CVE-2024-43511

Technical details about CVE-2024-43511 are not provided in the supplied documents. Public information beyond basic CVSS data is not included here; monitor for updates.

CVE-2024-43514

Technical details about CVE-2024-43514 are not publicly provided in the connected documents; they reference fixes but do not describe root cause, vectors, or affected versions. Monitor for updates.

CVE-2025-21291

CVE-2025-21291 is a Windows Direct Show remote code execution vulnerability. Documented CVSSv3.1 shows high risk (8.8) with network exploitation requiring user interaction. Affected: Windows DirectShow components; root cause specifics not disclosed in provided materials. Microsoft has released se...

CVE-2025-21374

CVE-2025-21374 affects the Windows Client-Side Caching (CSC) Service and is described as a local information-disclosure vulnerability. The CVSS 3.1 vector indicates Local attack vector, Low privileges required, no user interaction, with Confidentiality impact only; other impacts are not affected ...

CVE-2025-24046

Technical details enabling exploitation of CVE-2025-24046 (Kernel Streaming Service Driver elevation) are not publicly provided in the connected documents. The initial entry states a use-after-free leading to local privilege elevation; no confirmed exploit vectors or patches are described here. M...

CVE-2025-24073

CVE-2025-24073 affects the Windows DWM Core Library and stems from improper input validation, enabling a locally authorized attacker to elevate privileges. The vulnerability is described with a base CVSS v3.1 score of 7.8 (High) and local attack vector with low complexity, requiring low privilege...

CVE-2026-50655

CVE-2026-50655 is a Windows Media/Media Foundation heap-based buffer overflow that allows local code execution by a non-privileged attacker with user interaction. It has concrete details in multiple connected sources: exploitation status on CIRCL (exploited in the wild), and Microsoft/MSRC entrie...

CVE-2024-37981

Technical details are not publicly available in the provided documents. No explicit information on affected products, root cause, impact, or fixes is given here. Monitor for updates from official sources to obtain concrete vulnerability specifics and remediation guidance.

CVE-2024-37986

Technical details for CVE-2024-37986 are not publicly provided in the supplied documents. No affected products, versions, root cause, or remediation are specified here. Monitor for updates.

CVE-2024-38072

CVE-2024-38072 is associated with Windows Remote Desktop Licensing Service and is described as a Denial of Service vulnerability. The provided Connected documents mention the vulnerability generically (DoS impact) and reference a Microsoft security update page, but do not supply detailed root-cau...

CVE-2024-38142

CVE-2024-38142 is a Windows Secure Kernel Mode elevation-of-privilege vulnerability (local, low-privilege prerequisite; high impact). The connected sources provide CVSS and impact only (Obtaining Increased Entitlements) and do not specify root cause details beyond the Windows kernel context. Publ...

CVE-2024-38145

CVE-2024-38145 affects the Windows Layer-2 Bridge Network Driver. The available data shows a Denial-of-Service impact with CVSS v3.1 base score 7.5 (Network attack, Low attack complexity, No privileges, No user interaction). Root cause, affected software versions, and remediation are not provided...

CVE-2024-38241

CVE-2024-38241 is a Windows kernel streaming service driver elevation of privilege vulnerability (local, required privileges: low; attack complexity: low; user interaction: none). The NVD entry assigns CVSS v3.1: 7.8 (HIGH) with impacts to confidentiality, integrity, and availability (all HIGH) i...

CVE-2024-38244

CVE-2024-38244 is a Windows Kernel Streaming Service Driver elevation-of-privilege flaw. The CVE is rated CVSSv3.1 base score 7.8 (HIGH) with LOCAL attack vector, LOW attack complexity, and LOW privileges required; exploitation grants total compromise of confidentiality, integrity, and availabili...

CVE-2024-43535

CVE-2024-43535 is a Windows Kernel-Mode Driver Elevation of Privilege affecting Windows Kernel-Mode Drivers (tm.sys cited in public discussions). The CVE entry lists a HIGH base impact (Privilege escalation) with LOCAL access and HIGH confidentiality/integrity/availability impact. A GitHub repo i...

CVE-2024-49119

CVE-2024-49119 is corroborated by the connected KB entry for Windows vulnerabilities, which lists it under Windows Remote Desktop Services with a CVSS v3.1 score of 8.10 and an impact described as Execute Random Code. The document confirms RDS involvement and high-risk classification, but it does...

CVE-2025-21287

CVE-2025-21287 is a Windows Installer elevation of privilege vulnerability. The linked documents confirm this CVE affects the Windows Installer component in Windows OS, enabling a local attacker with low privileges and no user interaction to elevate privileges. Remediation is provided by Microsof...

