CVE-2024-43461

CVE-2024-43461 — Windows MSHTML Platform Spoofing Vulnerability : A UI misrepresentation in MSHTML that can be used to spoof a web page. Affected component: Windows MSHTML Platform. Underlying issue is a UI spoofing flaw; CVSSv3.1 score 8.8 ( NETWORK, LOW, NONE, UI: REQUIRED; Confidentiality/Inte...

CVE-2023-1017

CVE-2023-1017 describes an out-of-bounds write in TPM2.0/Module Library CryptParameterDecryption. A local attacker could crash the TPM or gain arbitrary code execution in the TPM context. Affected scope includes TPM2.0 implementations via libtpms in VM TPM support and TPM modules. Public details ...

CVE-2023-36711

Technical details about CVE-2023-36711 are not publicly provided in the supplied documents. Monitor for official advisories for affected products, impact, and fixes.

CVE-2023-36436

CVE-2023-36436 is a Windows MSHTML Platform Remote Code Execution vulnerability. The CVSS 3.1 vector (AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) yields a base score of 7.8 (HIGH) with a LOCAL attack vector, requiring user interaction and granting high impact on confidentiality, integrity, and availabil...

CVE-2026-47291

The CVE-2026-47291 entry describes an integer overflow/ wraparound in Windows HTTP.sys that enables a remote attacker to execute code over the network. Affected software component: Windows HTTP.sys. Root cause: integer overflow/wraparound in the HTTP.sys processing path. Impact: unauthenticated n...

CVE-2022-21990

CVE-2022-21990 — Remote Desktop Client RCE . The connected sources confirm a remote code execution vulnerability in the Windows Remote Desktop Client triggered when a user connects to a malicious RDP server. This is a client-side flaw exploited via a crafted server, enabling code execution on the...

CVE-2024-20666

CVE-2024-20666 is a BitLocker security feature bypass related to the Windows Recovery Environment (WinRE). The connected MSRC/updates data confirm a BitLocker bypass vulnerability and note a Microsoft security update to mitigate it (KBs associated with January 2024 security updates, including Win...

CVE-2023-36576

CVE-2023-36576 is a Windows kernel registry/containerization vulnerability in VRegDriver that enabled a container escape via registry virtualization (VrpRegistryCallback) when using differencing/hive layering. The issue related to VrpBuildKeyPath and other path-resolution logic allowed an untrust...

CVE-2023-36589

The CVE-2023-36589 entry corresponds to a Microsoft Message Queuing (MSMQ) Remote Code Execution vulnerability. Public records in connected documents confirm MSMQ is the affected component, with a local attack vector and user interaction required. The CVSS 3.1 base metrics (AV:L, AC:L, PR:L, UI:R...

CVE-2023-36431

CVE-2023-36431 concerns Microsoft Message Queuing (MSMQ) with a Denial of Service impact. The connected CNVD/NVD entries identify MSMQ as the affected component and classify it as a DoS vulnerability, but do not provide concrete root-cause details, vulnerable versions, or remediation steps within...

CVE-2023-36573

Technical details (affected products, vulnerable components, exploitability, and remediation) are not publicly provided in the connected documents. Monitor for updates from official CVE/NVD/MSRC sources to obtain concrete details and fixes.

CVE-2023-36574

CVE-2023-36574 affects Microsoft Message Queuing (MSMQ) with a local, user-interaction–dependent remote code execution vulnerability (CVSS v3.1: AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H; base 7.3). Exploitation status and remediation details are not provided in the supplied connected documents.

CVE-2022-21894

CVE-2022-21894 is a Secure Boot security feature bypass exploited by the BlackLotus UEFI bootkit. It bypasses Secure Boot to load malicious EFI components, enabling persistence, disabling HVCI and Defender, and prior to OS load. Attack requires elevated privileges or physical access; bootkit impl...

CVE-2023-36571

CVE-2023-36571 is described as a Microsoft Message Queuing (MSMQ) Remote Code Execution vulnerability. The connected documents confirm MSMQ is the affected component and (from the NVD metrics) the CVSS v3.1 base score is 7.3 (HIGH) with LOCAL attack vector, LOW attack complexity, LOW privileges r...

CVE-2024-29988

CVE-2024-29988 is a Microsoft Windows SmartScreen security feature bypass vulnerability (MotW bypass) that enables arbitrary code execution when a user opens a zip/executable delivered in a crafted file. Public exploit activity exists (GitHub exploit repository) and reports indicate in-the-wild u...

