CVE-2025-27487

CVE-2025-27487 is a heap-based buffer overflow in Windows Remote Desktop Client that allows an authenticated attacker to execute code over the network (CVSSv3.1: 8.0 HIGH; AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H). Connected sources confirm this vulnerability and reference remote desktop RCE updates. ...

CVE-2024-38180

CVE-2024-38180 relates to a security feature bypass in Windows SmartScreen. Affected product: Windows SmartScreen (Windows). The CVE is described as a Security Feature Bypass with high impact (C/H/I/A) and a network attack vector requiring user interaction. The initial documents do not provide de...

CVE-2024-43630

CVE-2024-43630 is a Windows Kernel Elevation of Privilege vulnerability. Connected sources confirm it affects Windows kernel components and is characterized by local, low-privilege attack with no user interaction, enabling highest/total impact on confidentiality, integrity, and availability. The ...

CVE-2024-49118

CVE-2024-49118 is listed in connected sources as a Windows component vulnerability affecting Microsoft Message Queuing (MSMQ). The entry is documented with an ability to execute arbitrary code (impact: 8.10; attack vector: network) and is categorized under Windows Message Queuing in the CVE lists...

CVE-2025-24061

CVE-2025-24061 : Windows Mark of the Web (MOTW) protection mechanism has a local bypass vulnerability (CVSS 3.1/LOCAL) that could allow an attacker to circumnavigate security protections with user interaction required. The issue is categorized as a local elevation/problem in the MOTW feature and ...

CVE-2025-26637

CVE-2025-26637 affects Windows BitLocker, described as a protection mechanism failure that allows bypass of security with a physical attack. The CVSSv3.1 vector (AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) indicates a physical-attack feasible exploit with high confidentiality, integrity, and availabilit...

CVE-2025-26663

CVE-2025-26663 is a Windows LDAP remote code-execution vulnerability described as a use-after-free in the LDAP service that enables an unauthenticated attacker to run code over the network. The CVSS 3.1 base metrics indicate high impact on confidentiality, integrity, and availability (C:H, I:H, A...

CVE-2025-27727

CVE-2025-27727 affects Windows Installer through an improper link resolution before file access ("link following"), enabling local privilege elevation on an authorized attacker. The issue is evidenced by the CVE record and associated assessments (high impact, local access, user interaction none)....

CVE-2026-26128

CVE-2026-26128 concerns an elevation-of-privilege flaw in Windows SMB Server caused by improper authentication. The vulnerability affects Windows SMB Server and is described in connected sources as allowing an authorized local attacker to obtain higher privileges. Evidence from the connected docu...

CVE-2024-43637

CVE-2024-43637 is a Windows USB Video Class System Driver elevation-of-privilege vulnerability. The connected documents confirm a Windows USB Video Driver entry and indicate that Microsoft patched this family of flaws in November 2024 updates (e.g., KB5046616/OS Build 20348.2849 and related KBs)....

CVE-2024-49117

CVE-2024-49117 is a Windows Hyper-V remote/code execution vulnerability with a local attack vector and high impact (confidentiality, integrity, availability all High). The available connected documents indicate the issue is addressed by Microsoft updates, notably KB5048685 (OS builds 22621.4602/2...

CVE-2025-21226

Technical details about CVE-2025-21226 are not provided in the supplied documents. No concrete affected components or fixes are stated; monitor for updates.

CVE-2025-21251

CVE-2025-21251 is a Denial-of-Service vulnerability in Microsoft Message Queuing (MSMQ). It is network‑based (no user interaction, no privileges required) and impacts MSMQ; exploitation leads to DoS with high impact on availability. Several connected sources corroborate MSMQ DoS for CVE-2025-2125...

CVE-2025-27728

CVE-2025-27728 is a Windows Kernel-Mode Driver elevation-of-privilege vulnerability caused by an out-of-bounds read. Affects Windows Kernel-Mode Drivers; impact is local privilege escalation with HIGH confidentiality/Integrity/Availability. Microsoft confirmed updates are available (KB5055523) ad...

CVE-2025-27742

CVE-2025-27742 corresponds to an out-of-bounds read in Windows NTFS that can allow a local attacker to disclose information. The NVD entry lists a CVSS v3.1 base score of 5.5 (LOCAL, LOW attack complexity, NONE privileges, UI REQUIRED) with High confidentiality impact and no impact to integrity/a...

CVE-2026-44803

CVE-2026-44803 describes an integer overflow/wraparound in Windows Win32K - GRFX that can allow a local attacker to execute code. The vulnerability is identified across multiple sources (NVD, CVE listing, and MSRC update page) and is classified with a high impact: local code execution, requiring ...

CVE-2024-43627

CVE-2024-43627 affects the Windows Telephony Service and enables Remote Code Execution. Affected component: Windows Telephony Service (Windows OS). Attack vector: network; prerequisites: none; user interaction required (UI: R). Impact per CVSS 3.1: Confidentiality, Integrity, and Availability are...

