CVE-2024-38199

Technical details about CVE-2024-38199 are not publicly provided in the connected documents. Monitor for updates from Microsoft and NVD for affected products, fixes, and exploit information.

CVE-2024-20698

CVE-2024-20698 is a Windows Kernel Elevation of Privilege vulnerability. The connected exploit analysis reveals that the bug resides in ntoskrnl.exe within WbAddLookupEntryEx, which manipulates an array of process pointers. Before the patch, it reallocates and inserts a new pointer, but the patch...

CVE-2024-49082

CVE-2024-49082 is a Windows File Explorer information disclosure vulnerability. The connected data lists impact as access to sensitive data with CVSS 3.1 v3.1 vector: AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N, score 6.8 (Medium). Concrete details about root cause or affected Windows versions are not fu...

CVE-2025-24035

CVE-2025-24035 affects Windows Remote Desktop Services. The connected data corroborates a remote code execution risk over a network, arising from memory handling (sensitive data stored in improperly locked memory). The impact is described as executing arbitrary code, with the network as the attac...

CVE-2023-36427

CVE-2023-36427 is a Windows Hyper-V elevation-of-privilege vulnerability. The connected documents confirm its existence as part of Microsoft Patch Tuesday coverage (e.g., Windows Hyper‑V entry listed among CVEs addressed by the November 2023 security updates). Public literature in the connected c...

CVE-2025-21351

CVE-2025-21351 is a Windows AD DS API Denial of Service vulnerability. The initial record notes a network‑vector DoS impacting AD DS APIs with a CVSS v3.1 base score of 7.5 (HIGH) and no user interaction required. Connected documents indicate Microsoft has released updates addressing vulnerabilit...

CVE-2024-20680

Technical details about CVE-2024-20680 (affected MSMQC, root cause, impact, or fix) are not provided in the supplied documents. Monitor for updates from official advisories.

CVE-2024-20682

CVE-2024-20682 concerns the Windows Cryptographic Services Remote Code Execution vulnerability. The available data show a vulnerability affecting Windows components, enabling a local attacker to achieve code execution with high impact on confidentiality, integrity, and availability. The CVSS 3.1 ...

CVE-2024-21309

Technical details (affected product/component, root cause, impact, or fix) for CVE-2024-21309 are not publicly provided in the connected documents. Monitor for updates from authoritative sources.

CVE-2025-24996

CVE-2025-24996 : Affects Windows NTLM. External control of a file name or path enables an unauthorized network spoofing scenario, potentially allowing impersonation over a network. CVSSv3.1 base 6.5 (Network attack, low complexity, no privileges required, user interaction required; CIA: high conf...

CVE-2024-20692

Technical details such as affected product versions, root cause, exploiting conditions, or remediation are not publicly available in the provided documents. Monitor for updates from authoritative sources to obtain concrete information about CVE-2024-20692.

CVE-2024-43513

CVE-2024-43513 is a BitLocker security feature bypass vulnerability affecting Windows BitLocker. The entry notes a bypass of security measures with a CVSS v3.1 base score of 6.4 (Physical access, High impact for confidentiality, integrity, and availability). The connected Microsoft update guidanc...

CVE-2026-20846

CVE-2026-20846 describes a buffer over-read in Windows GDI+ that can be exploited over a network to cause a denial of service. The CVSS v3.1 base score is 7.5 (HIGH). Mitigation requires the Microsoft update per the MSRC vulnerability entry CVE-2026-20846.

CVE-2024-28919

CVE-2024-28919 is listed in the Windows Secure Boot area as a "Secure Boot Security Feature Bypass" vulnerability. The connected documents identify it as a local-bypass vulnerability affecting Secure Boot, with a CVSSv3.1 base score of 6.7 (Impact: High on confidentiality, integrity, and availabi...

CVE-2025-47827

Technical details for CVE-2025-47827 are not publicly provided in the supplied documents. The initial description notes a Secure Boot bypass via igel-flash-driver, but no additional technical specifics, affected versions, or fixes are included here. Monitor for updates.

CVE-2024-20660

CVE-2024-20660 concerns Microsoft Message Queuing (MSMQ) with an information disclosure vulnerability. Connected CNVD-2024-04951 states MSMQ contains a heap memory information disclosure vulnerability that an attacker could exploit to obtain sensitive data. The NVD entry for CVE-2024-20660 lists ...

CVE-2024-43625

CVE-2024-43625 is a Microsoft Windows VMSwitch elevation-of-privilege vulnerability (CVSSv3.1: 8.1, LOCAL, no user interaction). Affected component is the Windows VMSwitch; the exposed impact is potential total compromise with high confidentiality, integrity, and availability impact. Publicly dis...

CVE-2023-36403

CVE-2023-36403 is linked to a Windows Kernel local privilege escalation involving registry virtualization. CIRCL’s CIRCL:CVE-2023-36403 entry explicitly notes “Windows Kernel bad locking in registry virtualization leads to race conditions,” indicating the root cause is locking/race-condition issu...

