CVE-2024-26223

CVE-2024-26223 affects Windows DNS Server with a remote code execution vulnerability. According to the provided data, it is network‑accessible (AV:N) with high attack complexity (AC:H) and requires high privileges (PR:H); no user interaction is needed (UI:N). The impact is rated high for confiden...

CVE-2024-38058

CVE-2024-38058 is tied to BitLocker: Microsoft security updates (KB5040430, KB5040431, KB5040437, etc.) add PCRs 4–7 and 11 to the default Secure Boot validation profile. This is described as a BitLocker-related change with CVE-2024-38058 referenced for the PCR extension in multiple OS updates. T...

CVE-2025-24990

CVE-2025-24990 is a local privilege escalation in the Microsoft‑supplied Agere Modem Driver (ltmdm64.sys). The issue is described as an untrusted pointer dereference within the driver, enabling a local attacker to escalate privileges to administrator. Microsoft addressed it by removing the driver...

CVE-2025-47160

The CVE-2025-47160 entry applies to Windows Shell and describes a Protection mechanism failure that allows a remote attacker to bypass a security feature over the network. The NVD entry lists a CVSS v3.1 base score of 5.4 (AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L), indicating a network-exposed issue w...

CVE-2025-21382

CVE-2025-21382 affects the Microsoft Windows Graphics Component. It is a local elevation-of-privilege vulnerability in the graphics driver component, with a CVSSv3.1 base score of 7.8 (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). Connected sources indicate that public exploits exist. Microsoft has issue...

CVE-2023-32011

Technical details about CVE-2023-32011 are not publicly provided in the supplied documents. The available sources confirm the vulnerability name and related MS updates but do not disclose affected products, versions, root cause, or fixes.

CVE-2024-43562

CVE-2024-43562 is a Windows NAT Denial-of-Service vulnerability with CVSSv3.1 base score 7.5 (Network vector, no user interaction, no privileges required). Exploitation is possible remotely over the network and can lead to a high impact: denial of service. Connected sources list Windows NAT as af...

CVE-2025-21419

CVE-2025-21419 is a Windows Setup cleanup vulnerability that enables local elevation of privilege. The CVSS 3.1 vector (AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H) indicates an attacker with low privileges and local access can achieve high integrity and availability impact, without user interaction. The...

CVE-2025-24997

CVE-2025-24997 is a Windows Kernel Memory vulnerability described as a null pointer dereference that enables a local, authorized attacker to cause a Denial-of-Service. The CVE is cataloged with a low to medium severity profile (MSFT-cited CVSSv3.1: AV L, AC L, PR High, UI None, S U, C N, I N, A H...

CVE-2025-29828

CVE-2025-29828 (Windows Schannel Remote Code Execution) affects Windows Cryptographic Services. Description confirms missing release of memory after effective lifetime, enabling a remote attacker to execute code over a network. CVSS 3.1/3.1.0 base 8.1 (High) with network vector, no user interacti...

CVE-2023-29364

Technical details for CVE-2023-29364 are not provided in the supplied documents. Monitor for updates from Microsoft and CVE records.

CVE-2024-30050

CVE-2024-30050 is a Windows Mark of the Web security feature bypass vulnerability. Public sources label it as a security bypass issue in MOTW, with a CVSS v3.1 base score of 5.4 (Network, Low complexity, User interaction required; I and A impacts: I = Low, A = Low). The condition allows bypass of...

CVE-2024-30084

Technical details (affected product/versions/root cause/impact) for CVE-2024-30084 are not publicly available in the provided documents. Monitor for updates.

CVE-2024-38117

CVE-2024-38117 affects the Windows NTFS component and is labeled as an elevation-of-privilege vulnerability with the impact “Obtaining Increased Rights” and a CVSS v3.1 base score of 7.8 (High). The connected documents provide the impact and the component but do not disclose the exact root cause ...

CVE-2024-38132

Technical details about CVE-2024-38132 are not publicly provided in the supplied connected documents. The NAT DoS entry is listed, but no affected product/version, root cause, or remediation is described. Monitor for updates.

CVE-2024-43582

CVE-2024-43582 is a Windows Remote Desktop Protocol Server remote code execution vulnerability. Affected: Windows Remote Desktop (RDP) Server. Severity: high (CVSS ~8.1). Mitigation: apply Microsoft security update KB5044284 (OS Build 26100.2033) or later; patching is advised per Microsoft adviso...

CVE-2024-49117

CVE-2024-49117 is a Windows Hyper-V remote/code execution vulnerability with a local attack vector and high impact (confidentiality, integrity, availability all High). The available connected documents indicate the issue is addressed by Microsoft updates, notably KB5048685 (OS builds 22621.4602/2...

