CVE-2024-43599

CVE-2024-43599 is listed under Windows Remote Desktop Client as a high-severity (CVSS 8.8) Remote Code Execution vulnerability with impact described as Execute random code. Connected sources confirm this CVE affects the Remote Desktop Client and note that Microsoft has released updates to fix vul...

CVE-2024-49126

CVE-2024-49126 affects Windows Local Security Authority Subsystem Service (LSASS) and enables remote code execution. The CVSS v3.1 base context shows Network attack vector, high impact on confidentiality, integrity, and availability, with no privileges required and no user interaction. Connected ...

CVE-2025-47981

CVE-2025-47981 is a heap-based buffer overflow in Windows SPNEGO Extended Negotiation that enables pre-auth remote code execution over the network. It affects Windows clients (e.g., Windows 10 1607+) and Windows Server platforms. The initial doc provides a 9.8 CVSSv3.1 score (NETWORK, NONE/LOW/NO...

CVE-2023-29371

Technical details about CVE-2023-29371 are not publicly available in the provided documents. Monitor for updates from vendors and security bulletins.

CVE-2023-32008

CVE-2023-32008: Windows Resilient File System (ReFS) Remote Code Execution vulnerability. Affects Windows with ReFS; exploitation is LOCAL with user interaction and no privileges required. CVSS v3.1 base score 7.8 (HIGH); impact on confidentiality, integrity, and availability is HIGH. Remediation...

CVE-2024-38133

CVE-2024-38133 is a Windows Kernel Elevation of Privilege vulnerability. The connected NCSC advisory confirms it affects the Windows Kernel and enables a local, authenticated attacker to obtain SYSTEM privileges by exploiting the kernel component; CVSS v3.1 base score 7.8 (HIGH). The NCSC note al...

CVE-2025-21307

CVE-2025-21307 concerns the Windows Reliable Multicast Transport Driver (RMCAST) and is described as a remote code execution vulnerability. The CVSS vector indicates network access, no user interaction, and a high impact across confidentiality, integrity, and availability (base score 9.8, CRITICA...

CVE-2025-21376

CVE-2025-21376 is described as a Windows LDAP remote code execution vulnerability. The connected AVLEONOV article lists CVE-2025-21376 under Windows LDAP RCE but provides no vendor/product/versions, root cause, exploit details, or patch information in the supplied documents. Therefore, no concret...

CVE-2025-24055

CVE-2025-24055 is a Windows USB Video Driver vulnerability described as an out-of-bounds read that could allow an authorized attacker to disclose information with a physical attack. The CVSSv3.1 base score is 4.3 (Medium), with privileges required as Low, attack vector Physical, and impact restri...

CVE-2025-26644

CVE-2025-26644 affects Windows Hello by allowing local spoofing due to inadequate handling of adversarial input perturbations. Microsoft documents a Windows Hello security fix path via monthly updates (e.g., KB5055528 for Windows 11 22621/22631; KB5055519 for older Windows builds) that enforces v...

CVE-2025-62221

CVE-2025-62221 is a local-elevation vulnerability in the Windows Cloud Files Mini Filter Driver (CLOUD FILES MINIFILTER DRIVER). It is a use-after-free condition in the driver that can allow an authorized local attacker to escalate to SYSTEM privileges. Public PoCs/Exploits exist (GitHub repos AB...

CVE-2026-26128

CVE-2026-26128 concerns an elevation-of-privilege flaw in Windows SMB Server caused by improper authentication. The vulnerability affects Windows SMB Server and is described in connected sources as allowing an authorized local attacker to obtain higher privileges. Evidence from the connected docu...

CVE-2020-0707

CVE-2020-0707 is a Windows IME privilege-elevation vulnerability arising from improper memory handling in Windows IME. The issue enables local privilege escalation when an attacker gains execution on the target system and runs a specially crafted application. Connected sources corroborate the Win...

CVE-2024-30091

Technical details are not publicly provided in the supplied documents. No affected product, vulnerable component, version, root cause, impact, or fix information is included beyond the CVE ID and the generic description.

CVE-2024-35265

CVE-2024-35265 is described as a Windows Perception Service elevation-of-privilege vulnerability (local, CVSSv3.1 7.0). OpenVAS entries map it to Windows Perception Service with privilege-escalation impact. The connected documents show Microsoft security updates around June 2024, but there is no ...

CVE-2024-38127

CVE-2024-38127 is a Windows Hyper-V Elevation of Privilege vulnerability. The initial description identifies it as a Windows Hyper-V EoP with local attack vector, low privileges required, no user interaction, and an impact of high confidentiality, integrity, and availability. The CVSS 3.1 vector ...

