CVE-2025-21419

CVE-2025-21419 is a Windows Setup cleanup vulnerability that enables local elevation of privilege. The CVSS 3.1 vector (AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H) indicates an attacker with low privileges and local access can achieve high integrity and availability impact, without user interaction. The...

CVE-2025-29810

CVE-2025-29810 corresponds to an improper access control in Active Directory Domain Services that can allow an authenticated attacker to elevate privileges over the network. The NCSC advisory groups CVE-2025-29810 under Windows Active Directory Domain Services with an impact described as ‘Obtain ...

CVE-2026-40403

CVE-2026-40403 describes a heap-based buffer overflow in Windows Win32K GRFX that could allow a locally authenticated attacker to execute code. Affected component is Windows graphics subsystem (Win32K GRFX); cause is a heap-based overflow. Impact per available data is local code execution with hi...

CVE-2017-8565

CVE-2017-8565 is a Windows PowerShell remote code execution vulnerability triggered when PSObject wraps a CIM Instance. Connected sources describe in detail that deserialization via PSObject, LosFormatter, ObjectStateFormatter (and related gadget chains) can enable remote code execution in PowerS...

CVE-2023-29364

Technical details for CVE-2023-29364 are not provided in the supplied documents. Monitor for updates from Microsoft and CVE records.

CVE-2024-37972

Technical details for CVE-2024-37972 are not publicly provided in the supplied documents. No affected products, root cause, impact, or remediation are disclosed here. Monitor for updates from authoritative sources.

CVE-2024-38041

CVE-2024-38041 is a Windows Kernel information disclosure vulnerability. The connected sources confirm the affected component as Windows Kernel with impact on confidentiality (C:H) and local attack vector (AV:L) with low attack complexity (AC:L) and no user interaction (UI:N). Privileges required...

CVE-2024-38104

Technical details for CVE-2024-38104 are not provided in the supplied connected documents; no affected products, root cause, impact, or remediation are specified here. Monitor for official updates to disclose specifics.

CVE-2024-43623

CVE-2024-43623 is documented across connected sources as a Windows NT OS Kernel elevation-of-privilege vulnerability. The ENISA/NCSC summary and related Microsoft patch-coverage references confirm it affects the Windows NT OS Kernel and was addressed via the November 2024 update cycle (e.g., KB50...

CVE-2025-21205

CVE-2025-21205 is a Windows Telephony Service vulnerability: a heap-based buffer overflow that allows a network-based attacker to achieve remote code execution. The CVSS details show a HIGH base score with NETWORK access, LOW attack complexity, and PR:N, UI:R. Successful exploitation would impact...

CVE-2025-26652

CVE-2025-26652 describes a Denial-of-Service vulnerability in Windows Standards-Based Storage Management Service caused by uncontrolled resource consumption, allowing an unauthenticated, network-originating attacker to deny service. Affected are Windows systems where this storage service is prese...

CVE-2025-29809

CVE-2025-29809 is a Windows Kerberos security feature bypass vulnerability. The issue involves insecure storage of sensitive information in Kerberos, enabling an attacker with local access and low privileges, and no user interaction, to bypass a security feature. Affected product/area: Windows Ke...

CVE-2024-30049

CVE-2024-30049 is a Windows Win32 Kernel Subsystem elevation-of-privilege vulnerability affecting the Win32K component. Public details in connected sources indicate the issue enables elevated privileges with local access (CVSSv3.1: AV=L/AC=L/PR=L/UI=N/S=U/C=H/I=H/A=H; base score 7.8), and multipl...

CVE-2024-30087

Technical details are not provided in the connected documents. CVE-2024-30087 is a Win32k Elevation of Privilege vulnerability with CVSS 3.1 base score 7.8, vector LOCAL, exploit complexity LOW, privileges required LOW, user interaction NONE.

CVE-2025-48817

Technical details about CVE-2025-48817 are not publicly provided in the supplied documents. No vendor/product/versions or mitigations are disclosed here. Monitor official advisories for updates.

CVE-2024-30011

CVE-2024-30011 is a Windows Hyper-V Denial of Service vulnerability. The NVD entry lists CVSS v3.1 base score 6.5 (MEDIUM), with Network attackVector, Low attackComplexity, Low privilegesRequired, No user interaction, and Availability impact HIGH. CIRCL reporting also references CVE-2024-30011. T...

CVE-2024-30090

CVE-2024-30090 is an elevation-of-privilege vulnerability affecting the Windows Kernel Streaming framework, specifically the msrks.ks.sys component used for processing streaming data (e.g., microphone/webcam input). The public materials indicate exploitation potential via a memory-bounds/buffer h...

