CVE-2024-30031

CVE-2024-30031 is documented as a Windows elevation-of-privilege issue affecting the CNG Key Isolation Service . The available sources describe the vulnerability as a local, privilege-required issue with high impact across confidentiality, integrity, and availability, but do not provide vendor-sp...

CVE-2024-30081

Technical details for CVE-2024-30081 are not provided in the supplied documents. The connected Microsoft KB updates reference unrelated issues (RADIUS, BitLocker, LNK policy) and do not disclose affected products, root cause, impact, or fixes for this CVE. Monitor for updates.

CVE-2025-21274

CVE-2025-21274 corresponds to a Windows Event Tracing Denial of Service vulnerability. The NVD entry rates impact as Denial of Service with a CVSSv3.1 base score of 5.5 (Local, Low UI, privileges required: Low, Availability impact: High). Connected sources indicate this vulnerability affects Wind...

CVE-2025-27736

Technical details about CVE-2025-27736 (affected product/versions/root cause/fix) are not disclosed in the provided connected documents. Monitor Microsoft advisories and CVE records for updates and remediation information.

CVE-2024-43623

CVE-2024-43623 is documented across connected sources as a Windows NT OS Kernel elevation-of-privilege vulnerability. The ENISA/NCSC summary and related Microsoft patch-coverage references confirm it affects the Windows NT OS Kernel and was addressed via the November 2024 update cycle (e.g., KB50...

CVE-2024-49102

CVE-2024-49102 — Windows RRAS Remote Code Execution is a network‑based vulnerability in the Routing and Remote Access Service (RRAS) of Windows. The CVSS score cited in the initial entry is 8.8/10 (High) with AV:N, AC:L, PR:N, UI:R, S:U, C/H/I/A: High, indicating unauthenticated network access re...

CVE-2025-21338

CVE-2025-21338 is a GDI+ Remote Code Execution vulnerability. The CVE affects Windows components that use GDI+ and has a CVSSv3.1 base score of 7.8 (HIGH) with LOCAL attack vector, LOW privileges required, no user interaction, and impacts to confidentiality, integrity, and availability as describ...

CVE-2025-24997

CVE-2025-24997 is a Windows Kernel Memory vulnerability described as a null pointer dereference that enables a local, authorized attacker to cause a Denial-of-Service. The CVE is cataloged with a low to medium severity profile (MSFT-cited CVSSv3.1: AV L, AC L, PR High, UI None, S U, C N, I N, A H...

CVE-2024-30022

CVE-2024-30022 pertains to the Windows RRAS component and is listed in the ENISA/NCSC compilation with a CVSSv3.1 base score of 7.5 (high). The adverse impact is remote code execution with network access, requiring user interaction and no privileges. Connected sources explicitly associate CVE-202...

CVE-2024-43561

Technical details about CVE-2024-43561 (affected products/versions, root cause, impact, and fix) are not provided in the connected documents. Monitor for updates from Microsoft and CVE records.

CVE-2025-29809

CVE-2025-29809 is a Windows Kerberos security feature bypass vulnerability. The issue involves insecure storage of sensitive information in Kerberos, enabling an attacker with local access and low privileges, and no user interaction, to bypass a security feature. Affected product/area: Windows Ke...

CVE-2024-30090

CVE-2024-30090 is an elevation-of-privilege vulnerability affecting the Windows Kernel Streaming framework, specifically the msrks.ks.sys component used for processing streaming data (e.g., microphone/webcam input). The public materials indicate exploitation potential via a memory-bounds/buffer h...

CVE-2025-21213

Technical details about CVE-2025-21213 are not provided in the supplied documents. No affected products, root cause, or remediation specifics are disclosed here. Monitor for updates from official advisories.

CVE-2025-24066

CVE-2025-24066 is a local privilege escalation in Windows Kernel-Mode Drivers caused by a heap-based buffer overflow in the kernel streaming service driver. The impact is increased privileges (local), with the vulnerability exploitable only locally. Microsoft has released updates addressing this ...

CVE-2025-26644

CVE-2025-26644 affects Windows Hello by allowing local spoofing due to inadequate handling of adversarial input perturbations. Microsoft documents a Windows Hello security fix path via monthly updates (e.g., KB5055528 for Windows 11 22621/22631; KB5055519 for older Windows builds) that enforces v...

CVE-2025-29810

CVE-2025-29810 corresponds to an improper access control in Active Directory Domain Services that can allow an authenticated attacker to elevate privileges over the network. The NCSC advisory groups CVE-2025-29810 under Windows Active Directory Domain Services with an impact described as ‘Obtain ...

CVE-2024-30084

Technical details (affected product/versions/root cause/impact) for CVE-2024-30084 are not publicly available in the provided documents. Monitor for updates.