CVE-2024-43629

CVE-2024-43629 affects the Windows DWM Core Library and is an Elevation of Privilege vulnerability. The connected KB/MSRC data confirms the affected component (DWM Core Library) and labels the CVE with a high severity (base score 7.8, local attack, low complexity, privileges required: low) and im...

CVE-2025-21379

The CVE-2025-21379 issue is in the Windows DHCP Client Service where a remote code execution vulnerability exists. The vulnerability is identified in Microsoft Windows DHCP Client/Server components and is tracked with CVSS v3.1: AV A (adjacent), AC H, PR N, UI R, S U, C H, I H, A H. Public detail...

CVE-2025-27490

The CVE-2025-27490 entry describes a heap-based buffer overflow in Windows Bluetooth Service that allows an authorized attacker to elevate privileges locally. Microsoft’s advisories confirm a local-privilege-escalation impact due to a vulnerability in the Bluetooth subsystem, with public fixes re...

CVE-2024-38215

The CVE CVE-2024-38215 concerns the Windows Cloud Files Mini Filter Driver and is labeled as an Elevation of Privilege vulnerability with high impact. The available connected data indicates a local-execution vector (attackVector: LOCAL, attackComplexity: LOW) requiring LOW privileges and no user ...

CVE-2024-49096

CVE-2024-49096 is a Denial-of-Service vulnerability in Microsoft Message Queuing (MSMQ). The connected NCSC advisory confirms MSMQ-related DoS as part of a Windows-vulnerability bundle, with the notable DoS impact described under the MSMQ entry in their consolidated list. The CVE entry itself spe...

CVE-2025-21219

CVE-2025-21219 corresponds to a MapUrlToZone Security Feature Bypass in Windows. The Connected data lists this CVE with a CVSS v3.1 base score of 4.3 (Network, Low) and a

CVE-2025-21295

Technical details (affected product, vulnerable component, root cause, exploit conditions, or fix) for CVE-2025-21295 are not provided in the supplied documents. Monitor for updates from Microsoft and CVE repositories; current data confirms only high-level vulnerability existence.

CVE-2025-24066

CVE-2025-24066 is a local privilege escalation in Windows Kernel-Mode Drivers caused by a heap-based buffer overflow in the kernel streaming service driver. The impact is increased privileges (local), with the vulnerability exploitable only locally. Microsoft has released updates addressing this ...

CVE-2025-24992

CVE-2025-24992 is a local, information-disclosure vulnerability in Windows NTFS caused by a buffer over-read. The CVE is tied to Windows NTFS and is described as allowing an unauthorized local disclosure of information. CVSS 3.1 base metrics indicate a Local attack vector, Low attack complexity, ...

CVE-2024-43582

CVE-2024-43582 is a Windows Remote Desktop Protocol Server remote code execution vulnerability. Affected: Windows Remote Desktop (RDP) Server. Severity: high (CVSS ~8.1). Mitigation: apply Microsoft security update KB5044284 (OS Build 26100.2033) or later; patching is advised per Microsoft adviso...

CVE-2024-49124

According to the connected NCSC advisory, CVE-2024-49124 is an LDAP-related vulnerability in Windows LDAP with an impact described as Execution of random code (CVSS 8.1/8.10 range in the table). The advisory notes that Microsoft has fixed vulnerabilities and recommends applying the security updat...

CVE-2025-21270

CVE-2025-21270 affects Microsoft Message Queuing (MSMQ) and is a Denial of Service vulnerability. Public data show an attack over the network with no authentication required, low attack complexity, and a high impact on availability (CVSS v3.1: 7.5). The connected documents indicate MSMQ-related e...

CVE-2025-27491

CVE-2025-27491 is a Windows Hyper-V remote code execution vulnerability described in the initial document as a use-after-free that could allow an authenticated attacker to execute code over the network. Connected sources corroborate Hyper-V as the affected component and reference patch delivery i...

CVE-2025-29828

CVE-2025-29828 (Windows Schannel Remote Code Execution) affects Windows Cryptographic Services. Description confirms missing release of memory after effective lifetime, enabling a remote attacker to execute code over a network. CVSS 3.1/3.1.0 base 8.1 (High) with network vector, no user interacti...

CVE-2026-42980

The CVE-2026-42980 entry describes an integer underflow (wrap or wraparound) in the Windows NT OS Kernel that allows an authorized, local attacker to elevate privileges. Affected component: Windows NT OS Kernel; root cause: numeric underflow leading to improper bounds/flow control, enabling privi...

CVE-2024-37982

Technical details about CVE-2024-37982 are not provided in the connected documents. No specifics on affected components, root cause, or fixes are available here. Monitor official advisories/updates for authoritative guidance.