CVE-2024-28896

CVE-2024-28896 is a Secure Boot security feature bypass with HIGH impact (C:I:H:A:H) and adjacent access (AV:A, AC:H, UI:N, PR:N). Descriptions show no user interaction or privileges required. EUVD-2024-25962 and Windows Secure Boot mappings reference this CVE among related Secure Boot fixes; no ...

CVE-2024-43533

CVE-2024-43533 is a Windows Remote Desktop Client remote code execution vulnerability. The CVSS 3.1 base vector is CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, base score 8.8 (HIGH), with network attack vector, no privileges required, and user interaction needed. Nessus and MSRC entries associat...

CVE-2024-21447

CVE-2024-21447 is a Windows local privilege-escalation vulnerability in the Windows Authentication subsystem. The CVSS v3.1 base score is 7.8 (HIGH): attack vector LOCAL, attack complexity LOW, privileges required LOW, user interaction NONE, with impacts to confidentiality, integrity, and availab...

CVE-2024-26208

CVE-2024-26208 affects Microsoft Message Queuing (MSMQ) on Windows. The OpenVAS entries list MSMQ under Windows Message Queuing with CVE-2024-26208 and indicate a vulnerability that allows executing arbitrary code (remote code execution) over the network, without user interaction, and with high p...

CVE-2024-26211

CVE-2024-26211 is an elevation-of-privilege vulnerability affecting the Windows Remote Access Connection Manager. The CVE entry lists a HIGH base score (CVSSv3.1: 7.8; vector: LOCAL, LOW attack complexity; Privileges Required: LOW; User Interaction: NONE; Scope: UNCHANGED; Confidentiality/Integri...

CVE-2024-26228

CVE-2024-26228 affects Windows Cryptographic Services. The connected data indicate a security feature bypass vulnerability in Windows Cryptographic Services, with a local attack vector, low privileges required, no user interaction, and high impact to confidentiality, integrity, and availability. ...

CVE-2024-26239

COVID: CVE-2024-26239 is a Windows Telephony Server Elevation of Privilege vulnerability with LOCAL attack vector, requiring LOW privileges and no user interaction. The CVSS 3.1 base score is 7.8 (HIGH), with CONFIDENTIALITY, INTEGRITY, and AVAILABILITY impacts rated HIGH. The initial description...

CVE-2024-28923

CVE-2024-28923 is described as a Secure Boot security feature bypass in the Windows Secure Boot subsystem. The provided documents indicate it allows bypassing Secure Boot and potentially executing code by a malicious party, with the CVSS-like data in the initial record showing local exploitation,...

CVE-2023-36406

CVE-2023-36406 is described in the NVD as a Windows Hyper-V Information Disclosure vulnerability with CVSS v3.1 base score 5.5 (Local, Low complexity, Privileges required: Low, User interaction: None; Confidentiality Impact: High). The connected documents note Microsoft security updates (KB503219...

CVE-2023-36407

CVE-2023-36407 – Windows Hyper-V Elevation of Privilege : Exploitation details show an improper input validation in winhvr.sys (WinHvSetVpState) allowing a local attacker to copy user-controlled data into Non-paged Pool via memcpy, causing a BOF and a BSOD on Hyper-V Host. The PoC targets Windows...

CVE-2024-20661

Technical details for CVE-2024-20661 are not publicly provided in the supplied documents. Monitor for updates from Microsoft and CVE databases for affected versions, impact, and fixes.

CVE-2024-26210

CVE-2024-26210 describes a remote code execution vulnerability in the Microsoft WDAC OLE DB provider for SQL Server. The issue is classified as CVSS 3.1 Base Score 8.8 (High) with network attack vector, no privileges required, and user interaction needed. The vulnerability affects the WDAC OLE DB...

CVE-2024-43585

Technical details about CVE-2024-43585 are not publicly available in the provided connected documents. No specifics on affected products, root cause, or fixes are present here. Monitor for updates from official advisories.

CVE-2024-49132

CVE-2024-49132 affects Windows Remote Desktop Services and is a remote code execution vulnerability exploitable over the network (attack vector: network; no privileges required; user interaction not needed). The CVSSv3.1 base score is 8.1 (HIGH) with high impact on confidentiality, integrity, and...

CVE-2026-49160

The CVE-2026-49160 entry concerns HTTP.sys with an HTTP/2 resource consumption flaw leading to unauthenticated denial of service over the network. Exploitation details, affected versions or specific component paths aren’t provided in the connected documents. The NVD/MSRC entries confirm an uncont...

CVE-2026-66799

CVE-2026-66799 describes a heap-based buffer overflow in Windows Key Guard that allows an authenticated, local attacker to elevate privileges. Affected component: Windows Key Guard. Root cause: heap-based buffer overflow (as stated). Impact: local privilege escalation with high confidentiality, i...

