CVE-2023-28251

CVE-2023-28251 is described as a Windows Driver Revocation List Security Feature Bypass vulnerability. The consolidated data shows a CVSSv3.1 base score of 5.5 (Medium) with a Local attack vector, Low attack complexity, Low privileges required, no user interaction, and Confidentiality Impact None...

CVE-2024-28896

CVE-2024-28896 is a Secure Boot security feature bypass with HIGH impact (C:I:H:A:H) and adjacent access (AV:A, AC:H, UI:N, PR:N). Descriptions show no user interaction or privileges required. EUVD-2024-25962 and Windows Secure Boot mappings reference this CVE among related Secure Boot fixes; no ...

CVE-2024-28919

CVE-2024-28919 is listed in the Windows Secure Boot area as a "Secure Boot Security Feature Bypass" vulnerability. The connected documents identify it as a local-bypass vulnerability affecting Secure Boot, with a CVSSv3.1 base score of 6.7 (Impact: High on confidentiality, integrity, and availabi...

CVE-2024-43625

CVE-2024-43625 is a Microsoft Windows VMSwitch elevation-of-privilege vulnerability (CVSSv3.1: 8.1, LOCAL, no user interaction). Affected component is the Windows VMSwitch; the exposed impact is potential total compromise with high confidentiality, integrity, and availability impact. Publicly dis...

CVE-2023-23388

CVE-2023-23388 corresponds to a Windows Bluetooth Driver Elevation of Privilege vulnerability (bthserv) with a local privilege escalation path. A GitHub repo documents a PoC targeting Windows 10/11 Bluetooth service (bthserv) that enables escalation from an unprivileged user to LOCAL SERVICE; the...

CVE-2023-28302

Technical details for CVE-2023-28302 are not publicly available in the provided documents. Monitor for updates from the listed sources (NVD, OSV, OpenVAS references) for affected products, impact, and fixes.

CVE-2024-26208

CVE-2024-26208 affects Microsoft Message Queuing (MSMQ) on Windows. The OpenVAS entries list MSMQ under Windows Message Queuing with CVE-2024-26208 and indicate a vulnerability that allows executing arbitrary code (remote code execution) over the network, without user interaction, and with high p...

CVE-2023-24910

CVE-2023-24910 is a Windows Graphics Component Elevation of Privilege vulnerability. Affected: Windows graphics subsystem components (local component/privilege escalation surface). Root cause: Elevation of privileges with a local attack vector (attack vector Local, low complexity, privileges requ...

CVE-2024-20660

CVE-2024-20660 concerns Microsoft Message Queuing (MSMQ) with an information disclosure vulnerability. Connected CNVD-2024-04951 states MSMQ contains a heap memory information disclosure vulnerability that an attacker could exploit to obtain sensitive data. The NVD entry for CVE-2024-20660 lists ...

CVE-2024-20661

Technical details for CVE-2024-20661 are not publicly provided in the supplied documents. Monitor for updates from Microsoft and CVE databases for affected versions, impact, and fixes.

CVE-2024-21447

CVE-2024-21447 is a Windows local privilege-escalation vulnerability in the Windows Authentication subsystem. The CVSS v3.1 base score is 7.8 (HIGH): attack vector LOCAL, attack complexity LOW, privileges required LOW, user interaction NONE, with impacts to confidentiality, integrity, and availab...

CVE-2024-26211

CVE-2024-26211 is an elevation-of-privilege vulnerability affecting the Windows Remote Access Connection Manager. The CVE entry lists a HIGH base score (CVSSv3.1: 7.8; vector: LOCAL, LOW attack complexity; Privileges Required: LOW; User Interaction: NONE; Scope: UNCHANGED; Confidentiality/Integri...

CVE-2024-28923

CVE-2024-28923 is described as a Secure Boot security feature bypass in the Windows Secure Boot subsystem. The provided documents indicate it allows bypassing Secure Boot and potentially executing code by a malicious party, with the CVSS-like data in the initial record showing local exploitation,...

CVE-2025-21377

Technical details for CVE-2025-21377 are not publicly provided in the supplied documents. No affected products, root cause, impact, or remediation are specified here. Monitor for updates in the connected feeds.

CVE-2023-36406

CVE-2023-36406 is described in the NVD as a Windows Hyper-V Information Disclosure vulnerability with CVSS v3.1 base score 5.5 (Local, Low complexity, Privileges required: Low, User interaction: None; Confidentiality Impact: High). The connected documents note Microsoft security updates (KB503219...

CVE-2023-36407

CVE-2023-36407 – Windows Hyper-V Elevation of Privilege : Exploitation details show an improper input validation in winhvr.sys (WinHvSetVpState) allowing a local attacker to copy user-controlled data into Non-paged Pool via memcpy, causing a BOF and a BSOD on Hyper-V Host. The PoC targets Windows...

