CVE-2024-26211

CVE-2024-26211 is an elevation-of-privilege vulnerability affecting the Windows Remote Access Connection Manager. The CVE entry lists a HIGH base score (CVSSv3.1: 7.8; vector: LOCAL, LOW attack complexity; Privileges Required: LOW; User Interaction: NONE; Scope: UNCHANGED; Confidentiality/Integri...

CVE-2024-26239

COVID: CVE-2024-26239 is a Windows Telephony Server Elevation of Privilege vulnerability with LOCAL attack vector, requiring LOW privileges and no user interaction. The CVSS 3.1 base score is 7.8 (HIGH), with CONFIDENTIALITY, INTEGRITY, and AVAILABILITY impacts rated HIGH. The initial description...

CVE-2024-43585

Technical details about CVE-2024-43585 are not publicly available in the provided connected documents. No specifics on affected products, root cause, or fixes are present here. Monitor for updates from official advisories.

CVE-2025-21377

Technical details for CVE-2025-21377 are not publicly provided in the supplied documents. No affected products, root cause, impact, or remediation are specified here. Monitor for updates in the connected feeds.

CVE-2024-26195

CVE-2024-26195 is a remote code execution vulnerability in Microsoft Windows DHCP Server (DHCP Server Service). According to OpenVAS data, it is listed under Windows DHCP Server with an impact described as “Executing Random Code.” The NVD entry confirms DHCP Server Service Remote Code Execution V...

CVE-2024-26202

Technical details about CVE-2024-26202 are not provided in the supplied documents. Current sources mention a DHCP Server RCE but do not disclose affected products, versions, or exploit info. Monitor for updates.

CVE-2024-29994

CVE-2024-29994 is Microsoft Windows SCSI Class System File Elevation of Privilege. Connected sources (NCSC advisory) list CVE-2024-29994 with CVSS v3.1 base 7.8 (high), Local attack vector, Low privileges required, no user interaction, and impact to confidentiality, integrity, and availability. T...

CVE-2024-49132

CVE-2024-49132 affects Windows Remote Desktop Services and is a remote code execution vulnerability exploitable over the network (attack vector: network; no privileges required; user interaction not needed). The CVSSv3.1 base score is 8.1 (HIGH) with high impact on confidentiality, integrity, and...

CVE-2025-26645

CVE-2025-26645 affects the Windows Remote Desktop Client. The vulnerability is a relative path traversal in the Remote Desktop Client that allows an unauthenticated attacker to execute code over the network. According to the published metrics, the exploit requires network access with low attack c...

CVE-2026-62795

CVE-2026-62795 is a Windows LDAP (Lightweight Directory Access Protocol) use-after-free vulnerability that allows a remote attacker to execute code over the network. The issue is described as a remote code execution in Windows LDAP due to a use-after-free condition, enabling an unauthenticated, n...

CVE-2024-26228

CVE-2024-26228 affects Windows Cryptographic Services. The connected data indicate a security feature bypass vulnerability in Windows Cryptographic Services, with a local attack vector, low privileges required, no user interaction, and high impact to confidentiality, integrity, and availability. ...

CVE-2024-26255

CVE-2024-26255 is a Windows RRAS/Windows Remote Access Connection Manager information disclosure vulnerability. The affected component is Windows Remote Access Connection Manager; the underlying issue yields leakage of sensitive data (confidentiality impact). The CVSS 3.1 vector from the initial ...

CVE-2024-28896

CVE-2024-28896 is a Secure Boot security feature bypass with HIGH impact (C:I:H:A:H) and adjacent access (AV:A, AC:H, UI:N, PR:N). Descriptions show no user interaction or privileges required. EUVD-2024-25962 and Windows Secure Boot mappings reference this CVE among related Secure Boot fixes; no ...

CVE-2024-26208

CVE-2024-26208 affects Microsoft Message Queuing (MSMQ) on Windows. The OpenVAS entries list MSMQ under Windows Message Queuing with CVE-2024-26208 and indicate a vulnerability that allows executing arbitrary code (remote code execution) over the network, without user interaction, and with high p...

CVE-2024-26210

CVE-2024-26210 describes a remote code execution vulnerability in the Microsoft WDAC OLE DB provider for SQL Server. The issue is classified as CVSS 3.1 Base Score 8.8 (High) with network attack vector, no privileges required, and user interaction needed. The vulnerability affects the WDAC OLE DB...

CVE-2024-26216

CVE-2024-26216 is a Windows vulnerability affecting the Windows File Server Resource Management Service, categorized as a privilege-escalation issue with a CVSS-like score around 7.3 (high) in public guidance. The connected documents confirm the vulnerability is tied to Windows File Server Resour...

