CVE-2024-21314

CVE-2024-21314 relates to Microsoft Message Queuing and is described in CNVD/NVD sources as a Microsoft Message Queuing Information Disclosure Vulnerability. The connected documents explicitly state that the vulnerability allows an attacker to obtain sensitive information from heap memory. No con...

CVE-2023-32019

CVE-2023-32019 is a Windows kernel registry vulnerability arising from hive memory corruption via out-of-bounds registry cell indexes. The provided research shows that with a crafted hive (notably HKCU and app hives) a local attacker can trigger UAF- and memory-corruption primitives that enable r...

CVE-2024-21305

CVE-2024-21305 is a Hypervisor-Protected Code Integrity (HVCI) security feature bypass affecting Windows; the CVE entry notes a local attack surface with high privileges required and no user interaction (per CVSS details). Connected Microsoft documentation confirms the vulnerability and lists it ...

CVE-2024-26219

CVE-2024-26219 is a Denial-of-Service vulnerability in Windows HTTP.sys. The CVSSv3.1 base vector (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) yields a 7.5 HIGH rating, indicating network-based exploitation with no user interaction and potential downtime due to availability impact. Public references ide...

CVE-2024-20694

CVE-2024-20694 is described as a Windows CoreMessaging Information Disclosure vulnerability. The initial description provides a CVSSv3.1 vector: Local attack vector, Low attack complexity, Low privileges required, no user interaction, with a High confidentiality impact and a Medium base score (5....

CVE-2024-21311

Technical details for CVE-2024-21311 are not publicly available in the provided documents. No affected products, root cause, or remediation are specified here. Monitor for updates.

CVE-2024-38153

CVE-2024-38153 is a Windows Kernel elevation-of-privilege vulnerability. The CVSSv3.1 base score is 7.8 (High) with Local attack vector, Low attack complexity, Privileges Required: Low, User Interaction: None, and impact on Confidentiality, Integrity, and Availability: High. The vulnerability aff...

CVE-2024-21310

Technical details about CVE-2024-21310 are not provided in the connected documents. The sources confirm existence and vulnerability class but do not disclose affected product versions, root cause, exploit, or remediation. Monitor for updates.

CVE-2024-28903

CVE-2024-28903 is listed under Microsoft Windows Secure Boot vulnerabilities with a circumvention of security measure impact. The connected OpenVAS/NCSC entries corroborate that Secure Boot-related fixes were released, but do not provide product/version specifics or a patch identifier. The root c...

CVE-2023-32015

CVE-2023-32015 is a Windows Pragmatic General Multicast (PGM) Remote Code Execution vulnerability. The issue affects Windows where the Message Queuing service is enabled; a remote, unauthenticated attacker can exploit it by sending a crafted file over the network to achieve code execution. The CV...

CVE-2024-29995

CVE-2024-29995 is a Windows Kerberos Elevation of Privilege vulnerability. The connected data shows it affects the Windows Kerberos component and is rated with CVSSv3.1 base score 8.1 (vector: AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H), indicating network-prone access with high impact and no user inter...

CVE-2024-26212

Technical details for CVE-2024-26212 are not publicly available in the provided documents. Monitor for updates from NVD/OSV/OpenVAS; no specifics on affected products, root cause, or fix are available here.

CVE-2025-21302

CVE-2025-21302 is a Windows Telephony Service Remote Code Execution vulnerability. The CVSS 3.1 base score is 8.8 (HIGH) with network access, low attack complexity, no privileges required, and user interaction required; impacts include confidentiality, integrity, and availability. The vulnerabili...

CVE-2024-21316

CVE-2024-21316 is a Windows Server vulnerability described as a Key Distribution Service Security Feature Bypass. Documents confirm the issue affects Windows Server/KDS handling and carry a CVSS v3.1 base score of 6.1 (Network, Low attack complexity, High privileges required, User interaction req...

CVE-2025-21263

Technical details for CVE-2025-21263 are not publicly provided in the supplied connected documents. The materials reference Windows Digital Media Elevation of Privilege vulnerability but do not describe affected components, root cause, impact specifics, or fixes. Monitor updates from official sou...

CVE-2024-29066

CVE-2024-29066 is an Windows DFS Remote Code Execution vulnerability. Affected: Windows Distributed File System (DFS). CVSS 3.1 base 7.2 (NETWORK, HIGH impact across Confidentiality, Integrity, Availability). Requirements: HIGH privileges, no user interaction; scope UNCHANGED. Concrete root-cause...

CVE-2024-20693

CVE-2024-20693 is a Windows Kernel local privilege escalation vulnerability. Documents corroborate that the Windows Kernel component is affected and that the vulnerability enables obtaining elevated/privileged execution from a local attacker, with high confidentiality, integrity, and availability...