CVE-2025-21378

Technical details about CVE-2025-21378 are not publicly available in the provided documents. The set includes only high-level summaries and advisories; monitor for updates from Microsoft and NVD for affected products, impact, and fixes.

CVE-2025-27738

CVE-2025-27738 affects Windows Resilient File System (ReFS). Description in NCSC advisory attributes an improper access control issue that could allow an authenticated attacker to disclose information over the network, with impact categorized as access to sensitive data. The NT/OS update guidance...

CVE-2025-29837

Technical details about CVE-2025-29837 (affected products, root cause, exploitability) are not publicly disclosed in the provided connected documents; no specifics on impact or remediation are available here.

CVE-2026-23668

CVE-2026-23668 affects the Windows Graphics Component and is an elevation-of-privilege vulnerability. The advisory indicates a local attack vector with high attack complexity, requiring low privileges and no user interaction (UI: NONE). The vulnerability impacts confidentiality, integrity, and av...

CVE-2026-26151

CVE-2026-26151 describes insufficient UI warnings in Windows Remote Desktop that can enable a network attacker to spoof a remote session. The NVD entry lists a CVSS v3.1 base score of 7.1 (HIGH) with network access, no privileges required, user interaction required, and impact to confidentiality ...

CVE-2026-54992

CVE-2026-54992 is a heap-based buffer overflow affecting the Windows Message Queuing Queue Manager that allows a local attacker to execute code. The vulnerability is described in NVD/MSRC references as enabling local arbitrary code execution. The public entries consistently describe the same unde...

CVE-2024-38052

Technical details for CVE-2024-38052 are not publicly available in the provided documents. No affected products, root cause, impact, or remediation are specified here. Monitor official sources for updates.

CVE-2024-38102

Technical details for CVE-2024-38102 are not provided in the Connected documents. Monitor for updates.

CVE-2024-38126

CVE-2024-38126 affects Windows Network Address Translation (NAT). The provided table lists it under Windows NAT with a CVSS v3.1 score of 7.5 (HIGH) and impact as Denial-of-Service. Other connected documents reference general Microsoft Windows fixes but do not provide concrete technical details (...

CVE-2024-38137

CVE-2024-38137 is a Windows vulnerability in the Resource Manager PSM Service Extension: a local elevation of privilege with CVSS 3.1/7.0 (LOCAL, HIGH impact, attacker requires LOW privileges, no user interaction). Connected sources indicate Microsoft has released updates to fix vulnerabilities i...

CVE-2024-38263

CVE-2024-38263 corresponds to a Windows Remote Desktop Licensing Service vulnerability capable of executing arbitrary code. Connected sources explicitely identify this CVE under Windows Remote Desktop Licensing Service with an impact described as “Execution of random code.” Affected product/compo...

CVE-2024-43631

CVE-2024-43631 is a Windows Secure Kernel Mode elevation of privilege vulnerability. The available connected documents confirm a local, low-complexity flaw that could grant elevated (“high”) impact on confidentiality, integrity and availability if exploited. Microsoft has released multiple update...

CVE-2025-21184

CVE-2025-21184 is an Elevation of Privilege issue affecting Windows Core Messaging. The connected AVLEONOV article identifies it as EoP in Windows Core Messaging and lists it among February Patch Tuesday CVEs. Provided documents do not include a vendor/product version, root cause, exploit details...

CVE-2025-21314

Technical details on CVE-2025-21314 are not publicly provided in the supplied documents. The materials reference Windows updates addressing vulnerabilities and general guidance, but do not specify affected components, root cause, or remediation for this CVE. Monitor for updates.

CVE-2025-26649

CVE-2025-26649 describes a race condition in Windows Secure Channel (concurrent execution using a shared resource with improper synchronization) that could allow a locally authenticated user to elevate privileges. Primary sources (MSRC/NVD) confirm the vulnerability exists in the Windows Secure C...

CVE-2025-27469

CVE-2025-27469 affects Windows LDAP (Lightweight Directory Access Protocol) and describes an uncontrolled resource consumption that enables an unauthenticated attacker to cause network-denied service. The issue is categorized as a Denial-of-Service via LDAP on the network. Microsoft has released ...

CVE-2025-27474

CVE-2025-27474 is a Windows RRAS vulnerability described as the use of an uninitialized resource that enables an unauthorized attacker to disclose information over a network. The connected sources corroborate that this CVE affects Windows Routing and Remote Access Service (RRAS) and result in inf...

