2030 matches found
CVE-2018-0970
Technical details for CVE-2018-0970 are not provided in the supplied documents. Public disclosure, affected products, and remediation remain unclear; monitor for updates.
CVE-2024-30014
CVE-2024-30014 is a Windows RRAS (Routing and Remote Access Service) Remote Code Execution vulnerability. Connected sources confirm the RRAS entry with CVSS v3.1 base score 7.5 (HIGH): Network attack vector, high impact on confidentiality, integrity and availability, with user interaction require...
CVE-2024-30023
CVE-2024-30023 affects the Windows Routing and Remote Access Service (RRAS). The RRAS remote code execution vulnerability is listed under Windows RRAS with CVSS details indicating Network attack vector, high impact to confidentiality, integrity, and availability, and requiring user interaction. T...
CVE-2024-30099
Technical details for CVE-2024-30099 are not present in the provided documents. No affected products, root cause, exploit information, or remediation are stated here. Please monitor for updates from Microsoft and related security advisories to obtain confirmed details.
CVE-2024-38115
Technical details for CVE-2024-38115 are not publicly available in the provided documents. Monitor for updates.
CVE-2025-24061
CVE-2025-24061 : Windows Mark of the Web (MOTW) protection mechanism has a local bypass vulnerability (CVSS 3.1/LOCAL) that could allow an attacker to circumnavigate security protections with user interaction required. The issue is categorized as a local elevation/problem in the MOTW feature and ...
CVE-2025-32710
CVE-2025-32710 refers to a Use-After-Free vulnerability in Windows Remote Desktop Services that allows a network-based attacker to execute code on affected systems. The CVE is linked to Windows RDS components; the Nessus plugin notes it alongside CVE-2025-32715, and an exploit repo exists, but ex...
CVE-2026-25177
CVE-2026-25177 is an elevation-of-privilege vulnerability in Active Directory Domain Services. The CVE affects AD DS and permits an authorized attacker to elevate privileges over the network (CVSS v3.1: 8.8, Network, Privileges Required: Low, User Interaction: None, Confidentiality/Integrity/Avai...
CVE-2026-27913
Technical details of CVE-2026-27913 are not provided in the supplied documents. Monitor for updates from Microsoft and CVE records for affected components, impact, and mitigations.
CVE-2018-0846
The connected documents confirm CVE-2018-0846 affects the Windows Common Log File System (CLFS) driver and describes an elevation-of-privilege flaw caused by improper handling of objects in memory. Affected products include various Windows client/server builds (Windows 7 SP1, Windows 8.1/RT 8.1, ...
CVE-2023-29365
Technical details about CVE-2023-29365 are not publicly available in the provided documents. Monitor official sources (Microsoft MSRC/NVD) for updates on affected products, impact, and fixes.
CVE-2024-38127
CVE-2024-38127 is a Windows Hyper-V Elevation of Privilege vulnerability. The initial description identifies it as a Windows Hyper-V EoP with local attack vector, low privileges required, no user interaction, and an impact of high confidentiality, integrity, and availability. The CVSS 3.1 vector ...
CVE-2024-38223
Technical details for CVE-2024-38223 are not publicly available in the provided documents. No information on affected products, root cause, or fixes is supplied here. Monitor sources for updates.
CVE-2024-43554
CVE-2024-43554 corresponds to a Windows Kernel-Mode Driver Information Disclosure vulnerability with an impact described as Access to sensitive data (CVSS ~5.5). Affected component is a kernel-mode driver; root cause details are not fully disclosed in the provided documents. Microsoft has issued ...
CVE-2024-43611
CVE-2024-43611 affects Windows Routing and Remote Access Service (RRAS). The vulnerability in RRAS enables Remote Code Execution with an attack vector over the network; CVSS v3.1 base score is 8.8 (High). The NCSC page lists CVE-2024-43611 under RRAS items with an 8.80/Execute Random Code rating,...
CVE-2025-21286
CVE-2025-21286 is a Windows Telephony Service Remote Code Execution vulnerability. The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) yields a high impact with network attack vector and user interaction required. Connected sources confirm Microsoft fixes are available: KB5050009 (OS Build ...
CVE-2025-26637
CVE-2025-26637 affects Windows BitLocker, described as a protection mechanism failure that allows bypass of security with a physical attack. The CVSSv3.1 vector (AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) indicates a physical-attack feasible exploit with high confidentiality, integrity, and availabilit...
