CVE-2022-21859

Technical details for CVE-2022-21859 are not publicly available in the provided documents. Monitor for updates from NVD, CVE records, and vendor advisories.

CVE-2022-22023

CVE-2022-22023 corresponds to a Windows vulnerability described as a Windows Portable Device Enumerator Service Security Feature Bypass. The NVD entry provides CVSS scores: CVSS v2 base 6.9 (LOCAL, MEDIUM) and CVSS v3.1 base 6.6 (PHYSICAL access, LOW complexity, LOW privileges). Impact indicators...

CVE-2022-22027

Technical details for CVE-2022-22027 are not publicly provided in the supplied documents. Monitor for updates and availability of affected product/version, root cause, impact, or fixes.

CVE-2022-30146

Technical details about CVE-2022-30146 are not provided in the connected documents; the sources mention LDAP RCE in general terms without specific affected products, versions, root cause, or fixes. Monitor for updates.

CVE-2023-21817

The provided documents do not contain technical details about CVE-2023-21817 (affected product/component, root cause, impact, or remediation). Technical specifics are not publicly available here. Monitor for updates and authoritative disclosures.

CVE-2016-0051

CVE-2016-0051 is a local privilege-escalation vulnerability in the Windows WebDAV client. The issue stems from the WebDAV client’s handling of crafted input, allowing a local attacker to gain SYSTEM-level privileges on affected Vista/7/8.1/2012/RT/10 variants with the WebDAV component (WebDAV cli...

CVE-2019-1091

Technical details about CVE-2019-1091 are not publicly available in the provided connected documents. Monitor for updates.

CVE-2021-34446

Technical details (affected product/version, root cause, impact, or exploit information) for CVE-2021-34446 are not provided in the supplied documents. Monitor for updates.

CVE-2023-21776

Technical details for CVE-2023-21776 are not publicly provided in the connected documents. Based on the supplied sources, we cannot specify affected product versions, root cause, impact, or fixes. Monitor for updates from Microsoft and vulnerability feeds.

CVE-2019-1246

CVE-2019-1246 is a remote code execution vulnerability in the Windows Jet Database Engine caused by improper handling of in-memory objects. The Nessus plugin for Security Updates for Microsoft Office products C2R (September 2019) confirms this CVE and notes that the update fixes the Jet Database ...

CVE-2021-34466

Technical details for CVE-2021-34466 are not publicly available in the provided connected documents. No specifics on affected products, root cause, or remediation are included. Monitor for updates from official sources.

CVE-2022-23279

Technical details about CVE-2022-23279 (affected product/component/versions/root cause) are not provided in the supplied documents. Publicly available information within the connected items is limited to generic vulnerability summaries and update notes. Monitor for updates.

CVE-2018-0746

CVE-2018-0746 is a Windows kernel local information disclosure vulnerability affecting Windows 8.1/RT 8.1, Windows Server 2012/2012 R2, Windows 10 versions (Gold, 1511, 1607, 1703, 1709), Windows Server 2016 and Windows Server 1709. The root cause is described as improper handling of memory addre...

CVE-2020-0635

CVE-2020-0635 is described in CNVD entries as an elevation of privilege in Microsoft Windows/Windows Server caused by improper handling of certain symbolic links. The CNVD text specifies that exploiting this flaw allows an attacker to gain system-level privileges by running a crafted application ...

CVE-2020-17042

CVE-2020-17042 is a Windows Print Spooler remote code execution vulnerability. The CVE entry identifies the affected component as the Windows Print Spooler and indicates a network-based attack with high impact (base score 8.8/3.1 CVSS) and user interaction required. The connected documents provid...

CVE-2022-29112

Technical details for CVE-2022-29112 are not provided in the supplied documents. OpenVAS references the CVE among others, but no product/impact/fix specifics are given here. Monitor for updates.

CVE-2022-34707

CVE-2022-34707 is a Windows Kernel elevation-of-privilege vulnerability discussed in the connected material. It relies on a registry hive memory corruption path: a refcount/overflows in a security descriptor cell can trigger a use-after-free, enabling overflow of hive cells and enabling an attack...

CVE-2022-34710

Technical details about CVE-2022-34710 are not provided in the connected documents. No affected product/version/root-cause/fix is specified. Monitor for updates from these sources for concrete details.

