1591 matches found
CVE-2025-32713
CVE-2025-32713 corresponds to a heap-based buffer overflow in Windows Common Log File System Driver that enables local privilege escalation for an authorized attacker. The connected sources identify the affected component as the Windows Common Log File System Driver and list the impact as obtaini...
CVE-2025-33054
CVE-2025-33054 affects the Remote Desktop Client and is caused by insufficient UI warnings for dangerous operations, enabling spoofing over the network. Affected product: Microsoft Remote Desktop Client on Windows/Windows Server. Impact is spoofing of the user interface with high CVSS score (3.1:...
CVE-2025-33066
CVE-2025-33066 is associated with Windows Routing and Remote Access Service (RRAS). The connected NCSC advisory lists CVE-2025-33066 under RRAS with an impact of “Execute Random Code” and a network-exploitable vector, indicating a heap-based buffer overflow that could allow remote code execution....
CVE-2024-38165
CVE-2024-38165 corresponds to Windows Compressed Folder Tampering. The Kaspersky advisory confirms a tampering vulnerability in Windows Compressed Folder that can be exploited remotely to spoof the user interface. Public exploits exist per OpenVAS data. Affected products are Windows platforms aff...
CVE-2024-43525
CVE-2024-43525 refers to a Windows Mobile Broadband Driver Remote Code Execution vulnerability. The CVE entry lists a CVSS v3.1 base score of 6.8 (Medium) with an attack vector of Physical, requiring no privileges and no user interaction, and impacting confidentiality, integrity, and availability...
CVE-2024-43646
Technical details are not publicly provided in the supplied documents. Monitor for updates from Microsoft/Microsoft Security Update Guide and NVD.
CVE-2025-49734
CVE-2025-49734 affects Windows PowerShell. The root cause is an improper restriction of the communication channel to intended endpoints, enabling an authorized local attacker to elevate privileges. The CVE maps to a local privilege escalation with high impact (C:H/I:H/A:H) and requires local acce...
CVE-2025-59295
CVE-2025-59295 is a heap-based buffer overflow in Internet Explorer that could allow an unauthenticated attacker to execute code remotely over the network (CVSS 3.1/8.8). The connected MSKB guidance and advisories indicate Windows security updates addressing this class of issue; apply the latest ...
CVE-2023-35631
CVE-2023-35631 is a Win32k Elevation of Privilege vulnerability disclosed for Windows. According to the sources, it can be exploited locally with low privileges and no user interaction to achieve high impact on confidentiality, integrity, and availability (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H; CVS...
CVE-2024-43495
CVE-2024-43495 is the Windows libarchive Remote Code Execution vulnerability. Connected sources identify the affected component as libarchive in Windows, with exploitation described as a local vulnerability in archive_read_support_format_rar.c leading to possible out-of-bounds access and remote c...
CVE-2025-21257
CVE-2025-21257 corresponds to Windows WLAN AutoConfig Service Information Disclosure Vulnerability. The connected documents identify the affected component as the Windows WLAN AutoConfig Service and describe the issue as an information disclosure vulnerability, with local attack requirements (Loc...
CVE-2025-29829
Technical details about CVE-2025-29829 are not provided in the supplied documents. Monitor official updates from Microsoft/NVD for affected products, impact, and mitigations.
CVE-2025-32716
CVE-2025-32716 (Windows Media) is a Windows component vulnerability described as an out-of-bounds read that enables a locally authenticated attacker to elevate privileges. The NCSC advisory lists CVE-2025-32716 under Windows Media with a base impact of 7.80 (Obtaining elevated privileges). No exp...
CVE-2025-47971
CVE-2025-47971 describes a buffer over-read in the Virtual Hard Disk (VHDX) component that can allow a local attacker to elevate privileges. The publicly documented impact is local privilege elevation via a buffer over-read in VHDX; vendors have not provided version-specific affected products in ...
CVE-2025-49724
CVE-2025-49724 is a Use-After-Free vulnerability in Windows Connected Devices Platform Service that can lead to remote code execution over the network. According to initial data, impact is high (C/H/I/A) with CVSS 3.1: AV:N/AC:L/PR:N/UI:R/S:U. Connected documents confirm the vulnerability exists ...
CVE-2024-43536
CVE-2024-43536 affects the Windows Mobile Broadband driver and enables remote code execution through the driver component (execute random code). The CVSS vector from the initial data shows physical attack vector, no user interaction, and no privileges required, with high impact to confidentiality...
