CVE-2025-59230

CVE-2025-59230 describes an improper access control flaw in the Windows Remote Access Connection Manager (RasMan). The vulnerability allows an authenticated local user to elevate privileges to SYSTEM by manipulating RasMan’s IPC handling/ACLs, as reported in multiple sources. Exploitation activit...

CVE-2023-38144

CVE-2023-38144 is a Windows elevation-of-privilege flaw in the Common Log File System (CLFS) driver . The provided description confirms a local, privilege-escalation condition affecting the Windows CLFS driver, with a CVSS v3.1 base score 7.8 (LOCAL, LOW attack complexity, LOW privileges required...

CVE-2023-36033

CVE-2023-36033 is a local elevation-of-privilege flaw in the Windows DWM Core Library. Reported exploits in the wild and public disclosures indicate that an attacker with low privileges and no user interaction could escalate to SYSTEM on affected Windows 10/11 and server platforms. The vulnerabil...

CVE-2023-20569

CVE-2023-20569 concerns a side-channel vulnerability in some AMD CPUs where an attacker may influence the return-address predictor, enabling speculative execution at attacker-controlled addresses and potential information disclosure. The vulnerability is discussed across multiple connected source...

CVE-2023-38146

CVE-2023-38146 (ThemeBleed) is a Windows 11 Theme loading RCE. Theme files reference an msstyles resource; when PACKME_VERSION is 999 Windows loads a signed dll for verification, then re-opens it for execution, creating a time-of-check/time-of-use race that an attacker can exploit by pointing to ...

CVE-2025-21391

CVE-2025-21391 (Windows Storage Elevation of Privilege) describes a local privilege escalation in Windows Storage. The vulnerability allows an attacker with low privileges and no user interaction to elevate to SYSTEM by exploiting a link-following flaw in Windows Storage (root cause described as ...

CVE-2023-38039

CVE-2023-38039 affects curl; the vulnerability arises from unbounded header handling in HTTP responses, allowing an attacker to stream an endless header sequence and exhaust curl’s heap memory. The issue is caused by not enforcing a limit on the number/size of headers; impact is heap memory exhau...

CVE-2023-28229

CVE-2023-28229 is a Windows vulnerability in the Cryptographic Next Generation (CNG) Key Isolation Service described as a privilege-escalation flaw. The CVE entry is linked to active exploitation in practice (CISA KEV) and is categorized with a high impact vector (local access, total impact on co...

CVE-2024-38014

CVE-2024-38014 is a Windows Installer privilege-escalation vulnerability (local, CVSSv3.1: 7.8) that could allow an attacker with low privileges to gain SYSTEM-level access. The issue targets the Windows Installer component and is described in sources as an improper privilege-management flaw. Pub...

CVE-2023-29360

CVE-2023-29360 is a Microsoft Streaming Service untrusted pointer dereference vulnerability that enables local elevation of privilege (attack vector: local, no user interaction; impact: confidentiality, integrity, and availability HIGH). The CVSSv3.1 score is 8.4 (HIGH). Connected materials inclu...

CVE-2023-38161

Technical details for CVE-2023-38161 are not publicly provided in the supplied documents; no confirmed affected product/version/impact/root cause/fix are stated here. Monitor for official advisories.

CVE-2024-43573

CVE-2024-43573 is a Windows MSHTML Platform Spoofing vulnerability. Public sources confirm it affects MSHTML in Windows and that patches were released (Microsoft Update Guide). There is evidence of exploitation in the wild for MSHTML-related spoofing vulnerabilities, including references noting a...

CVE-2023-36036

CVE-2023-36036 is a Windows Elevation of Privilege in the Windows Cloud Files Mini Filter Driver. The flaw is a local, privilege-escalation bug (privileges required: low) that can grant SYSTEM-level access and has high impact on confidentiality, integrity, and availability. Public analyses report...

CVE-2023-38149

CVE-2023-38149 is a Windows TCP/IP Denial of Service vulnerability. The CVE entry describes a network-based issue with impact limited to Availability (I:H) and no Confidentiality/Integrity impact (C:N, I:N) per CVSS 3.1: AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H, base score 7.5 (HIGH). Connected docume...

CVE-2023-35349

Technical details about CVE-2023-35349 are not publicly provided in the connected documents. The MSMQ RCE vulnerability specifics (affected products/versions, exploitability, and fixes) are not disclosed here; monitor official Microsoft advisories and CVE records for updates.

CVE-2025-59211

CVE-2025-59211 concerns exposure of sensitive information to an unauthorized actor in Windows Push Notification Core, enabling an attacker with local access to disclose information. The initial entry identifies a local attack vector with a medium base score (CVSS 3.1: AV=L, AC=L, PR=L, UI=N, S=U,...

