4644 matches found
CVE-2025-59230
CVE-2025-59230 describes an improper access control flaw in the Windows Remote Access Connection Manager (RasMan). The vulnerability allows an authenticated local user to elevate privileges to SYSTEM by manipulating RasMan’s IPC handling/ACLs, as reported in multiple sources. Exploitation activit...
CVE-2024-38014
CVE-2024-38014 is a Windows Installer privilege-escalation vulnerability (local, CVSSv3.1: 7.8) that could allow an attacker with low privileges to gain SYSTEM-level access. The issue targets the Windows Installer component and is described in sources as an improper privilege-management flaw. Pub...
CVE-2023-28229
CVE-2023-28229 is a Windows vulnerability in the Cryptographic Next Generation (CNG) Key Isolation Service described as a privilege-escalation flaw. The CVE entry is linked to active exploitation in practice (CISA KEV) and is categorized with a high impact vector (local access, total impact on co...
CVE-2025-26633
CVE-2025-26633 is a local-privilege-escalation in Microsoft Management Console (MMC) caused by improper neutralization in how MMC loads language-twin .msc files. A malicious “evil twin” .msc in a language directory can execute payloads with the user’s privileges when a user opens a legitimate MMC...
CVE-2026-47291
The CVE-2026-47291 entry describes an integer overflow/ wraparound in Windows HTTP.sys that enables a remote attacker to execute code over the network. Affected software component: Windows HTTP.sys. Root cause: integer overflow/wraparound in the HTTP.sys processing path. Impact: unauthenticated n...
CVE-2019-1181
CVE-2019-1181 is a remote code execution vulnerability in Windows Remote Desktop Services (RDS/Terminal Services). The Huawei advisory confirms the issue as one of four RC vulnerabilities in RDS where an unauthenticated, network-based attacker can exploit by sending specially crafted RDP requests...
CVE-2024-43573
CVE-2024-43573 is a Windows MSHTML Platform Spoofing vulnerability. Public sources confirm it affects MSHTML in Windows and that patches were released (Microsoft Update Guide). There is evidence of exploitation in the wild for MSHTML-related spoofing vulnerabilities, including references noting a...
CVE-2023-38162
Technical details for CVE-2023-38162 are not publicly available in the provided documents. Monitor for updates.
CVE-2023-36801
Technical details for CVE-2023-36801 are not provided in the supplied documents. No explicit affected product/version, root cause, impact, or remediation are specified here. Monitor for updates from official sources.
CVE-2025-24071
Windows File Explorer contains a spoofing vulnerability (CVE-2025-24071 ) caused by the implicit trust and automatic parsing of .library-ms files. An unauthenticated attacker can craft a malicious .library-ms file containing a UNC path and embed it within a ZIP or RAR archive. When a victim extra...
CVE-2023-36036
CVE-2023-36036 is a Windows Elevation of Privilege in the Windows Cloud Files Mini Filter Driver. The flaw is a local, privilege-escalation bug (privileges required: low) that can grant SYSTEM-level access and has high impact on confidentiality, integrity, and availability. Public analyses report...
CVE-2023-38144
CVE-2023-38144 is a Windows elevation-of-privilege flaw in the Common Log File System (CLFS) driver . The provided description confirms a local, privilege-escalation condition affecting the Windows CLFS driver, with a CVSS v3.1 base score 7.8 (LOCAL, LOW attack complexity, LOW privileges required...
CVE-2024-35250
CVE-2024-35250 is a Windows kernel‑mode driver LPE in ks.sys (Kernel Streaming core) caused by an untrusted pointer dereference. PoCs and exploits exist (e.g., PoCs on GitHub; KS driver) with active demonstrations, and exploitation has been observed in public material. Microsoft addressed the iss...
CVE-2026-62878
CVE-2026-62878 is a Windows DNS Server remote code execution vulnerability caused by a stack-based buffer overflow. The NVD entry indicates a network-based exploit with a critical CVSS v3.1 base score of 9.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). Impact is the ability for an unauthenticated, remo...
CVE-2020-0609
CVE-2020-0609 is a pre-auth remote code execution flaw in Windows Remote Desktop Gateway (RD Gateway). An unauthenticated attacker can trigger code execution by sending specially crafted UDP packets to UDP/3391, enabling remote compromise of RD Gateway when UDP transport is enabled. Multiple conn...
CVE-2022-37966
CVE-2022-37966 is the Windows Kerberos RC4-HMAC Elevation of Privilege vulnerability. Reports in Samba advisories identify this CVE as affecting Samba deployments (e.g., Samba AD DC/members) where RC4-HMAC could be used for Kerberos tickets, allowing elevated access. Remediation focuses on applyi...
