1863 matches found
CVE-2024-21304
Technical details about CVE-2024-21304 are not provided in the supplied documents. Monitor for updates as new public information becomes available.
CVE-2024-20653
Technical details about CVE-2024-20653 (affected product, specific component, root cause, impact, and remediation) are not publicly provided in the connected documents you supplied. Monitor for updates from official advisories to confirm affected software and fixes.
CVE-2024-21355
CVE-2024-21355 is a Microsoft Message Queuing (MSMQ) Elevation of Privilege vulnerability. The initial entry indicates a local attack vector with high impact: CVSS 3.1 base score 7.0, attack vector Local, attack complexity High, privileges Required LOW, no user interaction, and impact on confiden...
CVE-2024-21377
Technical details for CVE-2024-21377 are not available in the provided documents. The entries reference the CVE but do not specify affected products, root cause, impact, or fixes. Monitor for official disclosures and published remediation guidance.
CVE-2024-20654
Technical details for CVE-2024-20654 are not publicly provided in the supplied documents. The materials acknowledge a Microsoft ODBC Driver remote code execution vulnerability but do not specify affected products, versions, impact, or remediation. Monitor for updates.
CVE-2024-21439
CVE-2024-21439 is a Windows Telephony Server Elevation of Privilege vulnerability with a CVSS v3.1 base score of 7.0 (HIGH). Attack vector is LOCAL with HIGH impact on confidentiality, integrity, and availability, and the exploit requires LOW privileges and no user interaction, but the document n...
CVE-2025-24076
CVE-2025-24076 affects the Windows Cross Device Service, enabling local privilege escalation via improper access control. Public material confirms a local, low-privilege attacker can escalate to SYSTEM by exploiting DLL handling in the Cross Device Service (e.g., by replacing CrossDevice.Streamin...
CVE-2024-29996
CVE-2024-29996 affects the Windows Common Log File System Driver. The vulnerability is an Elevation of Privilege issue in CLFS, with a high base CVSS score (3.1, 7.8). It is exploitable locally, requires low privileges, and does not require user interaction. The impact is rated as high for confid...
CVE-2024-21346
CVE-2024-21346 is a Win32k "Elevation of Privilege" vulnerability in Windows. According to the NVD/NCSC data, it affects the Win32k component and can yield increased privileges (CVSSv3.1 base score 7.8, impact = high for confidentiality, integrity, and availability; attack vector = local; privile...
CVE-2026-33829
CVE-2026-33829 concerns the Windows Snipping Tool and is assigned a CVSSv3.1 base score of 4.3 (Medium). The vulnerability is described with a network attack vector but requires user interaction and does not affect integrity or availability, with confidentiality impact listed as Low. The metric i...
CVE-2024-21362
Technical details for CVE-2024-21362 are not publicly available in the provided documents. No affected products, root cause, or remediation details are disclosed here. Monitor for updates from official sources.
CVE-2024-21363
Technical details for CVE-2024-21363 are not provided in the supplied documents; monitor for updates.
CVE-2024-20683
Technical details are not publicly provided in the supplied documents. No specifics on affected products, versions, impact, or fixes are available here; monitor official sources for updates.
CVE-2024-21314
CVE-2024-21314 relates to Microsoft Message Queuing and is described in CNVD/NVD sources as a Microsoft Message Queuing Information Disclosure Vulnerability. The connected documents explicitly state that the vulnerability allows an attacker to obtain sensitive information from heap memory. No con...
CVE-2024-21342
CVE-2024-21342 is a Windows DNS Client Denial of Service vulnerability. Connected sources confirm the vulnerability affects the Windows DNS Client component and can cause a denial of service (DoS). The CVSS v3.1 base score is 7.5 (HIGH) with network attack vector, no authentication, no user inter...
CVE-2024-21320
CVE-2024-21320 is a Windows themes spoofing vulnerability with public detail: Exploit-DB describes an NTLM hash-leak via a malicious Windows theme, demonstrating how a crafted .theme file can exfiltrate credentials. The NVD entry labels the issue as Windows Themes Spoofing Vulnerability with a CV...
CVE-2024-20663
Technical details about CVE-2024-20663 are not provided in the supplied documents. No confirmed affected products, versions, root cause, or remediation are disclosed; monitor for updates.
