CVE-2024-38147

CVE-2024-38147 is a local privilege escalation in the Windows DWM Core Library. The CVSS 3.1 base score is 7.8 (HIGH) with LOCAL attack vector, LOW privileges required, and NONE user interaction, resulting in HIGH impact to confidentiality, integrity, and availability. The initial and connected d...

CVE-2024-38148

CVE-2024-38148 is documented in the provided connected documents as a Windows Schannel/ Transport Layer Security denial-of-service vulnerability (CVSS v3.1 base score 7.5, NETWORK attack vector, no user interaction). The associated impacts in the sources indicate a DoS condition affecting Windows...

CVE-2024-43516

Technical details about CVE-2024-43516 are not provided in the connected documents. Public details appear limited in the supplied sources. Monitor for updates.

CVE-2024-49087

CVE-2024-49087 affects the Windows Mobile Broadband Driver in Windows. It is an information-disclosure vulnerability in the Mobile Broadband component, with CVSS v3.1 base score 4.6 (AV: Physical, AC: Low, PR: None, UI: None, S: Unchanged; C: High, I: None, A: None). Exploitation requires physica...

CVE-2025-21278

CVE-2025-21278 is a Windows Remote Desktop Gateway (RD Gateway) Denial of Service vulnerability. The NVD entry lists a local attack vector with low attack complexity and a high availability impact (CVSS v3.1: AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H; base score 5.5; CNA score 6.2). Exploitation status...

CVE-2025-21300

CVE-2025-21300 affects Windows UPnP Device Host. Connected CNVD data ties the issue to the Windows upnphost.dll component and a Denial of Service impact. Microsoft has published January 2025 security updates to address this family of issues; applying KB5050021 (and related January 2025 updates) i...

CVE-2025-21305

CVE-2025-21305 is documented as a Windows Telephony Service Remote Code Execution vulnerability. The connected CIRCL source explicitly lists CVE-2025-21305 under Windows Telephony Service with an impact described as Execute random code, indicating a code-execution vector in the Telephony service....

CVE-2025-21321

CVE-2025-21321 refers to a Windows Kernel Memory Information Disclosure vulnerability. Documentation confirms it affects Windows kernel memory and was addressed by January 2025 security updates (e.g., KB5050009, KB5050021, KB5049984, KB5049981, KB5049993). The CVSS shows local access with low pri...

CVE-2025-21323

Technical details about CVE-2025-21323 are not publicly available in provided connected documents. Records confirm the CVE exists and is linked to Windows Kernel Memory Information Disclosure, but no affected products, versions, root cause, or fixes are described here. Monitor updates.

CVE-2025-21339

CVE-2025-21339 corresponds to a Windows Telephony Service remote code execution vulnerability. The NCSC listing confirms a high-severity impact (CVSS 3.1: AV Network, AC L, PR None, UI Required, S U, C/H/I/A H) with an overall score of 8.80 and notes that exploitation can lead to executing code i...

CVE-2025-26641

CVE-2025-26641 affects Windows Cryptographic Services, causing Denial of Service via uncontrolled resource consumption over the network. Base score 7.5 (Network, High availability impact). Exploitation status not detailed in the provided connected documents; remediation per Microsoft security upd...

CVE-2025-29842

Technical details (affected product, root cause, impact, fixes) for CVE-2025-29842 are not provided in the supplied connected documents. Monitor for updates from official advisories.

CVE-2025-33057

CVE-2025-33057 is a Windows Local Security Authority (LSA) vulnerability where a null pointer dereference could allow an authorized attacker to cause a network-based Denial-of-Service. Affected component is LSA; impact is DoS over the network. Documented in NVD and corroborated by NC SC/NCSC entr...

CVE-2024-38235

CVE-2024-38235 is listed under Windows Hyper-V with a CVSS v3.1 score of 6.50 and impact described as a Denial-of-Service. The connected NCSC advisory confirms Windows vulnerabilities fixed in this cycle; it recommends applying the Microsoft updates per MSRC guidance. The provided documents do no...

CVE-2024-43523

CVE-2024-43523 refers to a Windows Mobile Broadband Driver remote code execution vulnerability. Microsoft and CVE records indicate fixes are delivered via October 2024 security updates (e.g., KB5044284 and related servicing stacks), with mitigations requiring installation of those updates. The CV...

CVE-2024-49078

Technical details about CVE-2024-49078 are not publicly available in the provided documents. Monitor for updates from Microsoft and CVE feeds for affected components, root cause, and remediation.