CVE-2025-33073
CVE-2025-33073 is a network-accessible elevation of privilege in the Windows SMB Client caused by improper access control in the SMB protocol stack. The initial description confirms privilege escalation with network access. Connected documents provide concrete exploit presence: PoCs and proof‑of‑...
CVE-2023-35349
Technical details about CVE-2023-35349 are not publicly provided in the connected documents. The MSMQ RCE vulnerability specifics (affected products/versions, exploitability, and fixes) are not disclosed here; monitor official Microsoft advisories and CVE records for updates.
CVE-2024-38112
CVE-2024-38112 Windows MSHTML Platform Spoofing is a Windows/MSHTML vulnerability exploited in the wild by the Void Banshee group. The issue involves spoofing UI within the MSHTML/IE rendering path, enabling code execution when a user opens a crafted .url payload that references an embedded MHTML...
CVE-2025-59211
CVE-2025-59211 concerns exposure of sensitive information to an unauthorized actor in Windows Push Notification Core, enabling an attacker with local access to disclose information. The initial entry identifies a local attack vector with a medium base score (CVSS 3.1: AV=L, AC=L, PR=L, UI=N, S=U,...
CVE-2023-38161
Technical details for CVE-2023-38161 are not publicly provided in the supplied documents; no confirmed affected product/version/impact/root cause/fix are stated here. Monitor for official advisories.
CVE-2025-55695
CVE-2025-55695 describes an out-of-bounds read vulnerability in the Windows WLAN Auto Config Service that enables an authorized local attacker to disclose information. The description in the initial document confirms the root cause (out-of-bounds read) and the impact (local information disclosure...
CVE-2023-38149
CVE-2023-38149 is a Windows TCP/IP Denial of Service vulnerability. The CVE entry describes a network-based issue with impact limited to Availability (I:H) and no Confidentiality/Integrity impact (C:N, I:N) per CVSS 3.1: AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H, base score 7.5 (HIGH). Connected docume...
CVE-2023-36804
CVE-2023-36804 is a Windows GDI elevation-of-privilege vulnerability (local, low privileges required, no user interaction) with a CVSS v3.1 base score of 7.8 (HIGH). Affected component is Windows GDI; impact is high on confidentiality, integrity, and availability. Connected sources corroborate th...
CVE-2025-24983
CVE-2025-24983 is a local privilege-escalation vulnerability in the Windows Win32k/Win32 Kernel Subsystem (use-after-free). Exploitation enables an authorized attacker to elevate privileges to SYSTEM locally (AV:L, AC:H, PR:L, UI:N, S:U, C/H/I/A:H). The CVSS base metrics indicate high impact to c...
CVE-2023-38143
Technical details for CVE-2023-38143 are not publicly provided in the supplied documents. Affected product/version, root cause, exploitability, and remediation are not specified here; monitor for official disclosures and vendor advisory updates.
CVE-2023-38141
Technical details for CVE-2023-38141 are not provided in the connected documents. The sources discuss Windows Registry/VRegDriver context but do not specify affected products/versions, root cause, impact, or fixes for this CVE. Monitor for official disclosures.
CVE-2023-38139
CVE-2023-38139 is a Windows kernel vulnerability tied to registry hive refcount handling, contributing to hive memory corruption. The connected docs note refcount overflow risks in CM_KEY_SECURITY descriptors (and related loader logic), describing how overflow can trigger use-after-free and enabl...
CVE-2023-38152
Technical details about CVE-2023-38152 (affected product, vulnerable component, impact, or fixes) are not publicly provided in the connected documents; monitor for updates.
CVE-2024-21429
The CVE-2024-21429 entry covers a remote code execution vulnerability in the Windows USB Hub Driver. According to the description, the issue affects the USB Hub Driver and could lead to arbitrary code execution with high impact on confidentiality, integrity, and availability. Exploitation details...
CVE-2025-33053
Summary of CVE-2025-33053 : A vulnerability in Windows WebDAV/Internet Shortcut handling allows remote code execution when a vulnerable host opens a crafted .url file that points to a WebDAV share. Exploitation relies on the WebClient service resolving UNC paths via WebDAV and may trigger arbitra...
CVE-2025-54917
CVE-2025-54917 is a network-exploitable issue in Windows MapUrlToZone that enables circumvention of a security mechanism. The CVSS v3.1 base score is 4.3 (NETWORK, LOW attack complexity, NONE privileges, UI required) with a LOW confidentiality impact. The Connected documents indicate this CVE map...
