2841 matches found
CVE-2026-58594
CVE-2026-58594 is a Windows Remote Desktop Client RCE vulnerability caused by an integer overflow/wraparound in the RDP client. Public sources (NVD/NCSC/CIRCL) attribute network-based exploitation with potential arbitrary code execution on vulnerable Windows systems. Connected entries confirm the...
CVE-2023-32019
CVE-2023-32019 is a Windows kernel registry vulnerability arising from hive memory corruption via out-of-bounds registry cell indexes. The provided research shows that with a crafted hive (notably HKCU and app hives) a local attacker can trigger UAF- and memory-corruption primitives that enable r...
CVE-2024-21310
Technical details about CVE-2024-21310 are not provided in the connected documents. The sources confirm existence and vulnerability class but do not disclose affected product versions, root cause, exploit, or remediation. Monitor for updates.
CVE-2026-57089
Summary : CVE-2026-57089 affects the Windows SMB Server Network Transport Driver (srvnet.sys). The issue is a use-after-free memory corruption bug that can be triggered by an unauthenticated attacker over the network to achieve remote code execution. The vulnerability is listed with high to criti...
CVE-2026-66802
CVE-2026-66802 describes a race condition in Microsoft Azure Attestation service and Device Health Attestation Service caused by improper synchronization of a shared resource. This concurrency issue allows an unauthenticated, network-based attacker to execute code on affected systems, with high i...
CVE-2024-20693
CVE-2024-20693 is a Windows Kernel local privilege escalation vulnerability. Documents corroborate that the Windows Kernel component is affected and that the vulnerability enables obtaining elevated/privileged execution from a local attacker, with high confidentiality, integrity, and availability...
CVE-2026-44803
CVE-2026-44803 describes an integer overflow/wraparound in Windows Win32K - GRFX that can allow a local attacker to execute code. The vulnerability is identified across multiple sources (NVD, CVE listing, and MSRC update page) and is classified with a high impact: local code execution, requiring ...
CVE-2026-62781
CVE-2026-62781 is a heap-based buffer overflow in the RPC Runtime Library that enables remote code execution over the network. The vulnerability allows an unauthenticated attacker to run code on affected systems via network interaction. Current documents confirm the issue but do not provide produ...
CVE-2023-32015
CVE-2023-32015 is a Windows Pragmatic General Multicast (PGM) Remote Code Execution vulnerability. The issue affects Windows where the Message Queuing service is enabled; a remote, unauthenticated attacker can exploit it by sending a crafted file over the network to achieve code execution. The CV...
CVE-2024-49115
CVE-2024-49115 is a vulnerability in Windows Remote Desktop Services that enables remote code execution. The connected documents indicate an impact of code execution with high severity (CVSS-like values around 8+ in vendor/intelligence summaries) and publicly referenced exploit potential, with re...
CVE-2026-47288
CVE-2026-47288 affects Windows Kerberos Key Distribution Center (KDC). The vulnerability is an integer overflow/wraparound in the Kerberos code, enabling an authorized attacker on an adjacent network to execute code. The CVE has a CVSSv3.1 score of 7.1 ( HIGH ) with attack vector Adjacent, high i...
CVE-2024-38153
CVE-2024-38153 is a Windows Kernel elevation-of-privilege vulnerability. The CVSSv3.1 base score is 7.8 (High) with Local attack vector, Low attack complexity, Privileges Required: Low, User Interaction: None, and impact on Confidentiality, Integrity, and Availability: High. The vulnerability aff...
CVE-2024-26212
Technical details for CVE-2024-26212 are not publicly available in the provided documents. Monitor for updates from NVD/OSV/OpenVAS; no specifics on affected products, root cause, or fix are available here.
CVE-2024-21316
CVE-2024-21316 is a Windows Server vulnerability described as a Key Distribution Service Security Feature Bypass. Documents confirm the issue affects Windows Server/KDS handling and carry a CVSS v3.1 base score of 6.1 (Network, Low attack complexity, High privileges required, User interaction req...
CVE-2024-28903
CVE-2024-28903 is listed under Microsoft Windows Secure Boot vulnerabilities with a circumvention of security measure impact. The connected OpenVAS/NCSC entries corroborate that Secure Boot-related fixes were released, but do not provide product/version specifics or a patch identifier. The root c...
CVE-2024-38076
CVE-2024-38076 is a Windows Remote Desktop Licensing Service remote code execution vulnerability. An unauthenticated attacker could trigger arbitrary code execution over the network, potentially gaining full control of the affected system. The CVE is rated CVSS v3.1: 9.8 (CRITICAL) with network a...