CVE-2022-37958

CVE-2022-37958 is a SPNEGO Extended Negotiation (NEGOEX) Security Mechanism Remote Code Execution vulnerability. The connected materials confirm a network-exposed RCE path via SPNEGO negotiation in affected systems, with public reporting of an upgrade from High to Critical severity by Microsoft a...

CVE-2022-37987

CVE-2022-37987 is a Windows CSRSS local privilege-elevation vulnerability in the Client Server Run-time Subsystem. The CVSSv3.1 base score is 7.8 (HIGH) with local attack vector, low attack complexity, and privileges required: LOW; impact to confidentiality, integrity, and availability is HIGH. A...

CVE-2018-8413

CVE-2018-8413 affects the Windows Theme API and specifically the ThemePack (CAB-based) file parser used by Windows theme files. The connected exploit entries describe a vulnerability in the ThemePack parser that allows attackers to create arbitrary files at arbitrary locations, enabling remote co...

CVE-2019-1244

CVE-2019-1244 concerns an information disclosure in DirectWrite where memory contents may be improperly disclosed. Affected component: DirectWrite (Windows text rendering). Root cause: improper handling leading to leakage of memory contents. Impact (per sources): partial confidentiality compromis...

CVE-2020-16896

CVE-2020-16896 describes an information-disclosure vulnerability in Microsoft Windows Remote Desktop Protocol (RDP). According to the linked sources, the issue arises when an attacker connects to a target system via RDP and sends specially crafted requests, potentially allowing the attacker to ob...

CVE-2020-16949

CVE-2020-16949 is a denial-of-service flaw in Microsoft Outlook where improper handling of in-memory objects leads to remote DoS after receiving a crafted e‑mail. Public details from multiple sources confirm Outlook vulnerabilities across versions (notably Outlook 2013/KB4484524 references and MS...

CVE-2022-21878

CVE-2022-21878 is a Windows Geolocation Service Remote Code Execution Vulnerability. Affected software: Windows Geolocation Service component; root cause and exact exploit path are not detailed in the provided documents. CVSS2 score is 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C); CVSS3.1 score is 7.8 (AV:L/...

CVE-2022-22014

Technical details about CVE-2022-22014 are not provided in the supplied connected documents. The initial description notes a Windows LDAP RCE vulnerability, but there are no concrete details on affected products, versions, root cause, impact, or fixes within the provided materials. Monitor for up...

CVE-2022-22037

CVE-2022-22037 is a Windows ALPC Elevation of Privilege vulnerability. The NVD entry states the issue affects Windows ALPC and yields high impact (confidentiality, integrity, availability) with CVSS 3.1 base score 7.5 and CVSS 2.0 base score 8.5. Connected OpenVAS entries reference multiple Micro...

CVE-2022-29128

Technical details for CVE-2022-29128 (affected product/version, root cause, impact, or fix) are not provided in the connected documents. The sources reference general LDAP RCE concerns and Windows updates, but no concrete vulnerability specifics. Monitor for updates.

CVE-2022-30189

CVE-2022-30189 is a Windows Autopilot Device Management and Enrollment Client spoofing vulnerability. Connected sources describe this as a spoofing flaw that could allow an attacker to masquerade as another user via the Autopilot client, with remote exploitation potential. Public mappings in the ...

CVE-2022-34703

Technical details for CVE-2022-34703 (affected products, root cause, impact or fixes) are not provided in the connected documents. Monitor for updates from the sources in the initial document.

CVE-2018-8566

Technical details on CVE-2018-8566 are not publicly provided in the supplied documents. Monitor for updates.

CVE-2020-0764

CVE-2020-0764 is an elevation-of-privilege vulnerability in Windows Storage Services where improper handling of file operations could let an attacker gain elevated privileges after achieving code execution on a victim system and running a crafted application. The issue is mitigated by a security ...

CVE-2020-1167

CVE-2020-1167 is a remote code execution vulnerability in Microsoft Graphics Components that allows arbitrary code execution when a user opens a specially crafted file. The root cause is in how objects are handled in memory. Affected context: Windows components including the Microsoft Graphics Co...

