2438 matches found
CVE-2024-38154
CVE-2024-38154 concerns Windows Routing and Remote Access Service (RRAS). The initial document states RRAS Remote Code Execution Vulnerability with a CVSS3.1 base score of 8.8 (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H). Connected documents do not supply concrete technical details (no vendor/product/ve...
CVE-2024-49127
CVE-2024-49127 is a Windows LDAP Remote Code Execution vulnerability in the LDAP component of Domain Controllers. The CVSS shows high impact (C/H, I/H, A/H) with network access required and no user interaction. The exploitation path involves an attacker obtaining network access to the DC and issu...
CVE-2025-21229
CVE-2025-21229 is listed as a Windows Digital Media Elevation of Privilege vulnerability. Connected documents indicate Microsoft updates exist to fix vulnerabilities in Windows, with MSRC guidance and KB articles available, but do not provide explicit technical details (vulnerable component versi...
CVE-2025-26668
CVE-2025-26668 is a heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) that allows a network-authenticated attacker to execute code remotely. Affected component is RRAS (Windows Routing and Remote Access Service); root cause is a heap-based overflow that can lead to ar...
CVE-2025-27735
CVE-2025-27735 affects Windows Virtualization-Based Security (VBS) Enclave. The root cause is insufficient verification of data authenticity, enabling an authorized local attacker to bypass a security feature. The connected NCSC listing labels the impact as bypassing a security measure with CVSS ...
CVE-2026-85880
CVE-2026-85880 is a heap-based buffer overflow in Windows ALPC (Advanced Local Procedure Call) that enables a locally authorized attacker to escalate privileges with full impact on confidentiality, integrity, and availability (CVSS 7.8 HIGH). CISA added this CVE to the Known Exploited Vulnerabili...
CVE-2024-30001
CVE-2024-30001 corresponds to a Windows Mobile Broadband driver vulnerability described in connected sources as enabling remote code execution by the Windows Mobile Broadband component. The NCSC advisory groups CVE-2024-30001 under Windows Mobile Broadband with an impact of executing random code ...
CVE-2024-30003
CVE-2024-30003 is a Windows vulnerability in the Windows Mobile Broadband Driver that enables remote code execution. The issue is described in the connected sources as a vulnerability that allows execution of arbitrary code (Windows Mobile Broadband) with the attacker requiring physical access (a...
CVE-2024-30004
CVE-2024-30004 is a Windows Mobile Broadband Driver Remote Code Execution vulnerability. The CVE affects Windows Mobile Broadband Driver components and is scored CVSS v3.1 Base 6.8 (Medium) with HIGH impact on confidentiality, integrity, and availability; exploitation requires local access or phy...
CVE-2024-38150
Technical details about CVE-2024-38150 are not provided in the connected documents. The Initial Description only notes a Windows DWM Core Library elevation vulnerability. Monitor for updates and new disclosures before assessing impact or remediation.
CVE-2024-38240
CVE-2024-38240 is a Windows vulnerability affecting the Windows Remote Access Connection Manager . The connected documents identify it as an elevation-of-privilege issue with a high/critical impact (listed as CVE-2024-38240 — Obtaining elevated privileges , CVSS weights shown as part of Windows s...
CVE-2024-38250
CVE-2024-38250 is a Windows Graphics Component elevation-of-privilege vulnerability. The CVE entry (Microsoft product area) indicates a local attacker with low privileges and no user interaction could obtain higher privileges (CVSS 7.8, High). Connected sources corroborate that Microsoft has issu...
CVE-2024-43626
CVE-2024-43626 is a Windows Telephony Service Elevation of Privilege vulnerability. Affected: Windows operating systems where the Telephony Service component is present. Nature: local, low-privilege user could potentially elevate privileges (high impact to confidentiality, integrity, and availabi...
CVE-2025-21197
CVE-2025-21197 is an information disclosure in Windows NTFS due to improper access control, enabling an authorized user to disclose file path information in folders they cannot list. Connected sources corroborate NTFS as affected and classify the impact as data exposure. Mitigation involves apply...
CVE-2025-21255
Technical details about CVE-2025-21255 are not provided in the supplied documents. Public information is limited to a basic description and references. Monitor Microsoft KBs/NVD for affected products, root cause, and remediation as updates are published.
CVE-2025-21295
Technical details (affected product, vulnerable component, root cause, exploit conditions, or fix) for CVE-2025-21295 are not provided in the supplied documents. Monitor for updates from Microsoft and CVE repositories; current data confirms only high-level vulnerability existence.
