CVE-2024-21406

Technical details about CVE-2024-21406 are not publicly provided in the supplied documents. No affected product/version/impact specifics are given beyond the generic description. Monitor for updates from official advisories.

CVE-2024-26197

Technical details about CVE-2024-26197 are not publicly provided in the connected documents. Monitor for updates from official sources for affected products, versions, impact, and fixes.

CVE-2020-0686

The CVE-2020-0686 entry describes an elevation-of-privilege vulnerability in Windows Installer when MSI packages process symbolic links. Affected component: Windows Installer in Windows. Root cause: improper handling of symbolic links during MSI processing leading to privilege escalation. Impact:...

CVE-2024-21343

CVE-2024-21343 is a Windows NAT Denial of Service vulnerability. The provided documents identify it as network‑based with impact on availability (NVD CVSSv3.1: 7.5 base, HIGH; CNA: 5.9, MEDIUM) but do not provide concrete affected product versions, root cause details, exploit information, or a sp...

CVE-2024-21368

Technical details (affected product, versions, root cause, impact, or fixes) are not provided in the supplied documents for CVE-2024-21368; no concrete details available. Monitor for updates.

CVE-2024-21451

No public technical details about CVE-2024-21451 are provided in the connected documents. The NVD entry notes RCE via Microsoft ODBC Driver, but remediation/affected versions are not disclosed here. Monitor for updates.

CVE-2024-21432

Technical details about CVE-2024-21432 are not publicly available in the provided documents. Monitor for updates from official advisories to obtain affected products, impact, and remediation guidance.

CVE-2024-21436

CVE-2024-21436 is a Windows Installer elevation of privilege vulnerability. The CVE entry reports a CVSS v3.1 base score of 7.8 (high) with local attack vector, low attack complexity, requiring low privileges and no user interaction; impact is high on confidentiality, integrity, and availability....

CVE-2025-21230

CVE-2025-21230 is a Denial-of-Service vulnerability in Microsoft Message Queuing (MSMQ). Connected CNVD entries explicitly describe a vulnerability in MSMQ that can be exploited to cause a DoS on the system, aligning with the CVSS vector in the CVE entry (Network, Privileges=None, User interactio...

CVE-2024-21371

Technical details about CVE-2024-21371 are not provided in the supplied documents. Please monitor for updates from official advisories to learn affected products, root cause, impact, and remediation.

CVE-2024-26159

Technical details about CVE-2024-26159 are not provided in the supplied documents. The references here only reiterate the vulnerability name; monitor official advisories for updated specifics and remediation guidance.

CVE-2024-21434

Technical details about CVE-2024-21434 are not provided in the supplied documents. Monitor for updates from Microsoft and security feeds for affected components, root cause, impact, and fixes.

CVE-2024-21356

CVE-2024-21356 is listed with concrete identifiers in OpenVAS entries; it corresponds to a Windows LDAP Denial of Service vulnerability with CVSS v3.1 metrics: AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H (base score 6.5, MEDIUM). The connected records confirm it as part of Microsoft Windows vulnerability...

CVE-2024-20678

Public documents in the Connected set do not provide concrete technical details (affected product, root cause, impact, or remediation) for CVE-2024-20678; monitor for updates.

CVE-2024-26176

CVE-2024-26176 is described in connected sources as a Windows Kernel vulnerability that causes an out-of-bounds read during symbolic-link validation in the registry path (CmpCheckValueList/CmpCheckValueList validation of symbolic links). The issue is tied to Windows kernel registry code paths and...

CVE-2024-26181

CVE-2024-26181 is a Windows kernel vulnerability where exhausting the global registry quota can damage the HKLM\SAM hive, enabling local attackers to trigger a denial-of-service by blocking registry operations. The CVE is tied to out-of-resources/OOM paths in hive memory management and registry q...

CVE-2024-21341

Technical details about CVE-2024-21341 are not publicly provided in the supplied documents. Monitor for updates from NVD, Microsoft, or CVE listings for affected products, root cause, impact, and remediation.

CVE-2024-21348

Technical details for CVE-2024-21348 are not provided in the supplied documents; the ICS DoS description is generic. Monitor for updates.

