CVE-2024-30095

Technical details about CVE-2024-30095 (affected products, root cause, exploitability, or fixes) are not provided in the connected documents. Monitor for updates.

CVE-2024-30072

CVE-2024-30072 is a Windows Event Logging Service vulnerability described as a Windows Event Trace Log File Parsing Remote Code Execution vulnerability. Affected product is Microsoft Windows (Event Logging Service); the underlying issue relates to parsing Event Trace Log files that can lead to ar...

CVE-2024-38060

CVE-2024-38060 is a Windows Imaging Component remote code execution vulnerability. Public documents indicate it is addressed via the July 9, 2024 security updates (e.g., KBs in the July 2024 cycle). The connected MSKB entries reference security updates that address related components (e.g., RADIU...

CVE-2024-49126

CVE-2024-49126 affects Windows Local Security Authority Subsystem Service (LSASS) and enables remote code execution. The CVSS v3.1 base context shows Network attack vector, high impact on confidentiality, integrity, and availability, with no privileges required and no user interaction. Connected ...

CVE-2025-21307

CVE-2025-21307 concerns the Windows Reliable Multicast Transport Driver (RMCAST) and is described as a remote code execution vulnerability. The CVSS vector indicates network access, no user interaction, and a high impact across confidentiality, integrity, and availability (base score 9.8, CRITICA...

CVE-2025-21318

Technical details for CVE-2025-21318 are not publicly available in the provided documents. Monitor official advisories and vendor bulletins for updates.

CVE-2025-24065

CVE-2025-24065 is a vulnerability in the Windows Storage Management Provider causing an out-of-bounds read that can disclose information locally when exploited by an authorized user. The issue is documented with a CVSS v3.1 base score of 5.5 (Medium) and requires local access with low privileges ...

CVE-2025-24084

CVE-2025-24084 affects Windows Subsystem for Linux (WSL2) and is a kernel-level issue caused by an untrusted pointer dereference, enabling local code execution. Evidence in theInitial Description confirms local RCE potential in WSL2. Connected documents corroborate Windows context (WSL2) and prov...

CVE-2025-27475

CVE-2025-27475 is a Windows Update Stack elevation-of-privilege vulnerability. Description: sensitive data stored in improperly locked memory within the Windows Update Stack can enable a locally authenticated attacker to escalate privileges. CVSS v3.1 metrics indicate LOCAL attack vector, HIGH im...

CVE-2025-27727

CVE-2025-27727 affects Windows Installer through an improper link resolution before file access ("link following"), enabling local privilege elevation on an authorized attacker. The issue is evidenced by the CVE record and associated assessments (high impact, local access, user interaction none)....

CVE-2025-27732

CVE-2025-27732 is a Windows Graphics Component Elevation of Privilege vulnerability in the Win32K GRFX subsystem. The flaw stems from Sensitive data stored in improperly locked memory in the GRFX path, enabling an authorized, local attacker to elevate privileges. The vulnerability affects Windows...

CVE-2026-59122

CVE-2026-59122 describes a race condition in Windows Telephony Service caused by concurrent access to a shared resource with improper synchronization. This allows an authorized attacker with local access and low privileges to elevate privileges (CVSS v3.1: AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H; bas...

CVE-2024-38134

Technical details about CVE-2024-38134 (Kernel Streaming WOW Thunk Service Driver Elevation of Privilege) are not provided in the included documents. Monitor for updates from Microsoft and CVE databases for affected products, remediation, and known exploits.

CVE-2024-38198

CVE-2024-38198 is a Windows Print Spooler elevation-of-privilege vulnerability. The connected data confirms the issue affects Windows Print Spooler Components and is categorized with a HIGH base severity (CVSS 3.1: 7.5) and impact as obtaining elevated privileges. The vulnerability is documented ...

CVE-2025-21216

CVE-2025-21216 is a Windows Internet Connection Sharing (ICS) Denial of Service vulnerability. The available data show a CVSS v3.1 base score of 6.5 (Medium) with an impact on availability, requiring adjacent network access, low attack complexity, no privileges required, and no user interaction. ...

CVE-2025-21219

CVE-2025-21219 corresponds to a MapUrlToZone Security Feature Bypass in Windows. The Connected data lists this CVE with a CVSS v3.1 base score of 4.3 (Network, Low) and a

CVE-2025-21292

CVE-2025-21292 affects Windows Search Service (Windows Search Component) and is categorized as an elevation-of-privilege vulnerability with a CVSS v3.1 base score of 8.8 (HIGH). The connected sources identify the impact as obtaining increased privileges and confirm the vulnerability within Window...

