1591 matches found
CVE-2023-36398
Technical details about CVE-2023-36398 are not provided in the connected documents. No explicit information on affected products, versions, root cause, or remediation is present. Monitor for updates and rely on the initial vulnerability summary for context.
CVE-2024-21305
CVE-2024-21305 is a Hypervisor-Protected Code Integrity (HVCI) security feature bypass affecting Windows; the CVE entry notes a local attack surface with high privileges required and no user interaction (per CVSS details). Connected Microsoft documentation confirms the vulnerability and lists it ...
CVE-2024-38153
CVE-2024-38153 is a Windows Kernel elevation-of-privilege vulnerability. The CVSSv3.1 base score is 7.8 (High) with Local attack vector, Low attack complexity, Privileges Required: Low, User Interaction: None, and impact on Confidentiality, Integrity, and Availability: High. The vulnerability aff...
CVE-2023-23404
Technical details about CVE-2023-23404 are not publicly provided in the connected documents. The available sources summarize the vulnerability at a high level; monitor for updated advisories or vendor patch information for affected products and remediation.
CVE-2024-21306
CVE-2024-21306 is a Microsoft Bluetooth Driver Spoofing vulnerability. It relates to spoofing a Bluetooth HID device and, under certain conditions (e.g., pairing flow), could enable unauthorized keystroke injections. Public PoCs referenced in connected documents show HID-based exploitation via Bl...
CVE-2024-21316
CVE-2024-21316 is a Windows Server vulnerability described as a Key Distribution Service Security Feature Bypass. Documents confirm the issue affects Windows Server/KDS handling and carry a CVSS v3.1 base score of 6.1 (Network, Low attack complexity, High privileges required, User interaction req...
CVE-2025-47827
Technical details for CVE-2025-47827 are not publicly provided in the supplied documents. The initial description notes a Secure Boot bypass via igel-flash-driver, but no additional technical specifics, affected versions, or fixes are included here. Monitor for updates.
CVE-2023-28232
Technical details about CVE-2023-28232 are not publicly provided in the connected documents. Public information is limited to the description; monitor for official advisories and updates from Microsoft for fixes, affected products, and mitigations.
CVE-2024-43513
CVE-2024-43513 is a BitLocker security feature bypass vulnerability affecting Windows BitLocker. The entry notes a bypass of security measures with a CVSS v3.1 base score of 6.4 (Physical access, High impact for confidentiality, integrity, and availability). The connected Microsoft update guidanc...
CVE-2023-21690
Technical details about CVE-2023-21690 are not publicly available in the provided documents. Monitor for updates.
CVE-2024-20691
CVE-2024-20691 is a Windows Themes Information Disclosure vulnerability. CVSS-3.1 metrics indicate Local attack with High Confidentiality impact, base score 4.7, and no user interaction required, but with high attack complexity and low privileges. Exploit details or concrete remediation are not p...
CVE-2024-20699
CVE-2024-20699 is a Windows Hyper-V Denial of Service vulnerability. The available data identifies the affected component as Hyper-V on Windows, with a local attack vector and low privileges required, and the impact described as denial of service (availability impact). The CVSS 3.1 vector indicat...
CVE-2024-26158
CVE-2024-26158 affects Microsoft Windows Install Service and is an Elevation of Privilege vulnerability. It is exploitable locally (attack vector: Local) with low privileges required and no user interaction, potentially granting complete control (confidentiality/integrity/availability impact: Hig...
CVE-2023-24869
Technical details about CVE-2023-24869 are not publicly disclosed in the provided documents; no affected product/version/impact/fix are specified here. Monitor for updates from official CVE/NVD entries and related advisories.
CVE-2023-36400
Technical details about CVE-2023-36400 are not publicly provided in the supplied documents. The Initial/Connected data lacks affected product/version/root-cause/mitigation. Monitor for updates.
CVE-2024-20657
Technical details about CVE-2024-20657 (affected product/component, root cause, impact, fixes) are not publicly provided in the supplied documents. Monitor for updates from Microsoft and security advisories.
CVE-2024-21311
Technical details for CVE-2024-21311 are not publicly available in the provided documents. No affected products, root cause, or remediation are specified here. Monitor for updates.
