CVE-2024-38062

Affected software: Windows Kernel-Mode Drivers. CVE-2024-38062 is described in the OpenVAS entries as a local privilege escalation vulnerability with an impact of obtaining elevated privileges (CVSS 7.80). Root cause is not detailed in the provided documents beyond the general kernel-mode driver ...

CVE-2025-21242

CVE-2025-21242 is a Windows Kerberos information-disclosure vulnerability. Public sources (CNNVD/MSRC/NVD) identify it as a Kerberos-related information disclosure affecting multiple Windows builds (e.g., Windows 10/11 and Windows Server variants). The exact technical root cause and vulnerable su...

CVE-2025-21295

Technical details (affected product, vulnerable component, root cause, exploit conditions, or fix) for CVE-2025-21295 are not provided in the supplied documents. Monitor for updates from Microsoft and CVE repositories; current data confirms only high-level vulnerability existence.

CVE-2025-21312

CVE-2025-21312 is described as a Windows Smart Card Reader Information Disclosure vulnerability. The core technical details available across connected sources are limited to the CVE label, a CVSSv3.1 base score of 2.4 (PHYSICAL attack, low impact on confidentiality, no impact on integrity/availab...

CVE-2025-21324

Technical details about CVE-2025-21324 are not publicly provided in the supplied connected documents. Public advisories mention Windows updates addressing kernel-related issues but do not provide CVE-specific exploit vectors, impacted products, or fixes in these sources. Monitor for updates.

CVE-2025-24065

CVE-2025-24065 is a vulnerability in the Windows Storage Management Provider causing an out-of-bounds read that can disclose information locally when exploited by an authorized user. The issue is documented with a CVSS v3.1 base score of 5.5 (Medium) and requires local access with low privileges ...

CVE-2025-26678

CVE-2025-26678 is a local security bypass in Windows Defender Application Control (WDAC) due to improper access control. The issue affects WDAC’s security feature and can be exploited locally to bypass protections. Public sources confirm the vulnerability and that updates released in April 2025 f...

CVE-2024-30021

CVE-2024-30021 is a Windows Mobile Broadband Driver Remote Code Execution vulnerability. Affected component: Windows Mobile Broadband (driver). Documented impact indicates potential for executing code with high confidentiality, integrity, and availability impact; CVSSv3.1 base score 6.8 (Medium) ...

CVE-2024-30035

CVE-2024-30035 impacts the Windows DWM Core Library and is an Elevation of Privilege vulnerability. Documents identify the affected component (DWM Core Library) and the impact as Obtaining elevated privileges. The CVE is listed among Windows vulnerabilities fixed by Microsoft updates; remediation...

CVE-2024-37983

Technical details (affected products, vulnerable components, root cause, exploit specifics) are not provided in the connected documents. The CVE entry references a Windows EFI security feature bypass; monitor official disclosures and updates for concrete information.

CVE-2024-43644

Technical details about CVE-2024-43644 (affected product, root cause, impact, or fix) are not provided in the connected documents. Monitor for updates from official advisories.

CVE-2025-21414

CVE-2025-21414 is associated with Windows Core Messaging and is listed in a vulnerability roundup as an Elevation of Privilege risk, with the AVLEONOV source explicitly grouping it under EoP for Windows Core Messaging. The connected materials confirm the affected component (Windows Core Messaging...

CVE-2025-24048

CVE-2025-24048 is a heap-based buffer overflow in the Windows Hyper-V role that enables a locally authenticated attacker to elevate privileges. Public records confirm this is associated with Windows Hyper-V and is rated high severity with local exploitability and total impact to confidentiality, ...

CVE-2025-24050

CVE-2025-24050 describes a heap-based buffer overflow in the Windows Hyper-V role that enables a local privilege escalation for an authorized attacker (CVSSv3.1: LOCAL, Privileges Required: LOW, User Interaction: NONE; impact high for confidentiality, integrity, and availability). The connected d...

CVE-2025-24064

CVE-2025-24064 is a use-after-free in DNS Server that enables remote code execution over the network. The issue is documented as a DNS Server vulnerability with CVSS 3.1/3.1 and a high impact (Execute Random Code) in the Windows DNS role, per NVD entry and CISA/NCSC consolidation. Microsoft has r...

CVE-2025-27486

CVE-2025-27486 affects Windows Standards-Based Storage Management Service, causing Denial-of-Service through uncontrolled resource consumption over the network. The primary public description confirms the vulnerability class, and Microsoft has released updates to address it (e.g., KBs in the Apri...

