1768 matches found
CVE-2025-21230
CVE-2025-21230 is a Denial-of-Service vulnerability in Microsoft Message Queuing (MSMQ). Connected CNVD entries explicitly describe a vulnerability in MSMQ that can be exploited to cause a DoS on the system, aligning with the CVSS vector in the CVE entry (Network, Privileges=None, User interactio...
CVE-2023-36028
CVE-2023-36028: Microsoft PEAP Remote Code Execution vulnerability with a CVSS v3.1 base score of 9.8 (CRITICAL). The provided documents do not include concrete details on affected products/versions, root cause, exploitability, or a remediation/fix. No public exploit information is present in the...
CVE-2024-21431
CVE-2024-21431 is a Microsoft Windows vulnerability titled “Hypervisor-Protected Code Integrity (HVCI) Security Feature Bypass Vulnerability.” Connected sources identify this as a local, high-severity issue affecting the HVCI mechanism, with a CVSS score in the high range (confidentiality, integr...
CVE-2024-21435
CVE-2024-21435 – Windows OLE Remote Code Execution is discussed in the connected Krebs analysis as being exploitable by tricking a user into opening a document, which then causes the OLE engine to download a malicious DLL and execute code. The entry lists an 8.8 CVSS (HIGH) with NETWORK attack ve...
CVE-2024-21442
CVE-2024-21442 affects the Windows USB Print Driver. Root cause: a kernel flaw enabling local elevation of privilege. Exploitation requires an authenticated, local attacker with low privileges and no user interaction; impact is SYSTEM-level full compromise (C, I, A high). Public technical details...
CVE-2024-21406
Technical details about CVE-2024-21406 are not publicly provided in the supplied documents. No affected product/version/impact specifics are given beyond the generic description. Monitor for updates from official advisories.
CVE-2024-21432
Technical details about CVE-2024-21432 are not publicly available in the provided documents. Monitor for updates from official advisories to obtain affected products, impact, and remediation guidance.
CVE-2024-21436
CVE-2024-21436 is a Windows Installer elevation of privilege vulnerability. The CVE entry reports a CVSS v3.1 base score of 7.8 (high) with local attack vector, low attack complexity, requiring low privileges and no user interaction; impact is high on confidentiality, integrity, and availability....
CVE-2024-21451
No public technical details about CVE-2024-21451 are provided in the connected documents. The NVD entry notes RCE via Microsoft ODBC Driver, but remediation/affected versions are not disclosed here. Monitor for updates.
CVE-2024-29052
CVE-2024-29052 is a Windows Storage Elevation of Privilege vulnerability. Connected sources confirm an LP (local) exploit path affecting Windows storage components, with a CVSS v3.1 base vector of AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H and a base score of 7.8 (HIGH). Microsoft OS updates KB5036892 (...
CVE-2024-20678
Public documents in the Connected set do not provide concrete technical details (affected product, root cause, impact, or remediation) for CVE-2024-20678; monitor for updates.
CVE-2024-26177
Technical details for CVE-2024-26177 are not publicly available in the provided connected documents. The material discusses Windows registry vulnerabilities broadly but does not specify affected products/versions/root causes/patches for this CVE. Monitor for updates.
CVE-2024-26178
CVE-2024-26178 is a Windows Kernel elevation-of-privilege vulnerability with a CVSS v3.1 base score of 7.8 (HIGH). It is a local attack that requires LOW privileges and has no user interaction, with high impact on confidentiality, integrity, and availability. The Initial Description lists it as a...
CVE-2024-20700
CVE-2024-20700 affects Windows Hyper-V and is a remote code execution vulnerability in Hyper-V. Connected sources describe exploitation as a race condition requiring access to a restricted network; attack vector is adjacent with no user interaction and no privileges required, yielding high impact...
CVE-2024-26170
CVE-2024-26170 is a Windows Composite Image File System (CimFS) elevation of privilege vulnerability. The initial record confirms local, low‑complexity access with high impact, but the provided documents do not describe the exact root cause, vulnerable component details, or affected product versi...
