3552 matches found
CVE-2026-0386
CVE-2026-0386 : Windows Deployment Services has an improper access control vulnerability that can allow an adjacent-network attacker to execute code remotely. This entry is supported by multiple sources confirming the issue and indicating Microsoft has released January 2026 security updates to ad...
CVE-2023-36697
Technical details about CVE-2023-36697 are not publicly available in the provided documents; monitor for updates.
CVE-2023-41765
Technical details about CVE-2023-41765 (affected products, root cause, impact, or fixes) are not provided in the supplied documents. Monitor for updates and additional disclosures to assess applicability and remediation.
CVE-2023-36575
CVE-2023-36575 corresponds to a Microsoft Message Queuing (MSMQ) Remote Code Execution vulnerability. The NVD entry lists a CVSS v3.1 base score of 7.3 ( HIGH ), with a LOCAL attack vector, LOW privileges required, and USER INTERACTION NEEDED; all three impact metrics (confidentiality, integrity,...
CVE-2023-41767
Technical details about CVE-2023-41767 are not publicly provided in the supplied documents. No concrete affected products, root cause, or remediation are specified. Monitor for updates from official sources.
CVE-2022-26937
CVE-2022-26937 is a Windows Network File System (NFS) remote code execution vulnerability. Exploitation could occur over the network via an unauthenticated, specially crafted call to an NFS service. NFSv4.1 is not affected; the patch addresses the vulnerability in NFS versions 2.0 and 3.0. In the...
CVE-2022-24481
CVE-2022-24481 is a Windows Common Log File System Driver elevation-of-privilege vulnerability. The connected exploit reports describe a memory/counterpart corruption involving CLFS_CONTAINER_CONTEXT.pContainer that can be triggered from CClfsContainer::Close by modifying CLFS_BASE_RECORD_HEADER....
CVE-2023-36591
Technical details (affected product versions, root cause, exploit information) are not publicly available in the provided documents; monitor for updates from official advisories and vendor advisories.
CVE-2023-36570
Technical details for CVE-2023-36570 are not publicly available in the provided documents. Monitor for updates.
CVE-2023-41766
Technical details for CVE-2023-41766 are not provided in the connected documents. Public information about affected components, root cause, impact, and fixes is not available here. Monitor for updates from official sources.
CVE-2024-26229
The Windows CSC Service is vulnerable to a Local Privilege Escalation (LPE) vulnerability caused by a heap-based buffer overflow in the csc.sys driver. The root cause is improper address validation in an IOCTL with METHOD_NEITHER. An attacker can craft malicious input to overflow data into adjace...
CVE-2023-28231
CVE-2023-28231 is a Windows DHCP Server Service remote code execution vulnerability. The DHCP service can be abused by an authenticated attacker who sends a specially crafted RPC call over a restricted network, potentially achieving code execution with high impact (C/H/I/A) per CVSS 3.1. Public s...
CVE-2023-36606
Technical details for CVE-2023-36606 are not publicly available in the provided documents. Monitor for updates from vendor/security advisories.
CVE-2023-38166
CVE-2023-38166 is a Windows Layer 2 Tunneling Protocol remote code execution vulnerability. The supplied data states a CVSS v3.1 base score of 8.1 (HIGH), with network attack vector, high attack complexity, no privileges required, no user interaction, and impact to confidentiality, integrity, and...
CVE-2025-21418
CVE-2025-21418 is a heap-based buffer overflow in the Windows Ancillary Function Driver for WinSock that enables local privilege escalation to SYSTEM. Affected: Windows components exposed to local attack surface; exploitability is local with low attack complexity and no user interaction. Public r...
CVE-2022-22048
Technical details about CVE-2022-22048 are not publicly provided in the supplied documents. No affected products, root cause, impact, or fixes are included here. Monitor for updates.
CVE-2023-36590
Technical details about CVE-2023-36590 (affected MSMQ RCE) are not publicly provided in the supplied connected documents. Please monitor for updates from official advisories and vulnerability databases for affected products, vulnerable components, impact, and fixes.
