CVE-2022-26913

CVE-2022-26913 is a Windows authentication information-disclosure vulnerability. The available connected data identifies affected software broadly as Windows operating systems and notes exploitation would involve information disclosure through the Windows authentication process. Public documentat...

CVE-2021-26441

CVE-2021-26441 is a local-elevation vulnerability in the Storage Spaces Controller. CVSSv3.1 base 7.8 (HIGH): LOCAL vector, LOW privileges required, no user interaction; impacts on confidentiality, integrity, and availability are High. The provided documents do not specify affected product/versio...

CVE-2019-1089

Technical details about CVE-2019-1089 are not publicly provided in the connected documents. The initial entry notes an elevation of privilege in rpcss.dll but no vendor/product/version specifics are given here. Monitor for updates.

CVE-2021-38671

Technical details about CVE-2021-38671 are not publicly available in the provided documents; monitor for updates and cross-check with official advisories for affected products and fixes.

CVE-2022-21874

CVE-2022-21874 is a Windows Security Center API RCE vulnerability. Public details in the connected documents describe it as an RCE in the Windows Security Center API with a CVSS v3.1 base score of 7.8 (High) and a Local attack vector requiring user interaction for exploitation. Exploitation conte...

CVE-2022-21983

CVE-2022-21983 is a Win32 Stream Enumeration Remote Code Execution vulnerability. The connected sources show an in-scope CVE with a network attack vector and high impact: CVSSv3.1 base score 7.5 (HIGH), with no authentication (NONE) and user interaction required (REQUIRED); confidentiality, integ...

CVE-2019-1120

Technical details about CVE-2019-1120 are not publicly provided in the supplied documents; monitor for official updates.

CVE-2020-0689

CVE-2020-0689 is a Microsoft Secure Boot security feature bypass vulnerability affecting UEFI modules loaded with Secure Boot. Microsoft advisories relate to an attacker bypassing Secure Boot to load untrusted software, with remediation provided by a Secure Boot DBX update (KB5012170) that adds t...

CVE-2022-21893

Technical details about CVE-2022-21893 are not provided in the connected documents. The supplied sources include high-level vulnerability descriptions and update references, but no specifics on affected products/versions or fixes. Monitor for updated, concrete disclosures.

CVE-2021-34480

Technical details about CVE-2021-34480 are not provided in the connected documents. Public descriptions exist, but no specifics on affected products, root cause, impact, or fixes are included here. Monitor for updates.

CVE-2022-22713

CVE-2022-22713 is a Windows Hyper-V Denial of Service vulnerability. Details in connected docs show it stems from a race condition in Hyper-V that can allow a local attacker to trigger a DoS on affected systems. Affected products include Windows Server 20H2 and Windows 10 x64 editions in 20H2/21H...

CVE-2022-34714

Technical details about CVE-2022-34714 are not provided in the attached documents. The connected items do not describe affected products, root cause, impact, or remediation for this CVE. Monitor for updates.

CVE-2022-35769

Technical details for CVE-2022-35769 (Windows PPP DoS) are not provided in the supplied documents. No affected product/version or remediation is described here. Monitor for updates from Microsoft and Vulners for confirmed specifics.

CVE-2022-44707

Technical details about CVE-2022-44707 are not provided in the supplied documents. The connected set does not describe affected products/versions or remediation; monitor for updates.

CVE-2020-17096

Technical details about CVE-2020-17096 are not provided in the connected documents. Available sources mention impact and CVSS but do not disclose affected product versions, root cause, exploit status, or fixes in this data set. Monitor for updates.

CVE-2022-21984

CVE-2022-21984 is a Windows DNS Server Remote Code Execution vulnerability. The issue affects Windows DNS Server when dynamic updates are enabled, potentially allowing an attacker to take over the DNS server and execute code with elevated privileges. Mitigation in the provided documents points to...

CVE-2022-26831

CVE-2022-26831 : Windows LDAP Denial of Service vulnerability. The vulnerability is described as a Windows LDAP DoS issue with a Network attack vector (no user interaction) and a high-impact on availability (per CVSS v3.1: 7.5, HIGH; CVSS v2: 5.0, MEDIUM). Connected sources confirm the Windows LD...

