CVE-2024-43627

CVE-2024-43627 affects the Windows Telephony Service and enables Remote Code Execution. Affected component: Windows Telephony Service (Windows OS). Attack vector: network; prerequisites: none; user interaction required (UI: R). Impact per CVSS 3.1: Confidentiality, Integrity, and Availability are...

CVE-2024-49118

CVE-2024-49118 is listed in connected sources as a Windows component vulnerability affecting Microsoft Message Queuing (MSMQ). The entry is documented with an ability to execute arbitrary code (impact: 8.10; attack vector: network) and is categorized under Windows Message Queuing in the CVE lists...

CVE-2025-21226

Technical details about CVE-2025-21226 are not provided in the supplied documents. No concrete affected components or fixes are stated; monitor for updates.

CVE-2025-21232

CVE-2025-21232 is a Windows Digital Media Elevation of Privilege vulnerability. The linked data show a CVSS v3.1 base score of 6.6 (Medium) with a physical attack vector, requiring low privileges and no user interaction, and yielding high impact to confidentiality, integrity, and availability. Th...

CVE-2025-21368

CVE-2025-21368 is a Microsoft Digest Authentication Remote Code Execution vulnerability. The provided metrics indicate CVSS 3.1 base score 8.8 (HIGH) with Network attack vector, Low attack complexity, Privileges Required: Low, No user interaction, and the impact is full confidentiality, integrity...

CVE-2025-27484

CVE-2025-27484 affects Windows Universal Plug and Play (UPnP) Device Host. The issue is described as sensitive data storage in improperly locked memory, enabling an authorized attacker to elevate privileges over the network. Public details in connected docs indicate the vulnerability impacts the ...

CVE-2026-62712

CVE-2026-62712 is a Windows Win32K heap-based buffer overflow that enables local privilege escalation by an authorized attacker. Affected component: Windows kernel user-mode win32k; root cause is a heap overflow in Win32K handling. Impact per provided metrics: Confidentiality, Integrity, and Avai...

CVE-2024-38185

Technical details about CVE-2024-38185 are not publicly available in the provided documents. No affected products, root cause, impact, or remediation details are specified here. Monitor for updates in the connected sources.

CVE-2024-43624

CVE-2024-43624 involves a privilege-escalation flaw in Windows Hyper-V Shared Virtual Disk. The CNVD/CVR sources describe the issue as a flaw in the Hyper-V Shared Virtual Disk that allows an attacker to obtain elevated privileges on the affected system. Microsoft has released security updates ad...

CVE-2024-49085

CVE-2024-49085 corresponds to a Windows RRAS Remote Code Execution vulnerability. The vulnerability is rated CVSS v3.1: AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, base score 8.8 (HIGH). It affects Windows Routing and Remote Access Service and is exploitable over a network, requiring user interaction, w...

CVE-2024-49096

CVE-2024-49096 is a Denial-of-Service vulnerability in Microsoft Message Queuing (MSMQ). The connected NCSC advisory confirms MSMQ-related DoS as part of a Windows-vulnerability bundle, with the notable DoS impact described under the MSMQ entry in their consolidated list. The CVE entry itself spe...

CVE-2025-21216

CVE-2025-21216 is a Windows Internet Connection Sharing (ICS) Denial of Service vulnerability. The available data show a CVSS v3.1 base score of 6.5 (Medium) with an impact on availability, requiring adjacent network access, low attack complexity, no privileges required, and no user interaction. ...

CVE-2025-21309

CVE-2025-21309 is a Windows Remote Desktop Services remote code execution vulnerability. The CVE entry indicates a NETWORK, HIGH-severity issue (CVSS v3.1: 8.1) affecting Windows Remote Desktop Services; no root-cause or affected version details are provided in the documents. Connected sources co...

CVE-2025-27735

CVE-2025-27735 affects Windows Virtualization-Based Security (VBS) Enclave. The root cause is insufficient verification of data authenticity, enabling an authorized local attacker to bypass a security feature. The connected NCSC listing labels the impact as bypassing a security measure with CVSS ...

CVE-2025-29966

Technical details about CVE-2025-29966 (affected software/components, root cause, impact, or fixes) are not provided in the connected documents. Monitor for updates and sources in the feed for any concrete information.

CVE-2026-49181

CVE-2026-49181 is a Windows DHCP Client vulnerability described as an integer underflow (wrap or wraparound) that allows an unauthenticated attacker to elevate privileges over a network. The CVE is corroborated by multiple sources in Connected documents, including NVD and MSRC updates, and ENISA/...

