CVE-2023-36598

CVE-2023-36598 concerns the Microsoft WDAC ODBC Driver with a remote code execution vulnerability. Affected component: WDAC ODBC Driver (Microsoft). Exploitation requires local access and user interaction, with a CVSS v3.1 base score of 7.8 (High); impact to confidentiality, integrity, and availa...

CVE-2021-43226

CVE-2021-43226 pertains to the Windows Common Log File System (CLFS) Driver. The available documents identify a local privilege-escalation vulnerability in CLFS that could allow a privileged attacker on a Windows host to gain higher privileges. The CVE is listed in the KEV catalog as a Microsoft ...

CVE-2024-21420

Technical details about CVE-2024-21420 are not publicly provided in the supplied documents. The connected sources reference the CVE ID and Microsoft patches but do not disclose affected product specifics, root cause, impact, or remediation beyond generic update context. Monitor for updates.

CVE-2024-21357

Technical details for CVE-2024-21357 are not provided in the connected documents. Monitor for updates and new disclosures.

CVE-2023-21712

CVE-2023-21712 describes a Windows PPTP/RAS Remote Code Execution vulnerability. A race condition in the Point-to-Point Tunneling Protocol could allow unauthenticated, network-based attackers to execute arbitrary code in the RAS environment. The issue affects Windows Remote Access Service compone...

CVE-2024-30080

Technical details about CVE-2024-30080 are not provided in the supplied documents. No specifics on affected products, vulnerable components, root cause, or fixes are included; monitor for updates from Microsoft/security advisories.

CVE-2022-26934

CVE-2022-26934 is a Windows Graphics Component information disclosure vulnerability. Affects Windows graphics handling (Windows Graphics Component) and is disclosed as a network-exposed information disclosure with a base CVSSv3.1 score of 6.5 (vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N)...

CVE-2022-21871

Technical details about CVE-2022-21871 are not publicly provided in the supplied documents; no affected product/version, root cause, or remediation are described here. Monitor for official disclosures and updates.

CVE-2024-38257

CVE-2024-38257 affects the Windows AllJoyn API, described as an Information Disclosure vulnerability. The CVSS vector indicates network access with no user interaction, low attack complexity, and no privileges required, with confidentiality impact high and other impacts none. Connected sources co...

CVE-2022-35744

Technical details (affected product, root cause, impact, or fixes) are not provided in the supplied documents. Monitor for updates from official CVE sources; no specifics about exploitation, vectors, or mitigations are included here.

CVE-2022-35756

Technical details about CVE-2022-35756 (affected products, root cause, impact, fix) are not provided in the connected documents. Monitor for official disclosures and updates from Microsoft and CVE listings.

CVE-2022-35752

Technical details about CVE-2022-35752 are not publicly available in the provided connected documents. Monitor for updates.

CVE-2022-35749

Technical details about CVE-2022-35749 are not provided in the supplied documents. Available references confirm the CVE title and severity, but no affected product/version or root cause are detailed here. Monitor for official disclosures and updates.

CVE-2022-35755

Technical details about CVE-2022-35755 (affected software, root cause, impact, or patch specifics) are not provided in the connected documents; monitor official CVE/NVD updates for details.

CVE-2022-35750

Technical details about CVE-2022-35750 (affected product/component, versions, root cause, exploitability) are not publicly available in the provided Connected Documents. Monitor for updates and new disclosures in authoritative sources.

CVE-2022-35743

CVE-2022-35743 is a Microsoft Windows MSDT Remote Code Execution vulnerability. Documents indicate an exploitation path that is Local with Low Attack Complexity and requires User Interaction, yielding high confidentiality, integrity, and availability impact. CVSS 3.1 base score 7.8 (HIGH). No exp...

CVE-2022-35754

Technical details (affected product, version, root cause, and remediation) are not publicly available in the provided documents. Monitor for updates.

CVE-2024-38254

CVE-2024-38254 is listed by NCSc as a Windows Authentication Methods vulnerability with CVSS 5.5 (Medium) and impact: Access to sensitive data. The connected documents do not provide affected product versions or exploit details. Microsoft has fixed vulnerabilities in Windows and recommends applyi...

CVE-2022-35745

Technical details about CVE-2022-35745 are not publicly provided in the supplied documents. Please monitor official advisories for updates on affected products, vectors, impacts, and remediation.

CVE-2024-38250

CVE-2024-38250 is a Windows Graphics Component elevation-of-privilege vulnerability. The CVE entry (Microsoft product area) indicates a local attacker with low privileges and no user interaction could obtain higher privileges (CVSS 7.8, High). Connected sources corroborate that Microsoft has issu...

CVE-2022-35758

Technical details about CVE-2022-35758 (affected product/component, root cause, impact, or remediation) are not publicly provided in the supplied connected documents. Monitor for updates from official sources.

CVE-2022-35753

Technical details (affected products/versions, impact, root cause, or fixes) for CVE-2022-35753 are not provided in the connected documents. Monitor official sources (MSRC/NVD) for concrete details and remediation guidance.

CVE-2022-35757

CVE-2022-35757 affects the Windows Cloud Files Mini Filter Driver and is rated HIGH with LOCAL attacker access, requiring LOW privileges and USER interaction to exploit. The issue is an elevation-of-privilege in the Mini Filter Driver, enabling a local attacker to gain higher privileges. Microsof...

CVE-2022-35759

Technical details for CVE-2022-35759 (affected product, root cause, impact, and fix) are not provided in the connected documents. Monitor for updates.

CVE-2022-35747

Technical details for CVE-2022-35747 are not provided in the connected documents. No affected products, root cause, impacts, or fixes are specified beyond the generic description. Monitor for updates for public disclosure and remediation guidance.

CVE-2024-38046

CVE-2024-38046 is described as a local privilege-escalation vulnerability in PowerShell. The primary public documentation (NVD/NCSC) confirms a local attacker with low privileges could elevate privileges on affected Windows components, with a CVSS v3.1 base score of 7.8 (LOCAL, Privileges Require...

CVE-2022-35746

Technical details about CVE-2022-35746 are not provided in the supplied documents. No product/version/root-cause/impact are specified here; monitor for official updates from Microsoft/NVD to obtain concrete information and remediation.

CVE-2024-38256

CVE-2024-38256 is a Windows kernel‑mode driver information disclosure vulnerability. The incident affects Windows kernel‑mode drivers and has a CVSSv3.1 base score of 5.5 (MEDIUM) with local attack vector, low attack complexity, and low privileges required; confidentiality impact is High, others ...

CVE-2024-38119

CVE-2024-38119 affects Windows Network Address Translation (NAT). The vulnerability allows Remote Code Execution with high impact (cctx: code execution, data/privilege impact) when an attacker on an adjacent network exploits NAT processing. CVSS 3.1 vector: AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H. Mi...

CVE-2022-44684

CVE-2022-44684 affects Windows Local Session Manager (LSM). The issue stems from insufficient input validation in the LSM component, enabling denial-of-service via remote exploitation. Impact is a system denial of service; CVSS v3.1 base score 6.5 (Network, Low privileges, No user interaction). A...

CVE-2024-38252

Technical details about CVE-2024-38252 are not publicly provided in the supplied documents. The records reference a Windows kernel privilege-elevation issue but do not disclose affected components, root cause, or fixes. Monitor for updates.