CVE-2022-23297

CVE-2022-23297 is described as Windows NT LAN Manager Datagram Receiver Driver Information Disclosure Vulnerability. According to the initial entry, it has a CVSSv3.1 base score of 5.5 (MEDIUM) with LOCAL attack vector, LOW attack complexity, and LOW privileges required, causing HIGH confidential...

CVE-2022-35792

Technical details (affected product/versions, root cause, exploit information, and remediation) are not provided in the connected documents for CVE-2022-35792. Monitor for updates.

CVE-2022-34704

CVE-2022-34704 is a Windows Defender Credential Guard Information Disclosure vulnerability. The CVSS‑3.1 base score is 4.7 (Medium) with Local attack vector, HIGH attack complexity, LOW privileges required, and NONE user interaction. Confidentiality impact is HIGH; integrity and availability are ...

CVE-2021-34460

Technical details about CVE-2021-34460 are not publicly available in the provided documents. The connected sources do not specify affected products, root cause, impact, or fixes. Monitor for updates.

CVE-2022-21857

Technical details for CVE-2022-21857 (Active Directory Domain Services Elevation of Privilege) are not provided in the connected documents. The initial description confirms AD DS Elevation of Privilege, but no affected product versions, root cause, impact, or fixes are included here. Monitor for ...

CVE-2022-23253

CVE-2022-23253 is a Windows PPTP Denial of Service vulnerability. The records show it has a CVSS v3.1 base score of 6.5 (Network, Low attack complexity, Privileges Low, No user interaction) with HIGH availability impact. Concrete details about affected products, versions, or exploit activity are ...

CVE-2022-23270

Technical details about CVE-2022-23270 are not present in the provided connected documents. Public information on affected products, root cause, and remediation is not provided here. Monitor Microsoft Security Update Guide and MSRC advisories for official details and fixes.

CVE-2022-30226

Technical details and indicators for CVE-2022-30226 are not provided in the supplied documents. No affected product/version specifics or remediation are included here; monitor official advisories for updates.

CVE-2022-22034

Technical details about CVE-2022-22034 are not publicly provided in the supplied documents. Monitor for updates from official vendors when more information becomes available.

CVE-2022-26919

Technical details about CVE-2022-26919 are not publicly available in the provided connected documents. Monitor for updates from official advisories to learn affected products, root cause, impact, and recommended mitigations.

CVE-2022-29129

CVE-2022-29129 is described as a Windows LDAP Remote Code Execution vulnerability. The connected CNVD entry (CNVD-2022-72859) also labels “Microsoft Windows LDAP Remote Code Execution Vulnerability,” confirming LDAP RCE wording in the CVE context. However, the connected documents do not provide c...

CVE-2022-21898

CVE-2022-21898 is a DirectX Graphics Kernel Remote Code Execution vulnerability in Windows. The entry notes a network-based, no-user-interaction exploit with high/critical impact (C: High, I: High, A: High) and local/remote exploitation in different entries; the primary CVE description identifies...

CVE-2022-29104

Technical details (affected products/components, root cause, impact, and exploit info) for CVE-2022-29104 are not provided in the connected documents. Monitor for updates; current sources here do not publish public vulnerability specifics beyond the CVE entry.

CVE-2022-34709

CVE-2022-34709 relates to a Windows Defender Credential Guard security feature bypass. The entry lists a CVSS v3.1 base score of 6.0 (MEDIUM), with LOCAL attack vector, LOW attack complexity, HIGH privileges required, and no user interaction. Confidentiality and integrity impact are HIGH, availab...

CVE-2022-35766

CVE-2022-35766 is described in the connected CNNVD entry as a code injection vulnerability in the Windows Secure Socket Tunneling Protocol (SSTP) that can lead to remote code execution. The CNNVD note lists affected Windows releases (e.g., various Windows 10/11 and Windows Server versions) but do...

CVE-2021-31962

Technical details (affected product/versions, root cause, impact, exploitability, and remediation) are not provided in the supplied documents. Monitor official disclosures and updates from the included sources for any forthcoming information.

CVE-2022-26914

CVE-2022-26914 is a Win32k elevation-of-privilege vulnerability in Windows Win32k. The CVSS info in the initial record indicates local, low-privilege requirements with high impacts on confidentiality/integrity/availability. Connected documents reference Microsoft update notes (KB5012604, KB501264...