CVE-2025-27491

CVE-2025-27491 is a Windows Hyper-V remote code execution vulnerability described in the initial document as a use-after-free that could allow an authenticated attacker to execute code over the network. Connected sources corroborate Hyper-V as the affected component and reference patch delivery i...

CVE-2025-27730

CVE-2025-27730 is a local privilege escalation in Windows Digital Media caused by a use-after-free. Authorized attackers can elevate privileges on affected Windows builds. Public vulnerability records confirm the issue and Microsoft has released security updates to fix it (e.g., KB5055527/KB50555...

CVE-2025-27737

CVE-2025-27737 refers to an issue in Windows Security Zone Mapping caused by improper input validation that enables an unauthorized, locally present attacker to bypass a security feature. The vulnerability is categorized with local attack vector and high impact ( Confidentiality, Integrity, Avail...

CVE-2026-33827

CVE-2026-33827 is a Windows TCP/IP race-condition vulnerability in the IPv6/IPSec processing path (tcpip.sys) that enables remote code execution. Exploitation described in connected docs requires sending crafted IPv6 packets (with IPSec) to Windows hosts with IPSec enabled; no authentication or u...

CVE-2026-62817

CVE-2026-62817 describes an out-of-bounds write in Windows DNS Server that enables remote code execution by an unauthenticated attacker over an adjacent network. The advisory consistently identifies the affected component as Windows DNS Server and cites a high-severity impact (CVSS v3.1: 8.8, AV:...

CVE-2019-0698

Summary: CVE-2019-0698 is a memory corruption vulnerability in the Windows DHCP client that can allow remote code execution when an attacker sends specially crafted DHCP responses. The connected advisories confirm related CVEs (CVE-2019-0697 and CVE-2019-0726) describe the same class of issue aff...

CVE-2024-30001

CVE-2024-30001 corresponds to a Windows Mobile Broadband driver vulnerability described in connected sources as enabling remote code execution by the Windows Mobile Broadband component. The NCSC advisory groups CVE-2024-30001 under Windows Mobile Broadband with an impact of executing random code ...

CVE-2024-30003

CVE-2024-30003 is a Windows vulnerability in the Windows Mobile Broadband Driver that enables remote code execution. The issue is described in the connected sources as a vulnerability that allows execution of arbitrary code (Windows Mobile Broadband) with the attacker requiring physical access (a...

CVE-2024-38047

Technical details (affected product/component, root cause, impact, and patch specifics) are not publicly provided in the supplied documents. Monitor for updates from official advisories and connected sources for CVE-2024-38047.

CVE-2024-38185

Technical details about CVE-2024-38185 are not publicly available in the provided documents. No affected products, root cause, impact, or remediation details are specified here. Monitor for updates in the connected sources.

CVE-2024-38250

CVE-2024-38250 is a Windows Graphics Component elevation-of-privilege vulnerability. The CVE entry (Microsoft product area) indicates a local attacker with low privileges and no user interaction could obtain higher privileges (CVSS 7.8, High). Connected sources corroborate that Microsoft has issu...

CVE-2025-27481

CVE-2025-27481 describes a stack-based buffer overflow in Windows Telephony Service that could allow a remote attacker to execute code over the network. The vulnerability affects the Windows Telephony Service component and is caused by a stack overflow in handling network input, with publicly pro...

CVE-2025-32720

CVE-2025-32720 is a Windows Storage Management Provider vulnerability described as an information disclosure via an out-of-bounds read. The connected NCSC advisory lists it under Windows Storage Management Provider with CVSS 5.50 (Impact: Access to sensitive data) and indicates a local attack vec...

CVE-2025-48817

Technical details about CVE-2025-48817 are not publicly provided in the supplied documents. No vendor/product/versions or mitigations are disclosed here. Monitor official advisories for updates.

CVE-2026-58613

CVE-2026-58613 (Windows Cloud Files Mini Filter Driver) causes a local privilege escalation via a use-after-free in the driver. This is observed as an elevation of privileges by an authorized attacker who already has local access. Public sources in the connected documents identify the issue as a ...

CVE-2026-61368

CVE-2026-61368 is a Windows Hyper-V heap-based buffer overflow that enables a locally authenticated attacker (low privileges, user interaction required) to disclose information. Affected component: Hyper-V; root cause is a heap overflow leading to information disclosure. CVSS 3.1 base score 5.0 (...

CVE-2020-0703

CVE-2020-0703 affects the Windows Backup Service. It is an Elevation of Privilege vulnerability caused by improper handling of file operations. attacker must first gain execution on the victim system; the description does not provide a vendor-specific fix or version details in the provided docume...

