2226 matches found
CVE-2023-29365
Technical details about CVE-2023-29365 are not publicly available in the provided documents. Monitor official sources (Microsoft MSRC/NVD) for updates on affected products, impact, and fixes.
CVE-2024-38127
CVE-2024-38127 is a Windows Hyper-V Elevation of Privilege vulnerability. The initial description identifies it as a Windows Hyper-V EoP with local attack vector, low privileges required, no user interaction, and an impact of high confidentiality, integrity, and availability. The CVSS 3.1 vector ...
CVE-2024-43554
CVE-2024-43554 corresponds to a Windows Kernel-Mode Driver Information Disclosure vulnerability with an impact described as Access to sensitive data (CVSS ~5.5). Affected component is a kernel-mode driver; root cause details are not fully disclosed in the provided documents. Microsoft has issued ...
CVE-2024-43611
CVE-2024-43611 affects Windows Routing and Remote Access Service (RRAS). The vulnerability in RRAS enables Remote Code Execution with an attack vector over the network; CVSS v3.1 base score is 8.8 (High). The NCSC page lists CVE-2024-43611 under RRAS items with an 8.80/Execute Random Code rating,...
CVE-2025-21286
CVE-2025-21286 is a Windows Telephony Service Remote Code Execution vulnerability. The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) yields a high impact with network attack vector and user interaction required. Connected sources confirm Microsoft fixes are available: KB5050009 (OS Build ...
CVE-2025-24061
CVE-2025-24061 : Windows Mark of the Web (MOTW) protection mechanism has a local bypass vulnerability (CVSS 3.1/LOCAL) that could allow an attacker to circumnavigate security protections with user interaction required. The issue is categorized as a local elevation/problem in the MOTW feature and ...
CVE-2025-26637
CVE-2025-26637 affects Windows BitLocker, described as a protection mechanism failure that allows bypass of security with a physical attack. The CVSSv3.1 vector (AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) indicates a physical-attack feasible exploit with high confidentiality, integrity, and availabilit...
CVE-2026-58608
CVE-2026-58608 affects Windows Print Spooler components, where a race condition from improper synchronization on a shared resource enables remote code execution over a network. The vulnerability allows an authenticated attacker with low privileges to execute code with high impact (C/H; I/H; A/H) ...
CVE-2019-0707
CVE-2019-0707 affects Windows NDIS (ndis.sys) with an elevation of privilege in the Network Driver Interface Specification. The root cause is a missing buffer-length check prior to memory copy, enabling a local attacker to run a crafted application to raise privileges. This is supported by multip...
CVE-2023-29371
Technical details about CVE-2023-29371 are not publicly available in the provided documents. Monitor for updates from vendors and security bulletins.
CVE-2024-30013
Technical details for CVE-2024-30013 are not provided in the supplied documents. No information about affected product/version, root cause, impact, or fixes is available here. Monitor for updates from official advisories to obtain concrete details.
CVE-2024-30070
CVE-2024-30070 is a DHCP Server Denial of Service vulnerability affecting Windows DHCP Server. Current documents confirm the vulnerability exists and classify it as a network-exploitable DoS with a CVSS v3.1 base score of 7.5 (HIGH) and no privileges required, no user interaction, and availabilit...
CVE-2024-30083
CVE-2024-30083 affects Windows Standards-Based Storage Management Service and is rated CVSSv3.1 7.5 (Network, no privileges, no user interaction) with Availability impact. Connected sources confirm this CVE is a Windows DoS vulnerability in the Storage Management Service and align on network-base...
CVE-2024-30095
Technical details about CVE-2024-30095 (affected products, root cause, exploitability, or fixes) are not provided in the connected documents. Monitor for updates.
CVE-2024-38060
CVE-2024-38060 is a Windows Imaging Component remote code execution vulnerability. Public documents indicate it is addressed via the July 9, 2024 security updates (e.g., KBs in the July 2024 cycle). The connected MSKB entries reference security updates that address related components (e.g., RADIU...
CVE-2024-38198
CVE-2024-38198 is a Windows Print Spooler elevation-of-privilege vulnerability. The connected data confirms the issue affects Windows Print Spooler Components and is categorized with a HIGH base severity (CVSS 3.1: 7.5) and impact as obtaining elevated privileges. The vulnerability is documented ...
CVE-2024-38223
Technical details for CVE-2024-38223 are not publicly available in the provided documents. No information on affected products, root cause, or fixes is supplied here. Monitor sources for updates.
