CVE-2022-26919

Technical details about CVE-2022-26919 are not publicly available in the provided connected documents. Monitor for updates from official advisories to learn affected products, root cause, impact, and recommended mitigations.

CVE-2022-41081

CVE-2022-41081 is a Windows PPTP Remote Code Execution vulnerability in the Point-to-Point Tunneling Protocol. The root cause is the PPTP implementation failing to properly filter external input during code segment construction, enabling arbitrary code execution when exploited over a network. The...

CVE-2019-1096

Technical specifics for CVE-2019-1096 are not provided in the supplied Connected documents. Public details about affected products, impact, or remediation are not present here; monitor for updates.

CVE-2021-41338

Technical details about CVE-2021-41338 (Windows AppContainer Firewall Rules Security Feature Bypass) are not provided in the connected documents. Monitor for updates.

CVE-2022-22042

CVE-2022-22042 is described in the Initial Document as a Windows Hyper-V Information Disclosure Vulnerability. The Connected Documents do not provide concrete technical details (affected product version, root cause, impact, or remediation) for this CVE. Therefore, the available information remain...

CVE-2022-23286

CVE-2022-23286 affects the Windows Cloud Files Mini Filter Driver and enables local elevation of privilege. Evidence in CNVD/CVE records confirms the driver-related root cause and impact (arbitrary code with elevated privileges). Remediation reported in connected docs includes applying March 2022...

CVE-2022-34709

CVE-2022-34709 relates to a Windows Defender Credential Guard security feature bypass. The entry lists a CVSS v3.1 base score of 6.0 (MEDIUM), with LOCAL attack vector, LOW attack complexity, HIGH privileges required, and no user interaction. Confidentiality and integrity impact are HIGH, availab...

CVE-2019-0538

CVE-2019-0538 is a remote code execution vulnerability in the Windows Jet Database Engine caused by improper handling of objects in memory. A successful exploit could allow an attacker to execute arbitrary code on a vulnerable system by convincing a user to open a specially crafted file. Affected...

CVE-2022-21902

Technical details about CVE-2022-21902 are not provided in the supplied documents. No affected products, root cause, impact, or remediation are disclosed here. Monitor for updates.

CVE-2023-36903

No technical details for CVE-2023-36903 are provided in the supplied documents; only the vulnerability title is present. Monitor for updates.

CVE-2020-17103

CVE-2020-17103 concerns the Windows Cloud Files Mini Filter Driver (cldflt.sys). Public materials describe a local privilege escalation via a race condition in the mini-filter that can hijack the windir environment path and redirect operations, enabling SYSTEM-level access under certain condition...

CVE-2021-38666

CVE-2021-38666 is described as a Remote Desktop Client Remote Code Execution vulnerability. The vulnerability affects the Windows Remote Desktop Client, with the CVSS3.1 score indicating network-exposed, no privileges required, user interaction needed, and high impact to confidentiality, integrit...

CVE-2022-26801

CVE-2022-26801 is a Windows Print Spooler Elevation of Privilege vulnerability (Local, Low attack complexity; no user interaction required per description). The connected documents show confirmed details on the vulnerability’s existence and CVSS metrics (CVSS 3.1 base score 7.8; confidentiality/i...

CVE-2022-26930

Technical details about CVE-2022-26930 (affected component, root cause, impact, or fixes) are not provided in the connected documents. The sources reference Windows updates and mitigations but do not disclose vulnerability specifics. Monitor for authoritative disclosures and updates.

CVE-2022-29106

Technical details about CVE-2022-29106 (Windows Hyper-V Shared Virtual Disk Elevation of Privilege) are not provided in the connected documents. Monitor for updates; no product/version/impact/fix information is available here.

CVE-2022-29129

CVE-2022-29129 is described as a Windows LDAP Remote Code Execution vulnerability. The connected CNVD entry (CNVD-2022-72859) also labels “Microsoft Windows LDAP Remote Code Execution Vulnerability,” confirming LDAP RCE wording in the CVE context. However, the connected documents do not provide c...

CVE-2022-35766

CVE-2022-35766 is described in the connected CNNVD entry as a code injection vulnerability in the Windows Secure Socket Tunneling Protocol (SSTP) that can lead to remote code execution. The CNNVD note lists affected Windows releases (e.g., various Windows 10/11 and Windows Server versions) but do...

