CVE-2022-21907

CVE-2022-21907 concerns the HTTP Protocol Stack (http.sys) in Windows, enabling remote code execution via specially crafted packets. Public documentation and PoCs indicate impact on Windows 10 (notably 2004) and Windows Server variants, with multiple exploits and PoCs surfacing publicly. Mitigati...

CVE-2022-26809

CVE-2022-26809 is a Windows RPC Runtime Remote Code Execution vulnerability. Public material in the connected documents indicates an unauthenticated remote attacker can trigger code execution by sending a crafted RPC call, with the real vulnerability located in OSF_CASSOCIATION::ProcessBindAckOrN...

CVE-2023-21752

CVE-2023-21752 is a Windows Backup Service Elevation of Privilege vulnerability affecting Windows 11 (build 10.0.22000). Exploitation is possible to gain SYSTEM privileges, potentially delete data or render the service unavailable. A public PoC and details exist (Exploit-DB entry: Windows 11 10.0...

CVE-2022-29130

Technical details about CVE-2022-29130 are not provided in the connected documents. Publicly available information in the initial entry is limited to high‑level descriptors; no product/version/impact/fix specifics are included here. Monitor for official updates.

CVE-2022-30209

Technical details (affected products, exploit vector, root cause, and remediation) are not provided in the supplied documents. Monitor for updates from official sources.

CVE-2022-32230

CVE-2022-32230 affects Microsoft Windows SMBv3 prior to the April 2022 patch set. A malformed FileNormalizedNameInformation SMBv3 request sent over a named pipe can trigger a null pointer dereference in the Windows kernel, resulting in a Blue Screen of Death (BSOD) and reboot of the SMBv3 server....

CVE-2022-24508

CVE-2022-24508 is a Windows SMBv3 client/server remote code execution vulnerability. The issue resides in the SMBv3 compression feature introduced in newer Windows builds and can enable code execution on a vulnerable system when exploited over a network. Exploitation requires authentication and c...

CVE-2022-22012

Technical details about CVE-2022-22012 are not publicly provided in the connected documents. The materials mention updates and mitigations but do not specify affected products/versions or remediation for this CVE. Monitor for updates.

CVE-2022-21990

CVE-2022-21990 — Remote Desktop Client RCE . The connected sources confirm a remote code execution vulnerability in the Windows Remote Desktop Client triggered when a user connects to a malicious RDP server. This is a client-side flaw exploited via a crafted server, enabling code execution on the...

CVE-2022-21894

CVE-2022-21894 is a Secure Boot security feature bypass exploited by the BlackLotus UEFI bootkit. It bypasses Secure Boot to load malicious EFI components, enabling persistence, disabling HVCI and Defender, and prior to OS load. Attack requires elevated privileges or physical access; bootkit impl...

CVE-2022-26928

Technical details about CVE-2022-26928 are not publicly provided in the supplied documents. The entries only label it as a Windows Photo Import API elevation-of-privilege issue. Monitor for updates from Microsoft/NVD for remediation and impact.

CVE-2022-24481

CVE-2022-24481 is a Windows Common Log File System Driver elevation-of-privilege vulnerability. The connected exploit reports describe a memory/counterpart corruption involving CLFS_CONTAINER_CONTEXT.pContainer that can be triggered from CClfsContainer::Close by modifying CLFS_BASE_RECORD_HEADER....

CVE-2022-22048

Technical details about CVE-2022-22048 are not publicly provided in the supplied documents. No affected products, root cause, impact, or fixes are included here. Monitor for updates.

CVE-2022-24503

CVE-2022-24503 is a Remote Desktop Protocol Client Information Disclosure vulnerability. Connected sources indicate it affects Windows Remote Desktop Client and can be triggered over the network with no authentication and no user interaction, exposing partial confidentiality (C:L). The issue is t...

CVE-2022-23288

CVE-2022-23288 is a Windows vulnerability in the DWM Core Library identified as an elevation of privilege (local) issue affecting the Windows DWM Core Library. The connected documents confirm the affected component as the Windows DWM Core Library and describe the impact as elevation of privileges...

CVE-2021-26414

CVE-2021-26414 is a Windows DCOM Server Security Feature Bypass. Connected docs confirm a DCOM hardening series (phase 3) and note mitigations: after applying relevant updates, DCOM hardening changes are permanent and cannot be disabled via registry. Microsoft guidance recommends enabling DCOM au...

CVE-2022-34721

CVE-2022-34721 is a Windows Internet Key Exchange (IKE) Protocol Extensions remote code execution vulnerability. The issue affects Windows systems with IPSec enabled and is exploitable via specially crafted IP packets targeting IKEv1 (IKEv2 is not affected). The flaw could allow an unauthenticate...

