CVE-2024-26214

CVE-2024-26214 affects the Microsoft WDAC ODBC Driver and is described as a remote code execution vulnerability. According to the CVE entry, the vulnerability has a CVSS v3.1 base score of 8.8 (HIGH) with Network attack vector, No privileges required, User interaction required, and impacts to con...

CVE-2024-21377

Technical details for CVE-2024-21377 are not available in the provided documents. The entries reference the CVE but do not specify affected products, root cause, impact, or fixes. Monitor for official disclosures and published remediation guidance.

CVE-2024-21304

Technical details about CVE-2024-21304 are not provided in the supplied documents. Monitor for updates as new public information becomes available.

CVE-2025-21204

CVE-2025-21204 affects Windows Update Stack with improper link resolution before file access, enabling local privilege elevation for an authenticated user. Public documentation confirms the vulnerability and that Microsoft released fixes as part of April 2025 updates; patches include OS updates t...

CVE-2024-20653

Technical details about CVE-2024-20653 (affected product, specific component, root cause, impact, and remediation) are not publicly provided in the connected documents you supplied. Monitor for updates from official advisories to confirm affected software and fixes.

CVE-2024-21355

CVE-2024-21355 is a Microsoft Message Queuing (MSMQ) Elevation of Privilege vulnerability. The initial entry indicates a local attack vector with high impact: CVSS 3.1 base score 7.0, attack vector Local, attack complexity High, privileges Required LOW, no user interaction, and impact on confiden...

CVE-2024-21439

CVE-2024-21439 is a Windows Telephony Server Elevation of Privilege vulnerability with a CVSS v3.1 base score of 7.0 (HIGH). Attack vector is LOCAL with HIGH impact on confidentiality, integrity, and availability, and the exploit requires LOW privileges and no user interaction, but the document n...

CVE-2023-32014

CVE-2023-32014 is a Windows Pragmatic General Multicast (PGM) Remote Code Execution vulnerability. The issue affects Windows message-queuing facilities in PGM environments; when the Windows message queuing service is running, a remote, unauthenticated attacker can send a malicious file over the n...

CVE-2024-20654

Technical details for CVE-2024-20654 are not publicly provided in the supplied documents. The materials acknowledge a Microsoft ODBC Driver remote code execution vulnerability but do not specify affected products, versions, impact, or remediation. Monitor for updates.

CVE-2023-35385

Technical details about CVE-2023-35385 are not publicly provided in the supplied documents; no affected products, root cause, or remediation are confirmed here. Monitor for updates from official advisories.

CVE-2023-24949

Technical details for CVE-2023-24949 (affected product/versions, root cause, impact, or fixes) are not publicly provided in the supplied documents. Monitor official advisories and updates from the connected sources for new information.

CVE-2024-21346

CVE-2024-21346 is a Win32k "Elevation of Privilege" vulnerability in Windows. According to the NVD/NCSC data, it affects the Win32k component and can yield increased privileges (CVSSv3.1 base score 7.8, impact = high for confidentiality, integrity, and availability; attack vector = local; privile...

CVE-2023-24954

Public technical details (affected product, root cause, impact, or fixes) for CVE-2023-24954 are not provided in the connected documents. Monitor for updates from official advisories.

CVE-2023-28219

CVE-2023-28219 is a Windows RAS (Remote Access Server) remote code execution vulnerability. The connected Krebs commentary identifies it as a RAS RCE and notes that Microsoft addressed this family of flaws in the April 2023 Patch Tuesday updates, with exploitation more likely for certain vulnerab...

CVE-2024-29996

CVE-2024-29996 affects the Windows Common Log File System Driver. The vulnerability is an Elevation of Privilege issue in CLFS, with a high base CVSS score (3.1, 7.8). It is exploitable locally, requires low privileges, and does not require user interaction. The impact is rated as high for confid...

CVE-2023-29335

CVE-2023-29335 – Microsoft Word Security Feature Bypass Vulnerability is documented with concrete remediation in Microsoft Word updates. Affected product: Word (Office). The issue is a security feature bypass (not a traditional memory/remote-code-exec hole) and has a CVSSv3.1 base score of 7.5 (N...