CVE-2024-21366

CVE-2024-21366 affects the Microsoft WDAC OLE DB provider for SQL Server and is rated CVSS v3.1 base score 8.8 (High). The vulnerability has a network attack vector with no privileges required, but user interaction is required, and the impact is High on confidentiality, integrity, and availabilit...

CVE-2024-21444

CVE-2024-21444 concerns Microsoft WDAC OLE DB provider for SQL Server and is described as a remote code execution vulnerability. The NVD entry assigns CVSS v3.1: AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H with a base score of 8.8 (HIGH). Exploitation is network-based, requires user interaction, and impa...

CVE-2024-26182

CVE-2024-26182 is a Windows registry/hive memory corruption issue. The connected material documents a local-elevation path via hive memory corruption that targets the HKCU hive, including volatile storage, by abusing out-of-bounds cell indexes in the hive cell map. The attacker can craft a memory...

CVE-2024-20700

CVE-2024-20700 affects Windows Hyper-V and is a remote code execution vulnerability in Hyper-V. Connected sources describe exploitation as a race condition requiring access to a restricted network; attack vector is adjacent with no user interaction and no privileges required, yielding high impact...

CVE-2024-21357

Technical details for CVE-2024-21357 are not provided in the connected documents. Monitor for updates and new disclosures.

CVE-2024-21443

The CVE-2024-21443 entry describes a Windows Kernel Elevation of Privilege vulnerability with a LOCAL attack vector, requiring LOW privileges and USER interaction, and has HIGH impact on confidentiality, integrity, and availability. Connected documents confirm a Windows kernel/macOS? No, Windows ...

CVE-2024-21440

CVE-2024-21440 is a Microsoft ODBC Driver remote code execution vulnerability. The entry identifies affected software as Microsoft ODBC Driver and states an RCE impact with high severity (CVSS v3.1: 8.8, Network attack vector, no privileges required, user interaction required, confidentiality, in...

CVE-2024-26214

CVE-2024-26214 affects the Microsoft WDAC ODBC Driver and is described as a remote code execution vulnerability. According to the CVE entry, the vulnerability has a CVSS v3.1 base score of 8.8 (HIGH) with Network attack vector, No privileges required, User interaction required, and impacts to con...

CVE-2024-21354

Technical details for CVE-2024-21354 are not publicly provided in the connected documents. No vendor/product specifics or remediation are included. Monitor for updates.

CVE-2026-45602

Technical details (affected product versions, root cause, exploit specifics, and remediation) are not publicly available in the provided documents. Monitor for updates from NVD and CVE List for CVE-2026-45602.

CVE-2024-20665

CVE-2024-20665 is described as a BitLocker Security Feature Bypass vulnerability. Per the NVD entry, the exploit requires local access (AV: Local) with high privileges (PR: High) and no user interaction (UI: None), with a impact profile of high in confidentiality, integrity, and availability, and...

CVE-2024-21439

CVE-2024-21439 is a Windows Telephony Server Elevation of Privilege vulnerability with a CVSS v3.1 base score of 7.0 (HIGH). Attack vector is LOCAL with HIGH impact on confidentiality, integrity, and availability, and the exploit requires LOW privileges and no user interaction, but the document n...

CVE-2024-43639

CVE-2024-43639 is a Windows Kerberos KDC Proxy Remote Code Execution vulnerability. Documents identify it as a Kerberos-related RCE affecting Windows Kerberos/KDC components, with CVSS v3.1 base score 9.8 (NETWORK, HIGH impact on confidentiality, integrity and availability; no user interaction). ...

CVE-2025-32701

CVE-2025-32701 is a Windows CLFS driver use-after-free vulnerability that can allow an authorized attacker to elevate privileges locally. The weakness affects the Windows Common Log File System Driver and has a base CVSS v3.1 score of 7.8 (HIGH) with LOCAL attack vector, LOW attack complexity, an...

CVE-2024-21355

CVE-2024-21355 is a Microsoft Message Queuing (MSMQ) Elevation of Privilege vulnerability. The initial entry indicates a local attack vector with high impact: CVSS 3.1 base score 7.0, attack vector Local, attack complexity High, privileges Required LOW, no user interaction, and impact on confiden...

