CVE-2023-32015

CVE-2023-32015 is a Windows Pragmatic General Multicast (PGM) Remote Code Execution vulnerability. The issue affects Windows where the Message Queuing service is enabled; a remote, unauthenticated attacker can exploit it by sending a crafted file over the network to achieve code execution. The CV...

CVE-2023-32019

CVE-2023-32019 is a Windows kernel registry vulnerability arising from hive memory corruption via out-of-bounds registry cell indexes. The provided research shows that with a crafted hive (notably HKCU and app hives) a local attacker can trigger UAF- and memory-corruption primitives that enable r...

CVE-2024-20693

CVE-2024-20693 is a Windows Kernel local privilege escalation vulnerability. Documents corroborate that the Windows Kernel component is affected and that the vulnerability enables obtaining elevated/privileged execution from a local attacker, with high confidentiality, integrity, and availability...

CVE-2022-23279

Technical details about CVE-2022-23279 (affected product/component/versions/root cause) are not provided in the supplied documents. Publicly available information within the connected items is limited to generic vulnerability summaries and update notes. Monitor for updates.

CVE-2024-28903

CVE-2024-28903 is listed under Microsoft Windows Secure Boot vulnerabilities with a circumvention of security measure impact. The connected OpenVAS/NCSC entries corroborate that Secure Boot-related fixes were released, but do not provide product/version specifics or a patch identifier. The root c...

CVE-2022-29106

Technical details about CVE-2022-29106 (Windows Hyper-V Shared Virtual Disk Elevation of Privilege) are not provided in the connected documents. Monitor for updates; no product/version/impact/fix information is available here.

CVE-2024-21305

CVE-2024-21305 is a Hypervisor-Protected Code Integrity (HVCI) security feature bypass affecting Windows; the CVE entry notes a local attack surface with high privileges required and no user interaction (per CVSS details). Connected Microsoft documentation confirms the vulnerability and lists it ...

CVE-2024-38153

CVE-2024-38153 is a Windows Kernel elevation-of-privilege vulnerability. The CVSSv3.1 base score is 7.8 (High) with Local attack vector, Low attack complexity, Privileges Required: Low, User Interaction: None, and impact on Confidentiality, Integrity, and Availability: High. The vulnerability aff...

CVE-2024-49115

CVE-2024-49115 is a vulnerability in Windows Remote Desktop Services that enables remote code execution. The connected documents indicate an impact of code execution with high severity (CVSS-like values around 8+ in vendor/intelligence summaries) and publicly referenced exploit potential, with re...

CVE-2025-59258

CVE-2025-59258 is an information-disclosure vulnerability affecting Windows Active Directory Federation Services (ADFS). The incident involves insertion of sensitive data into ADFS log files, enabling a local attacker to disclose information. The CVE is characterized in the provided data as a loc...

CVE-2026-20846

CVE-2026-20846 describes a buffer over-read in Windows GDI+ that can be exploited over a network to cause a denial of service. The CVSS v3.1 base score is 7.5 (HIGH). Mitigation requires the Microsoft update per the MSRC vulnerability entry CVE-2026-20846.

CVE-2024-21306

CVE-2024-21306 is a Microsoft Bluetooth Driver Spoofing vulnerability. It relates to spoofing a Bluetooth HID device and, under certain conditions (e.g., pairing flow), could enable unauthorized keystroke injections. Public PoCs referenced in connected documents show HID-based exploitation via Bl...

CVE-2024-21316

CVE-2024-21316 is a Windows Server vulnerability described as a Key Distribution Service Security Feature Bypass. Documents confirm the issue affects Windows Server/KDS handling and carry a CVSS v3.1 base score of 6.1 (Network, Low attack complexity, High privileges required, User interaction req...

CVE-2024-26212

Technical details for CVE-2024-26212 are not publicly available in the provided documents. Monitor for updates from NVD/OSV/OpenVAS; no specifics on affected products, root cause, or fix are available here.

CVE-2024-38076

CVE-2024-38076 is a Windows Remote Desktop Licensing Service remote code execution vulnerability. An unauthenticated attacker could trigger arbitrary code execution over the network, potentially gaining full control of the affected system. The CVE is rated CVSS v3.1: 9.8 (CRITICAL) with network a...

CVE-2024-43513

CVE-2024-43513 is a BitLocker security feature bypass vulnerability affecting Windows BitLocker. The entry notes a bypass of security measures with a CVSS v3.1 base score of 6.4 (Physical access, High impact for confidentiality, integrity, and availability). The connected Microsoft update guidanc...

CVE-2025-47827

Technical details for CVE-2025-47827 are not publicly provided in the supplied documents. The initial description notes a Secure Boot bypass via igel-flash-driver, but no additional technical specifics, affected versions, or fixes are included here. Monitor for updates.