CVE-2024-29995

CVE-2024-29995 is a Windows Kerberos Elevation of Privilege vulnerability. The connected data shows it affects the Windows Kerberos component and is rated with CVSSv3.1 base score 8.1 (vector: AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H), indicating network-prone access with high impact and no user inter...

CVE-2023-29362

Technical details about CVE-2023-29362 (affected product, vulnerable component, root cause, impact, or fix) are not provided in the supplied documents. Monitor for updates from official advisories and vulnerability databases.

CVE-2025-24076

CVE-2025-24076 affects the Windows Cross Device Service, enabling local privilege escalation via improper access control. Public material confirms a local, low-privilege attacker can escalate to SYSTEM by exploiting DLL handling in the Cross Device Service (e.g., by replacing CrossDevice.Streamin...

CVE-2024-20683

Technical details are not publicly provided in the supplied documents. No specifics on affected products, versions, impact, or fixes are available here; monitor official sources for updates.

CVE-2023-24876

Summary (supported by CNVD-2023-30866): Microsoft PostScript and PCL6 Class Printer Driver has a remote code execution vulnerability. The CNVD entry describes a remote code execution flaw in these Microsoft printer drivers. The CVE-2023-24876 listing on NVD also identifies this as a Remote Code E...

CVE-2024-21363

Technical details for CVE-2024-21363 are not provided in the supplied documents; monitor for updates.

CVE-2024-21362

Technical details for CVE-2024-21362 are not publicly available in the provided documents. No affected products, root cause, or remediation details are disclosed here. Monitor for updates from official sources.

CVE-2024-21342

CVE-2024-21342 is a Windows DNS Client Denial of Service vulnerability. Connected sources confirm the vulnerability affects the Windows DNS Client component and can cause a denial of service (DoS). The CVSS v3.1 base score is 7.5 (HIGH) with network attack vector, no authentication, no user inter...

CVE-2024-20663

Technical details about CVE-2024-20663 are not provided in the supplied documents. No confirmed affected products, versions, root cause, or remediation are disclosed; monitor for updates.

CVE-2024-20687

CVE-2024-20687 is a DoS vulnerability in the Microsoft AllJoyn API. The NVD entry notes a network-based attack with low complexity that results in availability impact (I: C, A: C? actually A). The provided metrics show CVSS 3.1 base score 7.5, vector AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H, indicatin...

CVE-2024-21320

CVE-2024-21320 is a Windows themes spoofing vulnerability with public detail: Exploit-DB describes an NTLM hash-leak via a malicious Windows theme, demonstrating how a crafted .theme file can exfiltrate credentials. The NVD entry labels the issue as Windows Themes Spoofing Vulnerability with a CV...

CVE-2023-21692

CVE-2023-21692 is described as a Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution vulnerability. The connected documents provide limited details: they cite PEAP RCE and do not specify affected products, versions, or root cause beyond the general Microsoft PEAP c...

CVE-2024-21314

CVE-2024-21314 relates to Microsoft Message Queuing and is described in CNVD/NVD sources as a Microsoft Message Queuing Information Disclosure Vulnerability. The connected documents explicitly state that the vulnerability allows an attacker to obtain sensitive information from heap memory. No con...

CVE-2023-21769

CVE-2023-21769 is reported as a Microsoft Message Queuing (MSMQ) Denial of Service vulnerability. The initial entry provides a CVSSv3.1 base score of 7.5 (HIGH) with an attack vector of NETWORK, attack complexity LOW, no privileges required, no user interaction, and an impact of NONE for confiden...

CVE-2024-20694

CVE-2024-20694 is described as a Windows CoreMessaging Information Disclosure vulnerability. The initial description provides a CVSSv3.1 vector: Local attack vector, Low attack complexity, Low privileges required, no user interaction, with a High confidentiality impact and a Medium base score (5....

CVE-2024-26219

CVE-2024-26219 is a Denial-of-Service vulnerability in Windows HTTP.sys. The CVSSv3.1 base vector (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) yields a 7.5 HIGH rating, indicating network-based exploitation with no user interaction and potential downtime due to availability impact. Public references ide...

CVE-2024-20681

CVE-2024-20681 affects Windows Subsystem for Linux and enables local elevation of privilege. CVSS v3.1 base score 7.8 (HIGH); attack vector LOCAL, privileges required LOW, user interaction NONE; impacts on confidentiality, integrity, and availability are HIGH. Connected documents reference Window...

