CVE-2025-21316

Technical details for CVE-2025-21316 are not publicly available in the provided documents. Monitor for updates from Microsoft and threat intelligence sources.

CVE-2023-24906

CVE-2023-24906 concerns a vulnerability in the Microsoft PostScript and PCL6 Class Printer Driver that can lead to information disclosure. The affected component is the PostScript and PCL6 Class Printer Driver; root cause and detailed technical steps are not elaborated in the provided documents b...

CVE-2023-32039

Technical details about CVE-2023-32039 are not provided in the connected documents. Please monitor for updates.

CVE-2023-36871

Technical details for CVE-2023-36871 are not publicly available in the provided connected documents. No vendor/product/version specifics, exploit information, or remediation are included here. Monitor for updates from official sources.

CVE-2024-30005

CVE-2024-30005 relates to the Windows Mobile Broadband Driver remote code execution. Per NCSC, it is listed under Windows Mobile Broadband with a CVSS around 6.8/6.80 and impact described as executing random code. No root-cause or remediation details are provided in the available documents; monit...

CVE-2024-38048

Technical details for CVE-2024-38048 are not publicly provided in the connected documents. Please monitor for updates; the supplied sources do not include affected products, root cause, impact, or remediation specifics.

CVE-2024-38085

Technical details about CVE-2024-38085 are not provided in the supplied documents; no affected products, root cause, or mitigations are disclosed here. Monitor for updates from Microsoft and related CVE references.

CVE-2024-43546

CVE-2024-43546 is a Windows Cryptographic Information Disclosure Vulnerability affecting Windows Cryptographic Services. The connected documents confirm Microsoft released October 2024 security updates (e.g., KB5044284, KB5044285, KB5044273, KB5044288, etc.) to fix this issue across Windows 11/10...

CVE-2025-21247

CVE-2025-21247 is a MapUrlToZone security bypass in Windows. Description: Improper resolution of path equivalence allows a network attacker to bypass a security feature. CVSS: 3.1, Network attack, Low complexity, No privileges required, User interaction required, Confidentiality impact Low; Integ...

CVE-2025-21269

CVE-2025-21269 is described as a Windows HTML Platforms Security Feature Bypass vulnerability. Connected CNVD/NCSC/KB entries reference a Windows HTML Platforms security feature bypass without detailed exploit steps; the Initial metrics show CVSS 3.1 (4.3, Network, UI: Required). Exploitation spe...

CVE-2025-21317

CVE-2025-21317 is a Windows Kernel Memory Information Disclosure vulnerability with CVSS 3.1/5.5 (LOCAL, LOW complexity, LOW privileges) and has the potential to expose confidential data from kernel memory. Connected documents confirm a Windows Kernel Memory Information Disclosure issue and indic...

CVE-2025-24062

CVE-2025-24062 describes an input-validation flaw in Windows DWM Core Library that enables local elevation of privileges by an authenticated attacker. The incident is documented by Microsoft and CVE listings, which indicate a high-severity, local-privilege-elevation issue. Remediation is provided...

CVE-2025-24995

CVE-2025-24995 is a heap-based buffer overflow in the Kernel Streaming WOW Thunk Service Driver that allows a locally authorized attacker to elevate privileges. The NVD entry confirms the vulnerable component and impact (local privilege elevation; high severity). Public references point to Micros...

CVE-2023-21702

CVE-2023-21702 refers to a Windows iSCSI Service Denial of Service vulnerability. The initial description notes a HIGH (7.5) CVSS v3.1 impact with network attack vector and no user interaction, but the connected documents do not provide additional technical details, affected software versions, ro...

CVE-2023-32041

CVE-2023-32041 concerns a Windows Update Orchestrator Service information disclosure vulnerability. The provided documents do not include concrete technical details (affected products/versions, root cause, exploitability, or fixes). Monitor for updates.

CVE-2023-33166

No public technical details for CVE-2023-33166 are provided in the connected documents. The initial description offers a generic RPC DoS label; monitor for updates for any affected products, versions, or fixes.

CVE-2023-35312

The CVE-2023-35312 entry concerns Microsoft VOLSNAP.SYS with local access privilege escalation. Based on the provided metrics, the vulnerability supports LOCAL attack vector, requiring LOW privileges and no user interaction, with HIGH impact on confidentiality, integrity, and availability (CVSS 3...