CVE-2024-38198

CVE-2024-38198 is a Windows Print Spooler elevation-of-privilege vulnerability. The connected data confirms the issue affects Windows Print Spooler Components and is categorized with a HIGH base severity (CVSS 3.1: 7.5) and impact as obtaining elevated privileges. The vulnerability is documented ...

CVE-2024-43611

CVE-2024-43611 affects Windows Routing and Remote Access Service (RRAS). The vulnerability in RRAS enables Remote Code Execution with an attack vector over the network; CVSS v3.1 base score is 8.8 (High). The NCSC page lists CVE-2024-43611 under RRAS items with an 8.80/Execute Random Code rating,...

CVE-2025-21318

Technical details for CVE-2025-21318 are not publicly available in the provided documents. Monitor official advisories and vendor bulletins for updates.

CVE-2025-27733

CVE-2025-27733 is a local elevation-of-privileges vulnerability in Windows NTFS caused by an out-of-bounds read. The issue can be exploited by a local attacker to gain SYSTEM-like privileges on affected systems. Connected sources corroborate the NTFS-root cause and the elevated-privileges impact....

CVE-2023-29368

CVE-2023-29368 corresponds to a Windows Filtering Platform elevation-of-privilege issue. The CVE entry lists the affected component as Windows Filtering Platform, with a CVSSv3.1 base score of 7.0 (HIGH), indicating local attack vector, high impact to confidentiality, integrity, and availability,...

CVE-2024-30070

CVE-2024-30070 is a DHCP Server Denial of Service vulnerability affecting Windows DHCP Server. Current documents confirm the vulnerability exists and classify it as a network-exploitable DoS with a CVSS v3.1 base score of 7.5 (HIGH) and no privileges required, no user interaction, and availabilit...

CVE-2024-38134

Technical details about CVE-2024-38134 (Kernel Streaming WOW Thunk Service Driver Elevation of Privilege) are not provided in the included documents. Monitor for updates from Microsoft and CVE databases for affected products, remediation, and known exploits.

CVE-2024-49094

CVE-2024-49094 is a Windows Wireless Wide Area Network Service (WwanSvc) elevation-of-privilege vulnerability. The connected documents indicate that exploitation can lead to elevated privileges on affected Windows endpoints (local context). Microsoft has published updates fixing the issue (e.g., ...

CVE-2024-49129

CVE-2024-49129 is listed in RD Gateway/RD Services as a Denial of Service vulnerability with CVSS v3.1 base 7.5 (Network attack, high complexity, low privileges). Connected sources (e.g., NCSC advisory) explicitly associate CVE-2024-49129 with a Denial of Service impact in Windows Remote Desktop ...

CVE-2025-24061

CVE-2025-24061 : Windows Mark of the Web (MOTW) protection mechanism has a local bypass vulnerability (CVSS 3.1/LOCAL) that could allow an attacker to circumnavigate security protections with user interaction required. The issue is categorized as a local elevation/problem in the MOTW feature and ...

CVE-2025-26637

CVE-2025-26637 affects Windows BitLocker, described as a protection mechanism failure that allows bypass of security with a physical attack. The CVSSv3.1 vector (AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) indicates a physical-attack feasible exploit with high confidentiality, integrity, and availabilit...

CVE-2025-27742

CVE-2025-27742 corresponds to an out-of-bounds read in Windows NTFS that can allow a local attacker to disclose information. The NVD entry lists a CVSS v3.1 base score of 5.5 (LOCAL, LOW attack complexity, NONE privileges, UI REQUIRED) with High confidentiality impact and no impact to integrity/a...

CVE-2024-30036

CVE-2024-30036 – Windows Deployment Services Information Disclosure What is affected: Windows Deployment Services component of Windows. Documented as CVE-2024-30036 with an information disclosure vulnerability. What is vulnerable: The Windows Deployment Services feature exposes data confidentiali...

CVE-2024-30083

CVE-2024-30083 affects Windows Standards-Based Storage Management Service and is rated CVSSv3.1 7.5 (Network, no privileges, no user interaction) with Availability impact. Connected sources confirm this CVE is a Windows DoS vulnerability in the Storage Management Service and align on network-base...

CVE-2024-30095

Technical details about CVE-2024-30095 (affected products, root cause, exploitability, or fixes) are not provided in the connected documents. Monitor for updates.

CVE-2024-38101

Technical details about CVE-2024-38101 are not publicly provided in the supplied connected documents. Information about affected components, impact, and fixes is unavailable here. Monitor for updates from official sources to obtain confirmed technical specifics and remediation guidance.

CVE-2024-38180

CVE-2024-38180 relates to a security feature bypass in Windows SmartScreen. Affected product: Windows SmartScreen (Windows). The CVE is described as a Security Feature Bypass with high impact (C/H/I/A) and a network attack vector requiring user interaction. The initial documents do not provide de...

