CVE-2023-44487

CVE-2023-44487 – HTTP/2 Rapid Reset DoS Root cause: HTTP/2 stream resets can cause servers to continue processing, leading to unbounded resource consumption and potential DoS when clients rapidly cancel streams. What’s affected: Various HTTP/2 implementations and deployments, including servers, p...

CVE-2023-50387

CVE-2023-50387 (KeyTrap) affects DNSSEC processing in DNS resolvers. Multiple advisories note excessive CPU/DoS risk when validating DNSKEY/RRSIG in zones with many records. Affected products include Bind (bind9) and Unbound across Linux distributions (e.g., AL2, AlmaLinux) with patches/released ...

CVE-2013-3900

CVE-2013-3900 describes a remote code execution in the WinVerifyTrust Authenticode verification for PE files. An attacker could modify a signed executable to execute code without invalidating the signature, potentially gaining full control of the system. Microsoft republished this CVE in the Secu...

CVE-2023-21554

The CVE-2023-21554 vulnerability is an RCE in Microsoft Message Queuing (MSMQ) due to improper input validation (CWE-20) in the MSMQ service. When MSMQ is enabled, a crafted MSMQ packet over TCP port 1801 can trigger an out-of-bounds/overflow condition, potentially allowing remote code execution....

CVE-2023-28252

CVE-2023-28252 – Windows CLFS driver local privilege escalation : The vulnerability stems from CLFS.sys handling of file blocks in memory (m_rgBlocks) and associated metadata, enabling an out-of-bounds access that lets an unprivileged user hijack the SYSTEM token. Public PoCs and in-the-wild acti...

CVE-2023-21823

CVE-2023-21823 (Windows Graphics Component RCE) : A Windows Graphics Component remote code execution vulnerability that can give an attacker SYSTEM-level code execution when exploited. Public discussion across sources notes exploitation risk and active exploitation in the wild around Patch Tuesda...

CVE-2022-38023

CVE-2022-38023 (NetLogon RC4-HMAC vulnerability) affects Samba and related packages (samba, samba-client, libsmbclient, libwbclient, etc.). Technical detail: the issue stems from allowing RC4/HMAC-MD5 in the NetLogon Secure Channel, weakening authentication between clients and servers. Affected p...

CVE-2023-21768

CVE-2023-21768 affects the Windows Ancillary Function Driver for WinSock (afd.sys). The vulnerability stems from a flaw in AfdNotifyRemoveIoCompletion, enabling a local privilege escalation to SYSTEM by manipulating I/O ring structures. Documented impact shows LPE on Windows 11 22H2 up to build 2...

CVE-2023-24932

CVE-2023-24932 is a Secure Boot bypass vulnerability. It involves a Microsoft-signed UEFI application using the IhisiParamBuffer NVRAM variable to bypass Security2 verification, potentially allowing execution of unsigned binaries during early boot. Affected components include DT Research’s DtBios...

CVE-2023-36434

Technical details about CVE-2023-36434 are not provided in the connected documents. The materials mention the vulnerability in Windows IIS (Elevation of Privilege) but do not disclose affected products, root cause, exploit info, or fixes. Monitor for updates.

CVE-2022-26809

CVE-2022-26809 is a Windows RPC Runtime Remote Code Execution vulnerability. Public material in the connected documents indicates an unauthenticated remote attacker can trigger code execution by sending a crafted RPC call, with the real vulnerability located in OSF_CASSOCIATION::ProcessBindAckOrN...

CVE-2023-36803

CVE-2023-36803 is a Windows kernel vulnerability linked to the VRegDriver/registry callback path, enabling information disclosure via registry virtualization and differencing hive mechanisms. The connected material describes it as one of several registry callbacks issues in the VRegDriver stack, ...

CVE-2023-38147

Technical details about CVE-2023-38147 are not publicly provided in the supplied documents. Monitor for updates from the sources listed (NVD, CVE List, OpenVAS entries, and Microsoft KB).

CVE-2022-29130

Technical details about CVE-2022-29130 are not provided in the connected documents. Publicly available information in the initial entry is limited to high‑level descriptors; no product/version/impact/fix specifics are included here. Monitor for official updates.

CVE-2023-23415

CVE-2023-23415 is described via connected sources as an ICMP-based Remote Code Execution affecting Windows. The referenced material states that exploitation could involve sending a malicious fragmented ICMP packet to a vulnerable host bound to a raw socket, potentially enabling arbitrary code exe...

CVE-2022-30209

Technical details (affected products, exploit vector, root cause, and remediation) are not provided in the supplied documents. Monitor for updates from official sources.

