CVE-2026-44803

CVE-2026-44803 describes an integer overflow/wraparound in Windows Win32K - GRFX that can allow a local attacker to execute code. The vulnerability is identified across multiple sources (NVD, CVE listing, and MSRC update page) and is classified with a high impact: local code execution, requiring ...

CVE-2024-38121

CVE-2024-38121 is a Windows RRAS remote code execution vulnerability. Connected documents explicitly list CVE-2024-38121 under Windows Routing and Remote Access Service (RRAS) with an impact described as executing random code, indicating a high-severity issue (CVSS 3.1/8.8; network attack, no pri...

CVE-2024-38215

The CVE CVE-2024-38215 concerns the Windows Cloud Files Mini Filter Driver and is labeled as an Elevation of Privilege vulnerability with high impact. The available connected data indicates a local-execution vector (attackVector: LOCAL, attackComplexity: LOW) requiring LOW privileges and no user ...

CVE-2024-49096

CVE-2024-49096 is a Denial-of-Service vulnerability in Microsoft Message Queuing (MSMQ). The connected NCSC advisory confirms MSMQ-related DoS as part of a Windows-vulnerability bundle, with the notable DoS impact described under the MSMQ entry in their consolidated list. The CVE entry itself spe...

CVE-2024-49106

CVE-2024-49106 affects Windows Remote Desktop Services and is a remote code execution vulnerability. The connected sources confirm the affected component as Windows Remote Desktop Services, with the CVE listed as CVE-2024-49106 and a high-severity impact. Public documentation from CVE records and...

CVE-2025-27485

CVE-2025-27485 affects Windows Standards-Based Storage Management Service. The issue is uncontrolled resource consumption leading to network-based Denial of Service. CVSS 3.1 shows AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H (base 7.5, HIGH) with network exploitation and no user interaction required. Con...

CVE-2023-24938

Technical details for CVE-2023-24938 are not provided in the supplied documents; no explicit affected product, root cause, impact, or fix is stated here. Monitor for updates.

CVE-2024-30035

CVE-2024-30035 impacts the Windows DWM Core Library and is an Elevation of Privilege vulnerability. Documents identify the affected component (DWM Core Library) and the impact as Obtaining elevated privileges. The CVE is listed among Windows vulnerabilities fixed by Microsoft updates; remediation...

CVE-2024-43582

CVE-2024-43582 is a Windows Remote Desktop Protocol Server remote code execution vulnerability. Affected: Windows Remote Desktop (RDP) Server. Severity: high (CVSS ~8.1). Mitigation: apply Microsoft security update KB5044284 (OS Build 26100.2033) or later; patching is advised per Microsoft adviso...

CVE-2025-21219

CVE-2025-21219 corresponds to a MapUrlToZone Security Feature Bypass in Windows. The Connected data lists this CVE with a CVSS v3.1 base score of 4.3 (Network, Low) and a

CVE-2025-21295

Technical details (affected product, vulnerable component, root cause, exploit conditions, or fix) for CVE-2025-21295 are not provided in the supplied documents. Monitor for updates from Microsoft and CVE repositories; current data confirms only high-level vulnerability existence.

CVE-2025-24992

CVE-2025-24992 is a local, information-disclosure vulnerability in Windows NTFS caused by a buffer over-read. The CVE is tied to Windows NTFS and is described as allowing an unauthorized local disclosure of information. CVSS 3.1 base metrics indicate a Local attack vector, Low attack complexity, ...

CVE-2025-32710

CVE-2025-32710 refers to a Use-After-Free vulnerability in Windows Remote Desktop Services that allows a network-based attacker to execute code on affected systems. The CVE is linked to Windows RDS components; the Nessus plugin notes it alongside CVE-2025-32715, and an exploit repo exists, but ex...

CVE-2026-42980

The CVE-2026-42980 entry describes an integer underflow (wrap or wraparound) in the Windows NT OS Kernel that allows an authorized, local attacker to elevate privileges. Affected component: Windows NT OS Kernel; root cause: numeric underflow leading to improper bounds/flow control, enabling privi...

CVE-2019-0698

Summary: CVE-2019-0698 is a memory corruption vulnerability in the Windows DHCP client that can allow remote code execution when an attacker sends specially crafted DHCP responses. The connected advisories confirm related CVEs (CVE-2019-0697 and CVE-2019-0726) describe the same class of issue aff...

CVE-2024-30001

CVE-2024-30001 corresponds to a Windows Mobile Broadband driver vulnerability described in connected sources as enabling remote code execution by the Windows Mobile Broadband component. The NCSC advisory groups CVE-2024-30001 under Windows Mobile Broadband with an impact of executing random code ...

