Analysis Summary

CVE-2024-28902 CVSS:5.5

Microsoft Windows could allow a local authenticated attacker to obtain sensitive information, caused by a buffer over-read in the Remote Access Connection Manager component. By executing a specially crafted program, an attacker could exploit this vulnerability to obtain sensitive information from heap memory and use this information to launch further attacks against the affected system.

CVE-2024-26233 CVSS:7.2

Microsoft Windows could allow a remote attacker to execute arbitrary code on the system, caused by a flaw in DNS Server. By sending a specially crafted request, an attacker could exploit this vulnerability to execute arbitrary code on the system.

CVE-2024-26221 CVSS:7.2

Microsoft Windows could allow a remote attacker to execute arbitrary code on the system, caused by a flaw in DNS Server. By sending a specially crafted request, an attacker could exploit this vulnerability to execute arbitrary code on the system.

CVE-2024-26212 CVSS:7.5

Microsoft Windows is vulnerable to a denial of service, caused by uncontrolled resource consumption in the DHCP Server Service component. By sending a specially crafted request, a remote attacker could exploit this vulnerability to cause a denial of service.

CVE-2024-28914 CVSS:8.8

Microsoft OLE DB Driver for SQL Server could allow a remote attacker to execute arbitrary code on the system. By persuading a victim to open a specially crafted content, an attacker could exploit this vulnerability to execute arbitrary code on the system.

CVE-2024-26222 CVSS:7.2

Microsoft Windows could allow a remote attacker to execute arbitrary code on the system, caused by a flaw in DNS Server. By sending a specially crafted request, an attacker could exploit this vulnerability to execute arbitrary code on the system.

CVE-2024-20665 CVSS:6.1

Microsoft Windows could allow a physical authenticated attacker to bypass security restrictions, cause by protection mechanism failure in the BitLocker component. An attacker could exploit this vulnerability to bypass secure booting.

CVE-2024-26243 CVSS:7

Microsoft Windows could allow a local authenticated attacker to gain elevated privileges on the system, caused by a buffer over-read in the USB Print Driver component. By winning a race condition, an attacker could exploit this vulnerability to obtain SYSTEM privileges.

CVE-2024-28920 CVSS:7.8

Microsoft Windows could allow a local authenticated attacker to bypass security restrictions, cause by protection mechanism failure in the Secure Boot component. An attacker could exploit this vulnerability to bypass secure booting.

CVE-2024-26244 CVSS:8.8

Microsoft Windows could allow a remote attacker to execute arbitrary code on the system, caused by a flaw in WDAC SQL Server ODBC Driver. By sending a specially crafted request, an attacker could exploit this vulnerability to execute arbitrary code on the system.

CVE-2024-26213 CVSS:7

Microsoft Windows could allow a local authenticated attacker to gain elevated privileges on the system, caused by a flaw in Brokering File System. By sending a specially crafted request, an attacker could exploit this vulnerability to escalate privileges.

CVE-2024-28922 CVSS:6.7

Microsoft Windows could allow a local authenticated attacker to bypass security restrictions, cause by protection mechanism failure in the Secure Boot component. An attacker could exploit this vulnerability to bypass secure booting.

CVE-2024-28898 CVSS:6.3

Microsoft Windows could allow a remote authenticated attacker within the local network to bypass security restrictions, cause by a stack-based buffer overflow in the Secure Boot component. An attacker could exploit this vulnerability to bypass secure booting.

CVE-2024-26168 CVSS:6.8

Microsoft Windows could allow a physical attacker to bypass security restrictions, cause by a heap-based buffer overflow in the Secure Boot component. An attacker could exploit this vulnerability to bypass secure booting.

CVE-2024-26175 CVSS:7.8

Microsoft Windows could allow a local authenticated attacker to bypass security restrictions, cause by an out-of-bounds read in the Secure Boot component. An attacker could exploit this vulnerability to bypass security feature to cause impact on confidentiality, integrity and availability.