084 affects Windows Subsystem for Linux (WSL2) and is a kernel-level issue caused by an untrusted pointer dereference, enabling local code execution. Evidence in theInitial Description confirms local RCE potential in WSL2. Connected documents corroborate Windows context (WSL2) and prov...

CVE-2025-26686

CVE-2025-26686 is a Windows TCP/IP remote code execution vulnerability caused by sensitive data stored in improperly locked memory. It is network-based with high impact (total compromise potential) and requires user interaction according to the CVSS: network exposure, high complexity, no privileg...

CVE-2025-27490

The CVE-2025-27490 entry describes a heap-based buffer overflow in Windows Bluetooth Service that allows an authorized attacker to elevate privileges locally. Microsoft’s advisories confirm a local-privilege-escalation impact due to a vulnerability in the Bluetooth subsystem, with public fixes re...

CVE-2023-32054

CVE-2023-32054 is referenced in connected content as a local elevation-of-privilege vulnerability related to Shadow Copy restoration. The MagicDot tooling (GitHub: SafeBreach-Labs/MagicDot) includes a Shadow Copy restoration exploit specifically for CVE-2023-32054, described among a package of ro...