CVE-2025-21274

CVE-2025-21274 corresponds to a Windows Event Tracing Denial of Service vulnerability. The NVD entry rates impact as Denial of Service with a CVSSv3.1 base score of 5.5 (Local, Low UI, privileges required: Low, Availability impact: High). Connected sources indicate this vulnerability affects Wind...

CVE-2025-29810

CVE-2025-29810 corresponds to an improper access control in Active Directory Domain Services that can allow an authenticated attacker to elevate privileges over the network. The NCSC advisory groups CVE-2025-29810 under Windows Active Directory Domain Services with an impact described as ‘Obtain ...

CVE-2026-40403

CVE-2026-40403 describes a heap-based buffer overflow in Windows Win32K GRFX that could allow a locally authenticated attacker to execute code. Affected component is Windows graphics subsystem (Win32K GRFX); cause is a heap-based overflow. Impact per available data is local code execution with hi...

CVE-2026-42836

CVE-2026-42836: A race condition due to improper synchronization in the Windows Function Discovery Service (fdwsd.dll) enables a locally authenticated attacker to escalate privileges. The issue is described as a concurrency problem with a shared resource. Affected component: Function Discovery Se...

CVE-2023-32017

CVE-2023-32017 concerns the Microsoft PostScript Printer Driver and allows Remote Code Execution tied to a driver component. The IOCs/impact in the provided materials indicate a LOCAL attack vector with no user interaction, and confidentiality, integrity, and availability impacts rated HIGH. No e...

CVE-2024-30020

CVE-2024-30020 corresponds to a Remote Code Execution vulnerability in Windows Cryptographic Services. Affected: Windows Cryptographic Services component; vulnerability type is RCE. From the CVE entry, the CVSS v3.1 base score is 8.1 (High) with Network attack vector, high attack complexity, no p...

CVE-2024-30022

CVE-2024-30022 pertains to the Windows RRAS component and is listed in the ENISA/NCSC compilation with a CVSSv3.1 base score of 7.5 (high). The adverse impact is remote code execution with network access, requiring user interaction and no privileges. Connected sources explicitly associate CVE-202...

CVE-2024-30081

Technical details for CVE-2024-30081 are not provided in the supplied documents. The connected Microsoft KB updates reference unrelated issues (RADIUS, BitLocker, LNK policy) and do not disclose affected products, root cause, impact, or fixes for this CVE. Monitor for updates.

CVE-2024-30089

Technical details about CVE-2024-30089 are not publicly provided in the supplied documents; no explicit affected products, root cause, or remediation are present. Monitor for updates.

CVE-2024-43455

CVE-2024-43455 is a Windows Remote Desktop Licensing Service spoofing vulnerability affecting the Windows Remote Desktop Licensing Service. The connected sources indicate the vulnerability allows pretending to be another user, with high impact in authentication-related scenarios. The Windows ecos...

CVE-2024-43623

CVE-2024-43623 is documented across connected sources as a Windows NT OS Kernel elevation-of-privilege vulnerability. The ENISA/NCSC summary and related Microsoft patch-coverage references confirm it affects the Windows NT OS Kernel and was addressed via the November 2024 update cycle (e.g., KB50...

CVE-2024-49080

CVE-2024-49080 affects Windows IP Routing Management Snapin and is a remote code execution vulnerability. According to the Initial document, it has CVSS 3.1 base metrics: Network attack vector, low attack complexity, low privileges required, no user interaction, with impacts on confidentiality, i...

CVE-2024-49102

CVE-2024-49102 — Windows RRAS Remote Code Execution is a network‑based vulnerability in the Routing and Remote Access Service (RRAS) of Windows. The CVSS score cited in the initial entry is 8.8/10 (High) with AV:N, AC:L, PR:N, UI:R, S:U, C/H/I/A: High, indicating unauthenticated network access re...

CVE-2025-26652

CVE-2025-26652 describes a Denial-of-Service vulnerability in Windows Standards-Based Storage Management Service caused by uncontrolled resource consumption, allowing an unauthenticated, network-originating attacker to deny service. Affected are Windows systems where this storage service is prese...

CVE-2025-27736

Technical details about CVE-2025-27736 (affected product/versions/root cause/fix) are not disclosed in the provided connected documents. Monitor Microsoft advisories and CVE records for updates and remediation information.

CVE-2026-59122

CVE-2026-59122 describes a race condition in Windows Telephony Service caused by concurrent access to a shared resource with improper synchronization. This allows an authorized attacker with local access and low privileges to elevate privileges (CVSS v3.1: AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H; bas...

CVE-2026-62790

CVE-2026-62790 is a Windows SMB Server heap-based buffer overflow that allows an authorized network attacker to execute code remotely. The vulnerability is associated with Windows SMBv3 Server, enabling remote code execution over the network with low privileges and no user interaction (CVSSv3.1: ...