CVE-2026-72983

CVE-2026-72983 is a use-after-free vulnerability in Windows Internet Connection Sharing (ICS) that allows an unauthorized remote attacker to achieve remote code execution over the network. The CVSS 3.1 score is 9.8 (Critical) with no privileges or user interaction required. CISA's SSVC assessment...

CVE-2024-30066

Technical details about CVE-2024-30066 (affected product, root cause, impact, mitigations, and fixes) are not publicly provided in the supplied documents. Monitor for updates and refer to the MSRC/MS vulnerability guidance when available.

CVE-2024-38101

Technical details about CVE-2024-38101 are not publicly provided in the supplied connected documents. Information about affected components, impact, and fixes is unavailable here. Monitor for updates from official sources to obtain confirmed technical specifics and remediation guidance.

CVE-2025-21197

CVE-2025-21197 is an information disclosure in Windows NTFS due to improper access control, enabling an authorized user to disclose file path information in folders they cannot list. Connected sources corroborate NTFS as affected and classify the impact as data exposure. Mitigation involves apply...

CVE-2025-21241

CVE-2025-21241 is a Windows Telephony Service Remote Code Execution vulnerability. The CVSS 3.1 score is 8.8 (Netwrk attack vector, Low attack complexity, No privileges required, User interaction required; Impact: Confidentiality, Integrity, Availability High). Public entries indicate a Windows c...

CVE-2025-21270

CVE-2025-21270 affects Microsoft Message Queuing (MSMQ) and is a Denial of Service vulnerability. Public data show an attack over the network with no authentication required, low attack complexity, and a high impact on availability (CVSS v3.1: 7.5). The connected documents indicate MSMQ-related e...

CVE-2025-21276

CVE-2025-21276 is a Windows MapUrlToZone Denial of Service vulnerability. The CVE entry lists a NETWORK‑level attack with low complexity and no privileges required, resulting in a HIGH impact on availability (CVSS 3.1 base 7.5). Multiple connected sources corroborate a DoS condition in the MapUrl...

CVE-2025-21285

Technical details (affected products, root cause, impact or fixes for CVE-2025-21285 MSMQ DoS) are not included in the provided documents. Monitor updates from Microsoft and CVE/CIRCL references for remedies and exposure.

CVE-2025-26666

CVE-2025-26666 is a heap-based buffer overflow in Windows Media that could allow an authorized, local attacker to execute code on the affected system. The connected documents confirm the vulnerability type, affected component, and impact. Microsoft has published security updates addressing this a...

CVE-2025-33070

CVE-2025-33070 is reported in EU/NCSC context as affecting Windows Netlogon, caused by use of an uninitialized resource, enabling an unauthenticated attacker to obtain elevated privileges. The CVSS vector indicates network access is required with high impact on confidentiality, integrity, and ava...

CVE-2026-21530

CVE-2026-21530 : A double-free vulnerability in Windows Rich Text Edit is described as enabling an authorized attacker to perform local privilege escalation. The connected documents confirm the affected component and the local-privilege-elevation impact but do not provide exploit details, specifi...

CVE-2024-30001

CVE-2024-30001 corresponds to a Windows Mobile Broadband driver vulnerability described in connected sources as enabling remote code execution by the Windows Mobile Broadband component. The NCSC advisory groups CVE-2024-30001 under Windows Mobile Broadband with an impact of executing random code ...

CVE-2024-30002

CVE-2024-30002 is listed in multiple feeds as a Windows Mobile Broadband Driver remote code execution vulnerability affecting the Windows Mobile Broadband component. Connected sources confirm the CVE ID appears under the Windows Mobile Broadband category with a CVSS-like indication of code execut...

CVE-2024-30035

CVE-2024-30035 impacts the Windows DWM Core Library and is an Elevation of Privilege vulnerability. Documents identify the affected component (DWM Core Library) and the impact as Obtaining elevated privileges. The CVE is listed among Windows vulnerabilities fixed by Microsoft updates; remediation...

CVE-2024-30094

Technical details about CVE-2024-30094 (RRAS remote code execution) are not publicly provided in the supplied connected documents. No affected products/versions, exploit information, root cause, or remediation details are present. Monitor for updates.

CVE-2024-38062

Affected software: Windows Kernel-Mode Drivers. CVE-2024-38062 is described in the OpenVAS entries as a local privilege escalation vulnerability with an impact of obtaining elevated privileges (CVSS 7.80). Root cause is not detailed in the provided documents beyond the general kernel-mode driver ...

CVE-2024-43550

CVE-2024-43550 is described in connected sources as a Windows Secure Channel vulnerability with an impact described as impersonation of another user. The NCSC advisory groups it with other Windows CVEs and notes that Microsoft has released security updates to fix affected components (e.g., Octobe...