CVE-2023-36596

CVE-2023-36596 is described as a Remote Procedure Call Information Disclosure Vulnerability with CVSS v3.1 base score 7.5 (HIGH). It is labeled as network-based with low attack complexity and no privileges or user interaction required, and it has a high confidentiality impact. The provided docume...

CVE-2023-36731

CVE-2023-36731 is a Windows Win32k Elevation of Privilege vulnerability. The CVE entry appears in multiple Microsoft KBs (notably KB5031362) and is listed across OpenVAS checks, indicating it is addressed by Windows security updates in those advisories. The core detail in the provided documents i...

CVE-2023-41774

CVE-2023-41774 describes a Remote Code Execution vulnerability in the Layer 2 Tunneling Protocol (L2TP) for Windows. The vulnerability is identified as a high-severity, network-exposed issue with no user interaction required. Public materials here do not provide explicit exploitation details, aff...

CVE-2024-49112

CVE-2024-49112 affects Windows LDAP on Domain Controllers. Connected sources describe an integer-overflow flaw in the LDAP server that can allow unauthenticated remote code execution via crafted CLDAP/LDAP traffic, leading to arbitrary code execution and potential DoS. Exploitation may require lo...

CVE-2023-36723

CVE-2023-36723 is a Windows Container Manager Service Elevation of Privilege vulnerability. Documented by NVD/MSRC and mirrored in ENISA/CNNVD entries, it affects Windows Container Manager Service with local attacker access (CVSS: LOCAL, PR:L, UI:N, C/I/A:H) and low attack complexity, requiring L...

CVE-2019-0836

CVE-2019-0836 is a Windows local privilege-escalation vulnerability tied to the LUAFV driver (luafv.sys). CIRCL sightings confirm in-the-wild exploitation, with exploits documented (e.g., exploit-db entries 46718). The CVE entry identifies an elevation-of-privilege flaw when Windows improperly ha...

CVE-2023-36701

Technical details for CVE-2023-36701 are not publicly available in the provided documents. Monitor for updates from authoritative sources.

CVE-2023-41765

Technical details about CVE-2023-41765 (affected products, root cause, impact, or fixes) are not provided in the supplied documents. Monitor for updates and additional disclosures to assess applicability and remediation.

CVE-2023-41767

Technical details about CVE-2023-41767 are not publicly provided in the supplied documents. No concrete affected products, root cause, or remediation are specified. Monitor for updates from official sources.

CVE-2019-1365

Public documents provided do not include concrete technical details for CVE-2019-1365 (affected product, root cause, impact or fix). Monitor for updates in the connected sources; the current set lacks sufficient information to assess vulnerabilities.

CVE-2023-36710

CVE-2023-36710 is a Windows Media Foundation Core Remote Code Execution vulnerability. The connected sources describe a two-step chain: a WAV file processing flaw in Windows Media Foundation allows two out-of-bounds writes, which an attacker can trigger via a specially crafted WAV played as part ...

CVE-2022-38028

CVE-2022-38028 is a Windows Print Spooler privilege-escalation vulnerability. It arises from improper privilege assignment in the Print Spooler service, enabling a local attacker with low privileges and no user interaction to escalate to SYSTEM. Public exploits have been observed; CISA/KEV and MS...

CVE-2023-36575

CVE-2023-36575 corresponds to a Microsoft Message Queuing (MSMQ) Remote Code Execution vulnerability. The NVD entry lists a CVSS v3.1 base score of 7.3 ( HIGH ), with a LOCAL attack vector, LOW privileges required, and USER INTERACTION NEEDED; all three impact metrics (confidentiality, integrity,...

CVE-2022-26928

Technical details about CVE-2022-26928 are not publicly provided in the supplied documents. The entries only label it as a Windows Photo Import API elevation-of-privilege issue. Monitor for updates from Microsoft/NVD for remediation and impact.

CVE-2023-28231

CVE-2023-28231 is a Windows DHCP Server Service remote code execution vulnerability. The DHCP service can be abused by an authenticated attacker who sends a specially crafted RPC call over a restricted network, potentially achieving code execution with high impact (C/H/I/A) per CVSS 3.1. Public s...

CVE-2023-36594

CVE-2023-36594 affects Windows via a vulnerability in the Windows Graphics Component that enables Elevation of Privilege. The CVSS v3.1 metrics indicate a Local attack vector, Low attack complexity, Low privileges required, and no user interaction, with Confidentiality, Integrity, and Availabilit...

CVE-2023-36729

CVE-2023-36729 is a Local Elevation of Privilege vulnerability related to the Named Pipe File System. CVSS 3.1 base score 7.8 (High) with LOCAL attack vector, LOW privileges required, no user interaction, and implications for confidentiality, integrity, and availability all rated High. The availa...