CVE-2024-49089

Technical details about CVE-2024-49089 are not provided in the supplied documents; RRAS RCE is referenced but no affected versions, exploit, or remediation details are included. Monitor for updates.

CVE-2024-49124

According to the connected NCSC advisory, CVE-2024-49124 is an LDAP-related vulnerability in Windows LDAP with an impact described as Execution of random code (CVSS 8.1/8.10 range in the table). The advisory notes that Microsoft has fixed vulnerabilities and recommends applying the security updat...

CVE-2025-21180

CVE-2025-21180 is a Windows exFAT File System vulnerability described as a heap-based buffer overflow that could allow local code execution. The connected documents identify the affected component as the Windows exFAT file system driver and confirm the root cause as a heap-based overflow, enablin...

CVE-2025-21270

CVE-2025-21270 affects Microsoft Message Queuing (MSMQ) and is a Denial of Service vulnerability. Public data show an attack over the network with no authentication required, low attack complexity, and a high impact on availability (CVSS v3.1: 7.5). The connected documents indicate MSMQ-related e...

CVE-2025-27491

CVE-2025-27491 is a Windows Hyper-V remote code execution vulnerability described in the initial document as a use-after-free that could allow an authenticated attacker to execute code over the network. Connected sources corroborate Hyper-V as the affected component and reference patch delivery i...

CVE-2025-32720

CVE-2025-32720 is a Windows Storage Management Provider vulnerability described as an information disclosure via an out-of-bounds read. The connected NCSC advisory lists it under Windows Storage Management Provider with CVSS 5.50 (Impact: Access to sensitive data) and indicates a local attack vec...

CVE-2020-0703

CVE-2020-0703 affects the Windows Backup Service. It is an Elevation of Privilege vulnerability caused by improper handling of file operations. attacker must first gain execution on the victim system; the description does not provide a vendor-specific fix or version details in the provided docume...

CVE-2024-30004

CVE-2024-30004 is a Windows Mobile Broadband Driver Remote Code Execution vulnerability. The CVE affects Windows Mobile Broadband Driver components and is scored CVSS v3.1 Base 6.8 (Medium) with HIGH impact on confidentiality, integrity, and availability; exploitation requires local access or phy...

CVE-2024-30066

Technical details about CVE-2024-30066 (affected product, root cause, impact, mitigations, and fixes) are not publicly provided in the supplied documents. Monitor for updates and refer to the MSRC/MS vulnerability guidance when available.

CVE-2024-38062

Affected software: Windows Kernel-Mode Drivers. CVE-2024-38062 is described in the OpenVAS entries as a local privilege escalation vulnerability with an impact of obtaining elevated privileges (CVSS 7.80). Root cause is not detailed in the provided documents beyond the general kernel-mode driver ...

CVE-2024-43467

CVE-2024-43467 corresponds to a Windows Remote Desktop Licensing Service remote code execution vulnerability. The initial sources indicate this CVE is tracked under Windows Remote Desktop Licensing Service with a CVSS v3.1 base score of 7.5 (NETWORK, HIGH impact, requires LOW privileges, no user ...

CVE-2024-43635

Technical details for CVE-2024-43635 are not publicly provided in the connected documents. The materials only reference a Windows Telephony Service RCE vulnerability. Monitor Microsoft advisories and vulnerability feeds for affected versions, impact, and remediation when they are disclosed.

CVE-2024-49085

CVE-2024-49085 corresponds to a Windows RRAS Remote Code Execution vulnerability. The vulnerability is rated CVSS v3.1: AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, base score 8.8 (HIGH). It affects Windows Routing and Remote Access Service and is exploitable over a network, requiring user interaction, w...

CVE-2025-21312

CVE-2025-21312 is described as a Windows Smart Card Reader Information Disclosure vulnerability. The core technical details available across connected sources are limited to the CVE label, a CVSSv3.1 base score of 2.4 (PHYSICAL attack, low impact on confidentiality, no impact on integrity/availab...

CVE-2025-24058

CVE-2025-24058 describes an elevation-of-privilege in the Windows DWM Core Library caused by improper input validation. The vulnerability enables a locally authenticated attacker to escalate privileges (local vector, no user interaction required per CVSS: High, with base score 7.8). Connected sou...

CVE-2025-25008

CVE-2025-25008 describes an elevation-of-privilege in Windows due to improper link resolution before file access (link following). An authorized, local attacker could exploit this to gain higher privileges. CVSSv3.1 base score is 7.1 (High); attack vector LOCAL; privileges required LOW; user inte...

CVE-2025-26686

CVE-2025-26686 is a Windows TCP/IP remote code execution vulnerability caused by sensitive data stored in improperly locked memory. It is network-based with high impact (total compromise potential) and requires user interaction according to the CVSS: network exposure, high complexity, no privileg...