CVE-2024-49116

CVE-2024-49116 is a Windows Remote Desktop Services remote code execution vulnerability. Public details in connected documents note an RDS entry that is exploitable over a network with no user interaction and high impact (CVSS v3.1 base score 8.1). The root cause and affected versions are not exp...

CVE-2025-21226

Technical details about CVE-2025-21226 are not provided in the supplied documents. No concrete affected components or fixes are stated; monitor for updates.

CVE-2025-21368

CVE-2025-21368 is a Microsoft Digest Authentication Remote Code Execution vulnerability. The provided metrics indicate CVSS 3.1 base score 8.8 (HIGH) with Network attack vector, Low attack complexity, Privileges Required: Low, No user interaction, and the impact is full confidentiality, integrity...

CVE-2025-27487

CVE-2025-27487 is a heap-based buffer overflow in Windows Remote Desktop Client that allows an authenticated attacker to execute code over the network (CVSSv3.1: 8.0 HIGH; AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H). Connected sources confirm this vulnerability and reference remote desktop RCE updates. ...

CVE-2025-27727

CVE-2025-27727 affects Windows Installer through an improper link resolution before file access ("link following"), enabling local privilege elevation on an authorized attacker. The issue is evidenced by the CVE record and associated assessments (high impact, local access, user interaction none)....

CVE-2026-44803

CVE-2026-44803 describes an integer overflow/wraparound in Windows Win32K - GRFX that can allow a local attacker to execute code. The vulnerability is identified across multiple sources (NVD, CVE listing, and MSRC update page) and is classified with a high impact: local code execution, requiring ...

CVE-2026-56188

CVE-2026-56188: A race-condition in the Windows Server Network driver (concurrent access to a shared resource) can allow an unauthenticated attacker to execute code over the network. The vulnerability affects the Windows Server Network driver and is described as a remote code execution flaw with ...

CVE-2024-30002

CVE-2024-30002 is listed in multiple feeds as a Windows Mobile Broadband Driver remote code execution vulnerability affecting the Windows Mobile Broadband component. Connected sources confirm the CVE ID appears under the Windows Mobile Broadband category with a CVSS-like indication of code execut...

CVE-2024-30071

Technical details for CVE-2024-30071 are not provided in the connected documents. The Initial entry mentions Windows Remote Access Connection Manager information disclosure but lacks specific affected products/versions, root cause, impact, or remediation in the supplied materials. Monitor for upd...

CVE-2024-30097

Technical details for CVE-2024-30097 are not provided in the supplied connected documents. Public information in these sources is limited to update references; monitor for official advisories and technical details as they become available.

CVE-2024-43582

CVE-2024-43582 is a Windows Remote Desktop Protocol Server remote code execution vulnerability. Affected: Windows Remote Desktop (RDP) Server. Severity: high (CVSS ~8.1). Mitigation: apply Microsoft security update KB5044284 (OS Build 26100.2033) or later; patching is advised per Microsoft adviso...

CVE-2024-43627

CVE-2024-43627 affects the Windows Telephony Service and enables Remote Code Execution. Affected component: Windows Telephony Service (Windows OS). Attack vector: network; prerequisites: none; user interaction required (UI: R). Impact per CVSS 3.1: Confidentiality, Integrity, and Availability are...

CVE-2024-43629

CVE-2024-43629 affects the Windows DWM Core Library and is an Elevation of Privilege vulnerability. The connected KB/MSRC data confirms the affected component (DWM Core Library) and labels the CVE with a high severity (base score 7.8, local attack, low complexity, privileges required: low) and im...

CVE-2024-43637

CVE-2024-43637 is a Windows USB Video Class System Driver elevation-of-privilege vulnerability. The connected documents confirm a Windows USB Video Driver entry and indicate that Microsoft patched this family of flaws in November 2024 updates (e.g., KB5046616/OS Build 20348.2849 and related KBs)....

CVE-2024-49118

CVE-2024-49118 is listed in connected sources as a Windows component vulnerability affecting Microsoft Message Queuing (MSMQ). The entry is documented with an ability to execute arbitrary code (impact: 8.10; attack vector: network) and is categorized under Windows Message Queuing in the CVE lists...

CVE-2025-26663

CVE-2025-26663 is a Windows LDAP remote code-execution vulnerability described as a use-after-free in the LDAP service that enables an unauthenticated attacker to run code over the network. The CVSS 3.1 base metrics indicate high impact on confidentiality, integrity, and availability (C:H, I:H, A...

CVE-2025-26671

CVE-2025-26671 is a Windows Remote Desktop Services remote code execution vulnerability. The connected documents indicate a use-after-free in the RDS component that allows a network-exposed attacker to execute arbitrary code on the affected host without user interaction. Exploitation is described...