CVE-2024-26224

CVE-2024-26224 affects Windows DNS Server and is described as a remote code execution vulnerability. Connected sources (CNVD/NCSC tables) list the impact as allowing execution of arbitrary code or executing random code via the DNS service, with CVSS-like references around 7.2 (HIGH) impact, netwo...

CVE-2024-43560

CVE-2024-43560 is a Windows Storage Port Driver elevation-of-privilege vulnerability. A local attacker with low privileges could exploit it to obtain elevated rights (CVE-2024-43560 details: CVSS v3.1 7.8, high impact; affected component: Windows Storage Port Driver). The NCSC advisory confirms M...

CVE-2026-49798

CVE-2026-49798 is a Windows Kernel use-after-free vulnerability that enables local privilege escalation. The root cause is use-after-free in kernel code, allowing an unauthenticated attacker with local access to elevate privileges. Affected component details are limited in the provided documents;...

CVE-2024-26168

CVE-2024-26168 concerns a Secure Boot security feature bypass. The entry explicitly labels it as Secure Boot bypass with a CVSSv3.1 base score of 6.8 (Medium) and a physical attack vector. The breakdown indicates HIGH impact to confidentiality, integrity, and availability, with no user interactio...

CVE-2024-26232

The CVE-2024-26232 entry describes a Remote Code Execution vulnerability in Microsoft Message Queuing (MSMQ). The available details indicate a LOCAL attack with LOW privileges required and USER INTERACTION required, with HIGH impact on confidentiality, integrity, and availability (CVSS 7.3). The ...

CVE-2024-28897

CVE-2024-28897 is referenced in connected data as a Windows Secure Boot vulnerability with the label “Circumvention of security measure.” The primary public document (NVD) lists it as a Secure Boot security feature bypass, with a CVSS v3.1 score of 6.8 (Medium) and details like attack vector adja...

CVE-2025-21341

Technical details for CVE-2025-21341 are not provided in the supplied documents. Public disclosures describe it as Windows Digital Media Elevation of Privilege, but no specifics on vulnerable component, versions, exploit or fix are included. Monitor for updates.

CVE-2024-26252

CVE-2024-26252 refers to a Windows kernel vulnerability in the rndismp6.sys driver that enables remote code execution. The issue is described as affecting the Windows component rndismp6.sys with a CVSSv3.1 base score of 6.8 (Medium), and usability concerns indicate a physical attack vector, low a...

CVE-2026-62890

CVE-2026-62890 is a heap-based buffer overflow in Windows GDI+ that allows an authorized attacker to execute code locally. CVSS v3.1 base score 7.8 (HIGH) with LOCAL attack vector, requiring LOW privileges and no user interaction; impact to confidentiality, integrity, and availability is HIGH. No...

CVE-2024-26242

CVE-2024-26242 is a Windows Telephony Server elevation-of-privilege vulnerability. The connected documents indicate a local-privilege escalation with CVSS v3.1 base score 7.0 (AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H). Root cause and exact exploit details are not provided in the sources. Microsoft has...

CVE-2024-26253

CVE-2024-26253 corresponds to a Windows rndismp6.sys remote code execution vulnerability. The entry notes an affected Windows component (rndismp6.sys) and an exploit path that could allow remote code execution with a high impact on confidentiality, integrity, and availability, while the attack ve...

CVE-2024-28902

CVE-2024-28902 is associated with Windows Remote Access Connection Manager and is listed in an ENISA/NCSC-style advisory as a local, low-complexity information-disclosure vulnerability with potential impact to data confidentiality (CVE-2024-28902, Windows Remote Access Connection Manager). The co...

CVE-2023-32016

Technical details about CVE-2023-32016 are not publicly available in the provided connected documents. Monitor for updates from Microsoft and security feeds for affected products, vulnerable components, and fixes.

CVE-2024-26172

CVE-2024-26172 affects Windows DWM Core Library. Affects the Windows DWM Core Library component; root cause described as information disclosure. Documented impact is access to sensitive data with a CVSS v3.1 base score of 5.5 (LOCAL, LOW privileges required, user interaction none, availability im...

CVE-2024-30037

The CVE-2024-30037 entry affects Windows Common Log File System Driver and is categorized as a local Elevation of Privilege vulnerability (requires local access; may grant elevated privileges). The connected documents corroborate the CVE mapping and indicate it is part of a set of Windows fixes; ...

CVE-2024-30038

CVE-2024-30038 is a Win32k local privilege escalation vulnerability. The issue exists in Win32k’s kernel-user boundary; exploitation would require local access with low privileges and no user interaction, potentially granting HIGH confidentiality/integrity/availability impact. Microsoft has issue...

CVE-2025-21417

CVE-2025-21417 is a Windows Telephony Service remote code execution vulnerability. CIRCL confirms the CVE with a high impact (CVSS 8.80, Execute code) within Windows Telephony Service; CNVD describes a remote code execution vulnerability in Windows Telephony Server. Microsoft has public security ...