CVE-2026-21510
CVE-2026-21510 is a Windows Shell security feature bypass vulnerability (Protection Mechanism Failure) that can allow remote code execution by bypassing SmartScreen prompts and shell warnings. Affected component: Windows Shell (explorer.exe) and related UI elements. Exploitation requires social e...
CVE-2024-21340
Technical details for CVE-2024-21340 are not provided in the supplied documents. Monitor for updates.
CVE-2020-0645
CVE-2020-0645 corresponds to a tampering vulnerability in Microsoft IIS Server due to improper handling of malformed HTTP request headers. Affected component: IIS Server within Microsoft Windows Server/Windows. Impact (as stated in connected sources): an attacker could tamper with responses retur...
CVE-2023-36577
CVE-2023-36577 concerns the Microsoft WDAC OLE DB provider for SQL Server. Public descriptions indicate a remote code execution vulnerability in this WDAC OLE DB provider, enabling an attacker to execute arbitrary code on a vulnerable system. The CVE is characterized with a Network attack vector,...
CVE-2026-69730
CVE-2026-69730 is a use-after-free vulnerability in Windows DNS that allows an unauthorized, remote attacker to execute arbitrary code over the network without any user interaction or prior privileges. Microsoft rates it CVSS 9.8 (Critical) , with high impact on confidentiality, integrity, and av...
CVE-2026-45602
Technical details (affected product versions, root cause, exploit specifics, and remediation) are not publicly available in the provided documents. Monitor for updates from NVD and CVE List for CVE-2026-45602.
CVE-2024-43583
CVE-2024-43583 is a Winlogon elevation of privilege vulnerability. Connected PoC details show an attacker with low local privileges can escalate to SYSTEM by abusing the Image File Execution Options (IFEO) registry hijack to replace a legitimate system process with a malicious payload. Affected W...
CVE-2024-43451
CVE-2024-43451 is a Windows NTLMv2 hash disclosure spoofing vulnerability. Affected: Windows; root cause: NTLM hash leakage occurs when the shell processes .URL shortcuts, triggering NTLM authentication over SMB to an attacker-controlled server. Impact: attackers can obtain NTLMv2 hashes and perf...
CVE-2026-42990
CVE-2026-42990 affects the SQL Server ODBC driver, where a heap-based buffer overflow enables code execution over the network. The vulnerability is exploitable remotely (network vector) and is rated high severity (CVSS 3.1: 9.8, CRITICAL) with no privileges required and no user interaction. The a...
CVE-2022-22012
Technical details about CVE-2022-22012 are not publicly provided in the connected documents. The materials mention updates and mitigations but do not specify affected products/versions or remediation for this CVE. Monitor for updates.
CVE-2023-36702
CVE-2023-36702 affects Microsoft DirectMusic. Based on the CVSS 3.1 vector, the vulnerability is a LOCAL, low-complexity exploit that requires user interaction and yields HIGH impact to confidentiality, integrity, and availability. The provided documents identify the affected component only as Di...
CVE-2024-43461
CVE-2024-43461 — Windows MSHTML Platform Spoofing Vulnerability : A UI misrepresentation in MSHTML that can be used to spoof a web page. Affected component: Windows MSHTML Platform. Underlying issue is a UI spoofing flaw; CVSSv3.1 score 8.8 ( NETWORK, LOW, NONE, UI: REQUIRED; Confidentiality/Inte...
CVE-2021-34481
CVE-2021-34481 is a Windows Print Spooler remote code execution vulnerability. A low-privilege user could stage and install vulnerable printer drivers into the driver store and then escalate to SYSTEM by exploiting the spooler’s driver-install path. Affected scope includes Windows 8.1 and newer; ...
CVE-2019-1365
Public documents provided do not include concrete technical details for CVE-2019-1365 (affected product, root cause, impact or fix). Monitor for updates in the connected sources; the current set lacks sufficient information to assess vulnerabilities.
CVE-2022-38028
CVE-2022-38028 is a Windows Print Spooler privilege-escalation vulnerability. It arises from improper privilege assignment in the Print Spooler service, enabling a local attacker with low privileges and no user interaction to escalate to SYSTEM. Public exploits have been observed; CISA/KEV and MS...
CVE-2023-24941
CVE-2023-24941 is a Windows Network File System (NFS) Remote Code Execution vulnerability. The connected AVLEONOV post confirms the flaw exists in Windows NFS and can be exploited over the network by an unauthenticated, specially crafted NFS request, leading to code execution with high impact. Ro...
CVE-2023-36436
CVE-2023-36436 is a Windows MSHTML Platform Remote Code Execution vulnerability. The CVSS 3.1 vector (AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) yields a base score of 7.8 (HIGH) with a LOCAL attack vector, requiring user interaction and granting high impact on confidentiality, integrity, and availabil...