CVE-2025-21406

CVE-2025-21406 is listed by NCSC as a Windows Telephony Service vulnerability with CVSS 8.80, enabling execution of arbitrary code. No affected product/version details or patch specifics are provided in the connected documents; Microsoft updates are referenced generally as fixing vulnerabilities....

CVE-2025-24051

Technical details about CVE-2025-24051 are not publicly provided in the connected documents. The initial entry notes a heap overflow in RRAS enabling remote code execution, but no affected versions, exploit specifics, or mitigations are present here. Monitor for updates.

CVE-2025-24056

CVE-2025-24056 is a heap-based buffer overflow in the Windows Telephony Server that allows a network-based attacker to execute arbitrary code on affected systems. The issue is described as remote code execution with network access (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) and a base score of 8.8 (HIG...

CVE-2026-33842

The CVE-2026-33842 entry describes a local information disclosure in Windows File Explorer. The vulnerability allows an authorized (low privileges) attacker to disclose sensitive information locally through the File Explorer component. Per the NVD entry, the impact is confined to confidentiality ...

CVE-2026-42976

This CVE concerns Windows RPC API: missing authentication for a critical function allows an authorized attacker to escalate privileges locally. Affected component: Windows RPC server/remote procedure call surface; root cause: lack of authentication on a sensitive function. Impact described as loc...

CVE-2026-57094

CVE-2026-57094 is a remote-code-execution vulnerability in Microsoft Windows Media Foundation caused by a heap-based buffer overflow. It affects Windows Media Foundation components and can be exploited over a network to run arbitrary code. Public details confirm the vulnerability as a network-att...

CVE-2026-70347

CVE-2026-70347 describes a heap-based buffer overflow in Windows Installer that can enable an authenticated, local attacker to elevate privileges. Affected component is Windows Installer; the vulnerability is a local, privilege-escalation flaw with high impact (C:H/I:H/A:H) and CVSSv3.1 score 7.8...

CVE-2024-37971

Technical details about CVE-2024-37971 are not publicly available in the provided connected documents. Monitor for updates from Microsoft and NVD for affected products, impact, and remediation; current sources do not specify affected components or fixes within this dataset.

CVE-2024-37984

Technical details for CVE-2024-37984 are not provided in the connected documents. No affected products, root cause, impact, or remediation are specified here. Monitor for updates from Microsoft and other sources for further information.

CVE-2024-38013

Technical details about CVE-2024-38013 are not disclosed in the provided connected documents. The CVE entry exists (Windows Server Backup elevation of privilege), but no affected product versions, root cause, exploitation, or remediation are described here. Monitor for updates.

CVE-2024-38061

Technical details for CVE-2024-38061 (affected products, root cause, impact, fixes) are not provided in the supplied documents. No remediation or exploitation specifics are available here. Monitor for updates.

CVE-2024-38073

Technical specifics for CVE-2024-38073 (Windows Remote Desktop Licensing Service DoS) are not disclosed in the provided connected documents. Affected products, vulnerable components, and fixes are not present here; monitor for official disclosures and updates.

CVE-2024-43509

CVE-2024-43509 is listed in connected advisories as affecting the Windows Graphics Component with an elevation of privilege impact. The ENISA/NCSC entries corroborate this CVE under Windows Graphics Component and assign an impact/score (7.80) and local, privilege‑required conditions. Concrete det...

CVE-2024-43556

CVE-2024-43556 is a Windows Graphics Component elevation-of-privilege vulnerability. Public sources confirm it affects the Windows Graphics Component and can yield elevated privileges (base CVSS v3.1 7.8). The issue is listed as a local, privilege-escalation risk; exploitation details are not pro...

CVE-2024-49075

Technical details for CVE-2024-49075 are not publicly provided in the connected documents. The sources reference Windows Remote Desktop Services DoS but do not specify affected versions, root cause, exploit information, or fixes within this corpus. Monitor for updates.

CVE-2024-49091

Technical details for CVE-2024-49091 are not publicly provided in the supplied documents; no affected products, root cause, or remediation are stated. Monitor for updates.

CVE-2025-21236

CVE-2025-21236 is a Windows Telephony Service remote code execution vulnerability. The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) indicates network-based access with low complexity, requiring user interaction, and with high impact across confidentiality, integrity, and availability. Th...