CVE-2025-21376
CVE-2025-21376 is described as a Windows LDAP remote code execution vulnerability. The connected AVLEONOV article lists CVE-2025-21376 under Windows LDAP RCE but provides no vendor/product/versions, root cause, exploit details, or patch information in the supplied documents. Therefore, no concret...
CVE-2025-24055
CVE-2025-24055 is a Windows USB Video Driver vulnerability described as an out-of-bounds read that could allow an authorized attacker to disclose information with a physical attack. The CVSSv3.1 base score is 4.3 (Medium), with privileges required as Low, attack vector Physical, and impact restri...
CVE-2025-26663
CVE-2025-26663 is a Windows LDAP remote code-execution vulnerability described as a use-after-free in the LDAP service that enables an unauthenticated attacker to run code over the network. The CVSS 3.1 base metrics indicate high impact on confidentiality, integrity, and availability (C:H, I:H, A...
CVE-2025-27732
CVE-2025-27732 is a Windows Graphics Component Elevation of Privilege vulnerability in the Win32K GRFX subsystem. The flaw stems from Sensitive data stored in improperly locked memory in the GRFX path, enabling an authorized, local attacker to elevate privileges. The vulnerability affects Windows...
CVE-2025-33059
CVE-2025-33059 is an information-disclosure vulnerability in Windows Storage Management Provider caused by an out-of-bounds read. An authorized, low-privilege attacker can disclose information locally (CONFIDENTIALITY: HIGH; VECT: LOCAL; IMPACT: NONE on integrity/availability). Affected Microsoft...
CVE-2026-21513
CVE-2026-21513 is a security feature bypass vulnerability in the MSHTML Framework. Affected component: MSHTML/MSHTML Framework used by Windows’ browsing/rendering stack. Root cause details are described in vendor advisories and security blogs as a protection mechanism bypass that can be triggered...
CVE-2026-25177
CVE-2026-25177 is an elevation-of-privilege vulnerability in Active Directory Domain Services. The CVE affects AD DS and permits an authorized attacker to elevate privileges over the network (CVSS v3.1: 8.8, Network, Privileges Required: Low, User Interaction: None, Confidentiality/Integrity/Avai...
CVE-2026-27913
Technical details of CVE-2026-27913 are not provided in the supplied documents. Monitor for updates from Microsoft and CVE records for affected components, impact, and mitigations.
CVE-2023-29373
Technical details about CVE-2023-29373 are not publicly provided in the supplied documents; monitor for updates from Microsoft and vulnerability feeds.
CVE-2024-38134
Technical details about CVE-2024-38134 (Kernel Streaming WOW Thunk Service Driver Elevation of Privilege) are not provided in the included documents. Monitor for updates from Microsoft and CVE databases for affected products, remediation, and known exploits.
CVE-2024-49118
CVE-2024-49118 is listed in connected sources as a Windows component vulnerability affecting Microsoft Message Queuing (MSMQ). The entry is documented with an ability to execute arbitrary code (impact: 8.10; attack vector: network) and is categorized under Windows Message Queuing in the CVE lists...
CVE-2024-49129
CVE-2024-49129 is listed in RD Gateway/RD Services as a Denial of Service vulnerability with CVSS v3.1 base 7.5 (Network attack, high complexity, low privileges). Connected sources (e.g., NCSC advisory) explicitly associate CVE-2024-49129 with a Denial of Service impact in Windows Remote Desktop ...
CVE-2025-27487
CVE-2025-27487 is a heap-based buffer overflow in Windows Remote Desktop Client that allows an authenticated attacker to execute code over the network (CVSSv3.1: 8.0 HIGH; AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H). Connected sources confirm this vulnerability and reference remote desktop RCE updates. ...
CVE-2025-27733
CVE-2025-27733 is a local elevation-of-privileges vulnerability in Windows NTFS caused by an out-of-bounds read. The issue can be exploited by a local attacker to gain SYSTEM-like privileges on affected systems. Connected sources corroborate the NTFS-root cause and the elevated-privileges impact....
CVE-2025-54100
CVE-2025-54100 is a PowerShell RCE vulnerability tied to improper neutralization during MSHTML-based HTML parsing when Invoke-WebRequest is used without -UseBasicParsing. Affected: Windows PowerShell 5.1 on Windows 10/11 and Windows Server 2008–2025; attack is locally exploitable with user intera...