CVE-2022-41039

Technical details about CVE-2022-41039 are not provided in the supplied documents. Public details, affected products, or fixes are not included here. Monitor for updates from official sources.

CVE-2017-0267

CVE-2017-0267 is an SMBv1 information-disclosure vulnerability in Microsoft Windows SMB Server 1.0. The issue arises from improper handling of certain SMBv1 requests, allowing a remote attacker to obtain sensitive information by sending specially crafted data to affected servers across multiple W...

CVE-2021-42277

Technical details about CVE-2021-42277 are not provided in the connected documents; only generic vulnerability labels and references are available. Monitor for official advisories or CVE records for affected products, fixes, and mitigations.

CVE-2022-30220

Technical details about CVE-2022-30220 (affected product, root cause, impact, or fix) are not provided in the connected documents. Monitor for updates from vendors and CVE sources.

CVE-2017-0272

CVE-2017-0272 affects the Microsoft Windows SMBv1 server on Windows clients/servers (Windows 7/8.1, Windows Server 2008 SP2/R2 SP1, 2012, 2016, 10 versions etc.). Root cause: the SMBv1 server mishandles certain requests, enabling remote code execution by a remote attacker. Impact is high (remote ...

CVE-2022-22014

Technical details about CVE-2022-22014 are not provided in the supplied connected documents. The initial description notes a Windows LDAP RCE vulnerability, but there are no concrete details on affected products, versions, root cause, impact, or fixes within the provided materials. Monitor for up...

CVE-2022-30154

CVE-2022-30154 is an Elevation of Privilege vulnerability in the Microsoft File Server Shadow Copy Agent Service (RVSS). The issue is addressed by Windows updates released on June 14, 2022 (e.g., KB5014702/KB5014738/KB5014678, security updates and hotpatch variants). The vulnerability’s remediati...

CVE-2022-23279

Technical details about CVE-2022-23279 (affected product/component/versions/root cause) are not provided in the supplied documents. Publicly available information within the connected items is limited to generic vulnerability summaries and update notes. Monitor for updates.

CVE-2022-29113

Technical details about CVE-2022-29113 (affected components, root cause, impact, and fixes) are not publicly provided in the supplied documents. Monitor for updates from official advisories.

CVE-2022-30224

Technical details for CVE-2022-30224 are not publicly provided in the connected documents. The materials mention the vulnerability at a high level but do not specify affected products, root cause, impact, or remediation. Monitor for updated disclosures and official advisories.

CVE-2020-1421

CVE-2020-1421 is a Windows remote code execution vulnerability tied to processing a .LNK file. An attacker who successfully exploits it could gain the same user rights as the current user; CVSS indicates Network access, low attack complexity, with user interaction required.

CVE-2022-38050

CVE-2022-38050 is a Win32K elevation of privilege vulnerability in the Windows Win32K subsystem. The issue allows a local attacker to obtain the highest-privilege level (SYSTEM) by exploiting a flaw in privilege handling within Win32K. Microsoft’s advisories and cumulative updates fix this by add...

CVE-2018-8256

CVE-2018-8256 is a remote code execution vulnerability in PowerShell triggered by processing specially crafted files. Affected are Windows PowerShell/PowerShell Core and several Windows OS versions (e.g., Windows 7/8.1/10, Windows Server 2008R2/2012/2016/2019, etc.). The root cause is improper ha...

CVE-2021-31183

CVE-2021-31183 is a Windows TCP/IP Driver Denial of Service vulnerability. Multiple connected sources (NVD/NVD CNVD entries) describe it as a DoS issue affecting the Windows TCP/IP driver in Windows/Windows Server with network-based attack potential. The CVSS metrics indicate a network, low-attac...

CVE-2021-36937

Technical details for CVE-2021-36937 are not publicly available in the provided documents. The initial description notes a Windows Media MPEG-4 Video Decoder RCE, but no concrete product/version/impact details are supplied here. Monitor for updates.

CVE-2022-24530

CVE-2022-24530 is a Windows Installer Elevation of Privilege vulnerability. The NVD entry lists a CVSSv3.1 base score of 7.8 (LOCAL, LOW privileges required, UI NONE, S C changed, impact: HIGH on confidentiality, integrity, and availability). It reflects a local privilege escalation in the Window...

