CVE-2022-35771

Technical details about CVE-2022-35771 are not provided in the supplied documents; the initial entry lacks affected products, root cause, impact, or remediation information. Monitor for official updates.

CVE-2016-7182

CVE-2016-7182 is a true‑type font parsing elevation of privilege vulnerability in the Windows Graphics component. The flaw affects multiple Windows OS versions (Vista SP2, Server 2008 SP2/R2 SP1, Windows 7/8.1/10, Windows Server 2012 R2, Windows RT 8.1, Office 2007/2010, Word Viewer, Skype for Bu...

CVE-2022-22015

Technical details about CVE-2022-22015 are not provided in the connected documents. The MSKB entries listed pertain to OS/security updates but do not disclose affected RDP components, exploit specifics, or patch details for this CVE. Monitor for updates.

CVE-2022-23270

Technical details about CVE-2022-23270 are not present in the provided connected documents. Public information on affected products, root cause, and remediation is not provided here. Monitor Microsoft Security Update Guide and MSRC advisories for official details and fixes.

CVE-2021-26899

Technical details for CVE-2021-26899, including affected product/version, root cause, impact, and fix, are not provided in the connected documents. Monitor for updates from official sources.

CVE-2021-26442

Technical details for CVE-2021-26442 are not present in the connected documents. Public info here is generic. Monitor for updates from official advisories; no product/version/impact specifics are provided in the supplied materials.

CVE-2022-21836

CVE-2022-21836 is a Windows kernel-level spoofing flaw that could bypass WPBT verification by presenting a small number of compromised certificates. Microsoft mitigated this by adding those certificates to the Windows kernel driver block list, blocking them even if present in WPBT. The CVE is dis...

CVE-2022-21874

CVE-2022-21874 is a Windows Security Center API RCE vulnerability. Public details in the connected documents describe it as an RCE in the Windows Security Center API with a CVSS v3.1 base score of 7.8 (High) and a Local attack vector requiring user interaction for exploitation. Exploitation conte...

CVE-2022-29126

Technical details for CVE-2022-29126 are not provided in the supplied documents; no affected products, root cause, or remediation are specified here. Monitor for updates from the referenced sources.

CVE-2022-21983

CVE-2022-21983 is a Win32 Stream Enumeration Remote Code Execution vulnerability. The connected sources show an in-scope CVE with a network attack vector and high impact: CVSSv3.1 base score 7.5 (HIGH), with no authentication (NONE) and user interaction required (REQUIRED); confidentiality, integ...

CVE-2022-22713

CVE-2022-22713 is a Windows Hyper-V Denial of Service vulnerability. Details in connected docs show it stems from a race condition in Hyper-V that can allow a local attacker to trigger a DoS on affected systems. Affected products include Windows Server 20H2 and Windows 10 x64 editions in 20H2/21H...

CVE-2022-26831

CVE-2022-26831 : Windows LDAP Denial of Service vulnerability. The vulnerability is described as a Windows LDAP DoS issue with a Network attack vector (no user interaction) and a high-impact on availability (per CVSS v3.1: 7.5, HIGH; CVSS v2: 5.0, MEDIUM). Connected sources confirm the Windows LD...

CVE-2019-1118

CVE-2019-1118 is a DirectWrite remote code execution vulnerability described as existing in the way DirectWrite handles objects in memory. The CVE entry notes it is distinct from nearby CVEs and lists high-severity metrics (CVSSv3 base 8.8, network attack, user interaction required) indicating a ...

CVE-2022-26913

CVE-2022-26913 is a Windows authentication information-disclosure vulnerability. The available connected data identifies affected software broadly as Windows operating systems and notes exploitation would involve information disclosure through the Windows authentication process. Public documentat...

CVE-2022-30139

CVE-2022-30139 is an LDAP Remote Code Execution vulnerability in Windows LDAP/AD environments. The exploitability relies on a misconfiguration: the MaxReceiveBuffer policy for LDAP must be set higher than the default for the vulnerability to be exploitable. Some LDAP RCE variants (including CVE-2...

CVE-2022-30141

CVE-2022-30141 is listed as one of seven high‑level LDAP remote code execution vulnerabilities disclosed for Windows LDAP during Patch Tuesday 2022. The linked Avleonov post explicitly groups CVE-2022-30141 among Windows LDAP RCEs and notes that for three LDAP CVEs (including this one) an affecte...

