CVE-2022-24483

CVE-2022-24483 is a Windows Kernel information disclosure vulnerability. Affected component is the Windows Kernel; the issue is an information disclosure likely arising from the nt!PfpPrivSourceEnum function, per a GitHub PoC describing an Information disclosure bug in that function. The connecte...

CVE-2022-26935

Technical details about CVE-2022-26935 are not provided in the connected documents. The Initial document offers a basic description and CVSS info, but no specifics on affected products/versions, root cause, remediation, or exploit status. Monitor for updates.

CVE-2022-30163

CVE-2022-30163 is a Windows Hyper-V remote code execution vulnerability. The available connected sources describe an issue where code executed inside a Hyper-V guest could lead to arbitrary code execution on the Hyper-V host. Microsoft released out-of-band and June 2022 security updates addressin...

CVE-2022-37988

CVE-2022-37988 is tied to a Windows registry hive memory corruption bug in which cells larger than 16 KiB are aligned to the next power of two during loading, causing a use-after-free when shrinking a cell. The connected material provides a detailed attacker workflow: trigger hive memory corrupti...

CVE-2022-38040

Technical details about CVE-2022-38040 (Microsoft ODBC Driver RCE) are not provided in the supplied documents. Public information on affected components, root cause, impact specifics, or fixes is not present here. Monitor for updates in the connected sources for any disclosed details.

CVE-2023-21683

Technical details about CVE-2023-21683 are not provided in the connected documents. Public information on affected products, root cause, or fixes is not present here. Monitor for updates from official sources.

CVE-2024-26168

CVE-2024-26168 concerns a Secure Boot security feature bypass. The entry explicitly labels it as Secure Boot bypass with a CVSSv3.1 base score of 6.8 (Medium) and a physical attack vector. The breakdown indicates HIGH impact to confidentiality, integrity, and availability, with no user interactio...

CVE-2024-26216

CVE-2024-26216 is a Windows vulnerability affecting the Windows File Server Resource Management Service, categorized as a privilege-escalation issue with a CVSS-like score around 7.3 (high) in public guidance. The connected documents confirm the vulnerability is tied to Windows File Server Resour...

CVE-2024-26217

CVE-2024-26217 affects the Windows Remote Access Connection Manager. The connected NCSC advisory documents the impact as information disclosure / access to sensitive data (CVE-2024-26217, Windows Remote Access Connection Manager). The CVSS/impact details vary across sources: NVD metrics show a lo...

CVE-2024-28897

CVE-2024-28897 is referenced in connected data as a Windows Secure Boot vulnerability with the label “Circumvention of security measure.” The primary public document (NVD) lists it as a Secure Boot security feature bypass, with a CVSS v3.1 score of 6.8 (Medium) and details like attack vector adja...

CVE-2026-50518

CVE-2026-50518 is a heap-based buffer overflow in Windows DHCP Server that allows an unauthenticated attacker to execute code remotely over a network. Public sources (NVD, EUVD, CIRCL, MSRC update guidance) confirm the flaw and its impact as remote code execution; Talos notes exploitation in the ...

CVE-2021-24094

CVE-2021-24094 is an IPv6 reassembly-related Windows TCP/IP remote code execution vulnerability. Microsoft’s TCP/IP update set identifies CVE-2021-24094 alongside CVE-2021-24074 and CVE-2021-24086, with CVSSv3 scores indicating CRITICAL impact (9.8) for the RCE flaws. The available connected docu...

CVE-2022-21913

The CVE-2022-21913 entry describes a Local Security Authority (Domain Policy) Remote Protocol Security Feature Bypass. Public documents present CVSS data from NVD (CVSS v3.1: 7.5, NETWORK, NONE privileges; CVSS v2.0: 5.0, PARTIAL impact). No concrete product/vendor/component/version/root-cause de...

CVE-2022-22050

CVE-2022-22050 is a Windows Fax Service elevation-of-privilege vulnerability. Documents indicate affected software is Windows Fax Service; vulnerability type is local privilege escalation with high impact (CVSSv3.1 base score 7.8) and low privileges required, no user interaction. No concrete expl...

CVE-2022-34708

Technical details for CVE-2022-34708 are not provided in the connected documents. Public exploit vectors, affected products, and fixes are not stated here. Monitor for updates.

CVE-2023-23420

CVE-2023-23420 is a Windows Registry hive memory corruption bug (UAF) tied to transacted key rename. The exploit plan targets the HKCU hive (volatile storage) via a lightweight or KTM transaction sequence that renames a key, then frees keys in a transaction, producing a layout where freed cells c...