CVE-2024-38117

CVE-2024-38117 affects the Windows NTFS component and is labeled as an elevation-of-privilege vulnerability with the impact “Obtaining Increased Rights” and a CVSS v3.1 base score of 7.8 (High). The connected documents provide the impact and the component but do not disclose the exact root cause ...

CVE-2025-24065

CVE-2025-24065 is a vulnerability in the Windows Storage Management Provider causing an out-of-bounds read that can disclose information locally when exploited by an authorized user. The issue is documented with a CVSS v3.1 base score of 5.5 (Medium) and requires local access with low privileges ...

CVE-2025-26648

CVE-2025-26648 affects the Windows Kernel. Description: sensitive data stored in memory that is not properly locked can allow an authorized locally authenticated attacker to elevate privileges. The issue is listed under Windows Kernel vulnerabilities (CVE-2025-26648) with high impact (local Privi...

CVE-2024-38132

Technical details about CVE-2024-38132 are not publicly provided in the supplied connected documents. The NAT DoS entry is listed, but no affected product/version, root cause, or remediation is described. Monitor for updates.

CVE-2024-49122

CVE-2024-49122 is a Microsoft Message Queuing (MSMQ) Remote Code Execution vulnerability. The entry notes a network-exposed base score of 8.1 (High) with no user interaction and total impact, and the MSMQ component is affected. Connected documents corroborate an RCE classification for MSMQ with u...

CVE-2025-21274

CVE-2025-21274 corresponds to a Windows Event Tracing Denial of Service vulnerability. The NVD entry rates impact as Denial of Service with a CVSSv3.1 base score of 5.5 (Local, Low UI, privileges required: Low, Availability impact: High). Connected sources indicate this vulnerability affects Wind...

CVE-2025-47981

CVE-2025-47981 is a heap-based buffer overflow in Windows SPNEGO Extended Negotiation that enables pre-auth remote code execution over the network. It affects Windows clients (e.g., Windows 10 1607+) and Windows Server platforms. The initial doc provides a 9.8 CVSSv3.1 score (NETWORK, NONE/LOW/NO...

CVE-2026-32157

CVE-2026-32157 affects the Remote Desktop Client and enables remote code execution over the network. The CVSSv3.1 score is 8.8 (HIGH), with confidentiality, integrity, and availability all rated High. Attack requires network access and user interaction, with privilegesN/A and exploitation current...

CVE-2026-50507

CVE-2026-50507 concerns a Protection mechanism failure in Windows BitLocker that allows an unauthorized attacker to bypass a security feature via a physical attack . The connected documents corroborate a vulnerability affecting Windows BitLocker, with a CVSS v3.1 base score of 6.8 (Medium). The a...

CVE-2024-30020

CVE-2024-30020 corresponds to a Remote Code Execution vulnerability in Windows Cryptographic Services. Affected: Windows Cryptographic Services component; vulnerability type is RCE. From the CVE entry, the CVSS v3.1 base score is 8.1 (High) with Network attack vector, high attack complexity, no p...

CVE-2025-21208

CVE-2025-21208 is a Windows RRAS Remote Code Execution vulnerability. The NVD entry confirms the issue as a network‑vector RCE with high impact (CVSSv3.1: 8.8, C/H/I/A = high; AV:N, AC:L, PR:N, UI:R, S:U). The vulnerability is tied to Windows RRAS and has a documented CVE entry; exploitation/avai...

CVE-2025-27736

Technical details about CVE-2025-27736 (affected product/versions/root cause/fix) are not disclosed in the provided connected documents. Monitor Microsoft advisories and CVE records for updates and remediation information.

CVE-2026-42836

CVE-2026-42836: A race condition due to improper synchronization in the Windows Function Discovery Service (fdwsd.dll) enables a locally authenticated attacker to escalate privileges. The issue is described as a concurrency problem with a shared resource. Affected component: Function Discovery Se...

CVE-2026-61363

CVE-2026-61363 describes a heap-based buffer overflow in the Remote Desktop Client that enables remote code execution over the network. Affected component is the Remote Desktop Client; root cause is a heap overflow allowing arbitrary code execution on a vulnerable host. The NVD entries confirm th...

CVE-2026-62784

Microsoft Local Security Authority Server (lsasrv) is affected by CVE-2026-62784 due to a heap-based buffer overflow that allows an authorized attacker to execute code over the network. CVSS v3.1 score: 8.8 (High) with Network access, Low complexity, Privileges Required: Low, User Interaction: No...

CVE-2017-0038

The connected material describes a Windows IO Manager bug class (two-step: kernel-mode Initiator sets INPC and IFAC without OFAC; Receiver uses RequestorMode) that can bypass security checks and enable privilege escalation. It clarifies that INPC disables MemAC and SecAC, while OFAC can re-enable...

