CVE-2025-33073

CVE-2025-33073 is a network-accessible elevation of privilege in the Windows SMB Client caused by improper access control in the SMB protocol stack. The initial description confirms privilege escalation with network access. Connected documents provide concrete exploit presence: PoCs and proof‑of‑...

CVE-2025-59513

Technical details about CVE-2025-59513 are not publicly available in the provided documents. Monitor for updates from Microsoft and the CVE entry for affected components, impact, and remediation.

CVE-2024-38112

CVE-2024-38112 Windows MSHTML Platform Spoofing is a Windows/MSHTML vulnerability exploited in the wild by the Void Banshee group. The issue involves spoofing UI within the MSHTML/IE rendering path, enabling code execution when a user opens a crafted .url payload that references an embedded MHTML...

CVE-2025-59211

CVE-2025-59211 concerns exposure of sensitive information to an unauthorized actor in Windows Push Notification Core, enabling an attacker with local access to disclose information. The initial entry identifies a local attack vector with a medium base score (CVSS 3.1: AV=L, AC=L, PR=L, UI=N, S=U,...

CVE-2025-59184

CVE-2025-59184 is listed in CVE records as a storage spaces direct information disclosure vulnerability. Connected data links this CVE to Storage Spaces Direct in Windows High Availability Services, implying an information disclosure risk to an unauthorized (local) actor. The core concern shown i...

CVE-2025-59294

CVE-2025-59294 affects Windows Taskbar Live. The description indicates exposure of sensitive information to an unauthorized actor under physical access, enabling information disclosure. Connected documents provide limited details: the exact vulnerable component context and remediation are not spe...

CVE-2025-55695

CVE-2025-55695 describes an out-of-bounds read vulnerability in the Windows WLAN Auto Config Service that enables an authorized local attacker to disclose information. The description in the initial document confirms the root cause (out-of-bounds read) and the impact (local information disclosure...

CVE-2023-38149

CVE-2023-38149 is a Windows TCP/IP Denial of Service vulnerability. The CVE entry describes a network-based issue with impact limited to Availability (I:H) and no Confidentiality/Integrity impact (C:N, I:N) per CVSS 3.1: AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H, base score 7.5 (HIGH). Connected docume...

CVE-2023-38143

Technical details for CVE-2023-38143 are not publicly provided in the supplied documents. Affected product/version, root cause, exploitability, and remediation are not specified here; monitor for official disclosures and vendor advisory updates.

CVE-2023-38141

Technical details for CVE-2023-38141 are not provided in the connected documents. The sources discuss Windows Registry/VRegDriver context but do not specify affected products/versions, root cause, impact, or fixes for this CVE. Monitor for official disclosures.

CVE-2023-38139

CVE-2023-38139 is a Windows kernel vulnerability tied to registry hive refcount handling, contributing to hive memory corruption. The connected docs note refcount overflow risks in CM_KEY_SECURITY descriptors (and related loader logic), describing how overflow can trigger use-after-free and enabl...

CVE-2024-21429

The CVE-2024-21429 entry covers a remote code execution vulnerability in the Windows USB Hub Driver. According to the description, the issue affects the USB Hub Driver and could lead to arbitrary code execution with high impact on confidentiality, integrity, and availability. Exploitation details...

CVE-2025-33053

Summary of CVE-2025-33053 : A vulnerability in Windows WebDAV/Internet Shortcut handling allows remote code execution when a vulnerable host opens a crafted .url file that points to a WebDAV share. Exploitation relies on the WebClient service resolving UNC paths via WebDAV and may trigger arbitra...

CVE-2023-38140

CVE-2023-38140 is a Windows kernel/registry vulnerability tied to the VRegDriver callback path. The issue arises in the VrpPostEnumerateKey handler, which allocates a kernel-pool buffer using a length controlled by the user, fills it with data (potentially shorter than the allocation), and copies...

CVE-2025-54917

CVE-2025-54917 is a network-exploitable issue in Windows MapUrlToZone that enables circumvention of a security mechanism. The CVSS v3.1 base score is 4.3 (NETWORK, LOW attack complexity, NONE privileges, UI required) with a LOW confidentiality impact. The Connected documents indicate this CVE map...

CVE-2024-21340

Technical details for CVE-2024-21340 are not provided in the supplied documents. Monitor for updates.

CVE-2026-21510

CVE-2026-21510 is a Windows Shell security feature bypass vulnerability (Protection Mechanism Failure) that can allow remote code execution by bypassing SmartScreen prompts and shell warnings. Affected component: Windows Shell (explorer.exe) and related UI elements. Exploitation requires social e...

CVE-2025-59204

CVE-2025-59204 concerns Windows Management Services and is triggered by use of an uninitialized resource, leading to local information disclosure. The impact is confidentiality loss with local attack vector (required local access, no user interaction). The connected documents confirm Windows secu...