CVE-2023-29368
CVE-2023-29368 corresponds to a Windows Filtering Platform elevation-of-privilege issue. The CVE entry lists the affected component as Windows Filtering Platform, with a CVSSv3.1 base score of 7.0 (HIGH), indicating local attack vector, high impact to confidentiality, integrity, and availability,...
CVE-2024-30091
Technical details are not publicly provided in the supplied documents. No affected product, vulnerable component, version, root cause, impact, or fix information is included beyond the CVE ID and the generic description.
CVE-2024-49126
CVE-2024-49126 affects Windows Local Security Authority Subsystem Service (LSASS) and enables remote code execution. The CVSS v3.1 base context shows Network attack vector, high impact on confidentiality, integrity, and availability, with no privileges required and no user interaction. Connected ...
CVE-2025-21226
Technical details about CVE-2025-21226 are not provided in the supplied documents. No concrete affected components or fixes are stated; monitor for updates.
CVE-2025-26671
CVE-2025-26671 is a Windows Remote Desktop Services remote code execution vulnerability. The connected documents indicate a use-after-free in the RDS component that allows a network-exposed attacker to execute arbitrary code on the affected host without user interaction. Exploitation is described...
CVE-2026-62822
CVE-2026-62822 describes an integer overflow/wraparound in Windows GDI+ that allows an unauthenticated attacker to execute code remotely over a network. The CVSSv3.1 vector (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) yields a base score of 8.8 ( HIGH ), indicating high impact for confidentiality, integ...
CVE-2020-0707
CVE-2020-0707 is a Windows IME privilege-elevation vulnerability arising from improper memory handling in Windows IME. The issue enables local privilege escalation when an attacker gains execution on the target system and runs a specially crafted application. Connected sources corroborate the Win...
CVE-2024-30036
CVE-2024-30036 – Windows Deployment Services Information Disclosure What is affected: Windows Deployment Services component of Windows. Documented as CVE-2024-30036 with an information disclosure vulnerability. What is vulnerable: The Windows Deployment Services feature exposes data confidentiali...
CVE-2024-35265
CVE-2024-35265 is described as a Windows Perception Service elevation-of-privilege vulnerability (local, CVSSv3.1 7.0). OpenVAS entries map it to Windows Perception Service with privilege-escalation impact. The connected documents show Microsoft security updates around June 2024, but there is no ...
CVE-2024-38030
Technical details for CVE-2024-38030 are not publicly disclosed in the provided documents. No affected products, root cause, impact, or fixes are specified. Monitor for updates as more information becomes available.
CVE-2024-38101
Technical details about CVE-2024-38101 are not publicly provided in the supplied connected documents. Information about affected components, impact, and fixes is unavailable here. Monitor for updates from official sources to obtain confirmed technical specifics and remediation guidance.
CVE-2024-38180
CVE-2024-38180 relates to a security feature bypass in Windows SmartScreen. Affected product: Windows SmartScreen (Windows). The CVE is described as a Security Feature Bypass with high impact (C/H/I/A) and a network attack vector requiring user interaction. The initial documents do not provide de...
CVE-2024-43467
CVE-2024-43467 corresponds to a Windows Remote Desktop Licensing Service remote code execution vulnerability. The initial sources indicate this CVE is tracked under Windows Remote Desktop Licensing Service with a CVSS v3.1 base score of 7.5 (NETWORK, HIGH impact, requires LOW privileges, no user ...
CVE-2024-43599
CVE-2024-43599 is listed under Windows Remote Desktop Client as a high-severity (CVSS 8.8) Remote Code Execution vulnerability with impact described as Execute random code. Connected sources confirm this CVE affects the Remote Desktop Client and note that Microsoft has released updates to fix vul...
CVE-2024-43629
CVE-2024-43629 affects the Windows DWM Core Library and is an Elevation of Privilege vulnerability. The connected KB/MSRC data confirms the affected component (DWM Core Library) and labels the CVE with a high severity (base score 7.8, local attack, low complexity, privileges required: low) and im...
CVE-2025-21219
CVE-2025-21219 corresponds to a MapUrlToZone Security Feature Bypass in Windows. The Connected data lists this CVE with a CVSS v3.1 base score of 4.3 (Network, Low) and a
CVE-2025-21292
CVE-2025-21292 affects Windows Search Service (Windows Search Component) and is categorized as an elevation-of-privilege vulnerability with a CVSS v3.1 base score of 8.8 (HIGH). The connected sources identify the impact as obtaining increased privileges and confirm the vulnerability within Window...