CVE-2022-21972

CVE-2022-21972 is a Windows PPTP VPN component remote code execution vulnerability caused by use-after-free handling of PPTP packets. The connected advisory states a remote code execution vulnerability exists in Windows VPN due to improper PPTP packet handling, i.e., PPTP protocol use after free....

CVE-2022-30170

Technical details about CVE-2022-30170 are not provided in the supplied documents. The connected sources reference related Credential Roaming issues and general Windows security updates, but no specific vulnerability details, affected products, or fixes are disclosed here. Monitor for updates.

CVE-2022-22049

CVE-2022-22049 is a Windows CSRSS (Client Server Run-time Subsystem) Elevation of Privilege vulnerability. The entry lists a CVSS v2 base score of 7.2 (HIGH) and CVSS v3.1 base score of 7.8 (HIGH), with LOCAL attack vector, LOW attack complexity, and privileges required as LOW; no user interactio...

CVE-2023-21746

CVE-2023-21746 is a Windows NTLM elevation of privilege vulnerability. A GitHub exploit module for LocalPotato CVE-2023-21746 suggests a Windows-based target, with hints of buffer overflow/memory corruption as the likely root cause and that the exploit may be invoked via an exploit.py script in a...

CVE-2022-24500

CVE-2022-24500 is a Windows SMB Remote Code Execution vulnerability. Connected exploit posts provide concrete steps and code to launch a Windows SMB-based RCE, requiring the target to interact with a malicious server/share over SMB (port 445). The GitHub exploits illustrate an end-to-end chain (d...

CVE-2022-24505

CVE-2022-24505 is a Windows ALPC Elevation of Privilege vulnerability. The connected sources confirm a local privilege escalation in the Windows ALPC mechanism, enabling an attacker with local access to obtain high/ SYSTEM-like privileges. The NVD/CVSS data show a CVSS 3.1 base score of 7.0 (HIGH...

CVE-2022-24528

CVE-2022-24528 is a Remote Code Execution vulnerability in Windows RPC Runtime. It is a network-exposed issue affecting the Windows RPC runtime, with a high-severity impact (C/H/I/A: high) per CVSS v3.1 (8.8) and a medium base score (6.8) in CVSS v2. The CVSS v3.1 vector indicates network access,...

CVE-2022-26931

CVE-2022-26931 is a Windows Kerberos elevation-of-privilege issue tied to certificate-to-account mapping changes in Active Directory. Microsoft KBs and Citrix documents describe remediation via certificate-mapping updates (e.g., KB5014754 and related out‑of‑band mitigations) to address how certif...

CVE-2022-24491

CVE-2022-24491 is a Remote Code Execution flaw in Windows Network File System (NFS) that is exploitable only on systems with the NFS role enabled. Affected component is the Windows NFS protocol handling; the root cause is remote code execution via specially crafted NFS network messages. Public pa...

CVE-2022-41099

CVE-2022-41099 is a BitLocker security feature bypass related to Windows Recovery Environment (WinRE). The connected Nessus/KB entries confirm WinRE-specific remediation: devices must update the WinRE partition (via Microsoft KBs tied to KB5025175, KB5022291, KB5022303, KB5022289, etc.) because i...

CVE-2022-34718

CVE-2022-34718 is a Windows TCP/IP remote code execution vulnerability that can be exploited by sending a crafted IPv6 packet to a host with IPSec enabled. The issue affects the Windows TCP/IP stack and relies on a flaw in handling IPv6/IPsec traffic to achieve code execution, requiring no user i...

CVE-2022-21977

Technical details about CVE-2022-21977 (Media Foundation Information Disclosure Vulnerability) are not provided in the supplied documents. No concrete affected products, versions, or remediation are stated here; monitor official sources for updates and disclosures.

CVE-2022-24547

CVE-2022-24547 matches the Windows Digital Media Receiver Elevation of Privilege vulnerability. Connected CNVD-2022-65611 describes an elevation of privilege in Microsoft Windows Digital Media Receiver caused by an incorrect programmatic call to an advanced local procedure. The CVE entry lists th...

CVE-2022-24545

Technical details about CVE-2022-24545 (affected product/versions/root cause/exploitability) are not provided in the supplied connected documents. Monitor for updates from official advisories for concrete information and remediation guidance.

CVE-2022-21967

Technical details about CVE-2022-21967 are not publicly provided in the supplied documents. Monitor for updates from official sources for affected products, impact, and remediation information.