CVE-2024-30018

CVE-2024-30018 is a Windows Kernel Elevation of Privilege vulnerability. The CVSS indicates local access with low privileges required and no user interaction, yielding a high impact on confidentiality, integrity, and availability (base score 7.8). Microsoft has released updates addressing Windows...

CVE-2024-38152

CVE-2024-38152 is listed under Windows WDAC OLE DB provider for SQL with a CVSS and impact of 7.80 (Execute Random Code). The connected documents confirm the affected component and the vulnerability’s label, but do not provide concrete details on root cause, affected versions, exploit scenarios, ...

CVE-2025-29809

CVE-2025-29809 is a Windows Kerberos security feature bypass vulnerability. The issue involves insecure storage of sensitive information in Kerberos, enabling an attacker with local access and low privileges, and no user interaction, to bypass a security feature. Affected product/area: Windows Ke...

CVE-2024-30090

CVE-2024-30090 is an elevation-of-privilege vulnerability affecting the Windows Kernel Streaming framework, specifically the msrks.ks.sys component used for processing streaming data (e.g., microphone/webcam input). The public materials indicate exploitation potential via a memory-bounds/buffer h...

CVE-2024-43447

CVE-2024-43447 is identified in Windows SMBv3 Server/Client as a remote code execution vulnerability. Connected sources corroborate a Windows SMBv3-related issue with impact listed as executing arbitrary code, affecting SMBv3 Server/Client components. The NCSC advisory consolidates Windows-wide f...

CVE-2026-25177

CVE-2026-25177 is an elevation-of-privilege vulnerability in Active Directory Domain Services. The CVE affects AD DS and permits an authorized attacker to elevate privileges over the network (CVSS v3.1: 8.8, Network, Privileges Required: Low, User Interaction: None, Confidentiality/Integrity/Avai...

CVE-2026-42982

CVE-2026-42982 affects Windows Secure Kernel Mode. The issue is improper validation of input consistency within that subsystem, enabling an authorized user to escalate privileges locally. The vulnerability is described as a local, user‑level privilege escalation with high impact (confidentiality,...

CVE-2026-61368

CVE-2026-61368 is a Windows Hyper-V heap-based buffer overflow that enables a locally authenticated attacker (low privileges, user interaction required) to disclose information. Affected component: Hyper-V; root cause is a heap overflow leading to information disclosure. CVSS 3.1 base score 5.0 (...

CVE-2024-30011

CVE-2024-30011 is a Windows Hyper-V Denial of Service vulnerability. The NVD entry lists CVSS v3.1 base score 6.5 (MEDIUM), with Network attackVector, Low attackComplexity, Low privilegesRequired, No user interaction, and Availability impact HIGH. CIRCL reporting also references CVE-2024-30011. T...

CVE-2024-30049

CVE-2024-30049 is a Windows Win32 Kernel Subsystem elevation-of-privilege vulnerability affecting the Win32K component. Public details in connected sources indicate the issue enables elevated privileges with local access (CVSSv3.1: AV=L/AC=L/PR=L/UI=N/S=U/C=H/I=H/A=H; base score 7.8), and multipl...

CVE-2024-49122

CVE-2024-49122 is a Microsoft Message Queuing (MSMQ) Remote Code Execution vulnerability. The entry notes a network-exposed base score of 8.1 (High) with no user interaction and total impact, and the MSMQ component is affected. Connected documents corroborate an RCE classification for MSMQ with u...

CVE-2025-21208

CVE-2025-21208 is a Windows RRAS Remote Code Execution vulnerability. The NVD entry confirms the issue as a network‑vector RCE with high impact (CVSSv3.1: 8.8, C/H/I/A = high; AV:N, AC:L, PR:N, UI:R, S:U). The vulnerability is tied to Windows RRAS and has a documented CVE entry; exploitation/avai...

CVE-2025-24045

CVE-2025-24045 is listed in EU/NCSC sources as a Windows Remote Desktop Services remote code execution vulnerability with high impact (CVSS around 8.1–8.8; labeled Execute random code). Connected documents corroborate that this CVE is tied to Windows Remote Desktop Services/Client components and ...

CVE-2021-40462

Technical details (affected product, component, version, root cause, or fixes) for CVE-2021-40462 are not provided in the connected documents; monitor for updates.

CVE-2023-29372

CVE-2023-29372 affects the Microsoft WDAC OLE DB provider for SQL Server and is described as a Remote Code Execution vulnerability. The available information lists a CVSS v3.1 base score of 8.8 (HIGH) with NETWORK attack vector, LOW attack complexity, NO privileges required, UI required, and impa...

CVE-2024-30087

Technical details are not provided in the connected documents. CVE-2024-30087 is a Win32k Elevation of Privilege vulnerability with CVSS 3.1 base score 7.8, vector LOCAL, exploit complexity LOW, privileges required LOW, user interaction NONE.