CVE-2023-29361
CVE-2023-29361 affects the Windows Cloud Files Mini Filter Driver. The vulnerability is an elevation of privilege with a local attack vector (Attack Vector: Local; Attack Complexity: High) requiring low privileges and no user interaction. The impact is described as high for confidentiality, integ...
CVE-2024-20690
Technical details for CVE-2024-20690 are not publicly provided in the supplied documents. Available items reference the vulnerability name and advisories, but do not disclose affected products, root cause, impact, or fixes. Monitor for updates.
CVE-2023-21712
CVE-2023-21712 describes a Windows PPTP/RAS Remote Code Execution vulnerability. A race condition in the Point-to-Point Tunneling Protocol could allow unauthenticated, network-based attackers to execute arbitrary code in the RAS environment. The issue affects Windows Remote Access Service compone...
CVE-2023-36423
Technical details about CVE-2023-36423 are not provided in the supplied documents. No affected products, root cause, or remediation are specified here. Monitor for updates in connected sources.
CVE-2024-28898
CVE-2024-28898 is listed in the connected documents as a Windows Secure Boot vulnerability described as a Secure Boot security feature bypass with a CVSS-like impact of bypassing security measures (Windows Secure Boot). The advisory notes for this CVE show it with a moderate score (around 6.3–6.3...
CVE-2024-29064
Technical details (affected product/versions/root cause/impact/fix) for CVE-2024-29064 are not publicly provided in the supplied documents. Monitor for updates as more information becomes available.
CVE-2024-30080
Technical details about CVE-2024-30080 are not provided in the supplied documents. No specifics on affected products, vulnerable components, root cause, or fixes are included; monitor for updates from Microsoft/security advisories.
CVE-2025-21302
CVE-2025-21302 is a Windows Telephony Service Remote Code Execution vulnerability. The CVSS 3.1 base score is 8.8 (HIGH) with network access, low attack complexity, no privileges required, and user interaction required; impacts include confidentiality, integrity, and availability. The vulnerabili...
CVE-2024-26179
CVE-2024-26179 affects Windows Routing and Remote Access Service (RRAS) with a remote code execution vulnerability (CVSS v3.1: 8.8, HIGH). The entry specifies network attack vector with no privileges required but user interaction required, leading to execution of arbitrary code on affected system...
CVE-2023-28220
Technical details about CVE-2023-28220 (Layer 2 Tunneling Protocol RCE) are not provided in the supplied connected documents. No affected products, impact, fixes, or exploitation data are present here. Monitor for updates.
CVE-2023-21727
Technical details (affected product/versions/root cause/fix) are not provided in the connected documents; monitor for updates.
CVE-2023-21817
The provided documents do not contain technical details about CVE-2023-21817 (affected product/component, root cause, impact, or remediation). Technical specifics are not publicly available here. Monitor for updates and authoritative disclosures.
CVE-2023-24905
CVE-2023-24905 is a Microsoft Windows Remote Desktop Client remote code execution vulnerability. The CVE entry shows a Local attack vector with no privileges required and user interaction needed, rated CVSS v3.1 7.8 (High). Connected sources indicate affected component is Windows Remote Desktop C...
CVE-2024-26209
CVE-2024-26209 affects Microsoft Windows Local Security Authority Subsystem Service (LSASS). The entry describes an information disclosure vulnerability in LSASS, with a CVSS 3.1 base score of 5.5 (Medium), attack vector Local, privileges required Low, user interaction None, and a confidentiality...
CVE-2024-26218
CVE-2024-26218 is a Windows Kernel Elevation of Privilege vulnerability that Microsoft has addressed within the Windows KB updates KB5036893 and KB5036894. OpenVAS references place this CVE under Windows Kernel as enabling “elevated rights” (local, kernel-mode) with high CVSS 7.8 characteristics....
CVE-2024-49082
CVE-2024-49082 is a Windows File Explorer information disclosure vulnerability. The connected data lists impact as access to sensitive data with CVSS 3.1 v3.1 vector: AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N, score 6.8 (Medium). Concrete details about root cause or affected Windows versions are not fu...