CVE-2022-24497

CVE-2022-24497 is a Windows Network File System (NFS) Remote Code Execution vulnerability. Exploitation can occur remotely over the network if NFS is enabled; Microsoft rated it Critical (CVSS v3.1 9.8) with wormable characteristics discussed in Patch Tuesday coverage. There is a public exploit/t...

CVE-2022-30216

CVE-2022-30216 is a Windows Server Service Tampering vulnerability caused by an off-by-one error in the Windows Server Service, enabling authentication coercion that, per Akamai, could lead to domain controller access. Public writeups describe the issue as affecting Windows Server/Server Service ...

CVE-2022-30221

CVE-2022-30221 is a Windows Graphics Component remote code execution vulnerability. The cited sources indicate exploitation requires a user to connect to a malicious RDP server, enabling code execution in the context of the targeted user. Remediation is via Microsoft’s July 2022 security updates ...

CVE-2022-23293

Technical details for CVE-2022-23293 are not publicly available in the provided Connected documents. Monitor for updates.

CVE-2022-23284

Technical details for CVE-2022-23284 (affected product, root cause, impact, and fix) are not publicly available in the provided Connected documents. Monitor for updates from official sources.

CVE-2022-21849

CVE-2022-21849 is a remote code execution vulnerability in Windows IKE Extension. The IDS/attack surface centers on the IPSec/IKE service; a remote attacker could trigger multiple vulnerabilities when the IPSec service is running, without authentication. Public details in connected documents iden...

CVE-2022-30138

Technical details for CVE-2022-30138 are not provided in the supplied documents. The records mention Windows Print Spooler elevation of privilege but do not specify affected products/versions, root cause, exploit information, or fixes. Monitor for updates.

CVE-2021-43883

CVE-2021-43883 is a Windows Installer Elevation of Privilege vulnerability. The Windows Installer component can be abused when a user is tricked into installing a malicious package, enabling an attacker to gain elevated privileges on the system. The CVSS details in the provided data show a local ...

CVE-2022-24459

CVE-2022-24459 is an Elevation of Privilege in Windows Fax and Scan service. Connected sources note a PoC exploit exists and that Microsoft patched vulnerabilities in March 2022 Patch Tuesday, but no concrete product/version/fix details are provided in the documents.

CVE-2022-30160

CVE-2022-30160 is a Windows ALPC (Advanced Local Procedure Call) Elevation of Privilege vulnerability. The connected documents identify the issue as a local, low-complexity privilege escalation with no required user interaction and high impact on confidentiality, integrity, and availability (per ...

CVE-2022-21974

CVE-2022-21974 corresponds to Microsoft Roaming Security Rights Management Services remote code execution. Connected sources corroborate a user-assisted scenario where exploitation involves opening a malicious RTF file in Microsoft Word, implying phishing-like delivery. The AVLEONOV post explicit...

CVE-2022-29142

Technical details (affected components, root cause, impacted versions, exploit info) are not publicly provided in the supplied documents. Monitor for updates from Microsoft/NVD for concrete details and remediation.

CVE-2022-24533

Technical details about CVE-2022-24533 (affected products, components, root cause, versions, fixes) are not provided in the connected documents. The available materials only reiterate a Remote Desktop Protocol RCE without specifics. Monitor for updates.

CVE-2022-23281

CVE-2022-23281 corresponds to a Windows Common Log File System Driver information-disclosure vulnerability. Connected sources describe it as an information leak in the CLFS driver, with CNVD noting “excessive data output” as the underlying issue. Impact is a confidentiality risk; CVSS metrics in ...

CVE-2022-24525

CVE-2022-24525 is a Windows Update Stack Elevation of Privilege vulnerability affecting the Windows Update Stack. The available connected documents confirm a local, privilege-escalation flaw with a CVSSv3.1 base score of 7.0 (High) and Local attack vector, Independent of user interaction. Publicl...

CVE-2022-23294

Technical details about CVE-2022-23294 are not publicly provided in the supplied documents. Monitor for updates.

CVE-2022-37981

CVE-2022-37981 is a DoS vulnerability in Windows Event Logging Service. The CNVD entry states the denial arises from a failure to properly handle incoming error messages, enabling an attacker to cause DoS on the affected Windows component. Affected product is Windows Event Logging Service; impact...

CVE-2022-22038

CVE-2022-22038 is a Remote Procedure Call Runtime Remote Code Execution vulnerability. Connected sources note a POC exploit exists and that exploitation would require multiple attempts with high attack complexity, potentially over a network. The available documents do not specify affected product...