CVE-2024-20687
CVE-2024-20687 is a DoS vulnerability in the Microsoft AllJoyn API. The NVD entry notes a network-based attack with low complexity that results in availability impact (I: C, A: C? actually A). The provided metrics show CVSS 3.1 base score 7.5, vector AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H, indicatin...
CVE-2024-26219
CVE-2024-26219 is a Denial-of-Service vulnerability in Windows HTTP.sys. The CVSSv3.1 base vector (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) yields a 7.5 HIGH rating, indicating network-based exploitation with no user interaction and potential downtime due to availability impact. Public references ide...
CVE-2024-20694
CVE-2024-20694 is described as a Windows CoreMessaging Information Disclosure vulnerability. The initial description provides a CVSSv3.1 vector: Local attack vector, Low attack complexity, Low privileges required, no user interaction, with a High confidentiality impact and a Medium base score (5....
CVE-2024-20658
CVE-2024-20658 is described as a local, elevation-of-privilege vulnerability in the Microsoft Virtual Hard Disk. The CVSS3.1 base shows: attack vector LOCAL, attack complexity LOW, privileges required LOW, user interaction NONE, and impact C (confidentiality), I (integrity), and A (availability) ...
CVE-2024-21339
Technical details about CVE-2024-21339 are not publicly available in the provided documents; current sources only repeat the vulnerability title. Monitor for official disclosures and updates.
CVE-2024-49084
CVE-2024-49084 is a Windows Kernel elevation-of-privilege issue (Windows Kernel). The connected sources list it under Windows Kernel with a CVSS v3.1 base score of 7.0 (local attack vector, high impact across confidentiality, integrity, and availability) and indicate the vulnerability allows obta...
CVE-2025-21263
Technical details for CVE-2025-21263 are not publicly provided in the supplied connected documents. The materials reference Windows Digital Media Elevation of Privilege vulnerability but do not describe affected components, root cause, impact specifics, or fixes. Monitor updates from official sou...
CVE-2023-36393
Technical details about CVE-2023-36393, including affected products, root cause, and fixes, are not publicly provided in the supplied documents. Monitor for updates from Microsoft and NVD.
CVE-2024-20681
CVE-2024-20681 affects Windows Subsystem for Linux and enables local elevation of privilege. CVSS v3.1 base score 7.8 (HIGH); attack vector LOCAL, privileges required LOW, user interaction NONE; impacts on confidentiality, integrity, and availability are HIGH. Connected documents reference Window...
CVE-2026-42978
CVE-2026-42978: A race condition due to improper synchronization in Windows Push Notifications leads to local privilege escalation for an authorized attacker. The CVSSv3.1 base score is 7.8 (LOCAL, HIGH impact on confidentiality, integrity, and availability) with HIGH attack complexity and LOW pr...
CVE-2026-49172
The CVE-2026-49172 entry describes a heap-based buffer overflow in Windows FTP Service that allows an unauthenticated, network-based attacker to execute code remotely. Documents confirm the vulnerability exists in Windows FTP Service and enables remote code execution with network access and no re...
CVE-2026-42980
The CVE-2026-42980 entry describes an integer underflow (wrap or wraparound) in the Windows NT OS Kernel that allows an authorized, local attacker to elevate privileges. Affected component: Windows NT OS Kernel; root cause: numeric underflow leading to improper bounds/flow control, enabling privi...
CVE-2023-36047
Technical details (affected product/version, root cause, exploitability, or fix) for CVE-2023-36047 are not provided in the connected documents. Monitor for updated advisories from Microsoft and related sources for specifics.
CVE-2024-21305
CVE-2024-21305 is a Hypervisor-Protected Code Integrity (HVCI) security feature bypass affecting Windows; the CVE entry notes a local attack surface with high privileges required and no user interaction (per CVSS details). Connected Microsoft documentation confirms the vulnerability and lists it ...
CVE-2024-28903
CVE-2024-28903 is listed under Microsoft Windows Secure Boot vulnerabilities with a circumvention of security measure impact. The connected OpenVAS/NCSC entries corroborate that Secure Boot-related fixes were released, but do not provide product/version specifics or a patch identifier. The root c...
CVE-2024-20693
CVE-2024-20693 is a Windows Kernel local privilege escalation vulnerability. Documents corroborate that the Windows Kernel component is affected and that the vulnerability enables obtaining elevated/privileged execution from a local attacker, with high confidentiality, integrity, and availability...