CVE-2024-49089

Technical details about CVE-2024-49089 are not provided in the supplied documents; RRAS RCE is referenced but no affected versions, exploit, or remediation details are included. Monitor for updates.

CVE-2025-21180

CVE-2025-21180 is a Windows exFAT File System vulnerability described as a heap-based buffer overflow that could allow local code execution. The connected documents identify the affected component as the Windows exFAT file system driver and confirm the root cause as a heap-based overflow, enablin...

CVE-2025-24058

CVE-2025-24058 describes an elevation-of-privilege in the Windows DWM Core Library caused by improper input validation. The vulnerability enables a locally authenticated attacker to escalate privileges (local vector, no user interaction required per CVSS: High, with base score 7.8). Connected sou...

CVE-2025-26686

CVE-2025-26686 is a Windows TCP/IP remote code execution vulnerability caused by sensitive data stored in improperly locked memory. It is network-based with high impact (total compromise potential) and requires user interaction according to the CVSS: network exposure, high complexity, no privileg...

CVE-2025-32720

CVE-2025-32720 is a Windows Storage Management Provider vulnerability described as an information disclosure via an out-of-bounds read. The connected NCSC advisory lists it under Windows Storage Management Provider with CVSS 5.50 (Impact: Access to sensitive data) and indicates a local attack vec...

CVE-2024-43635

Technical details for CVE-2024-43635 are not publicly provided in the connected documents. The materials only reference a Windows Telephony Service RCE vulnerability. Monitor Microsoft advisories and vulnerability feeds for affected versions, impact, and remediation when they are disclosed.

CVE-2025-21190

CVE-2025-21190 is listed by an EU NCSC advisory under Windows Telephony Service with a CVSS of 8.80 and impact described as executing random code. The Connected Documents do not provide vendor/product version details or a concrete patch/fix within the supplied materials; Microsoft MSRC guidance i...

CVE-2025-21222

CVE-2025-21222 is a remote-code-execution vulnerability in Windows Telephony Service characterized by a heap-based buffer overflow that an unauthenticated attacker can trigger over the network. Connected sources corroborate its association with Windows Telephony Service and document it as a netwo...

CVE-2025-21232

CVE-2025-21232 is a Windows Digital Media Elevation of Privilege vulnerability. The linked data show a CVSS v3.1 base score of 6.6 (Medium) with a physical attack vector, requiring low privileges and no user interaction, and yielding high impact to confidentiality, integrity, and availability. Th...

CVE-2025-21241

CVE-2025-21241 is a Windows Telephony Service Remote Code Execution vulnerability. The CVSS 3.1 score is 8.8 (Netwrk attack vector, Low attack complexity, No privileges required, User interaction required; Impact: Confidentiality, Integrity, Availability High). Public entries indicate a Windows c...

CVE-2025-27478

CVE-2025-27478 is a heap-based buffer overflow in Windows Local Security Authority (LSA) that enables a locally authenticated attacker to elevate privileges. The CVE is rated CVSS v3.1 7.0 (HIGH) with Local access, high confidentiality/integrity/availability impact. Connected sources confirm the ...

CVE-2026-33841

CVE-2026-33841 is a heap-based buffer overflow in the Windows kernel that allows an authorized, local attacker to elevate privileges. Public docs consistently describe the vulnerability as a local privilege escalation in Windows Kernel. The CVE has accompanying CVSSv3.1 metrics indicating local a...

CVE-2026-45604

CVE-2026-45604 is an out-of-bounds read vulnerability in the Windows AppID (Windows Application Identity) Subsystem that can allow an authorized local attacker to disclose information. The affected component is described as the AppID Subsystem; the root cause is an out-of-bounds read leading to i...

CVE-2024-49123

CVE-2024-49123 is a Windows Remote Desktop Services remote code execution vulnerability. Public records in ENISA list CVE-2024-49123 under Windows Remote Desktop Services with a CVSS v3.1 base score of 8.1 (NETWORK, NONE/CONFLICTING constraints: high impact to confidentiality, integrity, and avai...

CVE-2025-21242

CVE-2025-21242 is a Windows Kerberos information-disclosure vulnerability. Public sources (CNNVD/MSRC/NVD) identify it as a Kerberos-related information disclosure affecting multiple Windows builds (e.g., Windows 10/11 and Windows Server variants). The exact technical root cause and vulnerable su...

CVE-2025-21254

CVE-2025-21254 is associated with Internet Connection Sharing (ICS) in Windows and is described as a Denial-of-Service vulnerability. The primary documented impact is availability disruption (A) with low attack complexity and adjacent-attack vector, no authentication or user interaction required,...

CVE-2025-21255

Technical details about CVE-2025-21255 are not provided in the supplied documents. Public information is limited to a basic description and references. Monitor Microsoft KBs/NVD for affected products, root cause, and remediation as updates are published.