CVE-2026-56190

CVE-2026-56190 is a Windows Remote Desktop Protocol vulnerability described as a use of an uninitialized resource in Windows RDP that allows an unauthenticated attacker to execute code over the network. The CVE has a very high severity (CVSSv3.1 base score 9.8, CRITICAL) and is referenced in Micr...

CVE-2023-28231

CVE-2023-28231 is a Windows DHCP Server Service remote code execution vulnerability. The DHCP service can be abused by an authenticated attacker who sends a specially crafted RPC call over a restricted network, potentially achieving code execution with high impact (C/H/I/A) per CVSS 3.1. Public s...

CVE-2023-41766

Technical details for CVE-2023-41766 are not provided in the connected documents. Public information about affected components, root cause, impact, and fixes is not available here. Monitor for updates from official sources.

CVE-2025-21418

CVE-2025-21418 is a heap-based buffer overflow in the Windows Ancillary Function Driver for WinSock that enables local privilege escalation to SYSTEM. Affected: Windows components exposed to local attack surface; exploitability is local with low attack complexity and no user interaction. Public r...

CVE-2023-38166

CVE-2023-38166 is a Windows Layer 2 Tunneling Protocol remote code execution vulnerability. The supplied data states a CVSS v3.1 base score of 8.1 (HIGH), with network attack vector, high attack complexity, no privileges required, no user interaction, and impact to confidentiality, integrity, and...

CVE-2021-1648

CVE-2021-1648 is a Windows splwow64 Elevation of Privilege vulnerability. The affected component is splwow64 (Printer subsystem interaction with 32-bit print path). The CVE is publicly documented with a high-severity CVSS, reflecting local access and privilege escalation potential. The connected ...

CVE-2023-36590

Technical details about CVE-2023-36590 (affected MSMQ RCE) are not publicly provided in the supplied connected documents. Please monitor for updates from official advisories and vulnerability databases for affected products, vulnerable components, impact, and fixes.

CVE-2023-36606

Technical details for CVE-2023-36606 are not publicly available in the provided documents. Monitor for updates from vendor/security advisories.

CVE-2023-36902

Technical details for CVE-2023-36902 are not publicly provided in the supplied documents. Monitor for updates from Microsoft and vulnerability feeds.

CVE-2022-22048

Technical details about CVE-2022-22048 are not publicly provided in the supplied documents. No affected products, root cause, impact, or fixes are included here. Monitor for updates.

CVE-2023-36592

CVE-2023-36592 concerns Microsoft Message Queuing (MSMQ) Remote Code Execution. Connected CNVD-2023-84129 notes a remote code execution vulnerability in MSMQ. The CVSS metrics in the Initial document indicate Local attack vector, Low privileges required, User interaction, and high impact across c...

CVE-2023-36603

Technical details about CVE-2023-36603 are not publicly provided in the supplied documents. Monitor for updates from vendor advisories and vulnerability feeds.

CVE-2023-36707

Technical details for CVE-2023-36707 are not publicly available in the provided connected documents. The materials do not specify affected product versions, root cause, exploit status, or fixes. Monitor for official disclosures and updates.

CVE-2023-36720

CVE-2023-36720 is a DoS vulnerability in Windows Mixed Reality Developer Tools with a CVSS v3.1 base score of 7.5 (HIGH). It requires network access, has no user interaction, and does not require privileges, with the impact limited to availability (I/N; A=HIGH). The available sources identify the...

CVE-2023-36725

CVE-2023-36725 is a Windows kernel elevation-of-privilege vulnerability. The initial and connected records identify it as a local-privilege escalation issue with a CVSS v3.1 base score of 7.8 (HIGH), requiring LOCAL attack Vector and LOW privileges with NO user interaction; impact to confidential...

CVE-2023-41771

Technical details about CVE-2023-41771 are not provided in the supplied documents. No concrete product/vendor/version impact or remediation is disclosed here; monitor for updates from the referenced sources.

CVE-2023-36605

Technical details for CVE-2023-36605 are not publicly provided in the connected documents. The entry notes a Windows Named Pipe Filesystem Elevation of Privilege vulnerability, but no affected product versions, root cause, or remediation are documented here. Monitor for updates.