CVE-2023-24945

CVE-2023-24945 concerns Windows iSCSI Target Service Information Disclosure. Data shows CVSS v3.1 base score 5.5 (Medium) with LOCAL attacker, LOW complexity, LOW privileges required, and high confidentiality impact. The description names the Windows iSCSI Target Service but does not provide spec...

CVE-2023-36910

CVE-2023-36910 is a remote code execution vulnerability in Microsoft Message Queuing (MSMQ) that can be exploited remotely on affected Windows platforms (Windows 10/11 and Windows Server 2008–2022) without user interaction. The issue is formally described as MSMQ RCE with a high severity rating (...

CVE-2024-26230

CVE-2024-26230 is a Windows Telephony Server elevation-of-privilege vulnerability. Reported as a local privilege escalation with CVSS 3.1 base score 7.8 (HIGH): vectors/local, attack complexity LOW, privileges required LOW, no user interaction. Impacts on confidentiality, integrity, and availabil...

CVE-2024-26242

CVE-2024-26242 is a Windows Telephony Server elevation-of-privilege vulnerability. The connected documents indicate a local-privilege escalation with CVSS v3.1 base score 7.0 (AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H). Root cause and exact exploit details are not provided in the sources. Microsoft has...

CVE-2024-26253

CVE-2024-26253 corresponds to a Windows rndismp6.sys remote code execution vulnerability. The entry notes an affected Windows component (rndismp6.sys) and an exploit path that could allow remote code execution with a high impact on confidentiality, integrity, and availability, while the attack ve...

CVE-2024-28902

CVE-2024-28902 is associated with Windows Remote Access Connection Manager and is listed in an ENISA/NCSC-style advisory as a local, low-complexity information-disclosure vulnerability with potential impact to data confidentiality (CVE-2024-28902, Windows Remote Access Connection Manager). The co...

CVE-2024-29062

CVE-2024-29062 affects Windows Secure Boot and is described as a Security Feature Bypass. The vulnerability targets the Secure Boot path with an adjacent-attack surface, requiring user interaction and high complexity to exploit, and can impact confidentiality, integrity, and availability. Public ...

CVE-2025-21327

CVE-2025-21327 is a Windows Digital Media elevation-of-privilege vulnerability. The CVSS3.1 base vector indicates physical access required, low attack complexity and low privileges, with high impact on confidentiality, integrity, and availability (base score 6.6, medium). The connected data confi...

CVE-2021-34459

CVE-2021-34459 is a Windows AppContainer Elevation of Privilege vulnerability with local attack vector and no user interaction required. CVSS v3.1 base score 7.8 (HIGH); impact is Confidentiality, Integrity, and Availability all High. The vulnerability is associated with AppContainer in Windows a...

CVE-2022-21922

Technical details for CVE-2022-21922 are not publicly available in the provided documents. No affected products, versions, exploit information, or fixes are specified here. Monitor for updates in the connected sources for authoritative vulnerability details.

CVE-2022-30211

CVE-2022-30211 is described as a Windows L2TP Remote Code Execution vulnerability. The connected sources provide CVSS v3.1 data: vector NETWORK, high impact on confidentiality/integrity/availability (C:H/I:H/A:H) with base score 7.5, and attack complexity HIGH with privileges required LOW. The in...

CVE-2022-33634

CVE-2022-33634 is listed in the connected NCSc advisory as a Windows PPTP vulnerability with an impact described as “Execution of random code” and a CVSS-like score of 8.10. The available connected documents do not provide explicit exploitation details, affected product versions, root cause, or a...

CVE-2022-41076

Technical details for CVE-2022-41076 are not publicly available in the provided documents. Monitor for updates; no affected product/version or remediation details are given here.

CVE-2023-23402

Technical details for CVE-2023-23402 are not publicly available in the provided documents. Monitor for updates from official advisories and connected sources for affected products, impact, and fixes.

CVE-2024-43560

CVE-2024-43560 is a Windows Storage Port Driver elevation-of-privilege vulnerability. A local attacker with low privileges could exploit it to obtain elevated rights (CVE-2024-43560 details: CVSS v3.1 7.8, high impact; affected component: Windows Storage Port Driver). The NCSC advisory confirms M...

CVE-2019-0601

Technical details for CVE-2019-0601 are not publicly available in the provided documents; monitor for updates.

CVE-2021-40447

Technical details about CVE-2021-40447 (Windows Print Spooler Elevation of Privilege) are not provided in the supplied documents. No affected products/versions/root-cause are specified. Monitor official advisories (e.g., Microsoft security guidance) for updates.