CVE-2024-21339

Technical details about CVE-2024-21339 are not publicly available in the provided documents; current sources only repeat the vulnerability title. Monitor for official disclosures and updates.

CVE-2024-49084

CVE-2024-49084 is a Windows Kernel elevation-of-privilege issue (Windows Kernel). The connected sources list it under Windows Kernel with a CVSS v3.1 base score of 7.0 (local attack vector, high impact across confidentiality, integrity, and availability) and indicate the vulnerability allows obta...

CVE-2023-36047

Technical details (affected product/version, root cause, exploitability, or fix) for CVE-2023-36047 are not provided in the connected documents. Monitor for updated advisories from Microsoft and related sources for specifics.

CVE-2024-20658

CVE-2024-20658 is described as a local, elevation-of-privilege vulnerability in the Microsoft Virtual Hard Disk. The CVSS3.1 base shows: attack vector LOCAL, attack complexity LOW, privileges required LOW, user interaction NONE, and impact C (confidentiality), I (integrity), and A (availability) ...

CVE-2023-32019

CVE-2023-32019 is a Windows kernel registry vulnerability arising from hive memory corruption via out-of-bounds registry cell indexes. The provided research shows that with a crafted hive (notably HKCU and app hives) a local attacker can trigger UAF- and memory-corruption primitives that enable r...

CVE-2024-28903

CVE-2024-28903 is listed under Microsoft Windows Secure Boot vulnerabilities with a circumvention of security measure impact. The connected OpenVAS/NCSC entries corroborate that Secure Boot-related fixes were released, but do not provide product/version specifics or a patch identifier. The root c...

CVE-2025-21263

Technical details for CVE-2025-21263 are not publicly provided in the supplied connected documents. The materials reference Windows Digital Media Elevation of Privilege vulnerability but do not describe affected components, root cause, impact specifics, or fixes. Monitor updates from official sou...

CVE-2023-28232

Technical details about CVE-2023-28232 are not publicly provided in the connected documents. Public information is limited to the description; monitor for official advisories and updates from Microsoft for fixes, affected products, and mitigations.

CVE-2023-36903

No technical details for CVE-2023-36903 are provided in the supplied documents; only the vulnerability title is present. Monitor for updates.

CVE-2024-21305

CVE-2024-21305 is a Hypervisor-Protected Code Integrity (HVCI) security feature bypass affecting Windows; the CVE entry notes a local attack surface with high privileges required and no user interaction (per CVSS details). Connected Microsoft documentation confirms the vulnerability and lists it ...

CVE-2023-36398

Technical details about CVE-2023-36398 are not provided in the connected documents. No explicit information on affected products, versions, root cause, or remediation is present. Monitor for updates and rely on the initial vulnerability summary for context.

CVE-2023-23416

Technical details about CVE-2023-23416 are not publicly available in the provided connected documents; monitor official disclosures and vendor advisories for impact, affected products, and fixes.

CVE-2023-24900

CVE-2023-24900 corresponds to a Windows NTLM Security Support Provider Information Disclosure Vulnerability. The provided documents confirm the vulnerability title and CVSS 3.1 base metrics (5.9, MEDIUM) with Network attack vector and no user interaction, but do not supply detailed root-cause des...

CVE-2024-38153

CVE-2024-38153 is a Windows Kernel elevation-of-privilege vulnerability. The CVSSv3.1 base score is 7.8 (High) with Local attack vector, Low attack complexity, Privileges Required: Low, User Interaction: None, and impact on Confidentiality, Integrity, and Availability: High. The vulnerability aff...

CVE-2023-21690

Technical details about CVE-2023-21690 are not publicly available in the provided documents. Monitor for updates.

CVE-2023-23404

Technical details about CVE-2023-23404 are not publicly provided in the connected documents. The available sources summarize the vulnerability at a high level; monitor for updated advisories or vendor patch information for affected products and remediation.

CVE-2023-28218

CVE-2023-28218 relates to a local Elevation of Privilege in the Windows Ancillary Function Driver for WinSock. The vulnerability is described as affecting Windows components with a high impact on confidentiality, integrity, and availability, and requires local access with high attack complexity a...