CVE-2023-36592
CVE-2023-36592 concerns Microsoft Message Queuing (MSMQ) Remote Code Execution. Connected CNVD-2023-84129 notes a remote code execution vulnerability in MSMQ. The CVSS metrics in the Initial document indicate Local attack vector, Low privileges required, User interaction, and high impact across c...
CVE-2023-41771
Technical details about CVE-2023-41771 are not provided in the supplied documents. No concrete product/vendor/version impact or remediation is disclosed here; monitor for updates from the referenced sources.
CVE-2018-0824
CVE-2018-0824 is a Microsoft Windows remote code execution vulnerability in the COM subsystem due to improper handling of serialized objects. Public writeups and advisories summarize that a specially crafted file or script can trigger code execution, with potential remote impact when users open o...
CVE-2023-36743
Technical details about CVE-2023-36743 are not provided in the supplied connected documents. The set includes general references and vulnerability listings, but no affected products, root cause, impact, or fixes. Monitor for updates as more information becomes publicly available.
CVE-2023-36581
CVE-2023-36581 corresponds to a Denial of Service vulnerability in Microsoft Message Queuing (MSMQ). Public records in the connected CNVD entry describe a MSMQ DoS issue, but the available documents do not provide concrete technical details such as affected versions, root cause, specific exploit ...
CVE-2023-36713
The CVE-2023-36713 entry concerns a vulnerability in the Windows Common Log File System Driver that leads to Information Disclosure. According to the NVD entry, the issue has a CVSSv3.1 base score of 5.5 (Medium) with Confidentiality Impact High, and it is a Local, Low-Complexity attack requiring...
CVE-2023-41768
CVE-2023-41768 is a Windows Layer 2 Tunneling Protocol remote code execution vulnerability. The issue affects Microsoft Windows L2TP handling and is described as a high-severity, network-based flaw with no required user interaction. The connected sources identify Windows updates released in Oct 2...
CVE-2023-41773
CVE-2023-41773 is described in the initial document as a Windows Layer 2 Tunneling Protocol Remote Code Execution vulnerability with high severity (CVSS v3.1: 8.1, network access, no user interaction). Connected documents corroborate that this is a Windows L2TP RCE issue; CNVD‑2023‑81881 and NVD ...
CVE-2023-41769
Technical details for CVE-2023-41769 are not publicly provided in the supplied documents. No affected products, exploit info, or remediation confirmed here. Monitor for official disclosures and vendor advisories for concrete impact and fixes.
CVE-2025-21189
CVE-2025-21189 is listed as MapUrlToZone Security Feature Bypass. Connected sources categorize its impact as circumvention of a security measure. Public technical detail in the provided documents is limited; no explicit root-cause, vulnerable product/version, or exploitation information is given....
CVE-2023-36703
Technical details about CVE-2023-36703 are not publicly disclosed in the provided documents. Monitor for updates from official advisories; current materials only indicate a DHCP Server Denial of Service vulnerability without specifics.
CVE-2023-36564
Technical details about CVE-2023-36564 are not publicly available in the provided documents. Monitor official advisories for updates on affected products, impact, and available fixes.
CVE-2023-36712
Technical details for CVE-2023-36712 are not publicly disclosed in the provided connected documents. Based on available records, no affected products, root cause, or remediation are specified here. Monitor for updates from official advisories.
CVE-2023-36724
CVE-2023-36724 corresponds to a Windows Power Management Service Information Disclosure vulnerability. Affected component: Windows Power Management Service. Root cause and impact: information disclosure with high confidentiality impact; attack vector LOCAL, low complexity, no user interaction req...
CVE-2023-36593
Technical details for CVE-2023-36593 are not publicly provided in the supplied documents. Monitor for updates from official advisories (MSRC/NVD) to obtain affected products, impact, and fixes.
CVE-2024-38193
CVE-2024-38193 concerns the Windows Ancillary Function Driver for WinSock (AFD) used by Winsock. The vulnerability is a local privilege-escalation issue in the AFD/WinSock stack, with a resource-management error cited by CNNVD and a privilege-escalation capability described by CISA KEV. Public ex...