CVE-2025-26679

CVE-2025-26679 is described as a use-after-free in the RPC Endpoint Mapper Service that allows a locally authenticated attacker to escalate privileges. Connected sources corroborate its existence and categorize the impact as a privilege-escalation flaw within Windows’ RPC Endpoint Mapper componen...

CVE-2023-35639

CVE-2023-35639 — Microsoft ODBC Driver Remote Code Execution is documented in the CVE entry and corroborated by multiple sources in the connected set as a Windows component vulnerability. In NVD, the CVSSv3.1 base score is 8.8 (HIGH) with a network attack vector, requiring user interaction, and r...

CVE-2024-35265

CVE-2024-35265 is described as a Windows Perception Service elevation-of-privilege vulnerability (local, CVSSv3.1 7.0). OpenVAS entries map it to Windows Perception Service with privilege-escalation impact. The connected documents show Microsoft security updates around June 2024, but there is no ...

CVE-2025-21226

Technical details about CVE-2025-21226 are not provided in the supplied documents. No concrete affected components or fixes are stated; monitor for updates.

CVE-2025-24992

CVE-2025-24992 is a local, information-disclosure vulnerability in Windows NTFS caused by a buffer over-read. The CVE is tied to Windows NTFS and is described as allowing an unauthorized local disclosure of information. CVSS 3.1 base metrics indicate a Local attack vector, Low attack complexity, ...

CVE-2025-27478

CVE-2025-27478 is a heap-based buffer overflow in Windows Local Security Authority (LSA) that enables a locally authenticated attacker to elevate privileges. The CVE is rated CVSS v3.1 7.0 (HIGH) with Local access, high confidentiality/integrity/availability impact. Connected sources confirm the ...

CVE-2026-45604

CVE-2026-45604 is an out-of-bounds read vulnerability in the Windows AppID (Windows Application Identity) Subsystem that can allow an authorized local attacker to disclose information. The affected component is described as the AppID Subsystem; the root cause is an out-of-bounds read leading to i...

CVE-2026-59131

Summary: CVE-2026-59131 pertains to AMD Zen and is described as an information-disclosure vulnerability that can be exploited by an authorized, local attacker to disclose information. The available documents indicate a CVSS v3.1 base score of 5.6 (Medium) with LOCAL attack vector, HIGH confidenti...

CVE-2024-38180

CVE-2024-38180 relates to a security feature bypass in Windows SmartScreen. Affected product: Windows SmartScreen (Windows). The CVE is described as a Security Feature Bypass with high impact (C/H/I/A) and a network attack vector requiring user interaction. The initial documents do not provide de...

CVE-2024-43599

CVE-2024-43599 is listed under Windows Remote Desktop Client as a high-severity (CVSS 8.8) Remote Code Execution vulnerability with impact described as Execute random code. Connected sources confirm this CVE affects the Remote Desktop Client and note that Microsoft has released updates to fix vul...

CVE-2024-43627

CVE-2024-43627 affects the Windows Telephony Service and enables Remote Code Execution. Affected component: Windows Telephony Service (Windows OS). Attack vector: network; prerequisites: none; user interaction required (UI: R). Impact per CVSS 3.1: Confidentiality, Integrity, and Availability are...

CVE-2024-43629

CVE-2024-43629 affects the Windows DWM Core Library and is an Elevation of Privilege vulnerability. The connected KB/MSRC data confirms the affected component (DWM Core Library) and labels the CVE with a high severity (base score 7.8, local attack, low complexity, privileges required: low) and im...

CVE-2024-43637

CVE-2024-43637 is a Windows USB Video Class System Driver elevation-of-privilege vulnerability. The connected documents confirm a Windows USB Video Driver entry and indicate that Microsoft patched this family of flaws in November 2024 updates (e.g., KB5046616/OS Build 20348.2849 and related KBs)....

CVE-2024-49094

CVE-2024-49094 is a Windows Wireless Wide Area Network Service (WwanSvc) elevation-of-privilege vulnerability. The connected documents indicate that exploitation can lead to elevated privileges on affected Windows endpoints (local context). Microsoft has published updates fixing the issue (e.g., ...

CVE-2025-21232

CVE-2025-21232 is a Windows Digital Media Elevation of Privilege vulnerability. The linked data show a CVSS v3.1 base score of 6.6 (Medium) with a physical attack vector, requiring low privileges and no user interaction, and yielding high impact to confidentiality, integrity, and availability. Th...

CVE-2025-24058

CVE-2025-24058 describes an elevation-of-privilege in the Windows DWM Core Library caused by improper input validation. The vulnerability enables a locally authenticated attacker to escalate privileges (local vector, no user interaction required per CVSS: High, with base score 7.8). Connected sou...