CVE-2024-26158
CVE-2024-26158 affects Microsoft Windows Install Service and is an Elevation of Privilege vulnerability. It is exploitable locally (attack vector: Local) with low privileges required and no user interaction, potentially granting complete control (confidentiality/integrity/availability impact: Hig...
CVE-2026-23670
CVE-2026-23670 affects Windows Virtualization-Based Security (VBS) security feature. The issue is a local, high-privilege bypass of VBS protections, with no user interaction required (UI: NONE). Exploitation is possible with local access and may impact confidentiality and integrity (both HIGH), w...
CVE-2024-49082
CVE-2024-49082 is a Windows File Explorer information disclosure vulnerability. The connected data lists impact as access to sensitive data with CVSS 3.1 v3.1 vector: AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N, score 6.8 (Medium). Concrete details about root cause or affected Windows versions are not fu...
CVE-2024-21311
Technical details for CVE-2024-21311 are not publicly available in the provided documents. No affected products, root cause, or remediation are specified here. Monitor for updates.
CVE-2024-26179
CVE-2024-26179 affects Windows Routing and Remote Access Service (RRAS) with a remote code execution vulnerability (CVSS v3.1: 8.8, HIGH). The entry specifies network attack vector with no privileges required but user interaction required, leading to execution of arbitrary code on affected system...
CVE-2024-30080
Technical details about CVE-2024-30080 are not provided in the supplied documents. No specifics on affected products, vulnerable components, root cause, or fixes are included; monitor for updates from Microsoft/security advisories.
CVE-2025-21302
CVE-2025-21302 is a Windows Telephony Service Remote Code Execution vulnerability. The CVSS 3.1 base score is 8.8 (HIGH) with network access, low attack complexity, no privileges required, and user interaction required; impacts include confidentiality, integrity, and availability. The vulnerabili...
CVE-2026-50518
CVE-2026-50518 is a heap-based buffer overflow in Windows DHCP Server that allows an unauthenticated attacker to execute code remotely over a network. Public sources (NVD, EUVD, CIRCL, MSRC update guidance) confirm the flaw and its impact as remote code execution; Talos notes exploitation in the ...
CVE-2024-28898
CVE-2024-28898 is listed in the connected documents as a Windows Secure Boot vulnerability described as a Secure Boot security feature bypass with a CVSS-like impact of bypassing security measures (Windows Secure Boot). The advisory notes for this CVE show it with a moderate score (around 6.3–6.3...
CVE-2025-21351
CVE-2025-21351 is a Windows AD DS API Denial of Service vulnerability. The initial record notes a network‑vector DoS impacting AD DS APIs with a CVSS v3.1 base score of 7.5 (HIGH) and no user interaction required. Connected documents indicate Microsoft has released updates addressing vulnerabilit...
CVE-2024-29064
Technical details (affected product/versions/root cause/impact/fix) for CVE-2024-29064 are not publicly provided in the supplied documents. Monitor for updates as more information becomes available.
CVE-2025-21174
CVE-2025-21174 affects the Windows Standards-Based Storage Management Service. The vulnerability is a denial-of-service caused by uncontrolled resource consumption that an attacker can trigger over a network, with CVSS 3.1 base metrics: AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H (base score 7.5, HIGH). ...
CVE-2024-26218
CVE-2024-26218 is a Windows Kernel Elevation of Privilege vulnerability that Microsoft has addressed within the Windows KB updates KB5036893 and KB5036894. OpenVAS references place this CVE under Windows Kernel as enabling “elevated rights” (local, kernel-mode) with high CVSS 7.8 characteristics....
CVE-2024-38199
Technical details about CVE-2024-38199 are not publicly provided in the connected documents. Monitor for updates from Microsoft and NVD for affected products, fixes, and exploit information.
CVE-2026-49160
The CVE-2026-49160 entry concerns HTTP.sys with an HTTP/2 resource consumption flaw leading to unauthenticated denial of service over the network. Exploitation details, affected versions or specific component paths aren’t provided in the connected documents. The NVD/MSRC entries confirm an uncont...
CVE-2024-30006
CVE-2024-30006 affects the Microsoft WDAC OLE DB provider for SQL Server and enables Remote Code Execution. The CVSS v3.1 base score is 8.8 (HIGH) with Network attack vector, Low attack complexity, and user interaction required. Some sources list it as a high-severity Windows vulnerability (score...
CVE-2025-24035
CVE-2025-24035 affects Windows Remote Desktop Services. The connected data corroborates a remote code execution risk over a network, arising from memory handling (sensitive data stored in improperly locked memory). The impact is described as executing arbitrary code, with the network as the attac...