CVE-2025-47955

CVE-2025-47955 involves improper privilege management in Windows Remote Access Connection Manager, enabling local privilege escalation for an authorized attacker. CVSS 3.1 base 7.8 (HIGH): Local, low complexity, no user interaction, with high impact on confidentiality, integrity, and availability...

CVE-2026-50369

CVE-2026-50369 is a Windows Remote Desktop Services vulnerability identified as a use-after-free that enables an authorized attacker to elevate privileges over the network. The initial entry and multiple connected sources describe the issue consistently and confirm the affected component as Windo...

CVE-2026-54984

Windows Imaging Component contains a heap-based buffer overflow that allows an unauthenticated user with local access to execute arbitrary code. This CVE-2026-54984 is described as a local, high-severity issue (CVSS 7.8). The documents provide no exploit details or remediation guidance; refer to ...

CVE-2026-59130

AMD Zen CPUs are affected by CVE-2026-59130, described as an information disclosure vulnerability that allows an authorized user to disclose information locally. The NVD/CVE description notes no CWE mapping and that the attack vector is LOCAL with LOW privileges required and HIGH confidentiality ...

CVE-2024-35270

Technical details about CVE-2024-35270 (Windows iSCSI Service DoS) are not provided in the connected documents. Monitor for official advisories and Microsoft updates for affected products and remediation.

CVE-2024-37970

Technical details about CVE-2024-37970 are not provided in the connected documents. The initial description notes a Secure Boot security feature bypass, but no affected product/version/root cause/fix is disclosed here. Monitor for updates.

CVE-2024-38237

CVE-2024-38237 is a local privilege-escalation in Windows Kernel Streaming WOW Thunk Service Driver. Affected component is a Windows kernel-mode driver used by streaming services; vulnerability exploited locally with low privileges and no user interaction, leading to elevated privileges and poten...

CVE-2024-38243

CVE-2024-38243 is a Windows Streaming Service elevation of privilege vulnerability. The connected NCSC entry classifies it as impacting Windows Streaming Service with the effect of obtaining elevated privileges, consistent with a local-exploit scenario (CVSS: Local, Privileges Required Low, User ...

CVE-2024-43456

Mode C: The CVE-2024-43456 case relates to Windows Remote Desktop Services Tampering. Connected docs corroborate impact as Manipulating Data (per NCSC entry: CVSS ~4.8). Microsoft has fixed vulnerabilities in Windows as part of the referenced advisories, but explicit patch versions/KB numbers for...

CVE-2024-43615

CVE-2024-43615 affects OpenSSH for Windows and is categorized as a remote code execution vulnerability with NETWORK attacker access, requiring user interaction and low privileges. The CVSS 3.1 vector indicates Network access, high confidentiality/integrity/availability impact, and required user i...

CVE-2024-49090

CVE-2024-49090 affects the Windows Common Log File System Driver. The connected sources indicate an Elevation of Privilege vulnerability in the CLFS driver that could allow a local attacker with low privileges and no user interaction to obtain increased rights (high impact across confidentiality,...

CVE-2025-21212

CVE-2025-21212 corresponds to an Internet Connection Sharing (ICS) Denial of Service vulnerability in Windows. Reported impact is DoS, with an adjacent attack vector, low attack complexity, no user interaction required, and no confidentiality/integrity impact, but availability is affected (CVSS 3...

CVE-2025-21359

Technical details (affected product, root cause, impact, or fix) for CVE-2025-21359 are not provided in the supplied documents. Please monitor official advisories (Microsoft/MSRC updates) for concrete vulnerability specifics and remediation guidance.

CVE-2025-26669

CVE-2025-26669 is listed in RRAS (Windows Routing and Remote Access Service) with the impact described as Access to sensitive data and a severity score of 8.80. The RRAS entry indicates an information-disclosure risk via an out-of-bounds read, attributed to a vulnerability in RRAS. Connected sour...

CVE-2026-42909

CVE-2026-42909 involves a heap-based buffer overflow in the Remote Desktop Client that enables a remote attacker to execute code over the network. The vulnerability arises from improper handling of data during remote desktop operations, leading to memory corruption. The CVSS-3.1 vector (AV:N/AC:H...

CVE-2026-62712

CVE-2026-62712 is a Windows Win32K heap-based buffer overflow that enables local privilege escalation by an authorized attacker. Affected component: Windows kernel user-mode win32k; root cause is a heap overflow in Win32K handling. Impact per provided metrics: Confidentiality, Integrity, and Avai...