CVE-2025-55695

CVE-2025-55695 describes an out-of-bounds read vulnerability in the Windows WLAN Auto Config Service that enables an authorized local attacker to disclose information. The description in the initial document confirms the root cause (out-of-bounds read) and the impact (local information disclosure...

CVE-2023-38171

CVE-2023-38171 — Microsoft QUIC Denial of Service vulnerability is documented in connected advisories (MSRC/GHSA). The issue affects QUIC implementations in Windows environments and can enable a remote attacker to cause a denial-of-service by crafting specific requests to the QUIC component. The ...

CVE-2025-59294

CVE-2025-59294 affects Windows Taskbar Live. The description indicates exposure of sensitive information to an unauthorized actor under physical access, enabling information disclosure. Connected documents provide limited details: the exact vulnerable component context and remediation are not spe...

CVE-2023-36804

CVE-2023-36804 is a Windows GDI elevation-of-privilege vulnerability (local, low privileges required, no user interaction) with a CVSS v3.1 base score of 7.8 (HIGH). Affected component is Windows GDI; impact is high on confidentiality, integrity, and availability. Connected sources corroborate th...

CVE-2023-38143

Technical details for CVE-2023-38143 are not publicly provided in the supplied documents. Affected product/version, root cause, exploitability, and remediation are not specified here; monitor for official disclosures and vendor advisory updates.

CVE-2023-38139

CVE-2023-38139 is a Windows kernel vulnerability tied to registry hive refcount handling, contributing to hive memory corruption. The connected docs note refcount overflow risks in CM_KEY_SECURITY descriptors (and related loader logic), describing how overflow can trigger use-after-free and enabl...

CVE-2024-21351

CVE-2024-21351 is a Windows SmartScreen Security Feature Bypass vulnerability. Public exploits exist; attackers could bypass SmartScreen and inject code, potentially gaining code execution, exposing data, or impacting availability. Relevant advisories note active exploitation and focus on applyin...

CVE-2023-36435

CVE-2023-36435 Microsoft QUIC Denial of Service vulnerability affects the MsQuic/Microsoft QUIC server. It can be exploited remotely over the network to cause a denial of service (availability impact). The CVSS v3.1 base score is 7.5 (Network, Low complexity, No privileges, No user interaction; i...

CVE-2024-35250

CVE-2024-35250 is a Windows kernel‑mode driver LPE in ks.sys (Kernel Streaming core) caused by an untrusted pointer dereference. PoCs and exploits exist (e.g., PoCs on GitHub; KS driver) with active demonstrations, and exploitation has been observed in public material. Microsoft addressed the iss...

CVE-2023-38141

Technical details for CVE-2023-38141 are not provided in the connected documents. The sources discuss Windows Registry/VRegDriver context but do not specify affected products/versions, root cause, impact, or fixes for this CVE. Monitor for official disclosures.

CVE-2025-59204

CVE-2025-59204 concerns Windows Management Services and is triggered by use of an uninitialized resource, leading to local information disclosure. The impact is confidentiality loss with local attack vector (required local access, no user interaction). The connected documents confirm Windows secu...

CVE-2025-54917

CVE-2025-54917 is a network-exploitable issue in Windows MapUrlToZone that enables circumvention of a security mechanism. The CVSS v3.1 base score is 4.3 (NETWORK, LOW attack complexity, NONE privileges, UI required) with a LOW confidentiality impact. The Connected documents indicate this CVE map...

CVE-2024-21429

The CVE-2024-21429 entry covers a remote code execution vulnerability in the Windows USB Hub Driver. According to the description, the issue affects the USB Hub Driver and could lead to arbitrary code execution with high impact on confidentiality, integrity, and availability. Exploitation details...

CVE-2024-49039

CVE-2024-49039 is a Windows Task Scheduler privilege-escalation vulnerability. An authenticated local attacker can elevate privileges outside of AppContainer and access privileged RPC functions via the Task Scheduler, enabling local privilege escalation with high impact (CVE-2024-49039). There ar...

CVE-2023-38150

CVE-2023-38150 is a Windows kernel elevation of privilege vulnerability. The CVE is categorized under Windows Kernel with a CVSS v3.1 base score of 7.8 (High). It is a local attacker exploit requiring low privileges and no user interaction, with a local attack vector, and can lead to Obtaining In...

CVE-2023-36577

CVE-2023-36577 concerns the Microsoft WDAC OLE DB provider for SQL Server. Public descriptions indicate a remote code execution vulnerability in this WDAC OLE DB provider, enabling an attacker to execute arbitrary code on a vulnerable system. The CVE is characterized with a Network attack vector,...

CVE-2024-21340

Technical details for CVE-2024-21340 are not provided in the supplied documents. Monitor for updates.