CVE-2021-24074

Technical details about CVE-2021-24074 are not provided in the supplied documents. Public information in the initial entry is high-level and lacks affected products, root cause, vulnerability specifics, or remediation within the provided data set.

CVE-2022-21868

Technical details about CVE-2022-21868 are not publicly provided in the supplied documents. Monitor for updates from official sources.

CVE-2022-30151

CVE-2022-30151 is described as a Windows Elevation of Privilege vulnerability in the Ancillary Function Driver for WinSock; no additional technical details are provided in the connected documents.

CVE-2022-30161

Technical details for CVE-2022-30161 are not provided in the supplied documents. Monitor for updates from Microsoft and vulnerability trackers for affected components, versions, exploit status, and remediation details.

CVE-2022-38042

CVE-2022-38042 is an Elevation of Privilege vulnerability in Active Directory Domain Services. The CVSS/description in the sources indicates network-access prerequisites with high impact (C/H, I/H, A/H) and a low-privilege, user-interaction-required path to obtain elevated rights in the AD DS con...

CVE-2019-0626

The CVE-2019-0626 entry describes a memory corruption vulnerability in the Windows Server DHCP Service caused by improper processing of DHCP messages, enabling remote code execution when an attacker sends specially crafted DHCP packets. Connected advisories corroborate code execution on Microsoft...

CVE-2022-22026

CVE-2022-22026 is a Windows CSRSS Elevation of Privilege vulnerability. The connected document confirms it as one of the CSRSS issues fixed during the July 2022 Patch Tuesday cycle, noting that two other CSRSS flaws (CVE-2022-22047 and CVE-2022-22049) were also fixed. The exact affected product s...

CVE-2022-23283

CVE-2022-23283 is a Windows local elevation-of-privilege vulnerability in the ALPC subsystem. The NVD entry lists a CVSSv3.1 base score of 7.0 (HIGH) with local access, high impact on confidentiality, integrity, and availability, and no user interaction required. Connected sources reference a Mic...

CVE-2018-8407

CVE-2018-8407 is an information disclosure vulnerability in the Kernel Remote Procedure Call Provider driver that occurs when objects are not properly initialized in memory. The vulnerability affects multiple Windows releases, including Windows 7, Windows 8.1, Windows 10 and various Windows Serve...

CVE-2018-8420

CVE-2018-8420 is a remote code execution vulnerability in the Microsoft XML Core Services MSXML parser that processes user input. Affected software includes Windows platforms listed in the description (Windows 7, Windows 8.1, Windows 10, Windows Server 2008/2012/2016, and others). The underlying ...

CVE-2019-0595

Technical details about CVE-2019-0595 are not publicly available in the provided documents. The Connected CVEs repeat the same general description without specifics on affected components, versions, exploitability, or fixes. Monitor for updates.

CVE-2019-0966

CVE-2019-0966 describes a denial-of-service vulnerability in Microsoft Hyper-V where a host server fails to properly validate input from a privileged user on a guest OS. The issue can impact availability (CVSS3 base score 6.8, with HIGH availability impact) and is categorized as an authentication...

CVE-2021-34449

Technical details about CVE-2021-34449 are not publicly provided in the connected documents. The materials mention Win32k elevation of privilege at a high level. Monitor for updated advisories from Microsoft and CVE databases.

CVE-2022-26803

Technical details for CVE-2022-26803 are not publicly provided in the supplied connected documents. The Windows Print Spooler elevation vulnerability is described at a high level here; monitor official advisories (MSRC/NVD) for impact, affected products, and remediation updates.

CVE-2022-26930

Technical details about CVE-2022-26930 (affected component, root cause, impact, or fixes) are not provided in the connected documents. The sources reference Windows updates and mitigations but do not disclose vulnerability specifics. Monitor for authoritative disclosures and updates.

CVE-2022-29141

Technical details about CVE-2022-29141 (Windows LDAP RCE) are not provided in the connected documents. OpenVAS references KB updates but does not specify affected products/versions, root cause, exploit info, or remediation beyond generic patching; monitor for future updates.

CVE-2022-35762

Technical details about CVE-2022-35762 are not publicly provided in the supplied documents. Monitor for updates from official sources to confirm affected products, impact, and fixes.