CVE-2023-32049

CVE-2023-32049 is a Windows SmartScreen Security Feature Bypass vulnerability. The issue allows an attacker to bypass the Open File - Security Warning prompt by convincing a user to click a specially crafted URL, enabling potential code execution on the affected system. Public sources indicate ac...

CVE-2022-37967

CVE-2022-37967 is described in connected sources as a Samba-related Kerberos elevation-of-privilege flaw. The Alt Linux entry notes fixes for Samba 4.16 (4.16.8-alt1) and 4.17.x packages addressing CVE-2022-37966, CVE-2022-37967, and CVE-2022-38023, with the specific issue: a service account with...

CVE-2023-32046

CVE-2023-32046 is a Windows MSHTML Platform Elevation of Privilege vulnerability. The MSHTML engine (used by Windows, Office, Outlook, etc.) contains a flaw that enables local privilege escalation when a user opens a specially crafted file delivered via email or web page. Exploitation requires us...

CVE-2023-23392

CVE-2023-23392 is a remotely exploitable security flaw in the Windows HTTP Protocol Stack that enables remote code execution when HTTP/3 with buffered I/O is enabled. Multiple connected sources confirm affected products as Windows 11 and Windows Server 2022, with successful exploitation possible ...

CVE-2024-38202

CVE-2024-38202 describes an elevation of privilege in Windows Update that could allow a user with basic privileges to reintroduce mitigated vulnerabilities or bypass some VBS protections. The vulnerability requires an attacker to coax an Administrator or delegated user into performing a system re...

CVE-2023-28229

CVE-2023-28229 is a Windows vulnerability in the Cryptographic Next Generation (CNG) Key Isolation Service described as a privilege-escalation flaw. The CVE entry is linked to active exploitation in practice (CISA KEV) and is categorized with a high impact vector (local access, total impact on co...

CVE-2023-38162

Technical details for CVE-2023-38162 are not publicly available in the provided documents. Monitor for updates.

CVE-2023-36801

Technical details for CVE-2023-36801 are not provided in the supplied documents. No explicit affected product/version, root cause, impact, or remediation are specified here. Monitor for updates from official sources.

CVE-2022-24508

CVE-2022-24508 is a Windows SMBv3 client/server remote code execution vulnerability. The issue resides in the SMBv3 compression feature introduced in newer Windows builds and can enable code execution on a vulnerable system when exploited over a network. Exploitation requires authentication and c...

CVE-2023-35349

Technical details about CVE-2023-35349 are not publicly provided in the connected documents. The MSMQ RCE vulnerability specifics (affected products/versions, exploitability, and fixes) are not disclosed here; monitor official Microsoft advisories and CVE records for updates.

CVE-2023-38161

Technical details for CVE-2023-38161 are not publicly provided in the supplied documents; no confirmed affected product/version/impact/root cause/fix are stated here. Monitor for official advisories.

CVE-2022-37966

CVE-2022-37966 is the Windows Kerberos RC4-HMAC Elevation of Privilege vulnerability. Reports in Samba advisories identify this CVE as affecting Samba deployments (e.g., Samba AD DC/members) where RC4-HMAC could be used for Kerberos tickets, allowing elevated access. Remediation focuses on applyi...

CVE-2023-38171

CVE-2023-38171 — Microsoft QUIC Denial of Service vulnerability is documented in connected advisories (MSRC/GHSA). The issue affects QUIC implementations in Windows environments and can enable a remote attacker to cause a denial-of-service by crafting specific requests to the QUIC component. The ...

CVE-2023-36804

CVE-2023-36804 is a Windows GDI elevation-of-privilege vulnerability (local, low privileges required, no user interaction) with a CVSS v3.1 base score of 7.8 (HIGH). Affected component is Windows GDI; impact is high on confidentiality, integrity, and availability. Connected sources corroborate th...

CVE-2023-38152

Technical details about CVE-2023-38152 (affected product, vulnerable component, impact, or fixes) are not publicly provided in the connected documents; monitor for updates.

CVE-2023-36435

CVE-2023-36435 Microsoft QUIC Denial of Service vulnerability affects the MsQuic/Microsoft QUIC server. It can be exploited remotely over the network to cause a denial of service (availability impact). The CVSS v3.1 base score is 7.5 (Network, Low complexity, No privileges, No user interaction; i...

CVE-2023-36577

CVE-2023-36577 concerns the Microsoft WDAC OLE DB provider for SQL Server. Public descriptions indicate a remote code execution vulnerability in this WDAC OLE DB provider, enabling an attacker to execute arbitrary code on a vulnerable system. The CVE is characterized with a Network attack vector,...