CVE-2024-29064

Technical details (affected product/versions/root cause/impact/fix) for CVE-2024-29064 are not publicly provided in the supplied documents. Monitor for updates as more information becomes available.

CVE-2026-48576

CVE-2026-48576 is a Windows Secure Boot vulnerability described as a protection mechanism failure enabling a local attacker with high privileges to bypass a security feature. The available documents specify a local attack vector with low complexity and no user interaction, and a base CVSS 3.1 sco...

CVE-2024-28898

CVE-2024-28898 is listed in the connected documents as a Windows Secure Boot vulnerability described as a Secure Boot security feature bypass with a CVSS-like impact of bypassing security measures (Windows Secure Boot). The advisory notes for this CVE show it with a moderate score (around 6.3–6.3...

CVE-2024-20698

CVE-2024-20698 is a Windows Kernel Elevation of Privilege vulnerability. The connected exploit analysis reveals that the bug resides in ntoskrnl.exe within WbAddLookupEntryEx, which manipulates an array of process pointers. Before the patch, it reallocates and inserts a new pointer, but the patch...

CVE-2024-26179

CVE-2024-26179 affects Windows Routing and Remote Access Service (RRAS) with a remote code execution vulnerability (CVSS v3.1: 8.8, HIGH). The entry specifies network attack vector with no privileges required but user interaction required, leading to execution of arbitrary code on affected system...

CVE-2024-26218

CVE-2024-26218 is a Windows Kernel Elevation of Privilege vulnerability that Microsoft has addressed within the Windows KB updates KB5036893 and KB5036894. OpenVAS references place this CVE under Windows Kernel as enabling “elevated rights” (local, kernel-mode) with high CVSS 7.8 characteristics....

CVE-2024-30080

Technical details about CVE-2024-30080 are not provided in the supplied documents. No specifics on affected products, vulnerable components, root cause, or fixes are included; monitor for updates from Microsoft/security advisories.

CVE-2024-49082

CVE-2024-49082 is a Windows File Explorer information disclosure vulnerability. The connected data lists impact as access to sensitive data with CVSS 3.1 v3.1 vector: AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N, score 6.8 (Medium). Concrete details about root cause or affected Windows versions are not fu...

CVE-2026-45586

Technical details (affected product/component, root cause, impact, versions, or exploit information) are not publicly available in the provided documents. Monitor for updates.

CVE-2024-26158

CVE-2024-26158 affects Microsoft Windows Install Service and is an Elevation of Privilege vulnerability. It is exploitable locally (attack vector: Local) with low privileges required and no user interaction, potentially granting complete control (confidentiality/integrity/availability impact: Hig...

CVE-2024-26209

CVE-2024-26209 affects Microsoft Windows Local Security Authority Subsystem Service (LSASS). The entry describes an information disclosure vulnerability in LSASS, with a CVSS 3.1 base score of 5.5 (Medium), attack vector Local, privileges required Low, user interaction None, and a confidentiality...

CVE-2024-30006

CVE-2024-30006 affects the Microsoft WDAC OLE DB provider for SQL Server and enables Remote Code Execution. The CVSS v3.1 base score is 8.8 (HIGH) with Network attack vector, Low attack complexity, and user interaction required. Some sources list it as a high-severity Windows vulnerability (score...

CVE-2025-27480

CVE-2025-27480 is described as a Remote Desktop Services/RDP remote code execution vulnerability with a network attack vector (no user interaction) and a base CVSS v3.1 score of 8.1 (HIGH). Public references include a GitHub exploit claiming a remote code execution path and Krebs-style coverage p...

CVE-2024-20692

Technical details such as affected product versions, root cause, exploiting conditions, or remediation are not publicly available in the provided documents. Monitor for updates from authoritative sources to obtain concrete information about CVE-2024-20692.

CVE-2024-38076

CVE-2024-38076 is a Windows Remote Desktop Licensing Service remote code execution vulnerability. An unauthenticated attacker could trigger arbitrary code execution over the network, potentially gaining full control of the affected system. The CVE is rated CVSS v3.1: 9.8 (CRITICAL) with network a...

CVE-2024-49115

CVE-2024-49115 is a vulnerability in Windows Remote Desktop Services that enables remote code execution. The connected documents indicate an impact of code execution with high severity (CVSS-like values around 8+ in vendor/intelligence summaries) and publicly referenced exploit potential, with re...

CVE-2024-28919

CVE-2024-28919 is listed in the Windows Secure Boot area as a "Secure Boot Security Feature Bypass" vulnerability. The connected documents identify it as a local-bypass vulnerability affecting Secure Boot, with a CVSSv3.1 base score of 6.7 (Impact: High on confidentiality, integrity, and availabi...

