CVE-2023-41769

Technical details for CVE-2023-41769 are not publicly provided in the supplied documents. No affected products, exploit info, or remediation confirmed here. Monitor for official disclosures and vendor advisories for concrete impact and fixes.

CVE-2025-21189

CVE-2025-21189 is listed as MapUrlToZone Security Feature Bypass. Connected sources categorize its impact as circumvention of a security measure. Public technical detail in the provided documents is limited; no explicit root-cause, vulnerable product/version, or exploitation information is given....

CVE-2023-36713

The CVE-2023-36713 entry concerns a vulnerability in the Windows Common Log File System Driver that leads to Information Disclosure. According to the NVD entry, the issue has a CVSSv3.1 base score of 5.5 (Medium) with Confidentiality Impact High, and it is a Local, Low-Complexity attack requiring...

CVE-2026-65791

CVE-2026-65791 : Heap-based buffer overflow in Windows iSCSI Target Service enables remote code execution over a network. Affected: Windows iSCSI Target Service. Root cause: heap-based overflow. Impact: unauthorized code execution with high confidentiality, integrity, and availability implication...

CVE-2023-36703

Technical details about CVE-2023-36703 are not publicly disclosed in the provided documents. Monitor for updates from official advisories; current materials only indicate a DHCP Server Denial of Service vulnerability without specifics.

CVE-2026-21533

CVE-2026-21533 affects Windows Remote Desktop Services (RDS) and is caused by improper privilege management (CWE-269), allowing a local authenticated attacker with low privileges to elevate to SYSTEM. Multiple connected sources corroborate that the issue is a local EoP in RDS with CVSSv3 7.8 (HIG...

CVE-2023-36564

Technical details about CVE-2023-36564 are not publicly available in the provided documents. Monitor official advisories for updates on affected products, impact, and available fixes.

CVE-2023-36712

Technical details for CVE-2023-36712 are not publicly disclosed in the provided connected documents. Based on available records, no affected products, root cause, or remediation are specified here. Monitor for updates from official advisories.

CVE-2023-36724

CVE-2023-36724 corresponds to a Windows Power Management Service Information Disclosure vulnerability. Affected component: Windows Power Management Service. Root cause and impact: information disclosure with high confidentiality impact; attack vector LOCAL, low complexity, no user interaction req...

CVE-2024-38193

CVE-2024-38193 concerns the Windows Ancillary Function Driver for WinSock (AFD) used by Winsock. The vulnerability is a local privilege-escalation issue in the AFD/WinSock stack, with a resource-management error cited by CNNVD and a privilege-escalation capability described by CISA KEV. Public ex...

CVE-2023-36438

Technical details about CVE-2023-36438 are not publicly provided in the connected documents. The OpenVAS entries reference this CVE among many Windows vulnerabilities but do not supply affected products, versions, root cause, or remediation specifics. Monitor for updates.

CVE-2023-36593

Technical details for CVE-2023-36593 are not publicly provided in the supplied documents. Monitor for updates from official advisories (MSRC/NVD) to obtain affected products, impact, and fixes.

CVE-2025-24054

CVE-2025-24054 is a Windows NTLM vulnerability allowing an attacker to induce NTLMv2-SSP hash disclosure by leveraging explorer.exe to fetch remote SMB resources via crafted file types (notably .library-ms and .lnk/.library-ms payloads). Public PoCs and exploits demonstrate creating malicious .li...

CVE-2023-36578

CVE-2023-36578: Microsoft Message Queuing (MSMQ) Remote Code Execution vulnerability. The NVD entry confirms MSMQ is affected with a local exploit vector, requiring user interaction, and a CVSS v3.1 base score of 7.3 (HIGH) affecting confidentiality, integrity, and availability. The provided docu...

CVE-2023-36732

CVE-2023-36732 is a Win32k elevation-of-privilege vulnerability affecting Windows, with a local attack vector, low attack complexity, and low privileges required, and it has a high impact on confidentiality, integrity, and availability per CVSS 3.1 (7.8). The provided records identify the vulnera...

CVE-2025-29974

Technical details about CVE-2025-29974 are not publicly provided in the supplied documents. Monitor for updates from Microsoft and other security bulletins to obtain confirmed affected products, scope, and remediation.

CVE-2023-36585

Technical details for CVE-2023-36585 are not publicly available in the provided documents. Monitor for updates in official advisories; no affected products, impact, vectors, or fixes can be confirmed from the supplied content.