CVE-2025-27732
CVE-2025-27732 is a Windows Graphics Component Elevation of Privilege vulnerability in the Win32K GRFX subsystem. The flaw stems from Sensitive data stored in improperly locked memory in the GRFX path, enabling an authorized, local attacker to elevate privileges. The vulnerability affects Windows...
CVE-2025-54100
CVE-2025-54100 is a PowerShell RCE vulnerability tied to improper neutralization during MSHTML-based HTML parsing when Invoke-WebRequest is used without -UseBasicParsing. Affected: Windows PowerShell 5.1 on Windows 10/11 and Windows Server 2008–2025; attack is locally exploitable with user intera...
CVE-2021-1706
Technical details for CVE-2021-1706 are not publicly available in the provided documents. No affected products, impact, or remediation are specified here. Monitor for updates from authoritative sources.
CVE-2023-29371
Technical details about CVE-2023-29371 are not publicly available in the provided documents. Monitor for updates from vendors and security bulletins.
CVE-2024-30013
Technical details for CVE-2024-30013 are not provided in the supplied documents. No information about affected product/version, root cause, impact, or fixes is available here. Monitor for updates from official advisories to obtain concrete details.
CVE-2024-30070
CVE-2024-30070 is a DHCP Server Denial of Service vulnerability affecting Windows DHCP Server. Current documents confirm the vulnerability exists and classify it as a network-exploitable DoS with a CVSS v3.1 base score of 7.5 (HIGH) and no privileges required, no user interaction, and availabilit...
CVE-2024-30083
CVE-2024-30083 affects Windows Standards-Based Storage Management Service and is rated CVSSv3.1 7.5 (Network, no privileges, no user interaction) with Availability impact. Connected sources confirm this CVE is a Windows DoS vulnerability in the Storage Management Service and align on network-base...
CVE-2024-30095
Technical details about CVE-2024-30095 (affected products, root cause, exploitability, or fixes) are not provided in the connected documents. Monitor for updates.
CVE-2024-38060
CVE-2024-38060 is a Windows Imaging Component remote code execution vulnerability. Public documents indicate it is addressed via the July 9, 2024 security updates (e.g., KBs in the July 2024 cycle). The connected MSKB entries reference security updates that address related components (e.g., RADIU...
CVE-2024-38198
CVE-2024-38198 is a Windows Print Spooler elevation-of-privilege vulnerability. The connected data confirms the issue affects Windows Print Spooler Components and is categorized with a HIGH base severity (CVSS 3.1: 7.5) and impact as obtaining elevated privileges. The vulnerability is documented ...
CVE-2024-49126
CVE-2024-49126 affects Windows Local Security Authority Subsystem Service (LSASS) and enables remote code execution. The CVSS v3.1 base context shows Network attack vector, high impact on confidentiality, integrity, and availability, with no privileges required and no user interaction. Connected ...
CVE-2024-49129
CVE-2024-49129 is listed in RD Gateway/RD Services as a Denial of Service vulnerability with CVSS v3.1 base 7.5 (Network attack, high complexity, low privileges). Connected sources (e.g., NCSC advisory) explicitly associate CVE-2024-49129 with a Denial of Service impact in Windows Remote Desktop ...
CVE-2025-21376
CVE-2025-21376 is described as a Windows LDAP remote code execution vulnerability. The connected AVLEONOV article lists CVE-2025-21376 under Windows LDAP RCE but provides no vendor/product/versions, root cause, exploit details, or patch information in the supplied documents. Therefore, no concret...
CVE-2025-24055
CVE-2025-24055 is a Windows USB Video Driver vulnerability described as an out-of-bounds read that could allow an authorized attacker to disclose information with a physical attack. The CVSSv3.1 base score is 4.3 (Medium), with privileges required as Low, attack vector Physical, and impact restri...
CVE-2025-26663
CVE-2025-26663 is a Windows LDAP remote code-execution vulnerability described as a use-after-free in the LDAP service that enables an unauthenticated attacker to run code over the network. The CVSS 3.1 base metrics indicate high impact on confidentiality, integrity, and availability (C:H, I:H, A...
CVE-2025-27487
CVE-2025-27487 is a heap-based buffer overflow in Windows Remote Desktop Client that allows an authenticated attacker to execute code over the network (CVSSv3.1: 8.0 HIGH; AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H). Connected sources confirm this vulnerability and reference remote desktop RCE updates. ...