CVE-2025-21207

Technical details about CVE-2025-21207 (Windows Cdpsvc DoS) are not publicly disclosed in the provided documents. Monitor updates from Microsoft and CVE pages for affected versions, impact details, and fixes.

CVE-2025-21258

Technical details about CVE-2025-21258 are not publicly provided in the supplied documents. No affected product/version/root cause/exploit or remediation details are present here; please consult Microsoft advisories for updates.

CVE-2025-47973

Technical details about CVE-2025-47973 are not publicly disclosed in the provided documents. No affected products, root cause, or remediation are described here. Monitor for updates from the sources.

CVE-2025-54918

CVE-2025-54918 describes an improper authentication flaw in Windows NTLM that enables a network-authenticated attacker to elevate privileges. The CVSS v3.1 base score is 8.8 (HIGH) with network access, low attack complexity, and privileges required. A PoC exploit exists on GitHub (CVE-2025-54918-...

CVE-2024-38247

CVE-2024-38247 is a Windows Graphics Component local elevation of privilege vulnerability. The CVSSv3.1 vector shows Attack Vector: Local, Privileges Required: Low, User Interaction: None, with all of Confidentiality/Integrity/Availability impacts: High. Public documents confirm a Windows patch r...

CVE-2024-43515

CVE-2024-43515 is described in the provided documents as an Internet Small Computer Systems Interface (iSCSI) Denial of Service vulnerability with CVSS v3.1 base score 7.5. The NCSC advisory explicitly lists CVE-2024-43515 under Windows iSCSI as a 7.50 Denial-of-Service, indicating a DoS impact f...

CVE-2024-43537

CVE-2024-43537 is a denial-of-service vulnerability in the Windows Mobile Broadband Driver. Public sources confirm an availability impact (DoS) with the CVSS=3.1 vector: Adjacent attacker, Low attack complexity, No privileges required, No user interaction, Scope unchanged, Confidentiality/Integri...

CVE-2024-49103

CVE-2024-49103 affects Windows Wireless Wide Area Network Service (WwanSvc). It is an information disclosure vulnerability with CVSS 3.1 (AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N); attacker needs physical access (per the vector). The connected documents confirm the vulnerability description but do not...

CVE-2024-49110

CVE-2024-49110 is listed in the Windows Mobile Broadband driver category as a privilege-escalation vulnerability. It is described with a CVSS v3.1 base score of 6.8 (medium), with physical access as attack vector, no user interaction, and impact to confidentiality, integrity, and availability rat...

CVE-2025-21249

Technical details for CVE-2025-21249 are not publicly available in the provided documents; no affected products, root cause, or remediation are stated here. Monitor for official updates from Microsoft and CVE databases.

CVE-2025-29840

CVE-2025-29840 is a Windows component issue in Windows Media where a stack-based buffer overflow enables remote code execution over the network (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H; CVSSv3.1 base 8.8). The connected sources indicate this is tracked as a Windows Media vulnerability with high sever...

CVE-2025-29959

Technical details about CVE-2025-29959 are not publicly available in the provided connected documents. The initial description notes a RRAS uninitialized resource issue, but no product/version/root-cause/fix specifics are present here; monitor official advisories for updates.

CVE-2025-32724

CVE-2025-32724 affects Windows Local Security Authority Subsystem Service (LSASS). The connected NC SC advisory and MS security-update artifacts identify this as a Denial-of-Service vulnerability with CVSS v3.1 base score 7.5 (NETWORK, LOW complexity, NONE privileges, NONE user interaction) and s...

CVE-2025-33062

CVE-2025-33062 affects the Windows Storage Management Provider and is characterized as an out-of-bounds read that can allow an attacker with local access to disclose information. The NVD entry notes a CVSS v3.1 base score of 5.5 (Local, Low exploit complexity, Privileges Required: Low, Confidenti...

CVE-2024-43557

CVE-2024-43557 is a Windows Mobile Broadband Driver vulnerability categorized as a Denial-of-Service. The initial entry assigns a CVSS 3.1 base score of 6.5 (AV:A, AC:L, PR:N, UI:N, S:U, C:N, I:N, A:H). Connected documents confirm Windows-wide advisories and fixes addressing this family of issues...

CVE-2025-21350

CVE-2025-21350 is a Windows Kerberos Denial-of-Service vulnerability. Connected sources indicate the issue affects Windows Kerberos with a CVSSv3.1 base score of 5.9 (Network, High impact on availability; no confidentiality/integrity impact). The connected documents confirm Microsoft has released...