CVE-2024-21343
CVE-2024-21343 is a Windows NAT Denial of Service vulnerability. The provided documents identify it as network‑based with impact on availability (NVD CVSSv3.1: 7.5 base, HIGH; CNA: 5.9, MEDIUM) but do not provide concrete affected product versions, root cause details, exploit information, or a sp...
CVE-2024-21354
Technical details for CVE-2024-21354 are not publicly provided in the connected documents. No vendor/product specifics or remediation are included. Monitor for updates.
CVE-2024-21356
CVE-2024-21356 is listed with concrete identifiers in OpenVAS entries; it corresponds to a Windows LDAP Denial of Service vulnerability with CVSS v3.1 metrics: AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H (base score 6.5, MEDIUM). The connected records confirm it as part of Microsoft Windows vulnerability...
CVE-2024-21434
Technical details about CVE-2024-21434 are not provided in the supplied documents. Monitor for updates from Microsoft and security feeds for affected components, root cause, impact, and fixes.
CVE-2024-26160
CVE-2024-26160 affects the Windows Cloud Files Mini Filter Driver and is a information-disclosure vulnerability that can lead to access to sensitive data. Public exploits exist per related sources. The vulnerability is listed under Windows Cloud Files Mini Filter Driver information disclosure, wi...
CVE-2024-26181
CVE-2024-26181 is a Windows kernel vulnerability where exhausting the global registry quota can damage the HKLM\SAM hive, enabling local attackers to trigger a denial-of-service by blocking registry operations. The CVE is tied to out-of-resources/OOM paths in hive memory management and registry q...
CVE-2024-21371
Technical details about CVE-2024-21371 are not provided in the supplied documents. Please monitor for updates from official advisories to learn affected products, root cause, impact, and remediation.
CVE-2024-26159
Technical details about CVE-2024-26159 are not provided in the supplied documents. The references here only reiterate the vulnerability name; monitor official advisories for updated specifics and remediation guidance.
CVE-2024-21341
Technical details about CVE-2024-21341 are not publicly provided in the supplied documents. Monitor for updates from NVD, Microsoft, or CVE listings for affected products, root cause, impact, and remediation.
CVE-2024-21348
Technical details for CVE-2024-21348 are not provided in the supplied documents; the ICS DoS description is generic. Monitor for updates.
CVE-2024-21357
Technical details for CVE-2024-21357 are not provided in the connected documents. Monitor for updates and new disclosures.
CVE-2024-26176
CVE-2024-26176 is described in connected sources as a Windows Kernel vulnerability that causes an out-of-bounds read during symbolic-link validation in the registry path (CmpCheckValueList/CmpCheckValueList validation of symbolic links). The issue is tied to Windows kernel registry code paths and...
CVE-2024-21366
CVE-2024-21366 affects the Microsoft WDAC OLE DB provider for SQL Server and is rated CVSS v3.1 base score 8.8 (High). The vulnerability has a network attack vector with no privileges required, but user interaction is required, and the impact is High on confidentiality, integrity, and availabilit...
CVE-2024-30063
Technical details for CVE-2024-30063 are not provided in the connected documents. The initial description notes a DFS RCE vulnerability but there are no explicit affected products/versions or fixes in the supplied materials. Monitor for updates.
CVE-2024-21444
CVE-2024-21444 concerns Microsoft WDAC OLE DB provider for SQL Server and is described as a remote code execution vulnerability. The NVD entry assigns CVSS v3.1: AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H with a base score of 8.8 (HIGH). Exploitation is network-based, requires user interaction, and impa...
CVE-2024-20684
Technical details about CVE-2024-20684 are not provided in the supplied documents. No confirmed affected products, root cause, impact, or remediation are stated. Monitor for updates from Microsoft and security feeds.
CVE-2024-21307
The CVE-2024-21307 entry identifies a Remote Desktop Client Remote Code Execution vulnerability with a CVSS v3.1 score of 7.5 (HIGH) . Attack vector is Network and the exploit requires User Interaction ; impact is rated as Confidentiality: High, Integrity: High, Availability: High . The available...
CVE-2024-21440
CVE-2024-21440 is a Microsoft ODBC Driver remote code execution vulnerability. The entry identifies affected software as Microsoft ODBC Driver and states an RCE impact with high severity (CVSS v3.1: 8.8, Network attack vector, no privileges required, user interaction required, confidentiality, in...
