CVE-2025-24988

The CVE-2025-24988 entry affects the Windows USB Video Driver, with an out-of-bounds read vulnerability that enables an authorized attacker with physical access to elevate privileges. Connected sources confirm this CVE name and context and indicate Microsoft has released updates to fix Windows US...

CVE-2025-26678

CVE-2025-26678 is a local security bypass in Windows Defender Application Control (WDAC) due to improper access control. The issue affects WDAC’s security feature and can be exploited locally to bypass protections. Public sources confirm the vulnerability and that updates released in April 2025 f...

CVE-2025-27481

CVE-2025-27481 describes a stack-based buffer overflow in Windows Telephony Service that could allow a remote attacker to execute code over the network. The vulnerability affects the Windows Telephony Service component and is caused by a stack overflow in handling network input, with publicly pro...

CVE-2020-0704

The CVE-2020-0704 entry concerns a Windows Wireless Network Manager Elevation of Privilege vulnerability. The affected component is the Windows Wireless Network Manager, where memory is improperly handled. The root cause is a memory handling issue that allows an attacker who already has code exec...

CVE-2022-35751

Technical details about CVE-2022-35751 are not publicly available in the provided documents. No information on affected products, root cause, impact, or fixes is provided here; monitor for updates.

CVE-2024-30003

CVE-2024-30003 is a Windows vulnerability in the Windows Mobile Broadband Driver that enables remote code execution. The issue is described in the connected sources as a vulnerability that allows execution of arbitrary code (Windows Mobile Broadband) with the attacker requiring physical access (a...

CVE-2024-30008

CVE-2024-30008 is a Windows DWM Core Library information-disclosure vulnerability. Affected component: Windows DWM Core Library. Root cause: information disclosure (no specifics provided). Impact per sources: confidentiality impact high; CVSS 3.1 base 5.5 (LOCAL, low attack complexity and privile...

CVE-2024-38049

Technical details (affected components, exploit vectors, or patch specifics) for CVE-2024-38049 are not provided in the connected documents. No public details are present in the supplied sources; monitor for updates.

CVE-2024-38068

Technical details about CVE-2024-38068 are not provided in the supplied documents. No affected products, root cause, impact, or remediation are described here; monitor for updates from official advisories.

CVE-2024-38154

CVE-2024-38154 concerns Windows Routing and Remote Access Service (RRAS). The initial document states RRAS Remote Code Execution Vulnerability with a CVSS3.1 base score of 8.8 (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H). Connected documents do not supply concrete technical details (no vendor/product/ve...

CVE-2024-43541

CVE-2024-43541 is a Microsoft Windows vulnerability in the Simple Certificate Enrollment Protocol that enables a network-based Denial of Service. The NCSC advisory lists a CVSS v3.1 base score of 7.5 (HIGH), with network access required and no user interaction, and specifies the impact as Denial ...

CVE-2024-49076

Technical details about CVE-2024-49076 are not provided in the supplied documents. No affected products, versions, or root-cause are specified here. Monitor for updates from Microsoft and official vulnerability databases for concrete information and remediation steps.

CVE-2025-21200

CVE-2025-21200 is listed by ENISA/NCSC as a vulnerability affecting the Windows Telephony Service with high impact and the ability to execute arbitrary code. The linked material specifies a CVSSv3.1 base score of 8.8 (Network attack, No user privileges, User interaction required; High confidentia...

CVE-2025-21324

Technical details about CVE-2025-21324 are not publicly provided in the supplied connected documents. Public advisories mention Windows updates addressing kernel-related issues but do not provide CVE-specific exploit vectors, impacted products, or fixes in these sources. Monitor for updates.

CVE-2025-21409

CVE-2025-21409 is a Windows Telephony Service Remote Code Execution vulnerability exploitable over the network (CVSS v3.1: AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H). Connected sources confirm this CVE entry and link it to Windows Telephony Service across Microsoft advisories; updates KB5050009, KB5050...

CVE-2025-24074

CVE-2025-24074 affects Microsoft Windows DWM Core Library. It is an Elevation of Privilege due to improper input validation, enabling local privilege escalation with a CVSSv3.1 base score of 7.8 (LOCAL, LOW attack complexity, NO user interaction). Impacted components include the DWM Core Library;...