CVE-2025-32718

CVE-2025-32718 : Integer overflow or wraparound in Windows SMB enables a locally authenticated attacker to elevate privileges. Connected sources confirm impact as local privilege escalation on Windows SMB, with CVSS v3.1 base score 7.8 (HIGH) and local attack vector. Public references in NVD/NCSC...

CVE-2023-35329

Technical details about CVE-2023-35329 (affected product, vulnerable component, impact, exploitability, or fix) are not publicly provided in the connected documents. Monitor for updates to disclose concrete specifics.

CVE-2023-35337

CVE-2023-35337 is a Windows Win32k elevation-of-privilege vulnerability. Connected sources indicate that public exploits exist for this vulnerability and that it affects multiple Windows products/versions (e.g., Windows 10/11 variants and Windows Server 2022) with the Win32k component implicated....

CVE-2024-38252

Technical details about CVE-2024-38252 are not publicly provided in the supplied documents. The records reference a Windows kernel privilege-elevation issue but do not disclose affected components, root cause, or fixes. Monitor for updates.

CVE-2025-29829

Technical details about CVE-2025-29829 are not provided in the supplied documents. Monitor official updates from Microsoft/NVD for affected products, impact, and mitigations.

CVE-2025-29833

Technical details for CVE-2025-29833 are not provided in the connected documents. The EUVD and MSKB entries cover other issues and updates, but none specify affected product/version, root cause, impact, or remediation for this CVE. Monitor for updates.

CVE-2025-33055

CVE-2025-33055 is an information-disclosure vulnerability: an out-of-bounds read in Windows Storage Management Provider could allow an authorized, local attacker to disclose information. Connected sources confirm the flaw and impact but do not provide concrete exploit details or a documented reme...

CVE-2025-33058

CVE-2025-33058 describes an out-of-bounds read in the Windows Storage Management Provider, enabling a locally authorized attacker to disclose information. Affected product/component: Windows Storage Management Provider. Root cause: memory read beyond bounds leading to information disclosure (conf...

CVE-2025-49734

CVE-2025-49734 affects Windows PowerShell. The root cause is an improper restriction of the communication channel to intended endpoints, enabling an authorized local attacker to elevate privileges. The CVE maps to a local privilege escalation with high impact (C:H/I:H/A:H) and requires local acce...

CVE-2025-59295

CVE-2025-59295 is a heap-based buffer overflow in Internet Explorer that could allow an unauthenticated attacker to execute code remotely over the network (CVSS 3.1/8.8). The connected MSKB guidance and advisories indicate Windows security updates addressing this class of issue; apply the latest ...

CVE-2024-38234

CVE-2024-38234 is a Windows Network Virtualization vulnerability rated CVSS v3.1 base score 6.5 (Medium) with Adjacent attack vector, Low attack complexity, No privileges, No user interaction, and a High availability impact (Denial of Service). The connected documents confirm the CVE-ID and its D...

CVE-2024-43543

CVE-2024-43543 is a Windows Mobile Broadband Driver Remote Code Execution vulnerability. The initial document states it affects Windows Mobile Broadband Driver and provides CVSS v3.1 metrics: AV/Physical, AC/Low, PR/None, UI/None, S/Unchanged; impacts Confidentiality, Integrity, Availability all ...

CVE-2024-43547

CVE-2024-43547 is listed in the Windows Kerberos category as a Windows Kerberos Information Disclosure vulnerability with impact described as Access to sensitive data. The connected documents identify the CVE and its general risk context but do not provide concrete details on affected product ver...

CVE-2025-21389

Technical details about CVE-2025-21389 are not publicly provided in the connected documents. Monitor for updates from Microsoft and CVE repositories for affected products, exploitability, and remediation.

CVE-2025-29954

Technical details for CVE-2025-29954 are not publicly provided in the supplied documents. Monitor for official updates from Microsoft (MSRC) and vulnerability feeds as the connected sources are not detailed here.

CVE-2025-29962

Technical details about CVE-2025-29962 are not provided in the supplied documents; no affected products, root cause, or fixes are disclosed here. Monitor for updates.

CVE-2025-29964

CVE-2025-29964 is a Windows Media heap-based buffer overflow that allows a network-exploiting attacker to execute code remotely. The connected NCSC advisory lists this CVE under Windows Media with a high risk score (8.80) and confirms an exploitable path labeled as “Execute random code.” The avai...

CVE-2025-55230

CVE-2025-55230 is a local privilege-escalation in the Windows MBT Transport driver (netbt.sys) caused by an untrusted pointer dereference when handling a specific IOCTL. An authenticated local user can elevate to SYSTEM by dereferencing a kernel address via kernel memory access. A PoC exploit exi...