CVE-2022-21892

CVE-2022-21892 concerns Windows Resilient File System (ReFS). The initial entry identifies a Remote Code Execution Vulnerability in ReFS, with CVSS metrics showing a base score of 7.2 (AV:L/AC:L/Au:N/C:C/I:C/A:C) per NVD and a Microsoft 3.1 vector (CVSS:3.1) indicating physical access, low attack...

CVE-2022-21924

CVE-2022-21924 is described in the provided documents as a Workstation Service Remote Protocol Security Feature Bypass Vulnerability , with a MEDIUM severity (CVSS v2 base score 5.4 and CVSS v3.1 base score 5.3). The available sources stop short of naming affected products, versions, or root caus...

CVE-2022-26794

Technical details for CVE-2022-26794 are not publicly provided in the supplied documents. No specifics on affected components, root cause, impact, or fixes are present here. Monitor for updates in connected sources.

CVE-2022-29103

Technical details for CVE-2022-29103 are not publicly provided in the supplied documents. The connected items discuss Windows update KB entries and security issues, but none specify affected products/versions or remediation for this CVE.

CVE-2022-34711

Technical details about CVE-2022-34711 are not publicly available in the provided connected documents. No explicit affected product/component/versions or remediation are stated here. Monitor for updates from official sources.

CVE-2022-34725

Technical details about CVE-2022-34725 are not publicly provided in the supplied documents. No affected products, vulnerable components, exploit information, or remediation specifics are present. Monitor for official disclosures or updates from vendors.

CVE-2022-35834

CVE-2022-35834 : The vulnerability is described as a Remote Code Execution issue affecting the Microsoft WDAC OLE DB provider for SQL Server. The provided documents only state this product/weakness at a high level and do not include technical details such as affected versions, root cause, specifi...

CVE-2021-40476

CVE-2021-40476 is a Windows AppContainer Elevation of Privilege vulnerability. The provided documents identify the impacted component as Windows AppContainer, with CVSS v3.1 base score 7.8 (LOCAL, LOW ATTACK COMPLEXITY, NO PRIVILEGES REQUIRED, UI REQUIRED, HIGH impact to C/I/A) and CVSS2 metrics ...

CVE-2021-41378

CVE-2021-41378 corresponds to a Windows NTFS remote code execution vulnerability. The CNVD entry describes a Windows NTFS RCE vulnerability, and NVD echoes a Windows NTFS RCE description for this CVE. Public details in connected sources do not specify the affected product version(s) or root cause...

CVE-2022-21994

CVE-2022-21994 is a Windows elevation-of-privilege issue in the DWM Core Library that permits local escalation with low attack complexity and no user interaction (per CVSS data in the initial). Connected documents corroborate a Windows DWM Core Library vulnerability and show Microsoft remediation...

CVE-2022-26792

Technical details for CVE-2022-26792 are not publicly provided in the supplied documents. Monitor for updates from authoritative sources as more information becomes available.

CVE-2022-26807

Technical details for CVE-2022-26807 are not publicly provided in the supplied documents. Monitor for updates from official advisories.

CVE-2022-35804

CVE-2022-35804 is a Windows SMB Client/Server remote code execution vulnerability. The connected sources confirm it affects Windows SMB components and can allow an unauthenticated remote attacker to run code on affected servers/hosts. The public patch guidance centers on applying the August 2022 ...

CVE-2022-35841

Technical details about CVE-2022-35841 (Windows Enterprise App Management Service RCE) are not publicly provided in the connected documents. No explicit root cause, affected versions, or fixes are disclosed here; monitor Microsoft/NVD updates for technical specifics.

CVE-2022-37977

CVE-2022-37977 is a Local Security Authority Subsystem Service (LSASS) Denial of Service vulnerability in Windows. CNVD’s description attributes the issue to a failure in properly handling incoming error messages, which could allow an attacker to trigger an application DoS. Multiple national advi...

CVE-2022-37978

CVE-2022-37978 is a Windows Active Directory Certificate Services security feature bypass (Circumvention of security measure) with CVSS v3.1 base score 7.5. Affected component: Active Directory Certificate Services in Windows. Root cause details are not fully disclosed in the provided connected d...

CVE-2022-41097

Technical details about CVE-2022-41097 (NPS RADIUS information disclosure) are not provided in the supplied documents. Monitor for updates from official sources for affected products, versions, and fixes.

CVE-2022-44675

Technical details about CVE-2022-44675 are not provided in the connected documents. The supplied materials confirm the vulnerability title but do not list affected products, root cause, impact, or fixes. Monitor for updates from official sources.

CVE-2022-34730

Technical details about CVE-2022-34730 are not publicly provided in the supplied connected documents. No product/version/impact/fix details are present here; monitor for updates from official advisories.

CVE-2022-37954

CVE-2022-37954 is a Elevation of Privilege vulnerability in the DirectX Graphics Kernel component of Windows. The initial CVSSv3.1 data indicates Local exploitability with Low attack complexity and Low privileges required, yielding a high base score of 7.8 (C:H, I:H, A:H). The vulnerability affec...

CVE-2022-41055

Technical details about CVE-2022-41055 (affected product, root cause, impact, or fix) are not provided in the connected documents. Monitor for updates from the vendor and vulnerability feeds.