CVE-2025-21250

CVE-2025-21250 is a Windows Telephony Service Remote Code Execution vulnerability with CVSS 3.1 base score 8.8 (Network, Low attack complexity, No privileges, User interaction required). Connected sources reference the Windows Telephony Service as the affected component and indicate in CIRCL that...

CVE-2025-24987

CVE-2025-24987 is a Windows USB Video Driver vulnerability described as an out-of-bounds read that can allow an authorized attacker to elevate privileges with physical access. The issue affects the Windows USB Video Driver component and is associated with high impact on confidentiality, integrity...

CVE-2025-26639

CVE-2025-26639 is a Windows USB Print Driver elevation-of-privilege vulnerability caused by an integer overflow/wraparound in the driver. The issue can be triggered locally by an authorized user with low privileges and no user interaction, potentially allowing a takeover of SYSTEM-level rights. M...

CVE-2025-26672

CVE-2025-26672 is described as a buffer over-read in Windows Routing and Remote Access Service (RRAS) that allows an unauthenticated attacker to disclose information over the network. Connected sources corroborate that RRAS is the affected component and frame the impact as an information disclosu...

CVE-2025-33064

CVE-2025-33064 affects Windows Routing and Remote Access Service (RRAS). It is a heap-based buffer overflow that allows an authenticated attacker to execute code over the network. CVSS v3.1 base score 8.8 (HIGH). Affected component: RRAS on Windows. Root cause: heap-based overflow in RRAS handlin...

CVE-2026-50472

The CVE-2026-50472 entry refers to a heap-based buffer overflow in Windows LUA File Virtualization Filter Driver (LUAFV) that allows an authorized, local attacker to achieve privilege escalation. Affected software is Windows LUAFV; the underlying issue is a heap-based overflow, leading to local p...

CVE-2026-54999

The CVE-2026-54999 entry concerns a race condition in Windows TCP/IP where concurrent access to a shared resource allows an unauthorized attacker on an adjacent network to execute code. Documented impact is remote code execution with high severity (CVSSv3.1: AV=A, AC=L, PR=N, UI=N, S=U, C=H, I=H,...

CVE-2024-30067

Technical details for CVE-2024-30067 are not provided in the supplied documents. Monitor official disclosures for affected products, impact, and remediation guidance.

CVE-2024-37989

Technical details and affected products for CVE-2024-37989 are not publicly provided in the supplied documents. Monitor for vendor advisories and CVE repositories for updates.

CVE-2024-38065

Technical details about CVE-2024-38065 (affected product/component/impact) are not provided in the supplied documents. No concrete exploit or remediation information is available here. Monitor for official disclosures and updated advisories.

CVE-2024-38242

CVE-2024-38242: Kernel Streaming Service Driver Elevation of Privilege. A local attacker with low privileges can exploit this to gain SYSTEM-level access without user interaction (per CVSS 3.1: AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H; base 7.8). Microsoft has released updates to fix the issue (e.g., ...

CVE-2024-38246

CVE-2024-38246 affects Windows Win32K (GRFX) with elevation of privilege. The initial record notes local, high-severity context with low privileges required and no user interaction. Connected docs reference Microsoft Windows updates fixing Win32K issues (e.g., KBs 5043064/5043067/5042880/5043080/...

CVE-2024-43640

Technical details about CVE-2024-43640 are not publicly provided in the supplied connected documents. Monitor for updates from Microsoft and other trusted sources to obtain affected component/version, root cause, impact, and remediation when they become available.

CVE-2024-49125

Technical details about CVE-2024-49125 are not publicly available in the provided connected documents. Monitor for updates from official sources for affected products, impact, and fixes.

CVE-2025-21235

CVE-2025-21235 is a Windows PrintWorkflowUserSvc elevation-of-privilege vulnerability. Affected component: PrintWorkflowUserSvc in Windows. Root cause per sources is an input-validation/privilege-escalation issue enabling local attacker with low privileges and no user interaction to gain high pri...

CVE-2025-21407

According to the provided documents, CVE-2025-21407 is associated with Windows Telephony Service and is listed with a high impact (CVSS 8.80) involving the execution of arbitrary code. The NCSC advisory explicitly catalogs CVE-2025-21407 under Windows Telephony Service with an impact of executing...