CVE-2016-3310

CVE-2016-3310 is a Win32k Elevation of Privilege vulnerability affecting multiple Windows versions. The issue arises in kernel‑mode drivers where improper handling of memory objects enables a local user to execute code with SYSTEM privileges via a crafted application. This is a local, non‑authent...

CVE-2020-16898

CVE-2020-16898 is a Windows TCP/IP remote code execution vulnerability triggered by specially crafted ICMPv6 Router Advertisement packets. The issue arises from how the Windows TCP/IP stack handles ICMPv6 RA messages, allowing an attacker to execute code on a targeted Windows host by sending craf...

CVE-2022-21920

CVE-2022-21920 is a Windows Kerberos Elevation of Privilege vulnerability with CVSS 3.1 base score 8.8 (HIGH). Attack vector: NETWORK; Attack complexity: LOW; Privileges required: LOW; User interaction: NONE; Scope: UNCHANGED; Impacts: confidentiality, integrity, and availability HIGH. The initia...

CVE-2015-2518

Technical details for CVE-2015-2518 are not provided in the supplied documents. No affected products, root cause, or remediation are stated here. Monitor updates from official advisories and connected sources.

CVE-2019-1151

CVE-2019-1151 is the Microsoft Graphics Remote Code Execution vulnerability. The Windows font library fails to properly handle specially crafted embedded fonts, enabling remote code execution that can compromise an affected system (install programs, modify data, create accounts with full rights)....

CVE-2022-21893

Technical details about CVE-2022-21893 are not provided in the connected documents. The supplied sources include high-level vulnerability descriptions and update references, but no specifics on affected products/versions or fixes. Monitor for updated, concrete disclosures.

CVE-2020-17096

Technical details about CVE-2020-17096 are not provided in the connected documents. Available sources mention impact and CVSS but do not disclose affected product versions, root cause, exploit status, or fixes in this data set. Monitor for updates.

CVE-2022-29132

Technical details about CVE-2022-29132 (Windows Print Spooler elevation) are not provided in the supplied documents. No affected product/version or remediation is specified here. Monitor for official updates.

CVE-2022-44707

Technical details about CVE-2022-44707 are not provided in the supplied documents. The connected set does not describe affected products/versions or remediation; monitor for updates.

CVE-2019-1120

Technical details about CVE-2019-1120 are not publicly provided in the supplied documents; monitor for official updates.

CVE-2022-21984

CVE-2022-21984 is a Windows DNS Server Remote Code Execution vulnerability. The issue affects Windows DNS Server when dynamic updates are enabled, potentially allowing an attacker to take over the DNS server and execute code with elevated privileges. Mitigation in the provided documents points to...

CVE-2022-23253

CVE-2022-23253 is a Windows PPTP Denial of Service vulnerability. The records show it has a CVSS v3.1 base score of 6.5 (Network, Low attack complexity, Privileges Low, No user interaction) with HIGH availability impact. Concrete details about affected products, versions, or exploit activity are ...

CVE-2022-35769

Technical details for CVE-2022-35769 (Windows PPP DoS) are not provided in the supplied documents. No affected product/version or remediation is described here. Monitor for updates from Microsoft and Vulners for confirmed specifics.

CVE-2021-36947

CVE-2021-36947 is listed in the NCSC vulnerability record as a Windows Print Spooler Component vulnerability with the impact: Execute random code. The connected documents do not provide concrete technical details on the root cause, affected subcomponents, specific versions, exploit scenarios, or ...

CVE-2022-21857

Technical details for CVE-2022-21857 (Active Directory Domain Services Elevation of Privilege) are not provided in the connected documents. The initial description confirms AD DS Elevation of Privilege, but no affected product versions, root cause, impact, or fixes are included here. Monitor for ...

CVE-2022-26914

CVE-2022-26914 is a Win32k elevation-of-privilege vulnerability in Windows Win32k. The CVSS info in the initial record indicates local, low-privilege requirements with high impacts on confidentiality/integrity/availability. Connected documents reference Microsoft update notes (KB5012604, KB501264...

CVE-2022-35792

Technical details (affected product/versions, root cause, exploit information, and remediation) are not provided in the connected documents for CVE-2022-35792. Monitor for updates.