CVE-2022-26829

CVE-2022-26829 is a Windows DNS Server Remote Code Execution vulnerability. The provided initial document lists CVSS v2 base score 8.5 (HIGH) with network access and user interaction not required, and CVSS v3.1 base score 6.6 (MEDIUM) with network access, high attack complexity, privileges requir...

CVE-2022-34706

Technical details about CVE-2022-34706 (affected products, root cause, impact, fixes) are not provided in the connected documents. Monitor for authoritative updates from Microsoft and CVE repositories.

CVE-2022-44668

CVE-2022-44668 is a Windows Media Remote Code Execution vulnerability with a CVSSv3.1 base score of 7.8 (HIGH). The vulnerability requires local access and user interaction, with potential HIGH impact to confidentiality, integrity, and availability. Connected sources confirm the CVE and its assoc...

CVE-2023-24884

Technical details about CVE-2023-24884 (affected product, vulnerable component, root cause, impact, and fixes) are not publicly provided in the connected documents you supplied. Monitor for updates from official advisories and CVE repositories to obtain concrete remediation guidance.

CVE-2023-28275

Technical details about CVE-2023-28275 are not publicly provided in the supplied documents. Available references mention the vulnerability title, but no affected product/version, root cause, impact, or patch information in these sources. Monitor for updates.

CVE-2024-49072

Technical details about CVE-2024-49072 are not publicly available in the provided documents. Monitor for updates from official advisories; no covered exploit specifics, affected products, versions, or mitigations are provided here.

CVE-2025-21417

CVE-2025-21417 is a Windows Telephony Service remote code execution vulnerability. CIRCL confirms the CVE with a high impact (CVSS 8.80, Execute code) within Windows Telephony Service; CNVD describes a remote code execution vulnerability in Windows Telephony Server. Microsoft has public security ...

CVE-2013-0013

The CVE-2013-0013 issue affects the Windows SSL/TLS stack: multiple Windows versions (Vista SP2, Server 2008 SP2/R2 and SP1, Windows 7, 8, Server 2012, Windows RT) have a flaw in the SSL provider that mishandles encrypted packets, enabling a man-in-the-middle to downgrade SSLv2 and intercept hand...

CVE-2019-0582

CVE-2019-0582 is a remote code execution flaw in the Windows Jet Database Engine caused by improper handling of objects in memory. The vulnerability affects multiple Windows versions and can be triggered when a user opens a specially crafted file, enabling arbitrary code execution with the attack...

CVE-2021-34483

CVE-2021-34483 is a Windows Print Spooler elevation of privileges vulnerability. NVD lists CVSS v3.1: LOCAL, LOW complexity, PRIV: LOW, UI: NONE, with HIGH impact to C/I/A (base 7.8). CVSS v2: LOCAL, LOW, C/P/I/P/A/P (base 4.6). The exact root cause and patched/affected versions are not detailed ...

CVE-2022-21843

CVE-2022-21843 affects Windows Internet Key Exchange (IKE) Protocol Extensions. The vulnerability is a Remote Code Execution in the Windows IKE Extension component, with a network-based attack surface and no user interaction required. Root cause is within the IKE Extensions implementation that ca...

CVE-2022-21851

Technical details for CVE-2022-21851 are not publicly available in the provided documents. No root cause, affected versions, or fixes are disclosed here; monitor for official updates from Microsoft and NVD.

CVE-2022-24540

CVE-2022-24540 is identified as a Windows ALPC Elevation of Privilege vulnerability. Connected data confirms the CVE is listed in Windows security advisories and KEV-tracking feeds; CVSS v3.1 vector indicates LOCAL, high impact with LOW privileges required and NO user interaction (7.0 base score)...

CVE-2022-38041

CVE-2022-38041 is a Denial-of-Service vulnerability in Windows Secure Channel. Connected documents confirm the affected component is Windows Secure Channel and the impact is DoS (CVSSv3.1 base ~7.5). Microsoft issued security updates in the Oct 2022 cycle to fix this vulnerability; exploitation s...

CVE-2023-21526

Technical details about CVE-2023-21526 are not publicly available in the provided documents. Monitor for updates from official advisories; no specifics on affected products, root cause, impact, or mitigations are provided here.

CVE-2023-21537

Technical details about CVE-2023-21537 (affected products, root cause, impact, and fixes) are not provided in the connected documents. Monitor for updates from authoritative sources.

CVE-2023-21681

Technical details about CVE-2023-21681 are not present in the provided connected documents. The supplied items cover generic Microsoft KB updates and an unrelated ENISA entry; monitor for updates and future technical disclosures.