573 matches found
CVE-2022-41055
Technical details about CVE-2022-41055 (affected product, root cause, impact, or fix) are not provided in the connected documents. Monitor for updates from the vendor and vulnerability feeds.
CVE-2022-21994
CVE-2022-21994 is a Windows elevation-of-privilege issue in the DWM Core Library that permits local escalation with low attack complexity and no user interaction (per CVSS data in the initial). Connected documents corroborate a Windows DWM Core Library vulnerability and show Microsoft remediation...
CVE-2022-29103
Technical details for CVE-2022-29103 are not publicly provided in the supplied documents. The connected items discuss Windows update KB entries and security issues, but none specify affected products/versions or remediation for this CVE.
CVE-2022-30198
CVE-2022-30198 is mapped to Windows Point-to-Point Tunneling Protocol with an 8.10 CVSS equivalent and is described as enabling remote code execution (Executing Random Code) on affected Windows PPTP components. Connected data confirms this CVE is listed among Windows vulnerabilites fixed/monitore...
CVE-2022-34725
Technical details about CVE-2022-34725 are not publicly provided in the supplied documents. No affected products, vulnerable components, exploit information, or remediation specifics are present. Monitor for official disclosures or updates from vendors.
CVE-2022-35804
CVE-2022-35804 is a Windows SMB Client/Server remote code execution vulnerability. The connected sources confirm it affects Windows SMB components and can allow an unauthenticated remote attacker to run code on affected servers/hosts. The public patch guidance centers on applying the August 2022 ...
CVE-2022-35836
CVE-2022-35836 affects the Microsoft WDAC OLE DB provider for SQL Server, described as a Remote Code Execution vulnerability. The connected AttackKB entry reiterates the same description. Provided details indicate the vulnerability is network-reachable with high impact to confidentiality, integri...
CVE-2022-44697
CVE-2022-44697 corresponds to a Windows Graphics Component Elevation of Privilege vulnerability. The CVE entry indicates a LOCAL attack vector with LOW privileges required and NO user interaction, resulting in HIGH impact on confidentiality, integrity, and availability (CVSSv3.1 base score 7.8). ...
CVE-2022-22712
CVE-2022-22712: Windows Hyper-V Denial of Service vulnerability. Affects Hyper-V; root cause details are not provided in the initial document, but CVSS metrics indicate Local attack vector with no authentication and no user interaction, leading to a high availability impact (CVE‑v2 base score 4.7...
CVE-2022-34732
CVE-2022-34732 corresponds to a Microsoft ODBC Driver Remote Code Execution vulnerability. According to the provided data, it has a CVSS v3.1 base score of 8.8 (HIGH) with network attack, no privileges required, user interaction needed, and impacts to confidentiality, integrity, and availability....
CVE-2022-35831
CVE-2022-35831 affects the Windows Remote Access Connection Manager and is described as an Information Disclosure vulnerability. The connected data provides technical details: affected component is the Remote Access Connection Manager; root cause is an information disclosure fault; impact is Conf...
CVE-2022-35834
CVE-2022-35834 : The vulnerability is described as a Remote Code Execution issue affecting the Microsoft WDAC OLE DB provider for SQL Server. The provided documents only state this product/weakness at a high level and do not include technical details such as affected versions, root cause, specifi...
CVE-2022-37954
CVE-2022-37954 is a Elevation of Privilege vulnerability in the DirectX Graphics Kernel component of Windows. The initial CVSSv3.1 data indicates Local exploitability with Low attack complexity and Low privileges required, yielding a high base score of 7.8 (C:H, I:H, A:H). The vulnerability affec...
CVE-2022-37978
CVE-2022-37978 is a Windows Active Directory Certificate Services security feature bypass (Circumvention of security measure) with CVSS v3.1 base score 7.5. Affected component: Active Directory Certificate Services in Windows. Root cause details are not fully disclosed in the provided connected d...
CVE-2022-44675
Technical details about CVE-2022-44675 are not provided in the connected documents. The supplied materials confirm the vulnerability title but do not list affected products, root cause, impact, or fixes. Monitor for updates from official sources.
CVE-2021-40475
CVE-2021-40475 refers to the Windows Cloud Files Mini Filter Driver Information Disclosure Vulnerability. Available sources identify the affected component as the Windows Cloud Files Mini Filter Driver and classify the issue as an information disclosure vulnerability with local attack potential. ...