CVE-2024-30092

CVE-2024-30092 corresponds to a Windows Hyper-V remote code execution vulnerability. Connected sources corroborate a Hyper-V RCE issue affecting Windows Hyper-V with an entry showing 8.0 base-vector severity and adjacent attack vector; Microsoft has released updates to fix vulnerabilities in Wind...

CVE-2023-36743

Technical details about CVE-2023-36743 are not provided in the supplied connected documents. The set includes general references and vulnerability listings, but no affected products, root cause, impact, or fixes. Monitor for updates as more information becomes publicly available.

CVE-2023-41773

CVE-2023-41773 is described in the initial document as a Windows Layer 2 Tunneling Protocol Remote Code Execution vulnerability with high severity (CVSS v3.1: 8.1, network access, no user interaction). Connected documents corroborate that this is a Windows L2TP RCE issue; CNVD‑2023‑81881 and NVD ...

CVE-2026-49179

CVE-2026-49179 describes a remote code execution vulnerability in Windows Active Directory Domain Services caused by improper neutralization of special elements used in a command (command injection). The issue allows an unauthenticated attacker to run code over the network with high impact (confi...

CVE-2023-36581

CVE-2023-36581 corresponds to a Denial of Service vulnerability in Microsoft Message Queuing (MSMQ). Public records in the connected CNVD entry describe a MSMQ DoS issue, but the available documents do not provide concrete technical details such as affected versions, root cause, specific exploit ...

CVE-2023-41768

CVE-2023-41768 is a Windows Layer 2 Tunneling Protocol remote code execution vulnerability. The issue affects Microsoft Windows L2TP handling and is described as a high-severity, network-based flaw with no required user interaction. The connected sources identify Windows updates released in Oct 2...

CVE-2023-41769

Technical details for CVE-2023-41769 are not publicly provided in the supplied documents. No affected products, exploit info, or remediation confirmed here. Monitor for official disclosures and vendor advisories for concrete impact and fixes.

CVE-2025-21189

CVE-2025-21189 is listed as MapUrlToZone Security Feature Bypass. Connected sources categorize its impact as circumvention of a security measure. Public technical detail in the provided documents is limited; no explicit root-cause, vulnerable product/version, or exploitation information is given....

CVE-2023-36713

The CVE-2023-36713 entry concerns a vulnerability in the Windows Common Log File System Driver that leads to Information Disclosure. According to the NVD entry, the issue has a CVSSv3.1 base score of 5.5 (Medium) with Confidentiality Impact High, and it is a Local, Low-Complexity attack requiring...

CVE-2026-65791

CVE-2026-65791 : Heap-based buffer overflow in Windows iSCSI Target Service enables remote code execution over a network. Affected: Windows iSCSI Target Service. Root cause: heap-based overflow. Impact: unauthorized code execution with high confidentiality, integrity, and availability implication...

CVE-2023-36703

Technical details about CVE-2023-36703 are not publicly disclosed in the provided documents. Monitor for updates from official advisories; current materials only indicate a DHCP Server Denial of Service vulnerability without specifics.

CVE-2026-21533

CVE-2026-21533 affects Windows Remote Desktop Services (RDS) and is caused by improper privilege management (CWE-269), allowing a local authenticated attacker with low privileges to elevate to SYSTEM. Multiple connected sources corroborate that the issue is a local EoP in RDS with CVSSv3 7.8 (HIG...

CVE-2023-36564

Technical details about CVE-2023-36564 are not publicly available in the provided documents. Monitor official advisories for updates on affected products, impact, and available fixes.

CVE-2023-36557

CVE-2023-36557 is identified as a PrintHTML API Remote Code Execution Vulnerability. The primary document describes it as a PrintHTML API RCE with CVSS v3.1 metrics (AV:L, AC:L, PR:N, UI:R, S:U, C:H, I:H, A:H) totaling a base score of 7.8 (HIGH). The exploitation field is listed as null in the in...

CVE-2023-36712

Technical details for CVE-2023-36712 are not publicly disclosed in the provided connected documents. Based on available records, no affected products, root cause, or remediation are specified here. Monitor for updates from official advisories.

CVE-2023-36724

CVE-2023-36724 corresponds to a Windows Power Management Service Information Disclosure vulnerability. Affected component: Windows Power Management Service. Root cause and impact: information disclosure with high confidentiality impact; attack vector LOCAL, low complexity, no user interaction req...