CVE-2024-30019

CVE-2024-30019 is a Windows DHCP Server Denial-of-Service vulnerability. The OpenVAS/NCSC references confirm affected product Windows DHCP Server and impact Denial-of-Service (CVSS around 6.5). Exploitation or exploit status is not detailed in the provided docs. Remediation is to apply the Micros...

CVE-2024-49106

CVE-2024-49106 affects Windows Remote Desktop Services and is a remote code execution vulnerability. The connected sources confirm the affected component as Windows Remote Desktop Services, with the CVE listed as CVE-2024-49106 and a high-severity impact. Public documentation from CVE records and...

CVE-2025-24066

CVE-2025-24066 is a local privilege escalation in Windows Kernel-Mode Drivers caused by a heap-based buffer overflow in the kernel streaming service driver. The impact is increased privileges (local), with the vulnerability exploitable only locally. Microsoft has released updates addressing this ...

CVE-2026-33827

CVE-2026-33827 is a Windows TCP/IP race-condition vulnerability in the IPv6/IPSec processing path (tcpip.sys) that enables remote code execution. Exploitation described in connected docs requires sending crafted IPv6 packets (with IPSec) to Windows hosts with IPSec enabled; no authentication or u...

CVE-2026-62816

CVE-2026-62816 describes a heap-based buffer overflow in the Windows Reliable Multicast Transport Driver (RMCAST). The vulnerability allows an unauthenticated attacker on an adjacent network to execute code on the affected system. Available sources state the issue and its high impact (C/H/I/A: hi...

CVE-2026-69829

CVE-2026-69829 is a heap-based buffer overflow in Windows Shell that allows an unauthorized attacker to achieve remote code execution over a network . Microsoft's assigned CVSS 3.1 score is 9.8 (CRITICAL) , with an attack vector of Network, low complexity, no privileges required, and no user inte...

CVE-2018-0825

CVE-2018-0825 corresponds to a Microsoft StructuredQuery remote code execution vulnerability. According to the CNVD entry, it exists in Microsoft Windows’ StructuredQuery component and stems from improper handling of objects in memory, enabling a remote attacker to execute arbitrary code when a s...

CVE-2020-1564

CVE-2020-1564 : A remote code execution vulnerability exists in the Windows Jet Database Engine due to improper handling of objects in memory. An attacker could persuade a user to open a specially crafted file to execute arbitrary code. Impact is described as high/severe (per NVD metrics), with a...

CVE-2024-30009

CVE-2024-30009 corresponds to a Windows RRAS remote code execution vulnerability. The RRAS service is affected, with the issue enabling execution of arbitrary code on a network-accessible target. The CVSS vector indicates network access, low attack complexity, no privileges required, user interac...

CVE-2024-30084

Technical details (affected product/versions/root cause/impact) for CVE-2024-30084 are not publicly available in the provided documents. Monitor for updates.

CVE-2024-38152

CVE-2024-38152 is listed under Windows WDAC OLE DB provider for SQL with a CVSS and impact of 7.80 (Execute Random Code). The connected documents confirm the affected component and the vulnerability’s label, but do not provide concrete details on root cause, affected versions, exploit scenarios, ...

CVE-2025-24045

CVE-2025-24045 is listed in EU/NCSC sources as a Windows Remote Desktop Services remote code execution vulnerability with high impact (CVSS around 8.1–8.8; labeled Execute random code). Connected documents corroborate that this CVE is tied to Windows Remote Desktop Services/Client components and ...

CVE-2026-27913

Technical details of CVE-2026-27913 are not provided in the supplied documents. Monitor for updates from Microsoft and CVE records for affected components, impact, and mitigations.

CVE-2026-33834

Technical details are not publicly available in the provided documents. No affected products/versions or remediation specifics are included here. Monitor for updates from official CVE/NVD entries to obtain concrete exploit info, mitigations, and fixes.

CVE-2024-30015

CVE-2024-30015 affects Windows Routing and Remote Access Service (RRAS). The connected NCSC advisory lists CVE-2024-30015 under RRAS with impact described as Execution of random code (CVSS v3.1: 7.5, Network attack vector, high complexity, no privileges required, user interaction required, impact...

CVE-2025-26647

CVE-2025-26647 describes an elevation-of-privilege vulnerability in Windows Kerberos caused by improper input validation, allowing network-based privilege escalation. Affected component: Windows Kerberos in Windows client/server environments. Impact is high (CVSS 3.1: 8.8, Network exploit, Privil...

CVE-2023-29372

CVE-2023-29372 affects the Microsoft WDAC OLE DB provider for SQL Server and is described as a Remote Code Execution vulnerability. The available information lists a CVSS v3.1 base score of 8.8 (HIGH) with NETWORK attack vector, LOW attack complexity, NO privileges required, UI required, and impa...