CVE-2023-36579

Technical details about CVE-2023-36579 (MSMQ DoS) are not publicly provided in the supplied documents. Monitor for updates from official advisories; no affected products, exploitability, or remediation details are stated here.

CVE-2023-36582

Technical details about CVE-2023-36582 are not publicly available in the provided connected documents. Monitor for updates from official advisories.

CVE-2023-41770

Technical details about CVE-2023-41770 are not provided in the supplied documents. No information on affected products, versions, root cause, impact, or fixes is available. Monitor for updates in the connected feeds.

CVE-2023-36776

Technical details for CVE-2023-36776 are not provided in the supplied documents. No product/version/root-cause/impact/fix details are publicly disclosed here. Monitor for updates from sources in Connected Documents (KBs/OS updates) for remediation.

CVE-2023-36726

Technical details about CVE-2023-36726 are not publicly provided in the connected documents. The items reference this CVE by ID but do not disclose affected product, root cause, impact, or remediation in the supplied sources.

CVE-2021-26414

CVE-2021-26414 is a Windows DCOM Server Security Feature Bypass. Connected docs confirm a DCOM hardening series (phase 3) and note mitigations: after applying relevant updates, DCOM hardening changes are permanent and cannot be disabled via registry. Microsoft guidance recommends enabling DCOM au...

CVE-2024-26161

CVE-2024-26161 affects the Microsoft WDAC OLE DB provider for SQL Server and is described as a Remote Code Execution vulnerability. The CVE entry lists a CVSS v3.1 base score of 8.8 (HIGH) with NETWORK attack vector, LOW attack complexity, and NONE privileges required, but user interaction is REQ...

CVE-2023-36572

CVE-2023-36572 is the Microsoft Message Queuing (MSMQ) Remote Code Execution vulnerability. The CNVD entry explicitly notes a remote code execution flaw in MSMQ that an attacker could exploit to run arbitrary code on a targeted system. The MSMQ issue is corroborated by the NVD/NVD-derived descrip...

CVE-2023-36706

Technical details for CVE-2023-36706 are not publicly provided in the connected documents; no affected products, versions, or fixes are specified here. Monitor for updates from official sources.

CVE-2020-15707

CVE-2020-15707 is a GRUB2 bootloader vulnerability (initrd size handling) causing a heap-based buffer overflow via integer overflow in initrd processing. The flaw affects GRUB2 2.04 and earlier as deployed in multiple distros (Debian, Red Hat, Ubuntu) and can enable arbitrary code execution durin...

CVE-2022-30136

A Remote Code Execution (RCE) vulnerability exists in the Windows Network File System (NFS) , specifically affecting NFS version 4.1 . The root cause is a size calculation error within the Nfs4SvrXdrpGetEncodeOperationResultByteCount function in nfssvr.sys . When creating a server response for a ...

CVE-2023-36583

CVE-2023-36583 is a Microsoft Message Queuing (MSMQ) Remote Code Execution vulnerability. The NVD entry lists a CVSS v3.1 base score of 7.3 (HIGH) with LOCAL attack vector, LOW attack complexity, LOW privileges required, user interaction needed, and a scope of UNCHANGED. The impact is HIGH on con...

CVE-2017-0055

CVE-2017-0055 refers to a cross-site scripting (XSS) elevation-of-privilege vulnerability in Microsoft Internet Information Services (IIS). The issue affects IIS on multiple Windows platforms (Vista through Windows Server 2016) and allows a remote attacker to craft a request that can execute scri...

CVE-2023-36598

CVE-2023-36598 concerns the Microsoft WDAC ODBC Driver with a remote code execution vulnerability. Affected component: WDAC ODBC Driver (Microsoft). Exploitation requires local access and user interaction, with a CVSS v3.1 base score of 7.8 (High); impact to confidentiality, integrity, and availa...

CVE-2022-24503

CVE-2022-24503 is a Remote Desktop Protocol Client Information Disclosure vulnerability. Connected sources indicate it affects Windows Remote Desktop Client and can be triggered over the network with no authentication and no user interaction, exposing partial confidentiality (C:L). The issue is t...

CVE-2025-21337

CVE-2025-21337 is a Windows vulnerability categorized as an elevation of privileges (impact: obtaining elevated privileges) with a low base score (CVSS v3.1: 3.3) and local attack vector. The connected advisory from NCSC-2025-0047 aligns this CVE to a Windows component issue with a CVSS ~3.3 and ...