CVE-2025-26635
CVE-2025-26635 describes a Windows Hello security feature bypass caused by weak authentication, enabling an authorized attacker to bypass a security feature over the network. The CVSS 3.1 vector (AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N) yields a base score of 6.5 (Medium) with confidentiality and int...
CVE-2025-26666
CVE-2025-26666 is a heap-based buffer overflow in Windows Media that could allow an authorized, local attacker to execute code on the affected system. The connected documents confirm the vulnerability type, affected component, and impact. Microsoft has published security updates addressing this a...
CVE-2025-27470
CVE-2025-27470 : Uncontrolled resource consumption in the Windows Standards-Based Storage Management Service can allow an unauthenticated attacker to cause a network-denial of service. The vulnerability is documented as a Denial of Service with CVSS v3.1 base score 7.5 (Network attack vector, no ...
CVE-2022-35751
Technical details about CVE-2022-35751 are not publicly available in the provided documents. No information on affected products, root cause, impact, or fixes is provided here; monitor for updates.
CVE-2024-30021
CVE-2024-30021 is a Windows Mobile Broadband Driver Remote Code Execution vulnerability. Affected component: Windows Mobile Broadband (driver). Documented impact indicates potential for executing code with high confidentiality, integrity, and availability impact; CVSSv3.1 base score 6.8 (Medium) ...
CVE-2024-30086
Technical details about CVE-2024-30086 (affected component, root cause, impact, and fixes) are not provided in the supplied documents. Monitor for updates from Microsoft and official CVE disclosures.
CVE-2024-38047
Technical details (affected product/component, root cause, impact, and patch specifics) are not publicly provided in the supplied documents. Monitor for updates from official advisories and connected sources for CVE-2024-38047.
CVE-2024-38068
Technical details about CVE-2024-38068 are not provided in the supplied documents. No affected products, root cause, impact, or remediation are described here; monitor for updates from official advisories.
CVE-2024-43517
CVE-2024-43517 is a Microsoft ActiveX Data Objects Remote Code Execution vulnerability. Documented details indicate an in-the-wild risk with network access (AV:N) and user interaction required (UI:R), with a high impact on confidentiality, integrity, and availability (C/I/A: High) and a base scor...
CVE-2024-49124
According to the connected NCSC advisory, CVE-2024-49124 is an LDAP-related vulnerability in Windows LDAP with an impact described as Execution of random code (CVSS 8.1/8.10 range in the table). The advisory notes that Microsoft has fixed vulnerabilities and recommends applying the security updat...
CVE-2025-21328
CVE-2025-21328 maps to a Windows MapUrlToZone security feature bypass vulnerability. Connected docs confirm affected component and root cause: bypassing security checks in MapUrlToZone, enabling circumvention of security measures. CVSS v3.1 base metrics shown as 4.3 (MEDIUM) with Network attack v...
CVE-2025-24067
CVE-2025-24067 is described in the connected documents as a heap-based buffer overflow in the Microsoft Streaming Service Driver that allows an authenticated, local attacker to elevate privileges. The vulnerability concerns the Windows kernel streaming service component and is listed with a high ...
CVE-2025-24074
CVE-2025-24074 affects Microsoft Windows DWM Core Library. It is an Elevation of Privilege due to improper input validation, enabling local privilege escalation with a CVSSv3.1 base score of 7.8 (LOCAL, LOW attack complexity, NO user interaction). Impacted components include the DWM Core Library;...
CVE-2025-27491
CVE-2025-27491 is a Windows Hyper-V remote code execution vulnerability described in the initial document as a use-after-free that could allow an authenticated attacker to execute code over the network. Connected sources corroborate Hyper-V as the affected component and reference patch delivery i...
CVE-2025-27739
CVE-2025-27739 is a Windows Kernel elevation-of-privilege flaw described as an untrusted pointer dereference that enables a locally authenticated attacker to obtain SYSTEM privileges (CVSSv3.1: AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, base 7.8). Connected sources confirm this CVE is tracked under Win...
CVE-2024-30065
Technical details (affected product, root cause, impact, and fix) are not provided in the supplied documents. Monitor for updates from Microsoft/MSRC as more information becomes available.
CVE-2024-38125
CVE-2024-38125 affects the Windows Kernel Streaming WOW Thunk Service Driver and enables local elevation of privileges. The vulnerability is associated with the Kernel Streaming WOW Thunk Service Driver and can lead to obtaining elevated privileges (SYSTEM). Microsoft has issued fixes in August 2...