CVE-2026-45602

Technical details (affected product versions, root cause, exploit specifics, and remediation) are not publicly available in the provided documents. Monitor for updates from NVD and CVE List for CVE-2026-45602.

CVE-2023-1017

CVE-2023-1017 describes an out-of-bounds write in TPM2.0/Module Library CryptParameterDecryption. A local attacker could crash the TPM or gain arbitrary code execution in the TPM context. Affected scope includes TPM2.0 implementations via libtpms in VM TPM support and TPM modules. Public details ...

CVE-2024-43583

CVE-2024-43583 is a Winlogon elevation of privilege vulnerability. Connected PoC details show an attacker with low local privileges can escalate to SYSTEM by abusing the Image File Execution Options (IFEO) registry hijack to replace a legitimate system process with a malicious payload. Affected W...

CVE-2026-20862

CVE-2026-20862 is a Windows Management Services information disclosure vulnerability. The description in the initial document states that it allows an authorized attacker to disclose sensitive information locally. The connected Nessus/NCSC/ENISA entries confirm this is a local-impact issue tied t...

CVE-2024-43451

CVE-2024-43451 is a Windows NTLMv2 hash disclosure spoofing vulnerability. Affected: Windows; root cause: NTLM hash leakage occurs when the shell processes .URL shortcuts, triggering NTLM authentication over SMB to an attacker-controlled server. Impact: attackers can obtain NTLMv2 hashes and perf...

CVE-2023-24023

CVE-2023-24023 describes a Bluetooth BR/EDR MITM vulnerability (BLUFFS) where Secure Simple Pairing and Secure Connections in Bluetooth Core 4.2–5.4 can be forced to use short keys, potentially enabling encryption-key discovery and live injection. Connected IBM/AS/Android material confirms the sa...

CVE-2024-43461

CVE-2024-43461 — Windows MSHTML Platform Spoofing Vulnerability : A UI misrepresentation in MSHTML that can be used to spoof a web page. Affected component: Windows MSHTML Platform. Underlying issue is a UI spoofing flaw; CVSSv3.1 score 8.8 ( NETWORK, LOW, NONE, UI: REQUIRED; Confidentiality/Inte...

CVE-2022-38028

CVE-2022-38028 is a Windows Print Spooler privilege-escalation vulnerability. It arises from improper privilege assignment in the Print Spooler service, enabling a local attacker with low privileges and no user interaction to escalate to SYSTEM. Public exploits have been observed; CISA/KEV and MS...

CVE-2024-29988

CVE-2024-29988 is a Microsoft Windows SmartScreen security feature bypass vulnerability (MotW bypass) that enables arbitrary code execution when a user opens a zip/executable delivered in a crafted file. Public exploit activity exists (GitHub exploit repository) and reports indicate in-the-wild u...

CVE-2026-42990

CVE-2026-42990 affects the SQL Server ODBC driver, where a heap-based buffer overflow enables code execution over the network. The vulnerability is exploitable remotely (network vector) and is rated high severity (CVSS 3.1: 9.8, CRITICAL) with no privileges required and no user interaction. The a...

CVE-2024-49112

CVE-2024-49112 affects Windows LDAP on Domain Controllers. Connected sources describe an integer-overflow flaw in the LDAP server that can allow unauthenticated remote code execution via crafted CLDAP/LDAP traffic, leading to arbitrary code execution and potential DoS. Exploitation may require lo...

CVE-2026-69730

CVE-2026-69730 is a use-after-free vulnerability in Windows DNS that allows an unauthorized, remote attacker to execute arbitrary code over the network without any user interaction or prior privileges. Microsoft rates it CVSS 9.8 (Critical) , with high impact on confidentiality, integrity, and av...

CVE-2026-0386

CVE-2026-0386 : Windows Deployment Services has an improper access control vulnerability that can allow an adjacent-network attacker to execute code remotely. This entry is supported by multiple sources confirming the issue and indicating Microsoft has released January 2026 security updates to ad...

CVE-2025-30394

Technical details for CVE-2025-30394 are not publicly provided in the supplied documents. The description notes a memory locking issue causing a network denial of service, but no vendor/version/impact/fix specifics are available here. Monitor for updates.

CVE-2023-20588

CVE-2023-20588 is a division-by-zero vulnerability on some AMD Zen1 CPUs that could cause speculative data leakage and affect confidentiality. The connected Amazon Linux 2 advisory (ALAS2KERNEL-5.4-2025-116) confirms the Linux kernel fix for kernel-5.4 series (e.g., 5.4.254-169.358.amzn2.aarch64/...

CVE-2025-21420

CVE-2025-21420 is evidenced by PoCs showing a Disk Cleanup Tool (cleanmgr.exe) elevation via a DLL sideload approach. The GitHub PoCs demonstrate loading dokan1.dll/dokannp1.dll to trigger arbitrary code paths, with the exploit chain listing SetProcessMitigationPolicy (ProcessRedirectionTrustPoli...