CVE-2024-30021

CVE-2024-30021 is a Windows Mobile Broadband Driver Remote Code Execution vulnerability. Affected component: Windows Mobile Broadband (driver). Documented impact indicates potential for executing code with high confidentiality, integrity, and availability impact; CVSSv3.1 base score 6.8 (Medium) ...

CVE-2024-37972

Technical details for CVE-2024-37972 are not publicly provided in the supplied documents. No affected products, root cause, impact, or remediation are disclosed here. Monitor for updates from authoritative sources.

CVE-2024-38054

Technical details for CVE-2024-38054 are not provided in the connected documents. No affected product, component, version, root cause, or remediation specifics are available here; monitor for updates.

CVE-2024-38185

Technical details about CVE-2024-38185 are not publicly available in the provided documents. No affected products, root cause, impact, or remediation details are specified here. Monitor for updates in the connected sources.

CVE-2025-21190

CVE-2025-21190 is listed by an EU NCSC advisory under Windows Telephony Service with a CVSS of 8.80 and impact described as executing random code. The Connected Documents do not provide vendor/product version details or a concrete patch/fix within the supplied materials; Microsoft MSRC guidance i...

CVE-2025-21222

CVE-2025-21222 is a remote-code-execution vulnerability in Windows Telephony Service characterized by a heap-based buffer overflow that an unauthenticated attacker can trigger over the network. Connected sources corroborate its association with Windows Telephony Service and document it as a netwo...

CVE-2025-21232

CVE-2025-21232 is a Windows Digital Media Elevation of Privilege vulnerability. The linked data show a CVSS v3.1 base score of 6.6 (Medium) with a physical attack vector, requiring low privileges and no user interaction, and yielding high impact to confidentiality, integrity, and availability. Th...

CVE-2025-21241

CVE-2025-21241 is a Windows Telephony Service Remote Code Execution vulnerability. The CVSS 3.1 score is 8.8 (Netwrk attack vector, Low attack complexity, No privileges required, User interaction required; Impact: Confidentiality, Integrity, Availability High). Public entries indicate a Windows c...

CVE-2025-21308

CVE-2025-21308 Windows Themes Spoofing affects the Windows Theme system. The vulnerability lets a malicious party impersonate the user and potentially execute code in the victim’s context, requiring the victim to open/edit a rogue file. The impact is described as impersonation with potential code...

CVE-2025-27478

CVE-2025-27478 is a heap-based buffer overflow in Windows Local Security Authority (LSA) that enables a locally authenticated attacker to elevate privileges. The CVE is rated CVSS v3.1 7.0 (HIGH) with Local access, high confidentiality/integrity/availability impact. Connected sources confirm the ...

CVE-2024-30034

CVE-2024-30034 affects Windows Cloud Files Mini Filter Driver and is an information disclosure vulnerability. CVSSv3.1 provides a base score of 5.5 (MEDIUM), attack vector LOCAL, attack complexity LOW, privileges required LOW, no user interaction, with confidentiality impact HIGH. Exploitation st...

CVE-2024-43550

CVE-2024-43550 is described in connected sources as a Windows Secure Channel vulnerability with an impact described as impersonation of another user. The NCSC advisory groups it with other Windows CVEs and notes that Microsoft has released security updates to fix affected components (e.g., Octobe...

CVE-2024-49123

CVE-2024-49123 is a Windows Remote Desktop Services remote code execution vulnerability. Public records in ENISA list CVE-2024-49123 under Windows Remote Desktop Services with a CVSS v3.1 base score of 8.1 (NETWORK, NONE/CONFLICTING constraints: high impact to confidentiality, integrity, and avai...

CVE-2025-21242

CVE-2025-21242 is a Windows Kerberos information-disclosure vulnerability. Public sources (CNNVD/MSRC/NVD) identify it as a Kerberos-related information disclosure affecting multiple Windows builds (e.g., Windows 10/11 and Windows Server variants). The exact technical root cause and vulnerable su...

CVE-2025-21254

CVE-2025-21254 is associated with Internet Connection Sharing (ICS) in Windows and is described as a Denial-of-Service vulnerability. The primary documented impact is availability disruption (A) with low attack complexity and adjacent-attack vector, no authentication or user interaction required,...

CVE-2025-21255

Technical details about CVE-2025-21255 are not provided in the supplied documents. Public information is limited to a basic description and references. Monitor Microsoft KBs/NVD for affected products, root cause, and remediation as updates are published.

CVE-2025-21292

CVE-2025-21292 affects Windows Search Service (Windows Search Component) and is categorized as an elevation-of-privilege vulnerability with a CVSS v3.1 base score of 8.8 (HIGH). The connected sources identify the impact as obtaining increased privileges and confirm the vulnerability within Window...