CVE-2024-43542
CVE-2024-43542 affects the Windows Mobile Broadband Driver. The vulnerability is described as a Denial-of-Service issue (impact: Availability) with an adjacent attacker and low attack complexity; no root-cause details are provided in the supplied documents. Mitigation/fix: Microsoft has released ...
CVE-2024-49107
Technical details, affected components, and remediation specifics for CVE-2024-49107 are not provided in the supplied connected documents. Monitor for official updates from Microsoft and CVE listings for concrete technical description, impact, and fixes.
CVE-2025-21248
CVE-2025-21248 is a Windows Telephony Service Remote Code Execution vulnerability. The initial and connected documents confirm affected software: Windows Telephony Service component, with exploitable path over the network and required user interaction. CVSS v3.1 base score 8.8 (HIGH), with full i...
CVE-2025-29836
Technical details for CVE-2025-29836 (e.g., affected product, root cause, impact, or remediation) are not provided in the supplied connected documents. Please monitor for updates from official advisories.
CVE-2025-33061
CVE-2025-33061 is a Windows Storage Management Provider vulnerability characterized by an out-of-bounds read that could allow an authorized local attacker to disclose information. The CVE affects the Storage Management component and is rated with LOCAL attack vector and LOW privileges required, w...
CVE-2025-48800
CVE-2025-48800 affects Windows BitLocker. Description confirms a protection mechanism failure that enables bypass of BitLocker with physical access. Connected NC SC advisory lists Windows BitLocker under CVE-2025-48800 with a CVSS v3.1 impact of 6.80 (Physical access required, no user interaction...
CVE-2025-49743
CVE-2025-49743 is a local privilege-escalation vulnerability in the Microsoft Graphics Component caused by a race condition due to improper synchronization when a shared resource is accessed concurrently. The issue affects Windows graphics-related code paths and can let an authorized, local attac...
CVE-2025-55230
CVE-2025-55230 is a local privilege-escalation in the Windows MBT Transport driver (netbt.sys) caused by an untrusted pointer dereference when handling a specific IOCTL. An authenticated local user can elevate to SYSTEM by dereferencing a kernel address via kernel memory access. A PoC exploit exi...
CVE-2024-43538
CVE-2024-43538 affects the Windows Mobile Broadband Driver and is categorized as a Denial-of-Service vulnerability. The connected documents confirm the vulnerability and indicate that Microsoft has published updates related to Windows vulnerabilities, but they do not provide a specific patch deta...
CVE-2025-29839
Technical details about CVE-2025-29839 (affected product/version/root cause/impact/fix) are not publicly provided in the supplied connected documents. Monitor for updates.
CVE-2025-49723
CVE-2025-49723 affects Windows StateRepository API, enabling local tampering of data due to missing authorization in the Server file path. The CNVD/NCSC entries confirm impact as manipulation of data with a high CVSS (8.8) and local attack vector; no public exploitation details are provided in th...
CVE-2025-55234
CVE-2025-55234 (Windows SMB Relay Elevation of Privilege) : The vulnerability relates to SMB Server relay attacks that can escalate privileges when signing and EPA protections are not enabled. Public docs indicate SMB Server signing and Extended Protection for Authentication (EPA) exist as harden...
CVE-2024-43526
Technical details (affected product/version, root cause, impact, or fix) for CVE-2024-43526 are not publicly provided in the supplied connected documents. Monitor for updates from official advisories.
CVE-2024-43534
CVE-2024-43534 is a Windows Graphics Component Information Disclosure vulnerability. The affected product is Windows Graphics Component; the entry indicates an information disclosure impact (confidentiality) with network attack vector, no integrity/availability impact, and user interaction requir...
CVE-2024-43540
CVE-2024-43540 corresponds to a Windows Mobile Broadband Driver Denial of Service vulnerability. Affected component: Windows Mobile Broadband Driver. Root cause/impact: DoS vulnerability; base CVSS not exceeding MEDIUM in the provided metrics, with impact limited to availability. Mitigation: Micr...
CVE-2024-43555
CVE-2024-43555 is listed in the connected documents as affecting the Windows Mobile Broadband Driver with a Denial-of-Service impact (CVSS approx. 6.5). The materials do not provide a detailed root cause, affected subcomponent, exploit vectors, or explicit patch/version information for this CVE. ...
CVE-2025-32714
CVE-2025-32714 maps to an improper access control in Windows Installer enabling local privilege escalation for an authenticated attacker. Connected sources confirm Windows Installer as the vulnerable component and describe the impact as obtaining elevated privileges locally. Remediation is via Mi...