CVE-2025-27486

CVE-2025-27486 affects Windows Standards-Based Storage Management Service, causing Denial-of-Service through uncontrolled resource consumption over the network. The primary public description confirms the vulnerability class, and Microsoft has released updates to address it (e.g., KBs in the Apri...

CVE-2025-29966

Technical details about CVE-2025-29966 (affected software/components, root cause, impact, or fixes) are not provided in the connected documents. Monitor for updates and sources in the feed for any concrete information.

CVE-2024-30039

CVE-2024-30039 affects the Windows Remote Access Connection Manager. The connected documents map this CVE to Windows components and indicate an information-disclosure risk with CVSS 3.1/3.5-like characteristics: local access required, low attack complexity, no user interaction, confidentiality im...

CVE-2024-30086

Technical details about CVE-2024-30086 (affected component, root cause, impact, and fixes) are not provided in the supplied documents. Monitor for updates from Microsoft and official CVE disclosures.

CVE-2024-37969

Technical details about CVE-2024-37969 (affected product, root cause, exploitability, and remediation) are not publicly provided in the supplied documents. Monitor for updates from official advisories.

CVE-2024-38079

Technical details about CVE-2024-38079 (affected component, root cause, impact, affected products/versions, and fixes) are not provided in the supplied documents; monitor for updates and disclosures from official sources.

CVE-2024-38240

CVE-2024-38240 is a Windows vulnerability affecting the Windows Remote Access Connection Manager . The connected documents identify it as an elevation-of-privilege issue with a high/critical impact (listed as CVE-2024-38240 — Obtaining elevated privileges , CVSS weights shown as part of Windows s...

CVE-2024-43512

CVE-2024-43512 affects Windows Standards-Based Storage Management Service and is described in the connected NCSC advisory as a Denial-of-Service vulnerability with CVSS 6.50. The advisory confirms Windows updates are available/needed, but the documents do not provide exploit details or paved reme...

CVE-2024-49079

Technical details for CVE-2024-49079 are not provided in the supplied documents. Monitor for updates from Microsoft, NVD, CVE List, and other official sources as disclosures evolve.

CVE-2025-21205

CVE-2025-21205 is a Windows Telephony Service vulnerability: a heap-based buffer overflow that allows a network-based attacker to achieve remote code execution. The CVSS details show a HIGH base score with NETWORK access, LOW attack complexity, and PR:N, UI:R. Successful exploitation would impact...

CVE-2025-21210

CVE-2025-21210 concerns Windows BitLocker information disclosure. Reports indicate that in certain scenarios the hibernation image created when a laptop with an open Windows session is closed may not be fully encrypted, potentially allowing recovery of RAM contents in plain text. This vulnerabili...

CVE-2025-21215

Technical details about CVE-2025-21215 are not provided in the connected documents. Public information here is limited to the vulnerability title and references; monitor for updates from Microsoft/NVD.

CVE-2025-21229

CVE-2025-21229 is listed as a Windows Digital Media Elevation of Privilege vulnerability. Connected documents indicate Microsoft updates exist to fix vulnerabilities in Windows, with MSRC guidance and KB articles available, but do not provide explicit technical details (vulnerable component versi...

CVE-2025-21373

Technical details for CVE-2025-21373 are not provided in the supplied documents. Monitor for updates from Microsoft and the KB/MSRC references for affected product, impact and fixes.

CVE-2025-26668

CVE-2025-26668 is a heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) that allows a network-authenticated attacker to execute code remotely. Affected component is RRAS (Windows Routing and Remote Access Service); root cause is a heap-based overflow that can lead to ar...

CVE-2025-27732

CVE-2025-27732 is a Windows Graphics Component Elevation of Privilege vulnerability in the Win32K GRFX subsystem. The flaw stems from Sensitive data stored in improperly locked memory in the GRFX path, enabling an authorized, local attacker to elevate privileges. The vulnerability affects Windows...

CVE-2025-60724

Technical details about CVE-2025-60724 are not provided in the supplied documents. Connected KBs discuss OS updates and security fixes but do not specify vulnerable product versions, root cause, exploitation, or patch specifics for this CVE. Monitor for updates.