CVE-2023-36911

CVE-2023-36911 is a remote code execution vulnerability in Microsoft Message Queuing (MSMQ). The connected NVD entry lists a critical CVSS v3.1 score of 9.8 (Network vector, no privileges required, no user interaction) with high impact on confidentiality, integrity, and availability. Public techn...

CVE-2024-26228

CVE-2024-26228 affects Windows Cryptographic Services. The connected data indicate a security feature bypass vulnerability in Windows Cryptographic Services, with a local attack vector, low privileges required, no user interaction, and high impact to confidentiality, integrity, and availability. ...

CVE-2024-26239

COVID: CVE-2024-26239 is a Windows Telephony Server Elevation of Privilege vulnerability with LOCAL attack vector, requiring LOW privileges and no user interaction. The CVSS 3.1 base score is 7.8 (HIGH), with CONFIDENTIALITY, INTEGRITY, and AVAILABILITY impacts rated HIGH. The initial description...

CVE-2023-36403

CVE-2023-36403 is linked to a Windows Kernel local privilege escalation involving registry virtualization. CIRCL’s CIRCL:CVE-2023-36403 entry explicitly notes “Windows Kernel bad locking in registry virtualization leads to race conditions,” indicating the root cause is locking/race-condition issu...

CVE-2023-28297

CVE-2023-28297 is a Windows RPCSS Elevation of Privilege vulnerability. The consolidated records identify the affected component as the Windows Remote Procedure Call Service (RPCSS) with a high-severity CVSS 3.1 vector (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) and a base score of 8.8. The explicit ro...

CVE-2024-26172

CVE-2024-26172 affects Windows DWM Core Library. Affects the Windows DWM Core Library component; root cause described as information disclosure. Documented impact is access to sensitive data with a CVSS v3.1 base score of 5.5 (LOCAL, LOW privileges required, user interaction none, availability im...

CVE-2024-26200

CVE-2024-26200 is a Windows Routing and Remote Access Service (RRAS) remote code execution vulnerability. Connected sources list RRAS as vulnerable and indicate the impact as executing random code, with CVE-2024-26200 appearing under RRAS in the Microsoft Windows vulnerabilities compilation. The ...

CVE-2024-26210

CVE-2024-26210 describes a remote code execution vulnerability in the Microsoft WDAC OLE DB provider for SQL Server. The issue is classified as CVSS 3.1 Base Score 8.8 (High) with network attack vector, no privileges required, and user interaction needed. The vulnerability affects the WDAC OLE DB...

CVE-2024-43533

CVE-2024-43533 is a Windows Remote Desktop Client remote code execution vulnerability. The CVSS 3.1 base vector is CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, base score 8.8 (HIGH), with network attack vector, no privileges required, and user interaction needed. Nessus and MSRC entries associat...

CVE-2024-43585

Technical details about CVE-2024-43585 are not publicly available in the provided connected documents. No specifics on affected products, root cause, or fixes are present here. Monitor for updates from official advisories.

CVE-2025-24996

CVE-2025-24996 : Affects Windows NTLM. External control of a file name or path enables an unauthorized network spoofing scenario, potentially allowing impersonation over a network. CVSSv3.1 base 6.5 (Network attack, low complexity, no privileges required, user interaction required; CIA: high conf...

CVE-2024-26255

CVE-2024-26255 is a Windows RRAS/Windows Remote Access Connection Manager information disclosure vulnerability. The affected component is Windows Remote Access Connection Manager; the underlying issue yields leakage of sensitive data (confidentiality impact). The CVSS 3.1 vector from the initial ...

CVE-2024-43513

CVE-2024-43513 is a BitLocker security feature bypass vulnerability affecting Windows BitLocker. The entry notes a bypass of security measures with a CVSS v3.1 base score of 6.4 (Physical access, High impact for confidentiality, integrity, and availability). The connected Microsoft update guidanc...

CVE-2025-21341

Technical details for CVE-2025-21341 are not provided in the supplied documents. Public disclosures describe it as Windows Digital Media Elevation of Privilege, but no specifics on vulnerable component, versions, exploit or fix are included. Monitor for updates.

CVE-2023-24859

CVE-2023-24859 is a Windows vulnerability described as a denial-of-service issue in the Windows Internet Key Exchange (IKE) extension. The available data identifies the affected component as the IKE extension and notes impact as availability degradation (DoS) with network attack vector and no use...

CVE-2023-24937

Technical details about CVE-2023-24937 are not provided in the connected documents. Please monitor for updates from official advisories and vulnerability databases.

CVE-2024-29994

CVE-2024-29994 is Microsoft Windows SCSI Class System File Elevation of Privilege. Connected sources (NCSC advisory) list CVE-2024-29994 with CVSS v3.1 base 7.8 (high), Local attack vector, Low privileges required, no user interaction, and impact to confidentiality, integrity, and availability. T...