CVE-2024-49089

Technical details about CVE-2024-49089 are not provided in the supplied documents; RRAS RCE is referenced but no affected versions, exploit, or remediation details are included. Monitor for updates.

CVE-2025-21229

CVE-2025-21229 is listed as a Windows Digital Media Elevation of Privilege vulnerability. Connected documents indicate Microsoft updates exist to fix vulnerabilities in Windows, with MSRC guidance and KB articles available, but do not provide explicit technical details (vulnerable component versi...

CVE-2025-26670

CVE-2025-26670 is a Windows LDAP use-after-free vulnerability that enables remote code execution over the network. The available connected sources confirm the issue affects Windows LDAP and describe the underlying cause as a use-after-free condition, with the impact explicitly stated as remote co...

CVE-2025-26687

CVE-2025-26687 is a use-after-free in Windows Win32K - GRFX that enables a network-based privilege escalation. The affected component is the Win32K GRFX graphics subsystem; the underlying issue is a use-after-free in that path, leading to total impact (CVE-2025-26687 shows a base score of 7.5/10 ...

CVE-2025-27470

CVE-2025-27470 : Uncontrolled resource consumption in the Windows Standards-Based Storage Management Service can allow an unauthenticated attacker to cause a network-denial of service. The vulnerability is documented as a Denial of Service with CVSS v3.1 base score 7.5 (Network attack vector, no ...

CVE-2026-25187

CVE-2026-25187 is a Winlogon elevation-of-privilege vulnerability described as improper link resolution before file access (link following). It is a local vulnerability in Windows Winlogon that could allow an authorized attacker to elevate privileges to SYSTEM with no user interaction required. T...

CVE-2026-50387

CVE-2026-50387 — Windows GDI Elevation of Privilege Affects: Windows GDI subsystem. The vulnerability is a stack-based buffer overflow in GDI that can be triggered by an authorized attacker to achieve local privilege escalation. Impact: Local elevation of privileges with a CVSS v3.1 base score of...

CVE-2026-62728

The vulnerability CVE-2026-62728 affects Windows systems via the Common Log File System (CLFS) Driver. It is a time-of-check time-of-use (TOCTOU) race condition that allows an authorized, local attacker to elevate privileges. The CVSSv3.1 metrics indicate a Local attack, High impact on confidenti...

CVE-2024-30000

CVE-2024-30000 affects Windows Mobile Broadband Driver and enables remote code execution (Execution of random code) with a base CVSS around 6.8 (AV: Physical, AC: Low, PR: None, UI: None, C/I/A: High). Connected guidance indicates Microsoft has updates available; applying the May 2024 Windows upd...

CVE-2024-30003

CVE-2024-30003 is a Windows vulnerability in the Windows Mobile Broadband Driver that enables remote code execution. The issue is described in the connected sources as a vulnerability that allows execution of arbitrary code (Windows Mobile Broadband) with the attacker requiring physical access (a...

CVE-2024-30065

Technical details (affected product, root cause, impact, and fix) are not provided in the supplied documents. Monitor for updates from Microsoft/MSRC as more information becomes available.

CVE-2024-38125

CVE-2024-38125 affects the Windows Kernel Streaming WOW Thunk Service Driver and enables local elevation of privileges. The vulnerability is associated with the Kernel Streaming WOW Thunk Service Driver and can lead to obtaining elevated privileges (SYSTEM). Microsoft has issued fixes in August 2...

CVE-2024-43644

Technical details about CVE-2024-43644 (affected product, root cause, impact, or fix) are not provided in the connected documents. Monitor for updates from official advisories.

CVE-2025-21180

CVE-2025-21180 is a Windows exFAT File System vulnerability described as a heap-based buffer overflow that could allow local code execution. The connected documents identify the affected component as the Windows exFAT file system driver and confirm the root cause as a heap-based overflow, enablin...

CVE-2025-21203

CVE-2025-21203 affects Windows Routing and Remote Access Service (RRAS). The connected data confirms a network-accessible vulnerability in RRAS that can cause an information disclosure via a buffer over-read. Affected component: RRAS on Windows; root cause: buffer over-read; impact: confidential ...

CVE-2025-21251

CVE-2025-21251 is a Denial-of-Service vulnerability in Microsoft Message Queuing (MSMQ). It is network‑based (no user interaction, no privileges required) and impacts MSMQ; exploitation leads to DoS with high impact on availability. Several connected sources corroborate MSMQ DoS for CVE-2025-2125...

CVE-2025-21295

Technical details (affected product, vulnerable component, root cause, exploit conditions, or fix) for CVE-2025-21295 are not provided in the supplied documents. Monitor for updates from Microsoft and CVE repositories; current data confirms only high-level vulnerability existence.