CVE-2024-26172

CVE-2024-26172 affects Windows DWM Core Library. Affects the Windows DWM Core Library component; root cause described as information disclosure. Documented impact is access to sensitive data with a CVSS v3.1 base score of 5.5 (LOCAL, LOW privileges required, user interaction none, availability im...

CVE-2025-60724

Technical details about CVE-2025-60724 are not provided in the supplied documents. Connected KBs discuss OS updates and security fixes but do not specify vulnerable product versions, root cause, exploitation, or patch specifics for this CVE. Monitor for updates.

CVE-2024-26200

CVE-2024-26200 is a Windows Routing and Remote Access Service (RRAS) remote code execution vulnerability. Connected sources list RRAS as vulnerable and indicate the impact as executing random code, with CVE-2024-26200 appearing under RRAS in the Microsoft Windows vulnerabilities compilation. The ...

CVE-2024-26255

CVE-2024-26255 is a Windows RRAS/Windows Remote Access Connection Manager information disclosure vulnerability. The affected component is Windows Remote Access Connection Manager; the underlying issue yields leakage of sensitive data (confidentiality impact). The CVSS 3.1 vector from the initial ...

CVE-2024-29994

CVE-2024-29994 is Microsoft Windows SCSI Class System File Elevation of Privilege. Connected sources (NCSC advisory) list CVE-2024-29994 with CVSS v3.1 base 7.8 (high), Local attack vector, Low privileges required, no user interaction, and impact to confidentiality, integrity, and availability. T...

CVE-2025-21341

Technical details for CVE-2025-21341 are not provided in the supplied documents. Public disclosures describe it as Windows Digital Media Elevation of Privilege, but no specifics on vulnerable component, versions, exploit or fix are included. Monitor for updates.

CVE-2024-28897

CVE-2024-28897 is referenced in connected data as a Windows Secure Boot vulnerability with the label “Circumvention of security measure.” The primary public document (NVD) lists it as a Secure Boot security feature bypass, with a CVSS v3.1 score of 6.8 (Medium) and details like attack vector adja...

CVE-2026-44803

CVE-2026-44803 describes an integer overflow/wraparound in Windows Win32K - GRFX that can allow a local attacker to execute code. The vulnerability is identified across multiple sources (NVD, CVE listing, and MSRC update page) and is classified with a high impact: local code execution, requiring ...

CVE-2024-26217

CVE-2024-26217 affects the Windows Remote Access Connection Manager. The connected NCSC advisory documents the impact as information disclosure / access to sensitive data (CVE-2024-26217, Windows Remote Access Connection Manager). The CVSS/impact details vary across sources: NVD metrics show a lo...

CVE-2024-29062

CVE-2024-29062 affects Windows Secure Boot and is described as a Security Feature Bypass. The vulnerability targets the Secure Boot path with an adjacent-attack surface, requiring user interaction and high complexity to exploit, and can impact confidentiality, integrity, and availability. Public ...

CVE-2024-43560

CVE-2024-43560 is a Windows Storage Port Driver elevation-of-privilege vulnerability. A local attacker with low privileges could exploit it to obtain elevated rights (CVE-2024-43560 details: CVSS v3.1 7.8, high impact; affected component: Windows Storage Port Driver). The NCSC advisory confirms M...

CVE-2026-26128

CVE-2026-26128 concerns an elevation-of-privilege flaw in Windows SMB Server caused by improper authentication. The vulnerability affects Windows SMB Server and is described in connected sources as allowing an authorized local attacker to obtain higher privileges. Evidence from the connected docu...

CVE-2024-26168

CVE-2024-26168 concerns a Secure Boot security feature bypass. The entry explicitly labels it as Secure Boot bypass with a CVSSv3.1 base score of 6.8 (Medium) and a physical attack vector. The breakdown indicates HIGH impact to confidentiality, integrity, and availability, with no user interactio...

CVE-2024-26252

CVE-2024-26252 refers to a Windows kernel vulnerability in the rndismp6.sys driver that enables remote code execution. The issue is described as affecting the Windows component rndismp6.sys with a CVSSv3.1 base score of 6.8 (Medium), and usability concerns indicate a physical attack vector, low a...

CVE-2024-38144

CVE-2024-38144 is a local elevation-of-privilege vulnerability in the Windows Kernel Streaming WOW Thunk Service Driver. The connected sources state a local attacker could obtain SYSTEM privileges and that exploit code appeared in the TyphoonPWN 2024 event, with a write‑up from SSD Secure Disclos...

CVE-2026-42970

CVE-2026-42970 involves Windows Push Notifications and is caused by the use of an uninitialized resource , enabling an authorized attacker to locally disclose information. The CVSS 3.1 vector (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) yields a base score of 5.5 (Medium) with high confidentiality impac...