CVE-2024-38117

CVE-2024-38117 affects the Windows NTFS component and is labeled as an elevation-of-privilege vulnerability with the impact “Obtaining Increased Rights” and a CVSS v3.1 base score of 7.8 (High). The connected documents provide the impact and the component but do not disclose the exact root cause ...

CVE-2026-33841

CVE-2026-33841 is a heap-based buffer overflow in the Windows kernel that allows an authorized, local attacker to elevate privileges. Public docs consistently describe the vulnerability as a local privilege escalation in Windows Kernel. The CVE has accompanying CVSSv3.1 metrics indicating local a...

CVE-2024-29998

CVE-2024-29998 is a Windows Mobile Broadband Driver Remote Code Execution vulnerability. The available documents confirm the affected product area (Windows Mobile Broadband Driver) and that exploitation could lead to code execution with high impact on confidentiality, integrity, and availability,...

CVE-2024-30009

CVE-2024-30009 corresponds to a Windows RRAS remote code execution vulnerability. The RRAS service is affected, with the issue enabling execution of arbitrary code on a network-accessible target. The CVSS vector indicates network access, low attack complexity, no privileges required, user interac...

CVE-2024-30015

CVE-2024-30015 affects Windows Routing and Remote Access Service (RRAS). The connected NCSC advisory lists CVE-2024-30015 under RRAS with impact described as Execution of random code (CVSS v3.1: 7.5, Network attack vector, high complexity, no privileges required, user interaction required, impact...

CVE-2024-30049

CVE-2024-30049 is a Windows Win32 Kernel Subsystem elevation-of-privilege vulnerability affecting the Win32K component. Public details in connected sources indicate the issue enables elevated privileges with local access (CVSSv3.1: AV=L/AC=L/PR=L/UI=N/S=U/C=H/I=H/A=H; base score 7.8), and multipl...

CVE-2024-49117

CVE-2024-49117 is a Windows Hyper-V remote/code execution vulnerability with a local attack vector and high impact (confidentiality, integrity, availability all High). The available connected documents indicate the issue is addressed by Microsoft updates, notably KB5048685 (OS builds 22621.4602/2...

CVE-2024-43582

CVE-2024-43582 is a Windows Remote Desktop Protocol Server remote code execution vulnerability. Affected: Windows Remote Desktop (RDP) Server. Severity: high (CVSS ~8.1). Mitigation: apply Microsoft security update KB5044284 (OS Build 26100.2033) or later; patching is advised per Microsoft adviso...

CVE-2024-43634

CVE-2024-43634 (Windows USB Video Class System Driver Elevation of Privilege) affects Windows USB Video Driver. Connected sources corroborate a privilege-escalation vulnerability with CVSS v3.1 base score 6.8 (Vector: Privileges none, User interaction none, Attack vector physical, Scope unchanged...

CVE-2025-21332

CVE-2025-21332 corresponds to a MapUrlToZone Security Feature Bypass in Windows. The connected data shows a CVSS v3.1 base score of 4.3 (vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N) indicating a network-accessible issue with low integrity/availability impacts and user interaction require...

CVE-2025-26651

CVE-2025-26651 is a Windows Local Session Manager (LSM) denial-of-service vulnerability. An authorized attacker could trigger a network-based DoS by exploiting an exposed dangerous method/function in LSM. The issue is documented across multiple sources and is being addressed by Microsoft security...

CVE-2025-29828

CVE-2025-29828 (Windows Schannel Remote Code Execution) affects Windows Cryptographic Services. Description confirms missing release of memory after effective lifetime, enabling a remote attacker to execute code over a network. CVSS 3.1/3.1.0 base 8.1 (High) with network vector, no user interacti...

CVE-2026-62795

CVE-2026-62795 is a Windows LDAP (Lightweight Directory Access Protocol) use-after-free vulnerability that allows a remote attacker to execute code over the network. The issue is described as a remote code execution in Windows LDAP due to a use-after-free condition, enabling an unauthenticated, n...

CVE-2024-30017

CVE-2024-30017 affects Microsoft Windows Hyper-V. It is a remote code execution vulnerability in Hyper-V with CVSSv3.1 base score 8.8 (Network, Privileges Required: Low, User Interaction: None; Confidentiality/Integrity/Availability: High). Affected: Windows Hyper-V component; likely requires net...

CVE-2024-43520

CVE-2024-43520 is a Windows Kernel Denial-of-Service vulnerability. The initial records classify it as a Windows kernel issue affecting availability, with a CVSS v3.1 base score of 5.0 (LOCAL, LOW privileges, LOW attack complexity, UI: REQUIRED, S: U, C/N/I with A:H). Connected sources indicate t...