CVE-2026-34348

CVE-2026-34348 affects the Windows Event Logging Service. The issue is a protection mechanism failure that can allow an authorized attacker to disclose information over a network. According to the available records, the exploit surface is network-based with low privileges required and no user int...

CVE-2026-40404

CVE-2026-40404 concerns a Windows Universal Disk Format (UDFS) File System Driver Elevation of Privilege. The vulnerability affects the UDFS component, with a local attack vector, requiring low privileges and no user interaction, and yields high impact to confidentiality, integrity, and availabil...

CVE-2026-62820

CVE-2026-62820 concerns Windows DNS Server. The issue is a race condition caused by concurrent execution using a shared resource with improper synchronization, leading to remote code execution over a network. Affected product is Windows DNS Server; the vulnerability is triggered via network acces...

CVE-2019-0697

The connected advisories describe a remote code execution vulnerability in the Microsoft Windows DHCP Client caused by improper processing of DHCP responses (memory corruption) in the DhcpExtractFullOptions path. A remote attacker could send crafted DHCP replies to execute arbitrary code with adm...

CVE-2024-26230

CVE-2024-26230 is a Windows Telephony Server elevation-of-privilege vulnerability. Reported as a local privilege escalation with CVSS 3.1 base score 7.8 (HIGH): vectors/local, attack complexity LOW, privileges required LOW, no user interaction. Impacts on confidentiality, integrity, and availabil...

CVE-2024-28922

CVE-2024-28922 is a Secure Boot security feature bypass vulnerability. CVSS‑3.1 metrics show a physical attack vector, low attack complexity, low privileges required, user interaction needed, with no confidentiality impact, but high integrity impact (base score 4.1, Medium). Connected sources ref...

CVE-2024-29062

CVE-2024-29062 affects Windows Secure Boot and is described as a Security Feature Bypass. The vulnerability targets the Secure Boot path with an adjacent-attack surface, requiring user interaction and high complexity to exploit, and can impact confidentiality, integrity, and availability. Public ...

CVE-2025-21327

CVE-2025-21327 is a Windows Digital Media elevation-of-privilege vulnerability. The CVSS3.1 base vector indicates physical access required, low attack complexity and low privileges, with high impact on confidentiality, integrity, and availability (base score 6.6, medium). The connected data confi...

CVE-2026-21519

CVE-2026-21519 is a local elevation-of-privilege flaw in Windows Desktop Window Manager caused by type confusion. An authenticated, low-privilege attacker can overwhelm DWM locally to gain SYSTEM rights, with no user interaction required. It has been identified as exploited in the wild by multipl...

CVE-2026-61368

CVE-2026-61368 is a Windows Hyper-V heap-based buffer overflow that enables a locally authenticated attacker (low privileges, user interaction required) to disclose information. Affected component: Hyper-V; root cause is a heap overflow leading to information disclosure. CVSS 3.1 base score 5.0 (...

CVE-2024-21313

CVE-2024-21313 is described as a Windows TCP/IP Information Disclosure Vulnerability. The entry provides a CVSSv3.1 base score of 5.3 (Medium) with network attack vector, high attack complexity, no privileges required, user interaction required, and a privacy-focused impact (Confidentiality: High...

CVE-2024-28901

Microsoft Windows: CVE-2024-28901 affects the Windows Remote Access Connection Manager. The vulnerability is an information disclosure in RasMan, exploitable locally with low complexity and requiring low privileges; it grants high confidentiality impact and does not affect integrity or availabili...

CVE-2024-26171

CVE-2024-26171 is reported as a Windows Secure Boot vulnerability with the impact labeled as circumvention of a security measure (CVSS-like score 6.70). The connected documents corroborate its placement under Windows Secure Boot in the security advisories and vulnerability feeds, but they do not ...

CVE-2024-28900

CVE-2024-28900 is a Windows vulnerability affecting the Windows Remote Access Connection Manager, with information disclosure (confidentiality impact). It is exploitable locally (attack vector: LOCAL) and requires LOW privileges with no user interaction. The CVSS vector in the Initial Description...

CVE-2024-29061

Technical details about CVE-2024-29061 are not publicly provided in the supplied documents. The records mention a Secure Boot security feature bypass but do not specify affected products, versions, root cause, exploitability, or mitigations. Monitor for updates.

CVE-2026-59122

CVE-2026-59122 describes a race condition in Windows Telephony Service caused by concurrent access to a shared resource with improper synchronization. This allows an authorized attacker with local access and low privileges to elevate privileges (CVSS v3.1: AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H; bas...

CVE-2026-62790

CVE-2026-62790 is a Windows SMB Server heap-based buffer overflow that allows an authorized network attacker to execute code remotely. The vulnerability is associated with Windows SMBv3 Server, enabling remote code execution over the network with low privileges and no user interaction (CVSSv3.1: ...