CVE-2023-38159

Technical details for CVE-2023-38159 are not provided in the connected documents. Public details (affected software, impact, and mitigations) should be consulted from the NVD/Microsoft advisory.

CVE-2023-36702

CVE-2023-36702 affects Microsoft DirectMusic. Based on the CVSS 3.1 vector, the vulnerability is a LOCAL, low-complexity exploit that requires user interaction and yields HIGH impact to confidentiality, integrity, and availability. The provided documents identify the affected component only as Di...

CVE-2023-36602

The CVE-2023-36602 entry maps to a Windows TCP/IP Denial of Service vulnerability with CVSS v3.1 base score 7.5. IBM’s Security Bulletin notes that Windows TCP/IP DoS affects IBM Cloud Pak System Software Suite 2.3.3.0–2.3.3.6 (Intel iFix1), with remediation by upgrading to Cloud Pak System v2.3....

CVE-2023-36722

Technical details (affected product/versions, root cause, exploitability, or fix) for CVE-2023-36722 are not provided in the supplied connected documents; monitor for updates.

CVE-2023-36567

Technical details for CVE-2023-36567 are not publicly provided in the supplied documents. Monitor for updates from official advisories; current entries mention Windows Deployment Services information disclosure but lack specifics on affected components or fixes.

CVE-2023-24941

CVE-2023-24941 is a Windows Network File System (NFS) Remote Code Execution vulnerability. The connected AVLEONOV post confirms the flaw exists in Windows NFS and can be exploited over the network by an unauthenticated, specially crafted NFS request, leading to code execution with high impact. Ro...

CVE-2023-36711

Technical details about CVE-2023-36711 are not publicly provided in the supplied documents. Monitor for official advisories for affected products, impact, and fixes.

CVE-2023-36436

CVE-2023-36436 is a Windows MSHTML Platform Remote Code Execution vulnerability. The CVSS 3.1 vector (AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) yields a base score of 7.8 (HIGH) with a LOCAL attack vector, requiring user interaction and granting high impact on confidentiality, integrity, and availabil...

CVE-2023-36589

The CVE-2023-36589 entry corresponds to a Microsoft Message Queuing (MSMQ) Remote Code Execution vulnerability. Public records in connected documents confirm MSMQ is the affected component, with a local attack vector and user interaction required. The CVSS 3.1 base metrics (AV:L, AC:L, PR:L, UI:R...

CVE-2024-20666

CVE-2024-20666 is a BitLocker security feature bypass related to the Windows Recovery Environment (WinRE). The connected MSRC/updates data confirm a BitLocker bypass vulnerability and note a Microsoft security update to mitigate it (KBs associated with January 2024 security updates, including Win...

CVE-2023-36431

CVE-2023-36431 concerns Microsoft Message Queuing (MSMQ) with a Denial of Service impact. The connected CNVD/NVD entries identify MSMQ as the affected component and classify it as a DoS vulnerability, but do not provide concrete root-cause details, vulnerable versions, or remediation steps within...

CVE-2023-36573

Technical details (affected products, vulnerable components, exploitability, and remediation) are not publicly provided in the connected documents. Monitor for updates from official CVE/NVD/MSRC sources to obtain concrete details and fixes.

CVE-2023-36576

CVE-2023-36576 is a Windows kernel registry/containerization vulnerability in VRegDriver that enabled a container escape via registry virtualization (VrpRegistryCallback) when using differencing/hive layering. The issue related to VrpBuildKeyPath and other path-resolution logic allowed an untrust...

CVE-2023-36731

CVE-2023-36731 is a Windows Win32k Elevation of Privilege vulnerability. The CVE entry appears in multiple Microsoft KBs (notably KB5031362) and is listed across OpenVAS checks, indicating it is addressed by Windows security updates in those advisories. The core detail in the provided documents i...

CVE-2023-36571

CVE-2023-36571 is described as a Microsoft Message Queuing (MSMQ) Remote Code Execution vulnerability. The connected documents confirm MSMQ is the affected component and (from the NVD metrics) the CVSS v3.1 base score is 7.3 (HIGH) with LOCAL attack vector, LOW attack complexity, LOW privileges r...

CVE-2023-36574

CVE-2023-36574 affects Microsoft Message Queuing (MSMQ) with a local, user-interaction–dependent remote code execution vulnerability (CVSS v3.1: AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H; base 7.3). Exploitation status and remediation details are not provided in the supplied connected documents.

CVE-2023-36596

CVE-2023-36596 is described as a Remote Procedure Call Information Disclosure Vulnerability with CVSS v3.1 base score 7.5 (HIGH). It is labeled as network-based with low attack complexity and no privileges or user interaction required, and it has a high confidentiality impact. The provided docume...