CVE-2025-21351
CVE-2025-21351 is a Windows AD DS API Denial of Service vulnerability. The initial record notes a network‑vector DoS impacting AD DS APIs with a CVSS v3.1 base score of 7.5 (HIGH) and no user interaction required. Connected documents indicate Microsoft has released updates addressing vulnerabilit...
CVE-2023-24937
Technical details about CVE-2023-24937 are not provided in the connected documents. Please monitor for updates from official advisories and vulnerability databases.
CVE-2023-35384
CVE-2023-35384 is a Windows HTML Platform security feature bypass. The provided documents describe two vulnerabilities that can be chained to achieve remote code execution in Outlook: (1) the HTML security feature bypass allowing a crafted file or URL to evade security zone tagging, and (2) a Win...
CVE-2023-35628
CVE-2023-35628 is a Windows MSHTML platform remote code execution vulnerability. The MSHTML rendering engine used by Windows and Outlook can be exploited by processing specially crafted email content, potentially allowing code execution on a target machine without user interaction. The CVE is rat...
CVE-2024-20682
CVE-2024-20682 concerns the Windows Cryptographic Services Remote Code Execution vulnerability. The available data show a vulnerability affecting Windows components, enabling a local attacker to achieve code execution with high impact on confidentiality, integrity, and availability. The CVSS 3.1 ...
CVE-2024-38199
Technical details about CVE-2024-38199 are not publicly provided in the connected documents. Monitor for updates from Microsoft and NVD for affected products, fixes, and exploit information.
CVE-2023-36428
Technical details about CVE-2023-36428 are not provided in the supplied documents. No concrete affected products, versions, or remediation are present here. Monitor for updates from Microsoft and NVD for further information.
CVE-2024-20664
CVE-2024-20664 corresponds to a Microsoft Message Queuing information disclosure vulnerability. The provided documents describe an information disclosure in Microsoft Message Queuing that could allow an attacker to obtain sensitive data from heap memory. The entry has a CVSS 3.1 base score of 6.5...
CVE-2023-28283
CVE-2023-28283 is a Windows LDAP remote code execution vulnerability. Connected sources describe an unauthenticated RCE in the Windows LDAP service triggered by specially crafted LDAP requests, with the issue classified as high/critical in May 2023 updates. Root cause and exact impact are not dee...
CVE-2023-36401
Technical details (affected product, root cause, impact, or patch) are not provided in the connected documents. Please monitor for updates from Microsoft or CVE references to get concrete details and remediation when they become available.
CVE-2024-30006
CVE-2024-30006 affects the Microsoft WDAC OLE DB provider for SQL Server and enables Remote Code Execution. The CVSS v3.1 base score is 8.8 (HIGH) with Network attack vector, Low attack complexity, and user interaction required. Some sources list it as a high-severity Windows vulnerability (score...
CVE-2025-24035
CVE-2025-24035 affects Windows Remote Desktop Services. The connected data corroborates a remote code execution risk over a network, arising from memory handling (sensitive data stored in improperly locked memory). The impact is described as executing arbitrary code, with the network as the attac...
CVE-2024-20698
CVE-2024-20698 is a Windows Kernel Elevation of Privilege vulnerability. The connected exploit analysis reveals that the bug resides in ntoskrnl.exe within WbAddLookupEntryEx, which manipulates an array of process pointers. Before the patch, it reallocates and inserts a new pointer, but the patch...
CVE-2024-38144
CVE-2024-38144 is a local elevation-of-privilege vulnerability in the Windows Kernel Streaming WOW Thunk Service Driver. The connected sources state a local attacker could obtain SYSTEM privileges and that exploit code appeared in the TyphoonPWN 2024 event, with a write‑up from SSD Secure Disclos...
CVE-2023-23388
CVE-2023-23388 corresponds to a Windows Bluetooth Driver Elevation of Privilege vulnerability (bthserv) with a local privilege escalation path. A GitHub repo documents a PoC targeting Windows 10/11 Bluetooth service (bthserv) that enables escalation from an unprivileged user to LOCAL SERVICE; the...
CVE-2023-23414
CVE-2023-23414 is a Windows PPPoE Remote Code Execution vulnerability. The CVSS 3.1 base score is 7.1 (HIGH) with Adjacent attack vector, high attack complexity, no privileges required, user interaction required, and impacts to confidentiality, integrity, and availability (all high). Exploitation...