CVE-2019-0734

CVE-2019-0734 is a Windows elevation-of-privilege issue where a man-in-the-middle can decode and replace Kerberos authentication requests, enabling an attacker to be validated as Administrator. Affected: Microsoft Windows Kerberos authentication flow. Impact as documented: high severity with pote...

CVE-2024-38031

Technical details, affected products/versions, and remediation for CVE-2024-38031 are not provided in the connected documents. Public specifics such as exploitability and fixes are not included; monitor for updates from official sources.

CVE-2024-38045

Technical details about CVE-2024-38045 are not publicly provided in the supplied documents. References acknowledge a Windows TCP/IP remote code execution vulnerability but do not specify affected products, root cause, versions, or fixes; monitor for updates.

CVE-2024-38047

Technical details (affected product/component, root cause, impact, and patch specifics) are not publicly provided in the supplied documents. Monitor for updates from official advisories and connected sources for CVE-2024-38047.

CVE-2024-38125

CVE-2024-38125 affects the Windows Kernel Streaming WOW Thunk Service Driver and enables local elevation of privileges. The vulnerability is associated with the Kernel Streaming WOW Thunk Service Driver and can lead to obtaining elevated privileges (SYSTEM). Microsoft has issued fixes in August 2...

CVE-2024-38128

Technical details (affected products, root cause, exploit status) are not publicly disclosed in the provided documents; monitor for updates as more information becomes available.

CVE-2024-43450

CVE-2024-43450 is a Windows DNS spoofing vulnerability affecting Windows DNS/NTLM; the CVSS v3.1 base score is 7.5 (Network, High impact, User interaction required). Connected sources place this CVE in Microsoft Windows DNS with impact described as “Pretend to be another user.” Microsoft has rele...

CVE-2024-43628

According to the NCSC advisory, CVE-2024-43628 is a Windows Telephony Service Remote Code Execution vulnerability with a CVSS v3.1 base score of 8.8 (HIGH) and an impact described as Execute random code. The vulnerability is listed under Windows Telephony Service with a remediation path through M...

CVE-2024-49086

Technical details (affected product, vulnerable component, exploit specifics, remediation) are not provided in the supplied documents. Monitor for updates from Microsoft and security advisories.

CVE-2025-21221

CVE-2025-21221: Heap-based buffer overflow in Windows Telephony Service enables remote code execution over the network. Exploitation requires network access, no privileges, and user interaction is needed; impact is high on confidentiality, integrity, and availability. Affected component: Windows ...

CVE-2025-21261

Technical details about CVE-2025-21261 (affected product, vulnerability vector, impact, or patch) are not publicly provided in the connected documents; no concrete specifics are available here. Monitor official advisories and Microsoft/MSRC guidance for remediation.

CVE-2025-21349

CVE-2025-21349 is described by the connected NCSC advisory as a Windows vulnerability in Remote Desktop Services: a tampering flaw in the Windows Remote Desktop Configuration Service. The entry lists a CVSS v3.1 base score of 6.8 (Medium), with network access required (AV:N, UI:R, S:U) and high c...

CVE-2025-21358

Technical details about CVE-2025-21358 are not provided in the supplied documents. No affected products, vectors, or fixes are specified here; monitor for updates from official advisories.

CVE-2025-24044

CVE-2025-24044 is a local privilege-escalation in the Windows Win32 Kernel Subsystem caused by a use-after-free condition. Connected docs classify it as an EoP risk with local exploitability and note fixes in Microsoft Windows updates (e.g., March 2025 cycle). No product/version specifics beyond ...

CVE-2025-24067

CVE-2025-24067 is described in the connected documents as a heap-based buffer overflow in the Microsoft Streaming Service Driver that allows an authenticated, local attacker to elevate privileges. The vulnerability concerns the Windows kernel streaming service component and is listed with a high ...

CVE-2025-27479

CVE-2025-27479 appears in connected records as a Kerberos-related Denial-of-Service vulnerability described under the Kerberos Key Distribution Proxy Service. The available sources confirm an impact on Windows Kerberos with a network-based DoS potential due to an insufficient resource pool, but d...

CVE-2025-27730

CVE-2025-27730 is a local privilege escalation in Windows Digital Media caused by a use-after-free. Authorized attackers can elevate privileges on affected Windows builds. Public vulnerability records confirm the issue and Microsoft has released security updates to fix it (e.g., KB5055527/KB50555...