67 matches found
CVE-2023-21752
CVE-2023-21752 is a Windows Backup Service Elevation of Privilege vulnerability affecting Windows 11 (build 10.0.22000). Exploitation is possible to gain SYSTEM privileges, potentially delete data or render the service unavailable. A public PoC and details exist (Exploit-DB entry: Windows 11 10.0...
CVE-2023-21746
CVE-2023-21746 is a Windows NTLM elevation of privilege vulnerability. A GitHub exploit module for LocalPotato CVE-2023-21746 suggests a Windows-based target, with hints of buffer overflow/memory corruption as the likely root cause and that the exploit may be invoked via an exploit.py script in a...
CVE-2022-41099
CVE-2022-41099 is a BitLocker security feature bypass related to Windows Recovery Environment (WinRE). The connected Nessus/KB entries confirm WinRE-specific remediation: devices must update the WinRE partition (via Microsoft KBs tied to KB5025175, KB5022291, KB5022303, KB5022289, etc.) because i...
CVE-2022-44707
Technical details about CVE-2022-44707 are not provided in the supplied documents. The connected set does not describe affected products/versions or remediation; monitor for updates.
CVE-2022-41039
Technical details about CVE-2022-41039 are not provided in the supplied documents. Public details, affected products, or fixes are not included here. Monitor for updates from official sources.
CVE-2023-21771
CVE-2023-21771 is a Windows Local Session Manager (LSM) elevation-of-privilege vulnerability. The CVE is listed with a CVSS v3.1 base score of 7.0 (HIGH), indicating local attack vector, high impact on confidentiality, integrity, and availability, with privileges required: LOW and user interactio...
CVE-2023-21776
Technical details for CVE-2023-21776 are not publicly provided in the connected documents. Based on the supplied sources, we cannot specify affected product versions, root cause, impact, or fixes. Monitor for updates from Microsoft and vulnerability feeds.
CVE-2022-41113
CVE-2022-41113 is a Windows Win32 Kernel Subsystem elevation-of-privilege vulnerability. Connected docs corroborate exploitation in the Win32 Kernel area (item: Win32 Kernel Subsystem). Public exploits exist per Attackerkb listing. Microsoft advisories point to security updates addressing Windows...
CVE-2023-21758
Technical details for CVE-2023-21758 are not publicly available in the provided documents. The connected items do not describe affected products, root cause, impact, or fixes. Monitor official updates from Microsoft and standard vulnerability feeds for new information.
CVE-2023-21767
Technical details for CVE-2023-21767 are not provided in the Connected documents or initial description. No affected products, root cause, impact, or fixes are disclosed here. Monitor for updates from official sources.
CVE-2022-41058
Technical details for CVE-2022-41058 are not provided in the supplied documents. No affected products or fixes are described here. Monitor for updates in public advisories and the referenced sources.
CVE-2022-41076
Technical details for CVE-2022-41076 are not publicly available in the provided documents. Monitor for updates; no affected product/version or remediation details are given here.
CVE-2022-44668
CVE-2022-44668 is a Windows Media Remote Code Execution vulnerability with a CVSSv3.1 base score of 7.8 (HIGH). The vulnerability requires local access and user interaction, with potential HIGH impact to confidentiality, integrity, and availability. Connected sources confirm the CVE and its assoc...
CVE-2022-41118
Technical details about CVE-2022-41118 are not provided in the supplied documents. No product/vendor/version or exploit information is available here. Monitor for updates from official sources; further details and remediation would require vendor advisories.
CVE-2023-21765
Technical details for CVE-2023-21765 are not provided in the supplied documents; no affected products, root cause, or remediation are disclosed here. Monitor official advisories and connected sources for updates.
CVE-2022-41048
Technical details about CVE-2022-41048 (affected product, root cause, impact, or remediation) are not provided in the supplied documents; no public details are present here. Monitor for updates.