CVE-2024-49122

CVE-2024-49122 is a Microsoft Message Queuing (MSMQ) Remote Code Execution vulnerability. The entry notes a network-exposed base score of 8.1 (High) with no user interaction and total impact, and the MSMQ component is affected. Connected documents corroborate an RCE classification for MSMQ with u...

CVE-2025-21303

Technical details are not publicly provided in the supplied documents for CVE-2025-21303 (Windows Telephony Service RCE). Monitor for updates from Microsoft; no specific vulnerable component/version or remediation is described here.

CVE-2025-21343

CVE-2025-21343 corresponds to a Windows Web Threat Defense User Service Information Disclosure vulnerability. Publicly observed exposure is that the Windows Web Threat Defense User Service can disclose sensitive data. The NCSC advisory lists CVE-2025-21343 with a base score of 7.5 (HIGH) and impa...

CVE-2026-33834

Technical details are not publicly available in the provided documents. No affected products/versions or remediation specifics are included here. Monitor for updates from official CVE/NVD entries to obtain concrete exploit info, mitigations, and fixes.

CVE-2024-30028

CVE-2024-30028 is a Windows Win32k elevation-of-privilege vulnerability. The NCSC advisory lists it under Windows Win32K with a CVSS v3.1 base score of 7.8 (HIGH) and impact: higher privileges, and notes the vulnerability is exploitable locally with low attack complexity (PR:L, AV:L) and no user ...

CVE-2024-30087

Technical details are not provided in the connected documents. CVE-2024-30087 is a Win32k Elevation of Privilege vulnerability with CVSS 3.1 base score 7.8, vector LOCAL, exploit complexity LOW, privileges required LOW, user interaction NONE.

CVE-2024-38184

CVE-2024-38184 is a Windows kernel-mode driver elevation of privilege vulnerability. The CVE affects Windows kernel-mode drivers and is exploitable locally with LOW privileges required and no user interaction, with a HIGH impact on confidentiality, integrity, and availability per the CVSS 3.1 met...

CVE-2024-43559

In the connected documents, CVE-2024-43559 is listed under Windows Mobile Broadband with CVSS 6.50 Denial-of-Service, indicating a DoS impact in that subsystem. The sources do not provide the root cause, affected specific versions, exploit details, or remediation for this CVE within the documents...

CVE-2026-40403

CVE-2026-40403 describes a heap-based buffer overflow in Windows Win32K GRFX that could allow a locally authenticated attacker to execute code. Affected component is Windows graphics subsystem (Win32K GRFX); cause is a heap-based overflow. Impact per available data is local code execution with hi...

CVE-2026-42836

CVE-2026-42836: A race condition due to improper synchronization in the Windows Function Discovery Service (fdwsd.dll) enables a locally authenticated attacker to escalate privileges. The issue is described as a concurrency problem with a shared resource. Affected component: Function Discovery Se...

CVE-2024-37972

Technical details for CVE-2024-37972 are not publicly provided in the supplied documents. No affected products, root cause, impact, or remediation are disclosed here. Monitor for updates from authoritative sources.

CVE-2024-49095

CVE-2024-49095 affects the Windows PrintWorkflowUserSvc with an Elevation of Privilege vulnerability. The entry shows a local attack vector (AV:L), high impact on confidentiality, integrity, and availability (C>I>A), with user interaction not required and a low privilege requirement. The CW...

CVE-2025-26648

CVE-2025-26648 affects the Windows Kernel. Description: sensitive data stored in memory that is not properly locked can allow an authorized locally authenticated attacker to elevate privileges. The issue is listed under Windows Kernel vulnerabilities (CVE-2025-26648) with high impact (local Privi...

CVE-2024-29997

CVE-2024-29997 concerns the Windows Mobile Broadband Driver and is characterized as a Remote Code Execution vulnerability. The primary details indicate an attacker with physical access can exploit the vulnerability with low exploit complexity and without user interaction to execute code, achievin...

CVE-2024-30029

According to the NCSC advisory (NCSC-2024-0210), CVE-2024-30029 affects Microsoft Windows RRAS and is rated with CVSSv3.1 base score 7.5 (HIGH). The RRAS vulnerability enables remote code execution via network access, with the advisory indicating the impact as executing random code on the target....

CVE-2024-30096

Technical details about CVE-2024-30096 (affected components, versions, root cause, impact, and remediation) are not provided in the supplied connected documents. Monitor for updates from official sources.

CVE-2024-30077

Technical details are not provided in the supplied documents; no public specifics are included here. Monitor for updates from official advisories.

CVE-2024-30016

CVE-2024-30016 affects Windows Cryptographic Services . The vulnerability is described as an information disclosure with impact to confidentiality (high) and is listed in sources as a Windows component issue with a CVSS v3.1 base score of 5.5 (attack vector: local; privileges required: low; user ...