CVE-2019-0584

CVE-2019-0584 refers to a remote code execution vulnerability in the Windows Jet Database Engine, arising from improper handling of objects in memory. The issue affects multiple Windows platforms (as listed in the initial entry). The connected Nessus/Office-related documents corroborate a broader...

CVE-2019-1151

CVE-2019-1151 is the Microsoft Graphics Remote Code Execution vulnerability. The Windows font library fails to properly handle specially crafted embedded fonts, enabling remote code execution that can compromise an affected system (install programs, modify data, create accounts with full rights)....

CVE-2022-21836

CVE-2022-21836 is a Windows kernel-level spoofing flaw that could bypass WPBT verification by presenting a small number of compromised certificates. Microsoft mitigated this by adding those certificates to the Windows kernel driver block list, blocking them even if present in WPBT. The CVE is dis...

CVE-2022-22016

Technical details for CVE-2022-22016 are not publicly available in the provided documents. No information on affected products, root cause, exploitability, or fixes is present. Monitor for updates.

CVE-2022-24492

CVE-2022-24492 is a Remote Code Execution vulnerability in Windows RPC Runtime. The connected Akamai blog notes that Windows RPC-related RCE vulnerabilities were patched in Microsoft’s April 2022 Patch Tuesday, including CVE-2022-24492, with patches issued as part of the Windows security updates....

CVE-2022-29113

Technical details about CVE-2022-29113 (affected components, root cause, impact, and fixes) are not publicly provided in the supplied documents. Monitor for updates from official advisories.

CVE-2022-33670

Technical details about CVE-2022-33670 (affected components, exploit vectors, impact, and fixes) are not provided in the supplied documents; no concrete information is available. Monitor for updates.

CVE-2017-8582

CVE-2017-8582 affects the HTTP.sys server component in multiple Windows editions. The vulnerability arises from the component’s improper handling of in-memory objects, enabling a remote, unauthenticated attacker to obtain information and potentially facilitate further compromise. The impact is an...

CVE-2021-24086

CVE-2021-24086 is a Windows TCP/IP DoS affecting tcpip.sys via IPv6 processing. Public PoCs show remote triggering by crafted IPv6/UDP packets and IPv6 fragment handling, potentially causing kernel memory issues or a crash. The vulnerability was patched by Microsoft in Feb 2021; exploitation deta...

CVE-2022-37991

CVE-2022-37991 is a Windows kernel registry issue tied to regf hive loading where key/value name length checks were not enforced (e.g., key names up to 1040 chars). This could lead to memory corruption or crashes during hive load; connected materials describe related hive/registry memory-corrupti...

CVE-2019-0538

CVE-2019-0538 is a remote code execution vulnerability in the Windows Jet Database Engine caused by improper handling of objects in memory. A successful exploit could allow an attacker to execute arbitrary code on a vulnerable system by convincing a user to open a specially crafted file. Affected...

CVE-2020-0642

CVE-2020-0642 is a Windows Win32k Elevation of Privilege vulnerability. The Win32k component can mishandle objects in memory, enabling local privilege escalation and kernel‑mode access when exploited on affected Windows/Windows Server builds. Public connected documents corroborate the Win32k memo...

CVE-2020-1421

CVE-2020-1421 is a Windows remote code execution vulnerability tied to processing a .LNK file. An attacker who successfully exploits it could gain the same user rights as the current user; CVSS indicates Network access, low attack complexity, with user interaction required.

CVE-2022-21896

CVE-2022-21896 concerns the Windows DWM Core Library Elevation of Privilege. The NVD entry describes a local, privilege-escalation vulnerability with a CVSS v3.1 base score of 7.0 (HIGH) and an older CVSS v2 base score of 6.9 (MEDIUM). The CVE is associated with Windows components and is referenc...

CVE-2022-21902

Technical details about CVE-2022-21902 are not provided in the supplied documents. No affected products, root cause, impact, or remediation are disclosed here. Monitor for updates.

CVE-2020-16898

CVE-2020-16898 is a Windows TCP/IP remote code execution vulnerability triggered by specially crafted ICMPv6 Router Advertisement packets. The issue arises from how the Windows TCP/IP stack handles ICMPv6 RA messages, allowing an attacker to execute code on a targeted Windows host by sending craf...