CVE-2022-30133

Technical details about CVE-2022-30133 (affected product, exploit, impact, fix) are not provided in the supplied documents. Monitor for official updates from Microsoft for patch information and vulnerable components.

CVE-2021-42291

Technical details (affected product, root cause, impact, or fix) are not publicly available in the provided connected documents. Monitor for updates from official advisories.

CVE-2024-38178

CVE-2024-38178 is a Microsoft Windows Scripting Engine memory corruption vulnerability that exists in Edge when running Internet Explorer mode. It enables remote code execution and is being actively exploited in the wild, with public pressure reflected in multiple advisories and exploit catalogs....

CVE-2025-24993

CVE-2025-24993 is a Windows NTFS heap-based buffer overflow that allows a locally authenticated attacker to execute arbitrary code. Affected component is NTFS on Windows; root cause is a heap-based overflow in NTFS handling. CVSS v3.1 indicates local attack vector, no privileges required, user in...

CVE-2022-21972

CVE-2022-21972 is a Windows PPTP VPN component remote code execution vulnerability caused by use-after-free handling of PPTP packets. The connected advisory states a remote code execution vulnerability exists in Windows VPN due to improper PPTP packet handling, i.e., PPTP protocol use after free....

CVE-2020-15706

CVE-2020-15706 affects GRUB2 (2.04 and earlier) and is a race-condition/use-after-free in grub_script_function_create() triggered by redefining a function during execution, leading to arbitrary code execution and Secure Boot restriction bypass. Remediation is to upgrade to patched GRUB2 packages ...

CVE-2024-38213

CVE-2024-38213 is a Windows Mark of the Web (MoTW) security feature bypass vulnerability. Affected software involves Windows MoTW handling; the flaw allows downloaded web-origin files to bypass warnings/ protections, enabling potentially malicious content to execute. Exploitation information in c...

CVE-2022-34721

CVE-2022-34721 is a Windows Internet Key Exchange (IKE) Protocol Extensions remote code execution vulnerability. The issue affects Windows systems with IPSec enabled and is exploitable via specially crafted IP packets targeting IKEv1 (IKEv2 is not affected). The flaw could allow an unauthenticate...

CVE-2026-45586

CVE-2026-45586 affects the Windows Collaborative Translation Framework (CTFMON). The root cause is improper link resolution before file access (link following), enabling local elevation of privileges when exploited by an authenticated attacker. Microsoft’s June 2026 patch releases (KB5094041/KB50...

CVE-2025-24985

CVE-2025-24985 affects the Windows Fast FAT File System Driver and is caused by an integer overflow/wraparound, enabling local code execution. The vulnerability has seen exploitation in the wild (per Krebs/Microsoft Patch Tuesday coverage), and mitigation is to install the MSRC-released updates l...

CVE-2018-8639

CVE-2018-8639 describes a local privilege escalation in Windows via Win32k, caused by improper handling of memory objects in the Win32k component. Affected systems include Windows 7, Windows 8.1, Windows 10 (and corresponding Windows Server editions listed in the CVE entry). The root cause is an ...

CVE-2021-34514

CVE-2021-34514 is identified as a Windows Kernel elevation-of-privilege vulnerability. The available connected documents confirm a Windows Kernel issue with elevation of privilege but do not provide concrete technical details (root cause, affected component/version, exploit specifics, or a remedi...

CVE-2024-21407

A remote code execution (RCE) vulnerability exists in Microsoft Windows Hyper-V due to a flaw in the Hyper-V component, which can be triggered by the insufficient validation of input data . An attacker could exploit this to execute arbitrary code on the host server. While the risk is high, Micros...

CVE-2023-21708

Technical details for CVE-2023-21708 are not publicly provided in the supplied documents. No confirmed affected products, versions, or remediation are given here. Monitor for updates.

CVE-2023-29325

CVE-2023-29325 is a Windows OLE Remote Code Execution vulnerability that affects Microsoft Outlook and Explorer. The root cause is in the processing of OLE objects within RTF/documents, enabling an unauthenticated, remote attacker to execute code by delivering a specially crafted document, with t...

CVE-2020-1269

Technical details for CVE-2020-1269 are not provided in the supplied documents. Monitor for updates from official sources.

CVE-2026-27912

CVE-2026-27912 is a Windows Kerberos elevation-of-privileges vulnerability described in connected sources as an improper authorization issue that allows an authorized attacker to obtain elevated entitlements over an adjacent network. The vulnerability is categorized under Windows Kerberos with an...