CVE-2025-21418

CVE-2025-21418 is a heap-based buffer overflow in the Windows Ancillary Function Driver for WinSock that enables local privilege escalation to SYSTEM. Affected: Windows components exposed to local attack surface; exploitability is local with low attack complexity and no user interaction. Public r...

CVE-2024-26229

The Windows CSC Service is vulnerable to a Local Privilege Escalation (LPE) vulnerability caused by a heap-based buffer overflow in the csc.sys driver. The root cause is improper address validation in an IOCTL with METHOD_NEITHER. An attacker can craft malicious input to overflow data into adjace...

CVE-2024-30092

CVE-2024-30092 corresponds to a Windows Hyper-V remote code execution vulnerability. Connected sources corroborate a Hyper-V RCE issue affecting Windows Hyper-V with an entry showing 8.0 base-vector severity and adjacent attack vector; Microsoft has released updates to fix vulnerabilities in Wind...

CVE-2026-56190

CVE-2026-56190 is a Windows Remote Desktop Protocol vulnerability described as a use of an uninitialized resource in Windows RDP that allows an unauthenticated attacker to execute code over the network. The CVE has a very high severity (CVSSv3.1 base score 9.8, CRITICAL) and is referenced in Micr...

CVE-2025-21189

CVE-2025-21189 is listed as MapUrlToZone Security Feature Bypass. Connected sources categorize its impact as circumvention of a security measure. Public technical detail in the provided documents is limited; no explicit root-cause, vulnerable product/version, or exploitation information is given....

CVE-2025-24054

CVE-2025-24054 is a Windows NTLM vulnerability allowing an attacker to induce NTLMv2-SSP hash disclosure by leveraging explorer.exe to fetch remote SMB resources via crafted file types (notably .library-ms and .lnk/.library-ms payloads). Public PoCs and exploits demonstrate creating malicious .li...

CVE-2024-38193

CVE-2024-38193 concerns the Windows Ancillary Function Driver for WinSock (AFD) used by Winsock. The vulnerability is a local privilege-escalation issue in the AFD/WinSock stack, with a resource-management error cited by CNNVD and a privilege-escalation capability described by CISA KEV. Public ex...

CVE-2026-21533

CVE-2026-21533 affects Windows Remote Desktop Services (RDS) and is caused by improper privilege management (CWE-269), allowing a local authenticated attacker with low privileges to elevate to SYSTEM. Multiple connected sources corroborate that the issue is a local EoP in RDS with CVSSv3 7.8 (HIG...

CVE-2025-29974

Technical details about CVE-2025-29974 are not publicly provided in the supplied documents. Monitor for updates from Microsoft and other security bulletins to obtain confirmed affected products, scope, and remediation.

CVE-2026-20962

CVE-2026-20962 is described as a local-information-disclosure vulnerability in the Dynamic Root of Trust for Measurement (DRTM) mechanism. The initial and connected sources indicate an issue arising from use of an uninitialized resource, allowing an authorized attacker with local access to disclo...

CVE-2026-49179

CVE-2026-49179 describes a remote code execution vulnerability in Windows Active Directory Domain Services caused by improper neutralization of special elements used in a command (command injection). The issue allows an unauthenticated attacker to run code over the network with high impact (confi...

CVE-2026-65791

CVE-2026-65791 : Heap-based buffer overflow in Windows iSCSI Target Service enables remote code execution over a network. Affected: Windows iSCSI Target Service. Root cause: heap-based overflow. Impact: unauthorized code execution with high confidentiality, integrity, and availability implication...

CVE-2024-30040

CVE-2024-30040 is a Windows MSHTML Platform Security Feature Bypass vulnerability. The affected component is MSHTML (Windows), with a root cause described as a security feature bypass in the MSHTML engine. Impact per CVSS: CVSS 3.1 base score 8.8 (High) affecting confidentiality, integrity, and a...

CVE-2024-26161

CVE-2024-26161 affects the Microsoft WDAC OLE DB provider for SQL Server and is described as a Remote Code Execution vulnerability. The CVE entry lists a CVSS v3.1 base score of 8.8 (HIGH) with NETWORK attack vector, LOW attack complexity, and NONE privileges required, but user interaction is REQ...

CVE-2025-21337

CVE-2025-21337 is a Windows vulnerability categorized as an elevation of privileges (impact: obtaining elevated privileges) with a low base score (CVSS v3.1: 3.3) and local attack vector. The connected advisory from NCSC-2025-0047 aligns this CVE to a Windows component issue with a CVSS ~3.3 and ...

CVE-2024-21416

CVE-2024-21416 refers to a Windows TCP/IP Remote Code Execution vulnerability in the Windows TCP/IP stack. The CVE entry is corroborated by multiple sources (NVD, CVE list, and MSRC advisories) and is rated with high impact; the NVD metrics list a critical base score (9.8) with network access and...