CVE-2024-26185
CVE-2024-26185 is the Windows Compressed Folder Tampering vulnerability. Supported data in connected sources notes that Windows 11 (22H2/23H2) systems are affected, with impact described as data manipulation. The issue is covered in Microsoft KB5035853 and appears among multiple vulnerabilities p...
CVE-2024-26214
CVE-2024-26214 affects the Microsoft WDAC ODBC Driver and is described as a remote code execution vulnerability. According to the CVE entry, the vulnerability has a CVSS v3.1 base score of 8.8 (HIGH) with Network attack vector, No privileges required, User interaction required, and impacts to con...
CVE-2024-21443
The CVE-2024-21443 entry describes a Windows Kernel Elevation of Privilege vulnerability with a LOCAL attack vector, requiring LOW privileges and USER interaction, and has HIGH impact on confidentiality, integrity, and availability. Connected documents confirm a Windows kernel/macOS? No, Windows ...
CVE-2024-21304
Technical details about CVE-2024-21304 are not provided in the supplied documents. Monitor for updates as new public information becomes available.
CVE-2024-20653
Technical details about CVE-2024-20653 (affected product, specific component, root cause, impact, and remediation) are not publicly provided in the connected documents you supplied. Monitor for updates from official advisories to confirm affected software and fixes.
CVE-2024-21377
Technical details for CVE-2024-21377 are not available in the provided documents. The entries reference the CVE but do not specify affected products, root cause, impact, or fixes. Monitor for official disclosures and published remediation guidance.
CVE-2024-20654
Technical details for CVE-2024-20654 are not publicly provided in the supplied documents. The materials acknowledge a Microsoft ODBC Driver remote code execution vulnerability but do not specify affected products, versions, impact, or remediation. Monitor for updates.
CVE-2024-21355
CVE-2024-21355 is a Microsoft Message Queuing (MSMQ) Elevation of Privilege vulnerability. The initial entry indicates a local attack vector with high impact: CVSS 3.1 base score 7.0, attack vector Local, attack complexity High, privileges Required LOW, no user interaction, and impact on confiden...
CVE-2024-21439
CVE-2024-21439 is a Windows Telephony Server Elevation of Privilege vulnerability with a CVSS v3.1 base score of 7.0 (HIGH). Attack vector is LOCAL with HIGH impact on confidentiality, integrity, and availability, and the exploit requires LOW privileges and no user interaction, but the document n...
CVE-2026-48576
CVE-2026-48576 is a Windows Secure Boot vulnerability described as a protection mechanism failure enabling a local attacker with high privileges to bypass a security feature. The available documents specify a local attack vector with low complexity and no user interaction, and a base CVSS 3.1 sco...
CVE-2024-21346
CVE-2024-21346 is a Win32k "Elevation of Privilege" vulnerability in Windows. According to the NVD/NCSC data, it affects the Win32k component and can yield increased privileges (CVSSv3.1 base score 7.8, impact = high for confidentiality, integrity, and availability; attack vector = local; privile...
CVE-2025-21204
CVE-2025-21204 affects Windows Update Stack with improper link resolution before file access, enabling local privilege elevation for an authenticated user. Public documentation confirms the vulnerability and that Microsoft released fixes as part of April 2025 updates; patches include OS updates t...
CVE-2024-29996
CVE-2024-29996 affects the Windows Common Log File System Driver. The vulnerability is an Elevation of Privilege issue in CLFS, with a high base CVSS score (3.1, 7.8). It is exploitable locally, requires low privileges, and does not require user interaction. The impact is rated as high for confid...
CVE-2024-20683
Technical details are not publicly provided in the supplied documents. No specifics on affected products, versions, impact, or fixes are available here; monitor official sources for updates.
CVE-2024-21363
Technical details for CVE-2024-21363 are not provided in the supplied documents; monitor for updates.
CVE-2024-21342
CVE-2024-21342 is a Windows DNS Client Denial of Service vulnerability. Connected sources confirm the vulnerability affects the Windows DNS Client component and can cause a denial of service (DoS). The CVSS v3.1 base score is 7.5 (HIGH) with network attack vector, no authentication, no user inter...