CVE-2012-0002
CVE-2012-0002 is a Remote Desktop Protocol memory-processing vulnerability in affected Windows platforms (Windows XP SP2/SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2/R2, Windows 7 SP1). The flaw permits remote code execution by sending specially crafted RDP packets tha...
CVE-2023-36438
Technical details about CVE-2023-36438 are not publicly provided in the connected documents. The OpenVAS entries reference this CVE among many Windows vulnerabilities but do not supply affected products, versions, root cause, or remediation specifics. Monitor for updates.
CVE-2023-36732
CVE-2023-36732 is a Win32k elevation-of-privilege vulnerability affecting Windows, with a local attack vector, low attack complexity, and low privileges required, and it has a high impact on confidentiality, integrity, and availability per CVSS 3.1 (7.8). The provided records identify the vulnera...
CVE-2025-24054
CVE-2025-24054 is a Windows NTLM vulnerability allowing an attacker to induce NTLMv2-SSP hash disclosure by leveraging explorer.exe to fetch remote SMB resources via crafted file types (notably .library-ms and .lnk/.library-ms payloads). Public PoCs and exploits demonstrate creating malicious .li...
CVE-2023-36578
CVE-2023-36578: Microsoft Message Queuing (MSMQ) Remote Code Execution vulnerability. The NVD entry confirms MSMQ is affected with a local exploit vector, requiring user interaction, and a CVSS v3.1 base score of 7.3 (HIGH) affecting confidentiality, integrity, and availability. The provided docu...
CVE-2023-36585
Technical details for CVE-2023-36585 are not publicly available in the provided documents. Monitor for updates in official advisories; no affected products, impact, vectors, or fixes can be confirmed from the supplied content.
CVE-2025-29974
Technical details about CVE-2025-29974 are not publicly provided in the supplied documents. Monitor for updates from Microsoft and other security bulletins to obtain confirmed affected products, scope, and remediation.
CVE-2023-36579
Technical details about CVE-2023-36579 (MSMQ DoS) are not publicly provided in the supplied documents. Monitor for updates from official advisories; no affected products, exploitability, or remediation details are stated here.
CVE-2023-36582
Technical details about CVE-2023-36582 are not publicly available in the provided connected documents. Monitor for updates from official advisories.
CVE-2023-41770
Technical details about CVE-2023-41770 are not provided in the supplied documents. No information on affected products, versions, root cause, impact, or fixes is available. Monitor for updates in the connected feeds.
CVE-2023-36726
Technical details about CVE-2023-36726 are not publicly provided in the connected documents. The items reference this CVE by ID but do not disclose affected product, root cause, impact, or remediation in the supplied sources.
CVE-2023-36776
Technical details for CVE-2023-36776 are not provided in the supplied documents. No product/version/root-cause/impact/fix details are publicly disclosed here. Monitor for updates from sources in Connected Documents (KBs/OS updates) for remediation.
CVE-2024-26161
CVE-2024-26161 affects the Microsoft WDAC OLE DB provider for SQL Server and is described as a Remote Code Execution vulnerability. The CVE entry lists a CVSS v3.1 base score of 8.8 (HIGH) with NETWORK attack vector, LOW attack complexity, and NONE privileges required, but user interaction is REQ...
CVE-2017-8628
CVE-2017-8628 concerns a spoofing vulnerability in Microsoft’s Bluetooth driver stack for Windows platforms. The flaw allows an attacker within physical proximity and with Bluetooth enabled to initiate a Bluetooth connection and perform a man-in-the-middle attack, potentially forcing traffic thro...
CVE-2021-26414
CVE-2021-26414 is a Windows DCOM Server Security Feature Bypass. Connected docs confirm a DCOM hardening series (phase 3) and note mitigations: after applying relevant updates, DCOM hardening changes are permanent and cannot be disabled via registry. Microsoft guidance recommends enabling DCOM au...
CVE-2023-36572
CVE-2023-36572 is the Microsoft Message Queuing (MSMQ) Remote Code Execution vulnerability. The CNVD entry explicitly notes a remote code execution flaw in MSMQ that an attacker could exploit to run arbitrary code on a targeted system. The MSMQ issue is corroborated by the NVD/NVD-derived descrip...