CVE-2025-24063

Technical details such as affected product/version, root cause, specific exploit scenario, and remediation for CVE-2025-24063 are not provided in the connected documents. Monitor for official updates (vendor advisories or CVE disclosures) for concrete technical information and fixes.

CVE-2025-26686

CVE-2025-26686 is a Windows TCP/IP remote code execution vulnerability caused by sensitive data stored in improperly locked memory. It is network-based with high impact (total compromise potential) and requires user interaction according to the CVSS: network exposure, high complexity, no privileg...

CVE-2025-27490

The CVE-2025-27490 entry describes a heap-based buffer overflow in Windows Bluetooth Service that allows an authorized attacker to elevate privileges locally. Microsoft’s advisories confirm a local-privilege-escalation impact due to a vulnerability in the Bluetooth subsystem, with public fixes re...

CVE-2025-27737

CVE-2025-27737 refers to an issue in Windows Security Zone Mapping caused by improper input validation that enables an unauthorized, locally present attacker to bypass a security feature. The vulnerability is categorized with local attack vector and high impact ( Confidentiality, Integrity, Avail...

CVE-2025-29812

CVE-2025-29812 is described in connected sources as an Untrusted pointer dereference in Windows Kernel Memory that allows an authorized local attacker to elevate privileges. The vulnerability is associated with Windows Kernel Memory (and, per CVE listings, DirectX Graphics Kernel) and has a base ...

CVE-2026-61929

CVE-2026-61929 is a Windows kernel vulnerability described as a use-after-free that could allow an authorized local attacker to achieve privilege escalation. The available sources confirm the affected component is the Windows kernel, with a local attack vector and high impact on confidentiality, ...

CVE-2024-38054

Technical details for CVE-2024-38054 are not provided in the connected documents. No affected product, component, version, root cause, or remediation specifics are available here; monitor for updates.

CVE-2024-38101

Technical details about CVE-2024-38101 are not publicly provided in the supplied connected documents. Information about affected components, impact, and fixes is unavailable here. Monitor for updates from official sources to obtain confirmed technical specifics and remediation guidance.

CVE-2024-38215

The CVE CVE-2024-38215 concerns the Windows Cloud Files Mini Filter Driver and is labeled as an Elevation of Privilege vulnerability with high impact. The available connected data indicates a local-execution vector (attackVector: LOCAL, attackComplexity: LOW) requiring LOW privileges and no user ...

CVE-2025-21276

CVE-2025-21276 is a Windows MapUrlToZone Denial of Service vulnerability. The CVE entry lists a NETWORK‑level attack with low complexity and no privileges required, resulting in a HIGH impact on availability (CVSS 3.1 base 7.5). Multiple connected sources corroborate a DoS condition in the MapUrl...

CVE-2025-21285

Technical details (affected products, root cause, impact or fixes for CVE-2025-21285 MSMQ DoS) are not included in the provided documents. Monitor updates from Microsoft and CVE/CIRCL references for remedies and exposure.

CVE-2025-24059

CVE-2025-24059 affects Windows Common Log File System Driver. Root cause: incorrect numeric type conversion leading to local privilege escalation. Impact per sources: high (privilege escalation, high confidentiality/integrity/availability impact) with local exploitation and no user interaction re...

CVE-2026-20805

CVE-2026-20805 is a local information-disclosure vulnerability in Microsoft Windows Desktop Window Manager (dwm.exe). The provided documents describe that an authenticated, low-privilege user can leak sensitive information via improper handling of ALPC-related structures (ALPC ports/sections) and...

CVE-2024-30002

CVE-2024-30002 is listed in multiple feeds as a Windows Mobile Broadband Driver remote code execution vulnerability affecting the Windows Mobile Broadband component. Connected sources confirm the CVE ID appears under the Windows Mobile Broadband category with a CVSS-like indication of code execut...

CVE-2025-21180

CVE-2025-21180 is a Windows exFAT File System vulnerability described as a heap-based buffer overflow that could allow local code execution. The connected documents identify the affected component as the Windows exFAT file system driver and confirm the root cause as a heap-based overflow, enablin...

CVE-2025-21241

CVE-2025-21241 is a Windows Telephony Service Remote Code Execution vulnerability. The CVSS 3.1 score is 8.8 (Netwrk attack vector, Low attack complexity, No privileges required, User interaction required; Impact: Confidentiality, Integrity, Availability High). Public entries indicate a Windows c...

CVE-2025-21251

CVE-2025-21251 is a Denial-of-Service vulnerability in Microsoft Message Queuing (MSMQ). It is network‑based (no user interaction, no privileges required) and impacts MSMQ; exploitation leads to DoS with high impact on availability. Several connected sources corroborate MSMQ DoS for CVE-2025-2125...