CVE-2024-49132

CVE-2024-49132 affects Windows Remote Desktop Services and is a remote code execution vulnerability exploitable over the network (attack vector: network; no privileges required; user interaction not needed). The CVSSv3.1 base score is 8.1 (HIGH) with high impact on confidentiality, integrity, and...

CVE-2023-24945

CVE-2023-24945 concerns Windows iSCSI Target Service Information Disclosure. Data shows CVSS v3.1 base score 5.5 (Medium) with LOCAL attacker, LOW complexity, LOW privileges required, and high confidentiality impact. The description names the Windows iSCSI Target Service but does not provide spec...

CVE-2024-26217

CVE-2024-26217 affects the Windows Remote Access Connection Manager. The connected NCSC advisory documents the impact as information disclosure / access to sensitive data (CVE-2024-26217, Windows Remote Access Connection Manager). The CVSS/impact details vary across sources: NVD metrics show a lo...

CVE-2024-28897

CVE-2024-28897 is referenced in connected data as a Windows Secure Boot vulnerability with the label “Circumvention of security measure.” The primary public document (NVD) lists it as a Secure Boot security feature bypass, with a CVSS v3.1 score of 6.8 (Medium) and details like attack vector adja...

CVE-2024-29062

CVE-2024-29062 affects Windows Secure Boot and is described as a Security Feature Bypass. The vulnerability targets the Secure Boot path with an adjacent-attack surface, requiring user interaction and high complexity to exploit, and can impact confidentiality, integrity, and availability. Public ...

CVE-2023-23420

CVE-2023-23420 is a Windows Registry hive memory corruption bug (UAF) tied to transacted key rename. The exploit plan targets the HKCU hive (volatile storage) via a lightweight or KTM transaction sequence that renames a key, then frees keys in a transaction, producing a layout where freed cells c...

CVE-2023-24899

CVE-2023-24899 is the Windows Graphics Component Elevation of Privilege vulnerability. The provided documents identify it as a Windows graphics subsystem issue with a CVSS v3.1 base score of 7.0 (HIGH), with a local attack vector, high complexity, and the ability to defeat confidentiality, integr...

CVE-2023-36910

CVE-2023-36910 is a remote code execution vulnerability in Microsoft Message Queuing (MSMQ) that can be exploited remotely on affected Windows platforms (Windows 10/11 and Windows Server 2008–2022) without user interaction. The issue is formally described as MSMQ RCE with a high severity rating (...

CVE-2024-26168

CVE-2024-26168 concerns a Secure Boot security feature bypass. The entry explicitly labels it as Secure Boot bypass with a CVSSv3.1 base score of 6.8 (Medium) and a physical attack vector. The breakdown indicates HIGH impact to confidentiality, integrity, and availability, with no user interactio...

CVE-2024-43560

CVE-2024-43560 is a Windows Storage Port Driver elevation-of-privilege vulnerability. A local attacker with low privileges could exploit it to obtain elevated rights (CVE-2024-43560 details: CVSS v3.1 7.8, high impact; affected component: Windows Storage Port Driver). The NCSC advisory confirms M...

CVE-2023-21740

CVE-2023-21740 is a Windows Media Remote Code Execution vulnerability. The CVE is listed in NVD/NVD-derived records with CVSS v3.1 metrics: AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, resulting in a base score of 7.8 (HIGH). The linked OpenVAS entries reference multiple Windows KB updates and include CV...

CVE-2023-23402

Technical details for CVE-2023-23402 are not publicly available in the provided documents. Monitor for updates from official advisories and connected sources for affected products, impact, and fixes.

CVE-2023-24864

CVE-2023-24864 is described in connected documents as an elevation of privilege vulnerability affecting Microsoft PostScript and PCL6 Class Printer Driver. CNVD-2023-28110 and NVD entries reference an elevation of privilege issue in these printer drivers, identifying the vulnerable components but...

CVE-2023-24884

Technical details about CVE-2023-24884 (affected product, vulnerable component, root cause, impact, and fixes) are not publicly provided in the connected documents you supplied. Monitor for updates from official advisories and CVE repositories to obtain concrete remediation guidance.

CVE-2023-28275

Technical details about CVE-2023-28275 are not publicly provided in the supplied documents. Available references mention the vulnerability title, but no affected product/version, root cause, impact, or patch information in these sources. Monitor for updates.

CVE-2024-26230

CVE-2024-26230 is a Windows Telephony Server elevation-of-privilege vulnerability. Reported as a local privilege escalation with CVSS 3.1 base score 7.8 (HIGH): vectors/local, attack complexity LOW, privileges required LOW, no user interaction. Impacts on confidentiality, integrity, and availabil...

CVE-2024-26252

CVE-2024-26252 refers to a Windows kernel vulnerability in the rndismp6.sys driver that enables remote code execution. The issue is described as affecting the Windows component rndismp6.sys with a CVSSv3.1 base score of 6.8 (Medium), and usability concerns indicate a physical attack vector, low a...