CVE-2022-35751

Technical details about CVE-2022-35751 are not publicly available in the provided documents. No information on affected products, root cause, impact, or fixes is provided here; monitor for updates.

CVE-2024-38079

Technical details about CVE-2024-38079 (affected component, root cause, impact, affected products/versions, and fixes) are not provided in the supplied documents; monitor for updates and disclosures from official sources.

CVE-2024-38240

CVE-2024-38240 is a Windows vulnerability affecting the Windows Remote Access Connection Manager . The connected documents identify it as an elevation-of-privilege issue with a high/critical impact (listed as CVE-2024-38240 — Obtaining elevated privileges , CVSS weights shown as part of Windows s...

CVE-2024-43624

CVE-2024-43624 involves a privilege-escalation flaw in Windows Hyper-V Shared Virtual Disk. The CNVD/CVR sources describe the issue as a flaw in the Hyper-V Shared Virtual Disk that allows an attacker to obtain elevated privileges on the affected system. Microsoft has released security updates ad...

CVE-2024-43635

Technical details for CVE-2024-43635 are not publicly provided in the connected documents. The materials only reference a Windows Telephony Service RCE vulnerability. Monitor Microsoft advisories and vulnerability feeds for affected versions, impact, and remediation when they are disclosed.

CVE-2024-49124

According to the connected NCSC advisory, CVE-2024-49124 is an LDAP-related vulnerability in Windows LDAP with an impact described as Execution of random code (CVSS 8.1/8.10 range in the table). The advisory notes that Microsoft has fixed vulnerabilities and recommends applying the security updat...

CVE-2025-21190

CVE-2025-21190 is listed by an EU NCSC advisory under Windows Telephony Service with a CVSS of 8.80 and impact described as executing random code. The Connected Documents do not provide vendor/product version details or a concrete patch/fix within the supplied materials; Microsoft MSRC guidance i...

CVE-2025-21229

CVE-2025-21229 is listed as a Windows Digital Media Elevation of Privilege vulnerability. Connected documents indicate Microsoft updates exist to fix vulnerabilities in Windows, with MSRC guidance and KB articles available, but do not provide explicit technical details (vulnerable component versi...

CVE-2025-21255

Technical details about CVE-2025-21255 are not provided in the supplied documents. Public information is limited to a basic description and references. Monitor Microsoft KBs/NVD for affected products, root cause, and remediation as updates are published.

CVE-2025-21328

CVE-2025-21328 maps to a Windows MapUrlToZone security feature bypass vulnerability. Connected docs confirm affected component and root cause: bypassing security checks in MapUrlToZone, enabling circumvention of security measures. CVSS v3.1 base metrics shown as 4.3 (MEDIUM) with Network attack v...

CVE-2025-24059

CVE-2025-24059 affects Windows Common Log File System Driver. Root cause: incorrect numeric type conversion leading to local privilege escalation. Impact per sources: high (privilege escalation, high confidentiality/integrity/availability impact) with local exploitation and no user interaction re...

CVE-2025-24067

CVE-2025-24067 is described in the connected documents as a heap-based buffer overflow in the Microsoft Streaming Service Driver that allows an authenticated, local attacker to elevate privileges. The vulnerability concerns the Windows kernel streaming service component and is listed with a high ...

CVE-2025-24074

CVE-2025-24074 affects Microsoft Windows DWM Core Library. It is an Elevation of Privilege due to improper input validation, enabling local privilege escalation with a CVSSv3.1 base score of 7.8 (LOCAL, LOW attack complexity, NO user interaction). Impacted components include the DWM Core Library;...

CVE-2025-26666

CVE-2025-26666 is a heap-based buffer overflow in Windows Media that could allow an authorized, local attacker to execute code on the affected system. The connected documents confirm the vulnerability type, affected component, and impact. Microsoft has published security updates addressing this a...

CVE-2025-26668

CVE-2025-26668 is a heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) that allows a network-authenticated attacker to execute code remotely. Affected component is RRAS (Windows Routing and Remote Access Service); root cause is a heap-based overflow that can lead to ar...

CVE-2025-27735

CVE-2025-27735 affects Windows Virtualization-Based Security (VBS) Enclave. The root cause is insufficient verification of data authenticity, enabling an authorized local attacker to bypass a security feature. The connected NCSC listing labels the impact as bypassing a security measure with CVSS ...

CVE-2025-29966

Technical details about CVE-2025-29966 (affected software/components, root cause, impact, or fixes) are not provided in the connected documents. Monitor for updates and sources in the feed for any concrete information.