CVE-2024-38193

CVE-2024-38193 concerns the Windows Ancillary Function Driver for WinSock (AFD) used by Winsock. The vulnerability is a local privilege-escalation issue in the AFD/WinSock stack, with a resource-management error cited by CNNVD and a privilege-escalation capability described by CISA KEV. Public ex...

CVE-2023-36438

Technical details about CVE-2023-36438 are not publicly provided in the connected documents. The OpenVAS entries reference this CVE among many Windows vulnerabilities but do not supply affected products, versions, root cause, or remediation specifics. Monitor for updates.

CVE-2023-36593

Technical details for CVE-2023-36593 are not publicly provided in the supplied documents. Monitor for updates from official advisories (MSRC/NVD) to obtain affected products, impact, and fixes.

CVE-2025-24054

CVE-2025-24054 is a Windows NTLM vulnerability allowing an attacker to induce NTLMv2-SSP hash disclosure by leveraging explorer.exe to fetch remote SMB resources via crafted file types (notably .library-ms and .lnk/.library-ms payloads). Public PoCs and exploits demonstrate creating malicious .li...

CVE-2026-20962

CVE-2026-20962 is described as a local-information-disclosure vulnerability in the Dynamic Root of Trust for Measurement (DRTM) mechanism. The initial and connected sources indicate an issue arising from use of an uninitialized resource, allowing an authorized attacker with local access to disclo...

CVE-2023-36578

CVE-2023-36578: Microsoft Message Queuing (MSMQ) Remote Code Execution vulnerability. The NVD entry confirms MSMQ is affected with a local exploit vector, requiring user interaction, and a CVSS v3.1 base score of 7.3 (HIGH) affecting confidentiality, integrity, and availability. The provided docu...

CVE-2023-36732

CVE-2023-36732 is a Win32k elevation-of-privilege vulnerability affecting Windows, with a local attack vector, low attack complexity, and low privileges required, and it has a high impact on confidentiality, integrity, and availability per CVSS 3.1 (7.8). The provided records identify the vulnera...

CVE-2025-29974

Technical details about CVE-2025-29974 are not publicly provided in the supplied documents. Monitor for updates from Microsoft and other security bulletins to obtain confirmed affected products, scope, and remediation.

CVE-2023-36585

Technical details for CVE-2023-36585 are not publicly available in the provided documents. Monitor for updates in official advisories; no affected products, impact, vectors, or fixes can be confirmed from the supplied content.

CVE-2023-36721

CVE-2023-36721 is a Windows Elevation of Privilege vulnerability affecting the Windows Error Reporting Service. The CVSS vector is Local, with High impact on confidentiality, integrity, and availability; exploitRequires Low privileges and no user interaction, with high attack complexity. Public r...

CVE-2023-36579

Technical details about CVE-2023-36579 (MSMQ DoS) are not publicly provided in the supplied documents. Monitor for updates from official advisories; no affected products, exploitability, or remediation details are stated here.

CVE-2023-36582

Technical details about CVE-2023-36582 are not publicly available in the provided connected documents. Monitor for updates from official advisories.

CVE-2023-41770

Technical details about CVE-2023-41770 are not provided in the supplied documents. No information on affected products, versions, root cause, impact, or fixes is available. Monitor for updates in the connected feeds.

CVE-2023-36776

Technical details for CVE-2023-36776 are not provided in the supplied documents. No product/version/root-cause/impact/fix details are publicly disclosed here. Monitor for updates from sources in Connected Documents (KBs/OS updates) for remediation.

CVE-2024-30040

CVE-2024-30040 is a Windows MSHTML Platform Security Feature Bypass vulnerability. The affected component is MSHTML (Windows), with a root cause described as a security feature bypass in the MSHTML engine. Impact per CVSS: CVSS 3.1 base score 8.8 (High) affecting confidentiality, integrity, and a...

CVE-2023-36726

Technical details about CVE-2023-36726 are not publicly provided in the connected documents. The items reference this CVE by ID but do not disclose affected product, root cause, impact, or remediation in the supplied sources.

CVE-2021-26414

CVE-2021-26414 is a Windows DCOM Server Security Feature Bypass. Connected docs confirm a DCOM hardening series (phase 3) and note mitigations: after applying relevant updates, DCOM hardening changes are permanent and cannot be disabled via registry. Microsoft guidance recommends enabling DCOM au...