CVE-2025-21410

CVE-2025-21410 is a Windows RRAS Remote Code Execution vulnerability. AFFECTED: Windows RRAS component (Routing and Remote Access Service) with exploitation yielding total impact (RCE) on the host. ROOT CAUSE/DETAILS: Not explicitly provided in the documents beyond RRAS RCE naming; exploitation i...

CVE-2025-24060

CVE-2025-24060 affects Windows DWM Core Library and is caused by improper input validation, enabling local elevation of privileges for an authorized attacker. Microsoft lists mitigations via OS updates (April 2025 security updates) and related advisories; apply the provided patches to remediate. ...

CVE-2026-20856

CVE-2026-20856 is a Windows Server Update Services (WSUS) remote code execution vulnerability caused by improper input validation. Exploitation is possible over a network with no user interaction; CVSSv3.1 base score 8.1 (High). Public references note this is addressed by January 2026 security up...

CVE-2026-21530

CVE-2026-21530 : A double-free vulnerability in Windows Rich Text Edit is described as enabling an authorized attacker to perform local privilege escalation. The connected documents confirm the affected component and the local-privilege-elevation impact but do not provide exploit details, specifi...

CVE-2026-32183

CVE-2026-32183 is a Windows Snipping Tool vulnerability that allows local execution of arbitrary code due to improper neutralization of special elements in a command (command injection). Affected component: Snipping Tool on Windows. Impact per sources: Executing (remote) code with high confidenti...

CVE-2026-58626

CVE-2026-58626 is a Windows Remote Desktop Services use-after-free vulnerability that can allow an authenticated attacker to execute arbitrary code over the network. The CVE is rated CVSS v3.1 base score 8.8 (High) with Network attack, Low attack complexity, Privileges Required: Low, User Interac...

CVE-2024-26184

CVE-2024-26184 is a Windows Secure Boot security feature bypass vulnerability. Affected component: Secure Boot in Windows environments. Root cause details are not explicitly provided in the supplied documents; the entry notes a security feature bypass with a CVSSv3.1 base score of 6.8 (Adjac ent ...

CVE-2024-30069

Technical details for CVE-2024-30069 are not provided in the connected documents. Public information about affected products, root cause, exploitation, and remediation is not present here. Monitor official sources for updates.

CVE-2024-37973

Technical details about CVE-2024-37973 are not provided in the connected documents. The supplied materials reference related items (e.g., CVE-2024-38058) but do not disclose affected products, root cause, impact, or fixes for CVE-2024-37973. Monitor for updates.

CVE-2024-38120

CVE-2024-38120 is a Windows RRAS Remote Code Execution vulnerability in the Routing and Remote Access Service. The CVSSv3.1 vector shows NETWORK attack vector, LOW complexity, and NONE privileges required with UI interaction, yielding a HIGH impact on confidentiality, integrity, and availability....

CVE-2024-38212

Technical details for CVE-2024-38212 are not publicly available in the provided documents. Monitor for updates from Microsoft/NVD and follow their vulnerability guidance.

CVE-2024-38214

CVE-2024-38214 is a Windows RRAS Information Disclosure Vulnerability affecting RRAS in Windows. The provided data lists RRAS as the vulnerable component with an impact of accessing sensitive data, and references Microsoft security updates (e.g., KB5041773 and related August 2024 updates) as miti...

CVE-2024-38236

Technical details about CVE-2024-38236 are not provided in the connected documents. Public details (affected product/version, exploit info, and fixes) are not available here; monitor for updates from official advisories.

CVE-2024-38248

Technical details for CVE-2024-38248 are not publicly provided in the supplied connected documents. Monitor for updates and authoritative advisories from Microsoft/NVD for affected product, impact, and fixes.

CVE-2024-38258

Technical details (affected product, versions, root cause, exploit info) for CVE-2024-38258 are not provided in the connected documents. Monitor official advisories for fixes and remediation guidance.

CVE-2024-43567

CVE-2024-43567 is a Windows Hyper-V Denial-of-Service vulnerability. The CVSSv3.1 vector indicates a network-exposed flaw (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) that can be triggered remotely, resulting in an availability impact. The CVE is listed under Windows Hyper-V with confirmed Denial-of-Ser...

CVE-2024-43621

CVE-2024-43621 affects Windows Telephony Service (a Windows OS component). The vulnerability is a Remote Code Execution flaw in the Windows Telephony Service, with CVSS 3.1 base metrics indicating Network attack vector, no privileges required, and user interaction needed; impact is High/High/High...