CVE-2025-21351

CVE-2025-21351 is a Windows AD DS API Denial of Service vulnerability. The initial record notes a network‑vector DoS impacting AD DS APIs with a CVSS v3.1 base score of 7.5 (HIGH) and no user interaction required. Connected documents indicate Microsoft has released updates addressing vulnerabilit...

CVE-2024-26195

CVE-2024-26195 is a remote code execution vulnerability in Microsoft Windows DHCP Server (DHCP Server Service). According to OpenVAS data, it is listed under Windows DHCP Server with an impact described as “Executing Random Code.” The NVD entry confirms DHCP Server Service Remote Code Execution V...

CVE-2024-26202

Technical details about CVE-2024-26202 are not provided in the supplied documents. Current sources mention a DHCP Server RCE but do not disclose affected products, versions, or exploit info. Monitor for updates.

CVE-2024-28896

CVE-2024-28896 is a Secure Boot security feature bypass with HIGH impact (C:I:H:A:H) and adjacent access (AV:A, AC:H, UI:N, PR:N). Descriptions show no user interaction or privileges required. EUVD-2024-25962 and Windows Secure Boot mappings reference this CVE among related Secure Boot fixes; no ...

CVE-2024-26255

CVE-2024-26255 is a Windows RRAS/Windows Remote Access Connection Manager information disclosure vulnerability. The affected component is Windows Remote Access Connection Manager; the underlying issue yields leakage of sensitive data (confidentiality impact). The CVSS 3.1 vector from the initial ...

CVE-2024-43585

Technical details about CVE-2024-43585 are not publicly available in the provided connected documents. No specifics on affected products, root cause, or fixes are present here. Monitor for updates from official advisories.

CVE-2024-28923

CVE-2024-28923 is described as a Secure Boot security feature bypass in the Windows Secure Boot subsystem. The provided documents indicate it allows bypassing Secure Boot and potentially executing code by a malicious party, with the CVSS-like data in the initial record showing local exploitation,...

CVE-2025-21341

Technical details for CVE-2025-21341 are not provided in the supplied documents. Public disclosures describe it as Windows Digital Media Elevation of Privilege, but no specifics on vulnerable component, versions, exploit or fix are included. Monitor for updates.

CVE-2024-26200

CVE-2024-26200 is a Windows Routing and Remote Access Service (RRAS) remote code execution vulnerability. Connected sources list RRAS as vulnerable and indicate the impact as executing random code, with CVE-2024-26200 appearing under RRAS in the Microsoft Windows vulnerabilities compilation. The ...

CVE-2024-26210

CVE-2024-26210 describes a remote code execution vulnerability in the Microsoft WDAC OLE DB provider for SQL Server. The issue is classified as CVSS 3.1 Base Score 8.8 (High) with network attack vector, no privileges required, and user interaction needed. The vulnerability affects the WDAC OLE DB...

CVE-2024-26228

CVE-2024-26228 affects Windows Cryptographic Services. The connected data indicate a security feature bypass vulnerability in Windows Cryptographic Services, with a local attack vector, low privileges required, no user interaction, and high impact to confidentiality, integrity, and availability. ...

CVE-2024-49128

CVE-2024-49128 describes a vulnerability in Windows Remote Desktop Services where sensitive data is stored in improperly locked memory. This can allow an unauthenticated, network-based attacker to execute code remotely. The CVSS 3.1 vector provided indicates network access as the attack vector, h...

CVE-2024-26168

CVE-2024-26168 concerns a Secure Boot security feature bypass. The entry explicitly labels it as Secure Boot bypass with a CVSSv3.1 base score of 6.8 (Medium) and a physical attack vector. The breakdown indicates HIGH impact to confidentiality, integrity, and availability, with no user interactio...

CVE-2024-26172

CVE-2024-26172 affects Windows DWM Core Library. Affects the Windows DWM Core Library component; root cause described as information disclosure. Documented impact is access to sensitive data with a CVSS v3.1 base score of 5.5 (LOCAL, LOW privileges required, user interaction none, availability im...

CVE-2024-26208

CVE-2024-26208 affects Microsoft Message Queuing (MSMQ) on Windows. The OpenVAS entries list MSMQ under Windows Message Queuing with CVE-2024-26208 and indicate a vulnerability that allows executing arbitrary code (remote code execution) over the network, without user interaction, and with high p...

CVE-2024-26211

CVE-2024-26211 is an elevation-of-privilege vulnerability affecting the Windows Remote Access Connection Manager. The CVE entry lists a HIGH base score (CVSSv3.1: 7.8; vector: LOCAL, LOW attack complexity; Privileges Required: LOW; User Interaction: NONE; Scope: UNCHANGED; Confidentiality/Integri...