CVE-2022-21876
Technical details for CVE-2022-21876 are not publicly available in the provided documents. Monitor for updates from the sources listed in the NVD entry and associated advisories.
CVE-2022-29125
Technical details (affected product/version, root cause, exploit info, or patch specifics) are not provided in the connected documents for CVE-2022-29125. Monitor for updates.
CVE-2022-37957
Technical details about CVE-2022-37957 are not publicly provided in the supplied documents. The connected items reference the vulnerability generally as a Windows Kernel Elevation of Privilege issue but do not include affected product versions, root cause, CVSS specifics beyond the CVSS score in ...
CVE-2022-38016
CVE-2022-38016 is a Windows Local Security Authority (LSA) Elevation of Privilege vulnerability. Affects Windows LSA component; root cause involves improper privilege handling within LSA, enabling local attackers with LOW privileges and NO user interaction to gain SYSTEM-level access. CVSS v3.1 m...
CVE-2022-38051
CVE-2022-38051 relates to a privilege-elevation vulnerability in the Windows Graphics Component. According to the connected CNVD entry, the issue stems from improper privilege assignment within Microsoft Graphics Component, enabling a local attacker to escalate privileges. The NCSC advisory corro...
CVE-2021-40478
CVE-2021-40478 is described in the connected NVD entry as a Storage Spaces Controller Elevation of Privilege vulnerability. The CVSSv3.1 base score is 7.8 (HIGH), with attack vector LOCAL, attack complexity LOW, privileges required LOW, and no user interaction. The impact is listed as high confid...
CVE-2021-41339
Technical details about CVE-2021-41339 are not publicly available in the provided documents. Monitor for updates from Microsoft and vulnerability feeds.
CVE-2021-41347
Technical details about CVE-2021-41347 are not publicly provided in the connected documents. The affected software/impact specifics are not disclosed here. Monitor for official advisories from Microsoft and CVE listings for updated exploit information and remediation.
CVE-2022-21962
CVE-2022-21962 corresponds to a Windows Resilient File System (ReFS) remote code execution vulnerability. The NVD entry lists two CVSS assessments: CVSS v2 base score 7.2 (LOCAL, with no user interaction, impact to confidentiality/integrity/availability) and CVSS v3.1 base score 6.8 (attack vecto...
CVE-2022-37989
CSRSS Elevation of Privilege (CVE-2022-37989) is a Windows local privilege escalation vulnerability in the Client Server Run-time Subsystem. The issue permits a local attacker to elevate privileges (to SYSTEM) on vulnerable Windows versions. Public details describe CSRSS as the Windows user-mode ...
CVE-2022-37995
CVE-2022-37995 is a Windows Kernel elevation-of-privilege vulnerability. The initial entry notes a local attacker could achieve a high-severity (CVSS 7.8) impact with low attack complexity and no user interaction required. Connected documents list this CVE under Windows Kernel and enumerate fixes...
CVE-2022-38022
CVE-2022-38022 is listed in the ENISA/NCSC (Windows Kernel) catalog as a Windows Kernel elevation-of-privilege vulnerability. The NCSc table places CVE-2022-38022 under Windows Kernel with the impact category “Obtaining Increased Entitlements.” No explicit root-cause, affected versions, or remedi...
CVE-2022-21872
Technical details about CVE-2022-21872 are not provided in connected documents. Public input only labels it as Windows Event Tracing Elevation of Privilege Vulnerability; monitor for updates.
CVE-2022-34711
Technical details about CVE-2022-34711 are not publicly available in the provided connected documents. No explicit affected product/component/versions or remediation are stated here. Monitor for updates from official sources.
CVE-2022-35770
CVE-2022-35770 is a Windows NTLM spoofing vulnerability. The connected records classify it under Windows NTLM with an impact described as “Pretend to be another user” and a CVSS v3.1 base score of 6.5 (Network attack, Low attack complexity, No privileges required, User interaction required; Confi...
CVE-2022-35837
Technical details about CVE-2022-35837 are not publicly provided in the supplied documents. Monitor for updates from official sources; current materials only confirm the vulnerability name and CVE ID without specifics.