CVE-2025-33059
CVE-2025-33059 is an information-disclosure vulnerability in Windows Storage Management Provider caused by an out-of-bounds read. An authorized, low-privilege attacker can disclose information locally (CONFIDENTIALITY: HIGH; VECT: LOCAL; IMPACT: NONE on integrity/availability). Affected Microsoft...
CVE-2016-7272
CVE-2016-7272 affects the Windows Graphics component across multiple Windows versions (Vista SP2, Server 2008 SP2/R2, 7, 8.1, 2012/R2, RT 8.1, 10 Gold/1511/1607, Server 2016). The vulnerability enables remote code execution via a crafted web site, with network attack vector and no privileges requ...
CVE-2017-0014
Public technical details for CVE-2017-0014 are not present in the provided connected documents. The records describe affected products and cross-reference other CVEs, but no concrete exploit vectors, impact specifics, or remediation are disclosed here. Monitor for updates.
CVE-2017-0099
CVE-2017-0099 pertains to Hyper-V in Microsoft Windows (lists affected: Windows Vista SP2, Server 2008 SP2/2008 R2, Windows 7 SP1, Windows 8.1, Server 2012 Gold/R2, Windows 10 Gold, 1511, 1607, Server 2016). The issue allows guest OS users, running as VMs, to cause a denial-of-service via a craft...
CVE-2023-29373
Technical details about CVE-2023-29373 are not publicly provided in the supplied documents; monitor for updates from Microsoft and vulnerability feeds.
CVE-2024-38134
Technical details about CVE-2024-38134 (Kernel Streaming WOW Thunk Service Driver Elevation of Privilege) are not provided in the included documents. Monitor for updates from Microsoft and CVE databases for affected products, remediation, and known exploits.
CVE-2024-49118
CVE-2024-49118 is listed in connected sources as a Windows component vulnerability affecting Microsoft Message Queuing (MSMQ). The entry is documented with an ability to execute arbitrary code (impact: 8.10; attack vector: network) and is categorized under Windows Message Queuing in the CVE lists...
CVE-2025-26671
CVE-2025-26671 is a Windows Remote Desktop Services remote code execution vulnerability. The connected documents indicate a use-after-free in the RDS component that allows a network-exposed attacker to execute arbitrary code on the affected host without user interaction. Exploitation is described...
CVE-2025-27733
CVE-2025-27733 is a local elevation-of-privileges vulnerability in Windows NTFS caused by an out-of-bounds read. The issue can be exploited by a local attacker to gain SYSTEM-like privileges on affected systems. Connected sources corroborate the NTFS-root cause and the elevated-privileges impact....
CVE-2025-50154
CVE-2025-50154 is a Windows File Explorer spoofing vulnerability where Explorer may disclose NTLMv2-SSP hashes by rendering a remote icon for a .LNK or Library-MS that's hosted on SMB, triggering authentication. Multiple connected documents describe attacker-controlled .LNK/.library-ms payloads a...
CVE-2026-62822
CVE-2026-62822 describes an integer overflow/wraparound in Windows GDI+ that allows an unauthenticated attacker to execute code remotely over a network. The CVSSv3.1 vector (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) yields a base score of 8.8 ( HIGH ), indicating high impact for confidentiality, integ...
CVE-2023-29368
CVE-2023-29368 corresponds to a Windows Filtering Platform elevation-of-privilege issue. The CVE entry lists the affected component as Windows Filtering Platform, with a CVSSv3.1 base score of 7.0 (HIGH), indicating local attack vector, high impact to confidentiality, integrity, and availability,...
CVE-2024-30091
Technical details are not publicly provided in the supplied documents. No affected product, vulnerable component, version, root cause, impact, or fix information is included beyond the CVE ID and the generic description.
CVE-2024-38180
CVE-2024-38180 relates to a security feature bypass in Windows SmartScreen. Affected product: Windows SmartScreen (Windows). The CVE is described as a Security Feature Bypass with high impact (C/H/I/A) and a network attack vector requiring user interaction. The initial documents do not provide de...
CVE-2025-21226
Technical details about CVE-2025-21226 are not provided in the supplied documents. No concrete affected components or fixes are stated; monitor for updates.
CVE-2025-27727
CVE-2025-27727 affects Windows Installer through an improper link resolution before file access ("link following"), enabling local privilege elevation on an authorized attacker. The issue is evidenced by the CVE record and associated assessments (high impact, local access, user interaction none)....