CVE-2022-44676
Technical details for CVE-2022-44676 are not provided in the supplied documents. Public availability of affected products, root cause, and fixes cannot be confirmed here; monitor for updates from official sources.
CVE-2023-21757
Technical details for CVE-2023-21757 are not publicly provided in the supplied documents. No information on affected products/versions, impact, or fixes. Monitor for updates from official sources.
CVE-2022-41052
CVE-2022-41052 is a Windows Graphics Component remote code execution vulnerability. The CVSS 3.1 base score is 7.8 (HIGH) with an attack vector of LOCAL, requiring user interaction, and impact on confidentiality, integrity, and availability (all HIGH). Affected details (product, component, root c...
CVE-2022-41047
CVE-2022-41047 relates to a Microsoft ODBC Driver issue affecting the Microsoft ODBC SQL Server Driver (sqlsrv32.dll) used for ODBC connections. OpenVAS-derived entries reference post-update behavior where apps using the ODBC driver may fail to connect or encounter protocol errors in TDS streams,...
CVE-2022-44666
CVE-2022-44666 is a Windows Contacts RCE affecting the Windows Contacts components (VCF/Contact handling) where an href/link attribute processing flow could reach SafeExecute and execute arbitrary code. Affected context centers on wab32.dll/wab.exe usage within Windows Contacts; PoCs and public w...
CVE-2022-41074
Technical details for CVE-2022-41074 are not publicly provided in the supplied documents. Monitor updates from Microsoft/NVD for affected component, impact, and remediation.
CVE-2022-41053
Technical details about CVE-2022-41053 are not publicly provided in the supplied documents. No affected products, exploit information, or mitigations are specified here. Monitor for updates.
CVE-2022-41121
CVE-2022-41121 is a Windows Graphics Component Elevation of Privilege vulnerability with a CVSS v3.1 base score of 7.8 (HIGH), requiring LOCAL access with LOW privileges and no user interaction. The available descriptions identify the affected component as Windows Graphics Component but provide n...
CVE-2022-41086
Technical details about CVE-2022-41086 (affected product/component/versions/root cause/impact/fix) are not publicly provided in the connected documents. Monitor for updates from official advisories or vendor advisories to obtain concrete exploitability, affected software, and remediation steps.
CVE-2022-41057
Technical details about CVE-2022-41057 are not provided in the connected documents. Public information here does not specify affected products, root cause, impact, or fixes. Monitor official advisories for updates.
CVE-2022-41096
Technical details about CVE-2022-41096 are not publicly provided in the supplied documents. No affected products/versions or impact are explicitly described here. Monitor the connected sources for updates from Microsoft and NVD when more information becomes available.
CVE-2022-41100
CVE-2022-41100 is a Windows ALPC Elevation of Privilege vulnerability. The Connected/OpenVAS documents confirm the CVE exists as part of Windows vulnerability listings and include it in multiple CVE compilations, but none provide concrete details on affected product versions, root cause specifics...
CVE-2022-44689
CVE-2022-44689 affects Windows Subsystem for Linux (WSL2) kernel, enabling local elevation of privilege. The NVD entry lists a local attack vector with low complexity and low privileges required, resulting in high impact to confidentiality, integrity, and availability. Connected sources corrobora...
CVE-2023-21558
Technical details about CVE-2023-21558 (affected product, version, exploitability, or remediation) are not provided in the supplied documents. Monitor for updates from official advisories.
CVE-2022-41045
Technical details about CVE-2022-41045 are not provided in the supplied documents. The connected records reference related Windows updates and KEV listings but do not specify affected products, root cause, or remediation.
CVE-2022-41109
Technical details about CVE-2022-41109 (affected products, root cause, impact, fix) are not provided in the supplied documents. The connected entries reference patches and related issues but do not disclose vulnerability specifics.