CVE-2024-26209
CVE-2024-26209 affects Microsoft Windows Local Security Authority Subsystem Service (LSASS). The entry describes an information disclosure vulnerability in LSASS, with a CVSS 3.1 base score of 5.5 (Medium), attack vector Local, privileges required Low, user interaction None, and a confidentiality...
CVE-2024-20698
CVE-2024-20698 is a Windows Kernel Elevation of Privilege vulnerability. The connected exploit analysis reveals that the bug resides in ntoskrnl.exe within WbAddLookupEntryEx, which manipulates an array of process pointers. Before the patch, it reallocates and inserts a new pointer, but the patch...
CVE-2025-24044
CVE-2025-24044 is a local privilege-escalation in the Windows Win32 Kernel Subsystem caused by a use-after-free condition. Connected docs classify it as an EoP risk with local exploitability and note fixes in Microsoft Windows updates (e.g., March 2025 cycle). No product/version specifics beyond ...
CVE-2026-26128
CVE-2026-26128 concerns an elevation-of-privilege flaw in Windows SMB Server caused by improper authentication. The vulnerability affects Windows SMB Server and is described in connected sources as allowing an authorized local attacker to obtain higher privileges. Evidence from the connected docu...
CVE-2024-29066
CVE-2024-29066 is an Windows DFS Remote Code Execution vulnerability. Affected: Windows Distributed File System (DFS). CVSS 3.1 base 7.2 (NETWORK, HIGH impact across Confidentiality, Integrity, Availability). Requirements: HIGH privileges, no user interaction; scope UNCHANGED. Concrete root-cause...
CVE-2024-20692
Technical details such as affected product versions, root cause, exploiting conditions, or remediation are not publicly available in the provided documents. Monitor for updates from authoritative sources to obtain concrete information about CVE-2024-20692.
CVE-2024-38144
CVE-2024-38144 is a local elevation-of-privilege vulnerability in the Windows Kernel Streaming WOW Thunk Service Driver. The connected sources state a local attacker could obtain SYSTEM privileges and that exploit code appeared in the TyphoonPWN 2024 event, with a write‑up from SSD Secure Disclos...
CVE-2026-50343
CVE-2026-50343, a Microsoft Install Service Elevation of Privilege vulnerability, arises from improper privilege management. An authorized local attacker could elevate privileges on affected Windows systems. The vulnerability is listed among several critical Windows privilege-escalation issues di...
CVE-2026-65789
CVE-2026-65789 corresponds to a Windows DNS Server use-after-free vulnerability that enables remote code execution over a network. Based on the connected documents, the vulnerability is described as a use-after-free in Windows DNS which can allow an unauthorized attacker to execute code remotely....
CVE-2024-49072
Technical details about CVE-2024-49072 are not publicly available in the provided documents. Monitor for updates from official advisories; no covered exploit specifics, affected products, versions, or mitigations are provided here.
CVE-2024-28923
CVE-2024-28923 is described as a Secure Boot security feature bypass in the Windows Secure Boot subsystem. The provided documents indicate it allows bypassing Secure Boot and potentially executing code by a malicious party, with the CVSS-like data in the initial record showing local exploitation,...
CVE-2026-42970
CVE-2026-42970 involves Windows Push Notifications and is caused by the use of an uninitialized resource , enabling an authorized attacker to locally disclose information. The CVSS 3.1 vector (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) yields a base score of 5.5 (Medium) with high confidentiality impac...
CVE-2026-59131
Summary: CVE-2026-59131 pertains to AMD Zen and is described as an information-disclosure vulnerability that can be exploited by an authorized, local attacker to disclose information. The available documents indicate a CVSS v3.1 base score of 5.6 (Medium) with LOCAL attack vector, HIGH confidenti...
CVE-2024-26200
CVE-2024-26200 is a Windows Routing and Remote Access Service (RRAS) remote code execution vulnerability. Connected sources list RRAS as vulnerable and indicate the impact as executing random code, with CVE-2024-26200 appearing under RRAS in the Microsoft Windows vulnerabilities compilation. The ...
CVE-2024-28919
CVE-2024-28919 is listed in the Windows Secure Boot area as a "Secure Boot Security Feature Bypass" vulnerability. The connected documents identify it as a local-bypass vulnerability affecting Secure Boot, with a CVSSv3.1 base score of 6.7 (Impact: High on confidentiality, integrity, and availabi...
CVE-2024-37968
CVE-2024-37968 is a Windows DNS Spoofing vulnerability rated High (CVSS 7.5) with network attack vector and impact on confidentiality. The connected documents confirm this CVE affects Windows DNS and that Microsoft released fixes in the August 2024 updates (examples: KB5041578, KB5041160, KB50418...