CVE-2024-43532
CVE-2024-43532 is a Remote Registry Service Elevation of Privilege vulnerability with a documented exploit path in a private GitHub post, alleging interception of NTLM data via RPC_A uthon level CONNECT and a Machine‑in‑the‑Middle attack against advapi32.dll behavior. Affected: Windows 10/11 and ...
CVE-2024-43635
Technical details for CVE-2024-43635 are not publicly provided in the connected documents. The materials only reference a Windows Telephony Service RCE vulnerability. Monitor Microsoft advisories and vulnerability feeds for affected versions, impact, and remediation when they are disclosed.
CVE-2024-49076
Technical details about CVE-2024-49076 are not provided in the supplied documents. No affected products, versions, or root-cause are specified here. Monitor for updates from Microsoft and official vulnerability databases for concrete information and remediation steps.
CVE-2024-49086
Technical details (affected product, vulnerable component, exploit specifics, remediation) are not provided in the supplied documents. Monitor for updates from Microsoft and security advisories.
CVE-2025-21221
CVE-2025-21221: Heap-based buffer overflow in Windows Telephony Service enables remote code execution over the network. Exploitation requires network access, no privileges, and user interaction is needed; impact is high on confidentiality, integrity, and availability. Affected component: Windows ...
CVE-2025-21222
CVE-2025-21222 is a remote-code-execution vulnerability in Windows Telephony Service characterized by a heap-based buffer overflow that an unauthenticated attacker can trigger over the network. Connected sources corroborate its association with Windows Telephony Service and document it as a netwo...
CVE-2025-21308
CVE-2025-21308 Windows Themes Spoofing affects the Windows Theme system. The vulnerability lets a malicious party impersonate the user and potentially execute code in the victim’s context, requiring the victim to open/edit a rogue file. The impact is described as impersonation with potential code...
CVE-2025-21409
CVE-2025-21409 is a Windows Telephony Service Remote Code Execution vulnerability exploitable over the network (CVSS v3.1: AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H). Connected sources confirm this CVE entry and link it to Windows Telephony Service across Microsoft advisories; updates KB5050009, KB5050...
CVE-2025-27484
CVE-2025-27484 affects Windows Universal Plug and Play (UPnP) Device Host. The issue is described as sensitive data storage in improperly locked memory, enabling an authorized attacker to elevate privileges over the network. Public details in connected docs indicate the vulnerability impacts the ...
CVE-2025-33071
CVE-2025-33071 is an RCE flaw affecting the Windows KDC Proxy Service (KPSSVC). The vulnerability arises from a use-after-free in KPSSVC, enabling a remote attacker to execute code over the network on affected Windows systems. The CVE is rated high severity (CVSS ~8.1/8.1–8.10, depending on sourc...
CVE-2024-30039
CVE-2024-30039 affects the Windows Remote Access Connection Manager. The connected documents map this CVE to Windows components and indicate an information-disclosure risk with CVSS 3.1/3.5-like characteristics: local access required, low attack complexity, no user interaction, confidentiality im...
CVE-2024-37969
Technical details about CVE-2024-37969 (affected product, root cause, exploitability, and remediation) are not publicly provided in the supplied documents. Monitor for updates from official advisories.
CVE-2024-43550
CVE-2024-43550 is described in connected sources as a Windows Secure Channel vulnerability with an impact described as impersonation of another user. The NCSC advisory groups it with other Windows CVEs and notes that Microsoft has released security updates to fix affected components (e.g., Octobe...
CVE-2024-43636
CVE-2024-43636 is a Win32k local elevation-of-privilege vulnerability with a CVSSv3.1 base score 7.8 (LOCAL, LOW PRIVILEGES, NO USER INTERACTION; impacts HIGH across confidentiality, integrity, and availability). CONNECTED documents confirm Windows OS components (Win32k) are affected and that Mic...
CVE-2025-21203
CVE-2025-21203 affects Windows Routing and Remote Access Service (RRAS). The connected data confirms a network-accessible vulnerability in RRAS that can cause an information disclosure via a buffer over-read. Affected component: RRAS on Windows; root cause: buffer over-read; impact: confidential ...
CVE-2025-21261
Technical details about CVE-2025-21261 (affected product, vulnerability vector, impact, or patch) are not publicly provided in the connected documents; no concrete specifics are available here. Monitor official advisories and Microsoft/MSRC guidance for remediation.