CVE-2023-35318

Technical details about CVE-2023-35318 are not provided in the supplied documents; no affected products, root cause, or remediation are disclosed here. Monitor for updates.

CVE-2023-35320

CVE-2023-35320 corresponds to a Windows vulnerability described as an elevation of privilege in Connected User Experiences and Telemetry. Connected documents provide a high‑level reference and list this CVE among Windows vulnerabilities, noting an elevation of privilege with vague, non‑specific d...

CVE-2023-35357

CVE-2023-35357 is a Windows Kernel local privilege escalation stemming from registry hive memory corruption. The material shows how an attacker can leverage an out-of-bounds hive cell index to manipulate the CMHIVE/HHIVE, potentially reading/writing kernel memory via hacks like the registry value...

CVE-2024-30076

Technical details for CVE-2024-30076 are not publicly available in the provided documents; no affected products, root cause, or remediation are specified here. Monitor for updates from official vulnerability databases.

CVE-2024-30082

Technical details about CVE-2024-30082 are not provided in the connected documents. The supplied materials contain no concrete product/version/root-cause/impact/fix information. Monitor official advisories for updates and remediation guidance.

CVE-2024-38028

Technical details for CVE-2024-38028 are not publicly available in the provided documents; no affected products, root cause, or remediation are specified. Monitor for updates.

CVE-2024-38066

Technical details about CVE-2024-38066 (affected product, root cause, impact, or fix) are not publicly available in the provided connected documents. Monitor for updates from official advisories and vendor pages.

CVE-2024-38130

Technical details for CVE-2024-38130 are not publicly available in the provided documents. No vendor/dependent specifics (product version, root cause, impact, or fixes) are given here. Monitor for official disclosures and updated advisories.

CVE-2024-38143

CVE-2024-38143 is a Windows WLAN AutoConfig Service elevation of privilege vulnerability. The CVSS 3.1 vector indicates an attacker must have physical access (AV:P) and exploit with high complexity, no user interaction, and local access (PR:N, UI:N). The vulnerability could yield elevated privile...

CVE-2024-49104

The connected NCSC advisory (EUVD/NCSC) lists CVE-2024-49104 under Windows Routing and Remote Access Service (RRAS) with a high impact: Execution of arbitrary code (CVSS 8.80). The RRAS entry is described as vulnerable to arbitrary code execution, but the document does not provide root cause spec...

CVE-2025-21224

CVE-2025-21224 refers to a Windows Line Printer Daemon (LPD) Service remote code execution vulnerability. The primary connected sources indicate an attacker could exploit a network remote vector to achieve code execution with no user interaction, with a CVSSv3.1 base score of 8.1 (AV:N/AC:H/PR:N/...

CVE-2025-21280

CVE-2025-21280 is a Windows Virtual Trusted Platform Module Denial of Service vulnerability. Connected documents identify the affected component as the Windows Virtual TPM and note an impact on availability. The NCSC advisory lists a CVSS v3.1 base score of 5.5 (LOCAL attack, LOW privileges requi...

CVE-2025-21319

CVE-2025-21319 is a Windows kernel memory information disclosure vulnerability. The issue is tracked in multiple vulnerabilities and discussed by Microsoft, with a CVSSv3.1 base score of 5.5 (Local attack, Low attack complexity, Low privileges required, no user interaction, High confidentiality i...

CVE-2025-26674

CVE-2025-26674 is a Windows Media heap-based buffer overflow vulnerability that could allow an authorized, locally present attacker to execute code on the system. The CVE has a base score of 7.8 ( HIGH ) and is addressed by Microsoft security updates (e.g., KBs from the April 2025 cycle). See Mic...

CVE-2023-33155

CVE-2023-33155 is a local elevation-of-privilege vulnerability in the Windows Cloud Files Mini Filter Driver. The NVD entry lists a CVSS v3.1 base score of 7.8 (High) with Local attack vector, Low attack complexity, Privileges Required: Low, and no user interaction, affecting the Cloud Files Mini...

CVE-2023-33169

Technical details about CVE-2023-33169 are not publicly provided in the supplied documents. Monitor for updates from official sources; no product/vendor/version/impact information or fixes are included here.

CVE-2023-35319

CVE-2023-35319 is a Remote Procedure Call (RPC) Runtime Denial of Service vulnerability. The NVD entry lists a network attack vector with low attack complexity, requiring low privileges and no user interaction, leading to an availability impact (C:A) of High and no confidentiality or integrity im...