CVE-2023-41772

CVE-2023-41772 is a Win32k Elevation of Privilege vulnerability. A GitHub exploit demonstrates gaining SYSTEM privileges on Windows 10 (from 1809) and Windows 11 via improper access control in Win32k. Public details confirm local privilege escalation, with exploit code provided and no explicit in...

CVE-2023-36697

Technical details about CVE-2023-36697 are not publicly available in the provided documents; monitor for updates.

CVE-2023-36570

Technical details for CVE-2023-36570 are not publicly available in the provided documents. Monitor for updates.

CVE-2023-36591

Technical details (affected product versions, root cause, exploit information) are not publicly available in the provided documents; monitor for updates from official advisories and vendor advisories.

CVE-2023-36725

CVE-2023-36725 is a Windows kernel elevation-of-privilege vulnerability. The initial and connected records identify it as a local-privilege escalation issue with a CVSS v3.1 base score of 7.8 (HIGH), requiring LOCAL attack Vector and LOW privileges with NO user interaction; impact to confidential...

CVE-2023-41766

Technical details for CVE-2023-41766 are not provided in the connected documents. Public information about affected components, root cause, impact, and fixes is not available here. Monitor for updates from official sources.

CVE-2023-36590

Technical details about CVE-2023-36590 (affected MSMQ RCE) are not publicly provided in the supplied connected documents. Please monitor for updates from official advisories and vulnerability databases for affected products, vulnerable components, impact, and fixes.

CVE-2023-36718

CVE-2023-36718: Microsoft Virtual Trusted Platform Module Remote Code Execution Vulnerability. CVSS 3.1: Attack Vector LOCAL, Attack Complexity HIGH, Privileges Required LOW, User Interaction NONE, Scope CHANGED, with Confidentiality, Integrity, and Availability impacts rated HIGH. Exploitation s...

CVE-2023-36902

Technical details for CVE-2023-36902 are not publicly provided in the supplied documents. Monitor for updates from Microsoft and vulnerability feeds.

CVE-2022-26937

CVE-2022-26937 is a Windows Network File System (NFS) remote code execution vulnerability. Exploitation could occur over the network via an unauthenticated, specially crafted call to an NFS service. NFSv4.1 is not affected; the patch addresses the vulnerability in NFS versions 2.0 and 3.0. In the...

CVE-2023-24023

CVE-2023-24023 describes a Bluetooth BR/EDR MITM vulnerability (BLUFFS) where Secure Simple Pairing and Secure Connections in Bluetooth Core 4.2–5.4 can be forced to use short keys, potentially enabling encryption-key discovery and live injection. Connected IBM/AS/Android material confirms the sa...

CVE-2023-36603

Technical details about CVE-2023-36603 are not publicly provided in the supplied documents. Monitor for updates from vendor advisories and vulnerability feeds.

CVE-2023-38166

CVE-2023-38166 is a Windows Layer 2 Tunneling Protocol remote code execution vulnerability. The supplied data states a CVSS v3.1 base score of 8.1 (HIGH), with network attack vector, high attack complexity, no privileges required, no user interaction, and impact to confidentiality, integrity, and...

CVE-2026-45602

Technical details (affected product versions, root cause, exploit specifics, and remediation) are not publicly available in the provided documents. Monitor for updates from NVD and CVE List for CVE-2026-45602.

CVE-2021-34481

CVE-2021-34481 is a Windows Print Spooler remote code execution vulnerability. A low-privilege user could stage and install vulnerable printer drivers into the driver store and then escalate to SYSTEM by exploiting the spooler’s driver-install path. Affected scope includes Windows 8.1 and newer; ...

CVE-2022-24481

CVE-2022-24481 is a Windows Common Log File System Driver elevation-of-privilege vulnerability. The connected exploit reports describe a memory/counterpart corruption involving CLFS_CONTAINER_CONTEXT.pContainer that can be triggered from CClfsContainer::Close by modifying CLFS_BASE_RECORD_HEADER....

CVE-2023-36605

Technical details for CVE-2023-36605 are not publicly provided in the connected documents. The entry notes a Windows Named Pipe Filesystem Elevation of Privilege vulnerability, but no affected product versions, root cause, or remediation are documented here. Monitor for updates.

CVE-2023-36707

Technical details for CVE-2023-36707 are not publicly available in the provided connected documents. The materials do not specify affected product versions, root cause, exploit status, or fixes. Monitor for official disclosures and updates.