CVE-2022-34729

Technical details about CVE-2022-34729 are not publicly available in the provided connected documents. Monitor for updates; the entry is described as a Windows GDI Elevation of Privilege vulnerability with local access and high impact in the initial description.

CVE-2023-21712

CVE-2023-21712 describes a Windows PPTP/RAS Remote Code Execution vulnerability. A race condition in the Point-to-Point Tunneling Protocol could allow unauthenticated, network-based attackers to execute arbitrary code in the RAS environment. The issue affects Windows Remote Access Service compone...

CVE-2023-21771

CVE-2023-21771 is a Windows Local Session Manager (LSM) elevation-of-privilege vulnerability. The CVE is listed with a CVSS v3.1 base score of 7.0 (HIGH), indicating local attack vector, high impact on confidentiality, integrity, and availability, with privileges required: LOW and user interactio...

CVE-2020-0662

CVE-2020-0662 is described as a Windows remote code execution vulnerability arising from how Windows handles objects in memory. The provided sources confirm a remote code execution impact, but there is no detailed information in the connected documents about affected products/versions, specific r...

CVE-2022-21833

CVE-2022-21833 is a Local Elevation of Privilege in Virtual Machine IDE Drive. The NVD entry lists CVSS-3.1 base score 7.8 (LOCAL, LOW privileges required, no user interaction, privilege escalation with CHANGED scope; impacts: CONFIDENTIALITY/HIGH, INTEGRITY/HIGH, AVAILABILITY/HIGH). Publicly vis...

CVE-2022-37986

Technical details about CVE-2022-37986 (affected component, root cause, impact, or fixes) are not provided in the connected or initial documents. Monitor for updates and additional technical disclosure.

CVE-2022-38044

CVE-2022-38044 is a Windows CD-ROM File System Driver vulnerability that enables code execution when processing crafted input. Trusted sources in connected data identify the affected component as the Windows CD-ROM Driver and describe the root cause as improper handling/filtering of external inpu...

CVE-2019-1088

Technical details are not provided in the connected documents; monitor for updates.

CVE-2020-16933

Microsoft Word contains a security feature bypass (CVE-2020-16933) due to improper handling of .LNK files. An attacker can craft a .LNK file to perform actions in the current user’s security context when a user opens it (email or web delivery scenarios described). The vulnerability can lead to co...

CVE-2022-38029

Summary : CVE-2022-38029 is a Windows ALPC elevation-of-privilege vulnerability. It is a local issue that can grant high-impact privileges to an attacker with low privileges and no user interaction, as indicated by the CVSS vector in the Initial document (CVSS v3.1: AV=L/AC=H/PR=L/UI=N/S=U/C=H/I=...

CVE-2019-1127

Technical details about CVE-2019-1127 (and related DirectWrite CVEs) are not provided in the connected documents. Monitor for updates from Microsoft and CVE records for affected products, versions, and mitigations.

CVE-2019-1246

CVE-2019-1246 is a remote code execution vulnerability in the Windows Jet Database Engine caused by improper handling of in-memory objects. The Nessus plugin for Security Updates for Microsoft Office products C2R (September 2019) confirms this CVE and notes that the update fixes the Jet Database ...

CVE-2022-22025

CVE-2022-22025 refers to a Denial of Service vulnerability in the Windows Internet Information Services Cachuri Module. The available document describes it as a module DoS issue but does not provide details on affected product versions, root cause, attack vector, or fix. Exploitation details are ...

CVE-2022-22035

Technical details for CVE-2022-22035 are not publicly available in the provided documents. Monitor for vendor advisories and updates. The connected sources mention the CVE in KEV lists and risk context but do not disclose affected components, root causes, or fixes.

CVE-2022-38043

No additional technical details about CVE-2022-38043 are provided in the connected documents. The sources only reiterate the vulnerability name/description. Monitor for updates and verify affected products, root cause, and fixes when new information is published.

CVE-2022-24499

Technical details about CVE-2022-24499 are not provided in the connected documents; public specifics (affected products, root cause, exploit info, or remediation) are not available here. Monitor for updates.

CVE-2017-0174

CVE-2017-0174 is a Windows NetBIOS Denial of Service vulnerability. Exploitation involves sending malformed NetBIOS packets to affected Windows versions (Windows 7/8.1/10, Windows Server 2008-2016 and related). The underlying cause is improper handling within the Windows NetBIOS/network stack, al...