CVE-2022-37982
CVE-2022-37982 relates to the Microsoft WDAC OLE DB provider for SQL Server, with a Remote Code Execution vulnerability. Connected documents identify the affected component as the WDAC OLE DB provider for SQL and indicate an impact of executing arbitrary code, consistent with a high-severity netw...
CVE-2021-40476
CVE-2021-40476 is a Windows AppContainer Elevation of Privilege vulnerability. The provided documents identify the impacted component as Windows AppContainer, with CVSS v3.1 base score 7.8 (LOCAL, LOW ATTACK COMPLEXITY, NO PRIVILEGES REQUIRED, UI REQUIRED, HIGH impact to C/I/A) and CVSS2 metrics ...
CVE-2021-42274
CVE-2021-42274 is a Windows Hyper‑V Discrete Device Assignment (DDA) Denial of Service vulnerability. The connected documents indicate a Hyper‑V DoS issue without detailing exploit vectors or root cause in code. Mitigations are version‑specific Windows updates from November 2021 (e.g., KB5007205,...
CVE-2021-43224
CVE-2021-43224 targets the Windows Common Log File System (CLFS) Driver with an information disclosure vulnerability. The connected exploit repository for this CVE indicates a Proof-of-Concept that yields a crash (BSOD) on Windows 20H2 (build 19042.1387) and is labeled as a Windows CLFS Driver Po...
CVE-2022-22711
Technical details about CVE-2022-22711 are not provided in the supplied documents; no affected product/version or exploit information is disclosed. Monitor for updates from official sources.
CVE-2022-23290
Technical details about CVE-2022-23290 are not publicly provided in the supplied connected documents. No concrete product/version/root-cause/impact/fix information is present beyond the generic vulnerability label. Monitor for official updates from primary sources.
CVE-2022-24498
CVE-2022-24498 is a Windows iSCSI Target Service Information Disclosure vulnerability. The available data show that it affects the Windows iSCSI Target Service and has a CVSS v3.1 base score of 6.5 (Network, Low attack complexity, Low privileges required, No user interaction, Confidentiality impa...
CVE-2022-29105
No technical details about CVE-2022-29105 are present in the provided connected documents; monitor for updates.
CVE-2022-37977
CVE-2022-37977 is a Local Security Authority Subsystem Service (LSASS) Denial of Service vulnerability in Windows. CNVD’s description attributes the issue to a failure in properly handling incoming error messages, which could allow an attacker to trigger an application DoS. Multiple national advi...
CVE-2022-37999
CVE-2022-37999 is a Windows Group Policy Preference Client privilege-elevation vulnerability. The CNVD entry describes it as an elevation of privilege in the Windows Group Policy Preference Client stemming from improper privilege assignment, enabling a local attacker with LOW privileges (LOCAL, L...
CVE-2022-41101
CVE-2022-41101 is a Windows Overlay Filter Elevation of Privilege vulnerability with CVSS 3.1 base score 7.8 (HIGH). It is a LOCAL exploit requiring LOW privileges and no user interaction, with full impact on confidentiality, integrity, and availability as per the score. The provided documents id...
CVE-2022-44678
Technical details for CVE-2022-44678 are not provided in the connected documents. No product/version/impact/fix details are present here. Monitor for official disclosures and vendor advisories for updates.
CVE-2023-21766
CVE-2023-21766 corresponds to a Windows Overlay Filter information-disclosure vulnerability. The CVE entry lists a local attack surface with a Confidentiality impact of High, no Integrity/Availability impact, and a CVSS 3.1 base score of 4.7 (Attack Vector: Local; Attack Complexity: High; Privile...
CVE-2021-40470
CVE-2021-40470 is a DirectX Graphics Kernel Elevation of Privilege vulnerability. The initial record indicates a LOCAL, low-logging, no-interaction attack with HIGH impact via CVSSv3.1 vector CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H (base 7.8). The connected documents reference Microsoft advi...
CVE-2021-42276
Technical details about CVE-2021-42276 are not provided in the supplied connected documents. Please monitor for updates in the sources list to learn affected products, root cause, impact, and remediation.
CVE-2022-21861
Technical details about CVE-2022-21861 are not provided in the connected documents; publicly available content in the initial entry is limited to a high-level description and scores. Monitor for updates.