CVE-2026-58594

CVE-2026-58594 is a Windows Remote Desktop Client RCE vulnerability caused by an integer overflow/wraparound in the RDP client. Public sources (NVD/NCSC/CIRCL) attribute network-based exploitation with potential arbitrary code execution on vulnerable Windows systems. Connected entries confirm the...

CVE-2026-47288

CVE-2026-47288 affects Windows Kerberos Key Distribution Center (KDC). The vulnerability is an integer overflow/wraparound in the Kerberos code, enabling an authorized attacker on an adjacent network to execute code. The CVE has a CVSSv3.1 score of 7.1 ( HIGH ) with attack vector Adjacent, high i...

CVE-2024-21311

Technical details for CVE-2024-21311 are not publicly available in the provided documents. No affected products, root cause, or remediation are specified here. Monitor for updates.

CVE-2024-26158

CVE-2024-26158 affects Microsoft Windows Install Service and is an Elevation of Privilege vulnerability. It is exploitable locally (attack vector: Local) with low privileges required and no user interaction, potentially granting complete control (confidentiality/integrity/availability impact: Hig...

CVE-2025-60724

Technical details about CVE-2025-60724 are not provided in the supplied documents. Connected KBs discuss OS updates and security fixes but do not specify vulnerable product versions, root cause, exploitation, or patch specifics for this CVE. Monitor for updates.

CVE-2023-29361

CVE-2023-29361 affects the Windows Cloud Files Mini Filter Driver. The vulnerability is an elevation of privilege with a local attack vector (Attack Vector: Local; Attack Complexity: High) requiring low privileges and no user interaction. The impact is described as high for confidentiality, integ...

CVE-2024-28898

CVE-2024-28898 is listed in the connected documents as a Windows Secure Boot vulnerability described as a Secure Boot security feature bypass with a CVSS-like impact of bypassing security measures (Windows Secure Boot). The advisory notes for this CVE show it with a moderate score (around 6.3–6.3...

CVE-2024-29064

Technical details (affected product/versions/root cause/impact/fix) for CVE-2024-29064 are not publicly provided in the supplied documents. Monitor for updates as more information becomes available.

CVE-2024-30080

Technical details about CVE-2024-30080 are not provided in the supplied documents. No specifics on affected products, vulnerable components, root cause, or fixes are included; monitor for updates from Microsoft/security advisories.

CVE-2025-21302

CVE-2025-21302 is a Windows Telephony Service Remote Code Execution vulnerability. The CVSS 3.1 base score is 8.8 (HIGH) with network access, low attack complexity, no privileges required, and user interaction required; impacts include confidentiality, integrity, and availability. The vulnerabili...

CVE-2026-85880

CVE-2026-85880 is a heap-based buffer overflow in Windows ALPC (Advanced Local Procedure Call) that enables a locally authorized attacker to escalate privileges with full impact on confidentiality, integrity, and availability (CVSS 7.8 HIGH). CISA added this CVE to the Known Exploited Vulnerabili...

CVE-2023-24898

Technical details for CVE-2023-24898 are not publicly provided in the supplied documents. Monitor for updates from official advisories (MSRC/NVD) for affected products, root cause, and fixes.

CVE-2024-26179

CVE-2024-26179 affects Windows Routing and Remote Access Service (RRAS) with a remote code execution vulnerability (CVSS v3.1: 8.8, HIGH). The entry specifies network attack vector with no privileges required but user interaction required, leading to execution of arbitrary code on affected system...

CVE-2026-62781

CVE-2026-62781 is a heap-based buffer overflow in the RPC Runtime Library that enables remote code execution over the network. The vulnerability allows an unauthenticated attacker to run code on affected systems via network interaction. Current documents confirm the issue but do not provide produ...

CVE-2021-38672

CVE-2021-38672 is a Windows Hyper-V Remote Code Execution vulnerability affecting Hyper-V components on supported Windows client/server releases. Public details in connected sources indicate a code-execution risk via Hyper-V, with Microsoft patching it in October 2021 (e.g., KB5006674/KB5006699 a...

CVE-2024-49082

CVE-2024-49082 is a Windows File Explorer information disclosure vulnerability. The connected data lists impact as access to sensitive data with CVSS 3.1 v3.1 vector: AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N, score 6.8 (Medium). Concrete details about root cause or affected Windows versions are not fu...

CVE-2025-21351

CVE-2025-21351 is a Windows AD DS API Denial of Service vulnerability. The initial record notes a network‑vector DoS impacting AD DS APIs with a CVSS v3.1 base score of 7.5 (HIGH) and no user interaction required. Connected documents indicate Microsoft has released updates addressing vulnerabilit...