CVE-2025-32709

CVE-2025-32709 is a local privilege-escalation due to a use-after-free in the Windows Ancillary Function Driver for WinSock (AFD) . Affected component: AFD in Windows networking stack. Root cause: use-after-free leading to arbitrary/privilege escalation. Impact: local elevation to administrator a...

CVE-2024-21307

The CVE-2024-21307 entry identifies a Remote Desktop Client Remote Code Execution vulnerability with a CVSS v3.1 score of 7.5 (HIGH) . Attack vector is Network and the exploit requires User Interaction ; impact is rated as Confidentiality: High, Integrity: High, Availability: High . The available...

CVE-2025-32706

CVE-2025-32706 is an elevation-of-privilege flaw in Windows CLFS Driver (heap-based buffer overflow) that enables local privilege escalation. Affected product: Windows Common Log File System Driver. Base CVSS v3.1: 7.8 (HIGH); attack vector LOCAL, requires LOW privileges, no user interaction. Pub...

CVE-2023-32014

CVE-2023-32014 is a Windows Pragmatic General Multicast (PGM) Remote Code Execution vulnerability. The issue affects Windows message-queuing facilities in PGM environments; when the Windows message queuing service is running, a remote, unauthenticated attacker can send a malicious file over the n...

CVE-2024-21304

Technical details about CVE-2024-21304 are not provided in the supplied documents. Monitor for updates as new public information becomes available.

CVE-2024-21377

Technical details for CVE-2024-21377 are not available in the provided documents. The entries reference the CVE but do not specify affected products, root cause, impact, or fixes. Monitor for official disclosures and published remediation guidance.

CVE-2024-30063

Technical details for CVE-2024-30063 are not provided in the connected documents. The initial description notes a DFS RCE vulnerability but there are no explicit affected products/versions or fixes in the supplied materials. Monitor for updates.

CVE-2020-0689

CVE-2020-0689 is a Microsoft Secure Boot security feature bypass vulnerability affecting UEFI modules loaded with Secure Boot. Microsoft advisories relate to an attacker bypassing Secure Boot to load untrusted software, with remediation provided by a Secure Boot DBX update (KB5012170) that adds t...

CVE-2024-21363

Technical details for CVE-2024-21363 are not provided in the supplied documents; monitor for updates.

CVE-2023-29362

Technical details about CVE-2023-29362 (affected product, vulnerable component, root cause, impact, or fix) are not provided in the supplied documents. Monitor for updates from official advisories and vulnerability databases.

CVE-2024-29996

CVE-2024-29996 affects the Windows Common Log File System Driver. The vulnerability is an Elevation of Privilege issue in CLFS, with a high base CVSS score (3.1, 7.8). It is exploitable locally, requires low privileges, and does not require user interaction. The impact is rated as high for confid...

CVE-2024-21362

Technical details for CVE-2024-21362 are not publicly available in the provided documents. No affected products, root cause, or remediation details are disclosed here. Monitor for updates from official sources.

CVE-2024-21320

CVE-2024-21320 is a Windows themes spoofing vulnerability with public detail: Exploit-DB describes an NTLM hash-leak via a malicious Windows theme, demonstrating how a crafted .theme file can exfiltrate credentials. The NVD entry labels the issue as Windows Themes Spoofing Vulnerability with a CV...

CVE-2024-21339

Technical details about CVE-2024-21339 are not publicly available in the provided documents; current sources only repeat the vulnerability title. Monitor for official disclosures and updates.

CVE-2024-49084

CVE-2024-49084 is a Windows Kernel elevation-of-privilege issue (Windows Kernel). The connected sources list it under Windows Kernel with a CVSS v3.1 base score of 7.0 (local attack vector, high impact across confidentiality, integrity, and availability) and indicate the vulnerability allows obta...

CVE-2024-21314

CVE-2024-21314 relates to Microsoft Message Queuing and is described in CNVD/NVD sources as a Microsoft Message Queuing Information Disclosure Vulnerability. The connected documents explicitly state that the vulnerability allows an attacker to obtain sensitive information from heap memory. No con...

CVE-2025-21204

CVE-2025-21204 affects Windows Update Stack with improper link resolution before file access, enabling local privilege elevation for an authenticated user. Public documentation confirms the vulnerability and that Microsoft released fixes as part of April 2025 updates; patches include OS updates t...