CVE-2017-8582

CVE-2017-8582 affects the HTTP.sys server component in multiple Windows editions. The vulnerability arises from the component’s improper handling of in-memory objects, enabling a remote, unauthenticated attacker to obtain information and potentially facilitate further compromise. The impact is an...

CVE-2021-34460

Technical details about CVE-2021-34460 are not publicly available in the provided documents. The connected sources do not specify affected products, root cause, impact, or fixes. Monitor for updates.

CVE-2022-21896

CVE-2022-21896 concerns the Windows DWM Core Library Elevation of Privilege. The NVD entry describes a local, privilege-escalation vulnerability with a CVSS v3.1 base score of 7.0 (HIGH) and an older CVSS v2 base score of 6.9 (MEDIUM). The CVE is associated with Windows components and is referenc...

CVE-2022-34704

CVE-2022-34704 is a Windows Defender Credential Guard Information Disclosure vulnerability. The CVSS‑3.1 base score is 4.7 (Medium) with Local attack vector, HIGH attack complexity, LOW privileges required, and NONE user interaction. Confidentiality impact is HIGH; integrity and availability are ...

CVE-2022-34714

Technical details about CVE-2022-34714 are not provided in the attached documents. The connected items do not describe affected products, root cause, impact, or remediation for this CVE. Monitor for updates.

CVE-2022-30226

Technical details and indicators for CVE-2022-30226 are not provided in the supplied documents. No affected product/version specifics or remediation are included here; monitor official advisories for updates.

CVE-2020-0642

An elevation of privilege vulnerability exists in Windows because the Win32k component fails to properly handle objects in memory. Exploiting this flaw allows an attacker to execute arbitrary code in kernel mode or enhance their privileges through a specially crafted application. Exploitation det...

CVE-2021-24084

CVE-2021-24084 is an information disclosure issue in Windows Mobile Device Management. Public docs identify it as a Windows MDM component vulnerability that could lead to confidentiality loss (CVSS v3.1 base score 5.5, HIGH confidentiality impact; LOCAL, LOW complexity; user interaction NONE). Mi...

CVE-2022-21898

CVE-2022-21898 is a DirectX Graphics Kernel Remote Code Execution vulnerability in Windows. The entry notes a network-based, no-user-interaction exploit with high/critical impact (C: High, I: High, A: High) and local/remote exploitation in different entries; the primary CVE description identifies...

CVE-2022-22016

Technical details for CVE-2022-22016 are not publicly available in the provided documents. No information on affected products, root cause, exploitability, or fixes is present. Monitor for updates.

CVE-2022-22034

Technical details about CVE-2022-22034 are not publicly provided in the supplied documents. Monitor for updates from official vendors when more information becomes available.

CVE-2019-1094

Technical details (affected products/versions/root cause/fix) for CVE-2019-1094 are not provided in the connected documents. Monitor Microsoft advisories and MSRC for updates.

CVE-2021-24086

CVE-2021-24086 is a Windows TCP/IP DoS affecting tcpip.sys via IPv6 processing. Public PoCs show remote triggering by crafted IPv6/UDP packets and IPv6 fragment handling, potentially causing kernel memory issues or a crash. The vulnerability was patched by Microsoft in Feb 2021; exploitation deta...

CVE-2021-31962

Technical details (affected product/versions, root cause, impact, exploitability, and remediation) are not provided in the supplied documents. Monitor official disclosures and updates from the included sources for any forthcoming information.

CVE-2022-23286

CVE-2022-23286 affects the Windows Cloud Files Mini Filter Driver and enables local elevation of privilege. Evidence in CNVD/CVE records confirms the driver-related root cause and impact (arbitrary code with elevated privileges). Remediation reported in connected docs includes applying March 2022...

CVE-2022-34709

CVE-2022-34709 relates to a Windows Defender Credential Guard security feature bypass. The entry lists a CVSS v3.1 base score of 6.0 (MEDIUM), with LOCAL attack vector, LOW attack complexity, HIGH privileges required, and no user interaction. Confidentiality and integrity impact are HIGH, availab...

CVE-2019-0584

CVE-2019-0584 refers to a remote code execution vulnerability in the Windows Jet Database Engine, arising from improper handling of objects in memory. The issue affects multiple Windows platforms (as listed in the initial entry). The connected Nessus/Office-related documents corroborate a broader...