CVE-2026-44803

CVE-2026-44803 describes an integer overflow/wraparound in Windows Win32K - GRFX that can allow a local attacker to execute code. The vulnerability is identified across multiple sources (NVD, CVE listing, and MSRC update page) and is classified with a high impact: local code execution, requiring ...

CVE-2024-26209

CVE-2024-26209 affects Microsoft Windows Local Security Authority Subsystem Service (LSASS). The entry describes an information disclosure vulnerability in LSASS, with a CVSS 3.1 base score of 5.5 (Medium), attack vector Local, privileges required Low, user interaction None, and a confidentiality...

CVE-2024-26218

CVE-2024-26218 is a Windows Kernel Elevation of Privilege vulnerability that Microsoft has addressed within the Windows KB updates KB5036893 and KB5036894. OpenVAS references place this CVE under Windows Kernel as enabling “elevated rights” (local, kernel-mode) with high CVSS 7.8 characteristics....

CVE-2024-38199

Technical details about CVE-2024-38199 are not publicly provided in the connected documents. Monitor for updates from Microsoft and NVD for affected products, fixes, and exploit information.

CVE-2026-23670

CVE-2026-23670 affects Windows Virtualization-Based Security (VBS) security feature. The issue is a local, high-privilege bypass of VBS protections, with no user interaction required (UI: NONE). Exploitation is possible with local access and may impact confidentiality and integrity (both HIGH), w...

CVE-2026-66802

CVE-2026-66802 describes a race condition in Microsoft Azure Attestation service and Device Health Attestation Service caused by improper synchronization of a shared resource. This concurrency issue allows an unauthenticated, network-based attacker to execute code on affected systems, with high i...

CVE-2024-30006

CVE-2024-30006 affects the Microsoft WDAC OLE DB provider for SQL Server and enables Remote Code Execution. The CVSS v3.1 base score is 8.8 (HIGH) with Network attack vector, Low attack complexity, and user interaction required. Some sources list it as a high-severity Windows vulnerability (score...

CVE-2025-24035

CVE-2025-24035 affects Windows Remote Desktop Services. The connected data corroborates a remote code execution risk over a network, arising from memory handling (sensitive data stored in improperly locked memory). The impact is described as executing arbitrary code, with the network as the attac...

CVE-2024-20698

CVE-2024-20698 is a Windows Kernel Elevation of Privilege vulnerability. The connected exploit analysis reveals that the bug resides in ntoskrnl.exe within WbAddLookupEntryEx, which manipulates an array of process pointers. Before the patch, it reallocates and inserts a new pointer, but the patch...

CVE-2024-29066

CVE-2024-29066 is an Windows DFS Remote Code Execution vulnerability. Affected: Windows Distributed File System (DFS). CVSS 3.1 base 7.2 (NETWORK, HIGH impact across Confidentiality, Integrity, Availability). Requirements: HIGH privileges, no user interaction; scope UNCHANGED. Concrete root-cause...

CVE-2024-38144

CVE-2024-38144 is a local elevation-of-privilege vulnerability in the Windows Kernel Streaming WOW Thunk Service Driver. The connected sources state a local attacker could obtain SYSTEM privileges and that exploit code appeared in the TyphoonPWN 2024 event, with a write‑up from SSD Secure Disclos...

CVE-2026-49160

The CVE-2026-49160 entry concerns HTTP.sys with an HTTP/2 resource consumption flaw leading to unauthenticated denial of service over the network. Exploitation details, affected versions or specific component paths aren’t provided in the connected documents. The NVD/MSRC entries confirm an uncont...

CVE-2026-62735

CVE-2026-62735 is a Windows HTTP.sys vulnerability described as a heap-based buffer overflow that enables an authorized, locally interacting attacker to elevate privileges. Evidence across sources confirms a local-exploit path with high impact (C/H/I/A), CVSS 3.1 vector: LOCAL, LOW complexity, LO...

CVE-2026-50518

CVE-2026-50518 is a heap-based buffer overflow in Windows DHCP Server that allows an unauthenticated attacker to execute code remotely over a network. Public sources (NVD, EUVD, CIRCL, MSRC update guidance) confirm the flaw and its impact as remote code execution; Talos notes exploitation in the ...

CVE-2024-21309

Technical details (affected product/component, root cause, impact, or fix) for CVE-2024-21309 are not publicly provided in the connected documents. Monitor for updates from authoritative sources.

CVE-2024-43625

CVE-2024-43625 is a Microsoft Windows VMSwitch elevation-of-privilege vulnerability (CVSSv3.1: 8.1, LOCAL, no user interaction). Affected component is the Windows VMSwitch; the exposed impact is potential total compromise with high confidentiality, integrity, and availability impact. Publicly dis...