CVE-2024-21310
Technical details about CVE-2024-21310 are not provided in the connected documents. The sources confirm existence and vulnerability class but do not disclose affected product versions, root cause, exploit, or remediation. Monitor for updates.
CVE-2024-38153
CVE-2024-38153 is a Windows Kernel elevation-of-privilege vulnerability. The CVSSv3.1 base score is 7.8 (High) with Local attack vector, Low attack complexity, Privileges Required: Low, User Interaction: None, and impact on Confidentiality, Integrity, and Availability: High. The vulnerability aff...
CVE-2024-20691
CVE-2024-20691 is a Windows Themes Information Disclosure vulnerability. CVSS-3.1 metrics indicate Local attack with High Confidentiality impact, base score 4.7, and no user interaction required, but with high attack complexity and low privileges. Exploit details or concrete remediation are not p...
CVE-2024-20699
CVE-2024-20699 is a Windows Hyper-V Denial of Service vulnerability. The available data identifies the affected component as Hyper-V on Windows, with a local attack vector and low privileges required, and the impact described as denial of service (availability impact). The CVSS 3.1 vector indicat...
CVE-2025-24996
CVE-2025-24996 : Affects Windows NTLM. External control of a file name or path enables an unauthorized network spoofing scenario, potentially allowing impersonation over a network. CVSSv3.1 base 6.5 (Network attack, low complexity, no privileges required, user interaction required; CIA: high conf...
CVE-2023-36398
Technical details about CVE-2023-36398 are not provided in the connected documents. No explicit information on affected products, versions, root cause, or remediation is present. Monitor for updates and rely on the initial vulnerability summary for context.
CVE-2026-66799
CVE-2026-66799 describes a heap-based buffer overflow in Windows Key Guard that allows an authenticated, local attacker to elevate privileges. Affected component: Windows Key Guard. Root cause: heap-based buffer overflow (as stated). Impact: local privilege escalation with high confidentiality, i...
CVE-2024-21306
CVE-2024-21306 is a Microsoft Bluetooth Driver Spoofing vulnerability. It relates to spoofing a Bluetooth HID device and, under certain conditions (e.g., pairing flow), could enable unauthorized keystroke injections. Public PoCs referenced in connected documents show HID-based exploitation via Bl...
CVE-2024-21316
CVE-2024-21316 is a Windows Server vulnerability described as a Key Distribution Service Security Feature Bypass. Documents confirm the issue affects Windows Server/KDS handling and carry a CVSS v3.1 base score of 6.1 (Network, Low attack complexity, High privileges required, User interaction req...
CVE-2023-36400
Technical details about CVE-2023-36400 are not publicly provided in the supplied documents. The Initial/Connected data lacks affected product/version/root-cause/mitigation. Monitor for updates.
CVE-2024-20657
Technical details about CVE-2024-20657 (affected product/component, root cause, impact, fixes) are not publicly provided in the supplied documents. Monitor for updates from Microsoft and security advisories.
CVE-2024-21311
Technical details for CVE-2024-21311 are not publicly available in the provided documents. No affected products, root cause, or remediation are specified here. Monitor for updates.
CVE-2024-20690
Technical details for CVE-2024-20690 are not publicly provided in the supplied documents. Available items reference the vulnerability name and advisories, but do not disclose affected products, root cause, impact, or fixes. Monitor for updates.
CVE-2024-26158
CVE-2024-26158 affects Microsoft Windows Install Service and is an Elevation of Privilege vulnerability. It is exploitable locally (attack vector: Local) with low privileges required and no user interaction, potentially granting complete control (confidentiality/integrity/availability impact: Hig...
CVE-2025-21302
CVE-2025-21302 is a Windows Telephony Service Remote Code Execution vulnerability. The CVSS 3.1 base score is 8.8 (HIGH) with network access, low attack complexity, no privileges required, and user interaction required; impacts include confidentiality, integrity, and availability. The vulnerabili...
CVE-2024-28898
CVE-2024-28898 is listed in the connected documents as a Windows Secure Boot vulnerability described as a Secure Boot security feature bypass with a CVSS-like impact of bypassing security measures (Windows Secure Boot). The advisory notes for this CVE show it with a moderate score (around 6.3–6.3...