CVE-2025-33060
CVE-2025-33060 affects the Windows Storage Management Provider and is described as an out-of-bounds read that can allow an authorized, locally authenticated attacker to disclose information. The NCSC advisory confirms it under Windows Storage Management Provider with CVSS 5.5 (LOCAL, Privileges L...
CVE-2025-49760
Technical details about CVE-2025-49760 are not publicly provided in the supplied documents. No affected products, CVSS specifics, or remediation are confirmed here. Monitor for updates from official advisories (e.g., MSRC) for concrete information.
CVE-2023-35634
CVE-2023-35634 is a Windows Bluetooth Driver remote code execution vulnerability. The CVE affects the Microsoft Bluetooth driver in Windows 10/11 environments; attacker adjacent to the target could potentially execute code with high impact on confidentiality, integrity, and availability (C/H/I/A)...
CVE-2025-21352
CVE-2025-21352 is a Windows Internet Connection Sharing (ICS) Denial of Service vulnerability. The NVD entry describes a DoS impact with an overall CVSS v3.1 base score of 6.5 (MEDIUM), attack vector Adjacent, attack complexity Low, privileges required None, user interaction None, and high availa...
CVE-2025-29967
Technical details about CVE-2025-29967 are not provided in the connected documents. Public details in the initial description exist, but no accompanying technical specifics (affected versions, root cause, exploit info, or remediation) are available here. Monitor for updates.
CVE-2025-33063
CVE-2025-33063 affects the Windows Storage Management Provider and describes an out-of-bounds read that can let an authorized local attacker disclose information. The vulnerability has a high confidentiality impact (data exposure) with local attack vector; there is no exploitation detail in the I...
CVE-2025-48000
CVE-2025-48000 is described as a use-after-free vulnerability in the Windows Connected Devices Platform Service that allows an authorized local attacker to achieve privilege escalation. The provided documents specify the vulnerable component and the impact (local privilege escalation) but do not ...
CVE-2025-49721
CVE-2025-49721 describes a heap-based buffer overflow in the Windows Fast FAT Driver that enables local privilege escalation for an unauthenticated attacker requiring user interaction. The CVSS 3.1 vector (LOCAL/LOW/NONE UI:R S:U) yields a base score of 7.8 (HIGH) with impact on confidentiality, ...
CVE-2025-59199
CVE-2025-59199 affects the Software Protection Platform (SPP). It is described as an improper access control vulnerability that allows a locally authenticated attacker to escalate privileges (CVSSv3.1 base score 7.8, HIGH; attack vector: LOCAL; privileges required: LOW; user interaction: NONE). T...
CVE-2025-48003
CVE-2025-48003 is a Windows BitLocker security feature bypass vulnerability described as a protection mechanism failure that allows an unauthorized attacker to bypass a security feature with a physical attack. The connected documents do not provide concrete technical details such as root cause, a...
CVE-2025-30385
Technical details about CVE-2025-30385 are not provided in the connected documents. The initial description mentions a Windows use-after-free in the CLFS driver that could elevate privileges, but no vendor/version specifics or fixes are disclosed here. Monitor for authoritative updates.
CVE-2024-43558
CVE-2024-43558 is a Windows Mobile Broadband Driver Denial of Service vulnerability. Affected component: Windows Mobile Broadband Driver. Underlying impact: Denial of Service (availability impact stated). CVSSv3.1 base score 6.5 (Adjac ent attack vector, Low attack complexity, No privileges, No u...
CVE-2025-29956
Technical details (affected components, vulnerable versions, exploitability, and remediation) are not provided in the supplied documents. Monitor for updates from official advisories and vendor advisories for CVE-2025-29956.
CVE-2025-32721
CVE-2025-32721 is a Windows Recovery Driver privilege-escalation flaw caused by improper link resolution before file access. Reported CVSS v3.1 base score 7.3 (High) with local, low-attack-skill requirements, user interaction required, and high impact on confidentiality, integrity, and availabili...
CVE-2025-29960
CVE-2025-29960: Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) can lead to information disclosure over the network. The description specifies network-based access with high confidentiality impact; no explicit product version or fix details are provided in the connected doc...
CVE-2025-49667
Technical details about CVE-2025-49667 are not publicly provided in the supplied connected and initial documents. Monitor for updates from official advisories; current materials only indicate a local privilege escalation via Win32K ICOMP without specifics.