CVE-2022-41050
Technical details about CVE-2022-41050 are not publicly available in the provided documents. No product/version/root-cause/exploit information is given here. Monitor for updates from official advisories and vulnerability databases.
CVE-2023-21759
CVE-2023-21759 is a Windows Smart Card Resource Management Server security feature bypass (local, low risk, CVSS 3.1 base 3.3). Connected sources confirm this CVE exists and has been cataloged by NVD and MSRC. Microsoft KBs linked to this CVE are KB5022303 (OS 22621.1105) and related January 2023...
CVE-2023-21760
Technical details about CVE-2023-21760 are not publicly provided in the supplied connected documents. The references show Windows KB security updates but do not specify affected products, root cause, impact, or fixes for this CVE. Monitor for updates.
CVE-2022-41098
Technical details for CVE-2022-41098 (affected product/component/versions/root cause/impact/remediation) are not provided in the connected or initial documents. Monitor for updates from official sources; no public details are included here.
CVE-2022-41095
Technical details about CVE-2022-41095 are not present in the provided connected documents. The OpenVAS entries reference the CVE as part of Windows updates (KB5019966/KB5019980/KB5020003), but do not expose affected components, exploit vectors, or fixes beyond association.
CVE-2022-41114
CVE-2022-41114 is a Windows Bind Filter Driver Elevation of Privilege vulnerability. The CVE entry, with a CVSS v3.1 base score of 7.0 (HIGH), indicates a LOCAL attack vector requiring LOW privileges and no user interaction, with impact to confidentiality, integrity, and availability. Public refe...
CVE-2022-41054
Technical details about CVE-2022-41054 (affected product, root cause, impact, and remediation) are not provided in the connected documents. Monitor for updates from Microsoft or security advisories.
CVE-2022-41056
Technical details for CVE-2022-41056 are not present in the provided documents. Related items cover Kerberos/Netlogon CVEs, but no affected product/version/impact for this CVE is specified here. Monitor for updates.
CVE-2022-41088
Technical details for CVE-2022-41088 are not provided in the connected documents. No affected product/component/version, root-cause, impact, or remediation details are given here; monitor official sources for updates.
CVE-2022-41093
Technical details for CVE-2022-41093 are not publicly available in the provided documents. No affected products, root cause, or fixes are described here. Monitor official advisories for updates on impact and remediation.
CVE-2022-38015
Technical details about CVE-2022-38015 (Windows Hyper-V DoS) are not publicly provided in the supplied documents. Monitor for updates from Microsoft/NVD and related advisories.
CVE-2022-41090
Technical details for CVE-2022-41090 (Windows PPTP DoS) are not provided in the connected documents. No affected products, versions, or fixes are listed here. Monitor official advisories for updates and remediation guidance.
CVE-2022-37992
Technical details for CVE-2022-37992 (Windows Group Policy Elevation of Privilege) are not publicly provided in the supplied Connected documents. Monitor for updates from Microsoft/MSRC and NVD; no product/version/impact specifics are available here.
CVE-2022-41077
CVE-2022-41077 is Windows Fax Compose Form Elevation of Privilege. Affected component: Windows Fax service (Fax/Compose form). Root cause and impact as per provided data: local attacker with low privileges can exploit the vulnerability with no user interaction to achieve elevation of privilege, w...
CVE-2022-41102
Technical details for CVE-2022-41102 are not provided in the supplied documents. No affected products, versions, root cause, or remediation are specified here. Monitor official sources for updates.
CVE-2022-44667
Technical details are not publicly available in the provided documents. The supplied items only label CVE-2022-44667 as a Windows Media Remote Code Execution vulnerability; no specific affected product/version/root cause/fix is included. Monitor for updates.
CVE-2022-44680
CVE-2022-44680 is a Windows Graphics Component Elevation of Privilege vulnerability. The CVSSv3.1 vector (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) indicates a local, low-complexity exploit requiring low privileges with no user interaction, capable of compromising confidentiality, integrity, and avail...