CVE-2023-35642

CVE-2023-35642 corresponds to a Denial-of-Service vulnerability in Windows’ Internet Connection Sharing (ICS) feature. The NVD entry explicitly labels this as an ICS DoS issue, with CVSS 3.1 indicating Adjacent attack vector, no privileges required, no user interaction, and high impact on availab...

CVE-2023-36396

CVE-2023-36396 describes a Windows Compressed Folder remote code execution via a crafted archive that exploits Windows File Explorer to extract a file to an arbitrary relative path. Public exploitation is reported, with evidence of real-world tooling (e.g., a rootkit-like style exploit suite) and...

CVE-2024-38011

Technical details about CVE-2024-38011 (affected products, vulnerable components, root cause, impact, fixes) are not provided in the supplied documents. Monitor for updates from the vendor and security advisories for confirmation and remediation guidance.

CVE-2024-38017

Technical details about CVE-2024-38017 are not provided in the supplied documents. The dataset includes related Windows KBs and other CVEs, but no explicit affected product, root cause, impact, or fix for CVE-2024-38017.

CVE-2024-38022

Technical details about CVE-2024-38022 are not provided in the connected documents; no affected products, root cause, or fixes are described here. Monitor for updates from official sources.

CVE-2024-38053

Technical details for CVE-2024-38053 are not provided in the supplied documents; no affected products, root cause, impact, or remediation are specified here. Monitor for updates.

CVE-2024-38057

Technical details about CVE-2024-38057 (affected product/version, root cause, exploitability, and fix) are not provided in the connected documents. Monitor for updates from vendor/security advisories.

CVE-2024-43638

CVE-2024-43638 is a Windows USB Video Class System Driver Elevation of Privilege vulnerability. The connected sources corroborate a Windows USB Video Driver component as the affected area and indicate that mitigations are released via Microsoft security updates (e.g., November 2024 updates/KBs). ...

CVE-2024-49083

CVE-2024-49083 is a Windows Mobile Broadband Driver elevation-of-privilege vulnerability. The initial data identifies an attacker-controlled escalation with a CVSS v3.1 base score of 6.8 (Privileges Required: None, User Interaction: None, Attack Vector: Physical, Impact: High on confidentiality, ...

CVE-2024-49088

CVE-2024-49088 affects the Windows Common Log File System Driver and is described as a local elevation of privilege vulnerability. The CVSS 3.1 vector (LOCAL, LOW complexity, LOW privileges required) with a base score of 7.8 indicates a high-risk, local-attack scenario resulting in high impact to...

CVE-2025-21227

Technical details for CVE-2025-21227 are not publicly available in the provided documents. No root cause, affected products, or fixes are specified here. Monitor for updates from official advisories and CVE records.

CVE-2025-21233

CVE-2025-21233 is a Windows Telephony Service Remote Code Execution vulnerability. External exploit is mapped to a network attack with user interaction required, high impact (CVSS v3.1: 8.8; Privileges Required: None; User Interaction: Required; Confidentiality/Integrity/Availability: High). Conn...

CVE-2025-21281

CVE-2025-21281 is a Microsoft Windows COM elevation-of-privilege vulnerability. The CVE entry maps to Windows COM with a high CVSS v3.1 score (7.8, LOW_PRIVILEGES, LOCAL vector; no user interaction; confidentiality/integrity/availability impact: HIGH). The connected documents identify the affecte...

CVE-2025-21330

CVE-2025-21330 is a Windows Remote Desktop Services Denial-of-Service vulnerability. The connected sources confirm the vulnerability name and its impact class (DoS) with a CVSS v3.1 base score of 7.5 (Network attack vector, no privileges required, no user interaction). The provided documents do n...

CVE-2025-21375

CVE-2025-21375 is a local elevation-of-privilege in the Windows Kernel Streaming WOW Thunk Service Driver. The vulnerability is identified as a Privilege Escalation with CVSS v3.1 base score 7.8 (HIGH), requiring LOCAL access, LOW attack complexity, and no user interaction; the impact is high to ...

CVE-2025-26670

CVE-2025-26670 is a Windows LDAP use-after-free vulnerability that enables remote code execution over the network. The available connected sources confirm the issue affects Windows LDAP and describe the underlying cause as a use-after-free condition, with the impact explicitly stated as remote co...