CVE-2025-26633

CVE-2025-26633 is a local-privilege-escalation in Microsoft Management Console (MMC) caused by improper neutralization in how MMC loads language-twin .msc files. A malicious “evil twin” .msc in a language directory can execute payloads with the user’s privileges when a user opens a legitimate MMC...

CVE-2023-38159

Technical details for CVE-2023-38159 are not provided in the connected documents. Public details (affected software, impact, and mitigations) should be consulted from the NVD/Microsoft advisory.

CVE-2023-36602

The CVE-2023-36602 entry maps to a Windows TCP/IP Denial of Service vulnerability with CVSS v3.1 base score 7.5. IBM’s Security Bulletin notes that Windows TCP/IP DoS affects IBM Cloud Pak System Software Suite 2.3.3.0–2.3.3.6 (Intel iFix1), with remediation by upgrading to Cloud Pak System v2.3....

CVE-2023-36722

Technical details (affected product/versions, root cause, exploitability, or fix) for CVE-2023-36722 are not provided in the supplied connected documents; monitor for updates.

CVE-2023-36711

Technical details about CVE-2023-36711 are not publicly provided in the supplied documents. Monitor for official advisories for affected products, impact, and fixes.

CVE-2025-33073

CVE-2025-33073 is a network-accessible elevation of privilege in the Windows SMB Client caused by improper access control in the SMB protocol stack. The initial description confirms privilege escalation with network access. Connected documents provide concrete exploit presence: PoCs and proof‑of‑...

CVE-2023-36567

Technical details for CVE-2023-36567 are not publicly provided in the supplied documents. Monitor for updates from official advisories; current entries mention Windows Deployment Services information disclosure but lack specifics on affected components or fixes.

CVE-2023-36436

CVE-2023-36436 is a Windows MSHTML Platform Remote Code Execution vulnerability. The CVSS 3.1 vector (AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) yields a base score of 7.8 (HIGH) with a LOCAL attack vector, requiring user interaction and granting high impact on confidentiality, integrity, and availabil...

CVE-2023-36702

CVE-2023-36702 affects Microsoft DirectMusic. Based on the CVSS 3.1 vector, the vulnerability is a LOCAL, low-complexity exploit that requires user interaction and yields HIGH impact to confidentiality, integrity, and availability. The provided documents identify the affected component only as Di...

CVE-2025-33053

Summary of CVE-2025-33053 : A vulnerability in Windows WebDAV/Internet Shortcut handling allows remote code execution when a vulnerable host opens a crafted .url file that points to a WebDAV share. Exploitation relies on the WebClient service resolving UNC paths via WebDAV and may trigger arbitra...

CVE-2023-36574

CVE-2023-36574 affects Microsoft Message Queuing (MSMQ) with a local, user-interaction–dependent remote code execution vulnerability (CVSS v3.1: AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H; base 7.3). Exploitation status and remediation details are not provided in the supplied connected documents.

CVE-2023-36576

CVE-2023-36576 is a Windows kernel registry/containerization vulnerability in VRegDriver that enabled a container escape via registry virtualization (VrpRegistryCallback) when using differencing/hive layering. The issue related to VrpBuildKeyPath and other path-resolution logic allowed an untrust...

CVE-2024-20666

CVE-2024-20666 is a BitLocker security feature bypass related to the Windows Recovery Environment (WinRE). The connected MSRC/updates data confirm a BitLocker bypass vulnerability and note a Microsoft security update to mitigate it (KBs associated with January 2024 security updates, including Win...

CVE-2023-36589

The CVE-2023-36589 entry corresponds to a Microsoft Message Queuing (MSMQ) Remote Code Execution vulnerability. Public records in connected documents confirm MSMQ is the affected component, with a local attack vector and user interaction required. The CVSS 3.1 base metrics (AV:L, AC:L, PR:L, UI:R...

CVE-2023-36596

CVE-2023-36596 is described as a Remote Procedure Call Information Disclosure Vulnerability with CVSS v3.1 base score 7.5 (HIGH). It is labeled as network-based with low attack complexity and no privileges or user interaction required, and it has a high confidentiality impact. The provided docume...

CVE-2024-38112

CVE-2024-38112 Windows MSHTML Platform Spoofing is a Windows/MSHTML vulnerability exploited in the wild by the Void Banshee group. The issue involves spoofing UI within the MSHTML/IE rendering path, enabling code execution when a user opens a crafted .url payload that references an embedded MHTML...

CVE-2023-36571

CVE-2023-36571 is described as a Microsoft Message Queuing (MSMQ) Remote Code Execution vulnerability. The connected documents confirm MSMQ is the affected component and (from the NVD metrics) the CVSS v3.1 base score is 7.3 (HIGH) with LOCAL attack vector, LOW attack complexity, LOW privileges r...