CVE-2021-41339

Technical details about CVE-2021-41339 are not publicly available in the provided documents. Monitor for updates from Microsoft and vulnerability feeds.

CVE-2022-21872

Technical details about CVE-2022-21872 are not provided in connected documents. Public input only labels it as Windows Event Tracing Elevation of Privilege Vulnerability; monitor for updates.

CVE-2022-22712

CVE-2022-22712: Windows Hyper-V Denial of Service vulnerability. Affects Hyper-V; root cause details are not provided in the initial document, but CVSS metrics indicate Local attack vector with no authentication and no user interaction, leading to a high availability impact (CVE‑v2 base score 4.7...

CVE-2022-29125

Technical details (affected product/version, root cause, exploit info, or patch specifics) are not provided in the connected documents for CVE-2022-29125. Monitor for updates.

CVE-2022-35831

CVE-2022-35831 affects the Windows Remote Access Connection Manager and is described as an Information Disclosure vulnerability. The connected data provides technical details: affected component is the Remote Access Connection Manager; root cause is an information disclosure fault; impact is Conf...

CVE-2022-37957

Technical details about CVE-2022-37957 are not publicly provided in the supplied documents. The connected items reference the vulnerability generally as a Windows Kernel Elevation of Privilege issue but do not include affected product versions, root cause, CVSS specifics beyond the CVSS score in ...

CVE-2021-40475

CVE-2021-40475 refers to the Windows Cloud Files Mini Filter Driver Information Disclosure Vulnerability. Available sources identify the affected component as the Windows Cloud Files Mini Filter Driver and classify the issue as an information disclosure vulnerability with local attack potential. ...

CVE-2021-40478

CVE-2021-40478 is described in the connected NVD entry as a Storage Spaces Controller Elevation of Privilege vulnerability. The CVSSv3.1 base score is 7.8 (HIGH), with attack vector LOCAL, attack complexity LOW, privileges required LOW, and no user interaction. The impact is listed as high confid...

CVE-2022-21876

Technical details for CVE-2022-21876 are not publicly available in the provided documents. Monitor for updates from the sources listed in the NVD entry and associated advisories.

CVE-2022-34732

CVE-2022-34732 corresponds to a Microsoft ODBC Driver Remote Code Execution vulnerability. According to the provided data, it has a CVSS v3.1 base score of 8.8 (HIGH) with network attack, no privileges required, user interaction needed, and impacts to confidentiality, integrity, and availability....

CVE-2022-35770

CVE-2022-35770 is a Windows NTLM spoofing vulnerability. The connected records classify it under Windows NTLM with an impact described as “Pretend to be another user” and a CVSS v3.1 base score of 6.5 (Network attack, Low attack complexity, No privileges required, User interaction required; Confi...

CVE-2022-35832

CVE-2022-35832 is documented as a Windows Event Tracing Denial of Service vulnerability. The connected sources provide no explicit product/version information or fix details; the NVD entry lists a CVSSv3.1 base score of 5.5 (Medium) with LOCAL attack vector, LOW privileges required, no user inter...

CVE-2022-37989

CSRSS Elevation of Privilege (CVE-2022-37989) is a Windows local privilege escalation vulnerability in the Client Server Run-time Subsystem. The issue permits a local attacker to elevate privileges (to SYSTEM) on vulnerable Windows versions. Public details describe CSRSS as the Windows user-mode ...

CVE-2022-38016

CVE-2022-38016 is a Windows Local Security Authority (LSA) Elevation of Privilege vulnerability. Affects Windows LSA component; root cause involves improper privilege handling within LSA, enabling local attackers with LOW privileges and NO user interaction to gain SYSTEM-level access. CVSS v3.1 m...

CVE-2021-43230

CVE-2021-43230 is a Windows NTFS Elevation of Privilege vulnerability (local, low attack complexity) with no user interaction required, per the initial CVE entry. The connected documents primarily discuss NTFS-related CVEs in the 2021-4323x family and describe a pool/size calculation overflow in ...

CVE-2022-24498

CVE-2022-24498 is a Windows iSCSI Target Service Information Disclosure vulnerability. The available data show that it affects the Windows iSCSI Target Service and has a CVSS v3.1 base score of 6.5 (Network, Low attack complexity, Low privileges required, No user interaction, Confidentiality impa...

CVE-2022-29105

No technical details about CVE-2022-29105 are present in the provided connected documents; monitor for updates.

CVE-2022-44678

Technical details for CVE-2022-44678 are not provided in the connected documents. No product/version/impact/fix details are present here. Monitor for official disclosures and vendor advisories for updates.

CVE-2021-43224

CVE-2021-43224 targets the Windows Common Log File System (CLFS) Driver with an information disclosure vulnerability. The connected exploit repository for this CVE indicates a Proof-of-Concept that yields a crash (BSOD) on Windows 20H2 (build 19042.1387) and is labeled as a Windows CLFS Driver Po...

CVE-2022-37982

CVE-2022-37982 relates to the Microsoft WDAC OLE DB provider for SQL Server, with a Remote Code Execution vulnerability. Connected documents identify the affected component as the WDAC OLE DB provider for SQL and indicate an impact of executing arbitrary code, consistent with a high-severity netw...

CVE-2022-37990

CVE-2022-37990 is a Windows kernel elevation-of-privilege issue tied to registry/hive memory handling. The connected analysis places this bug in a pool memory corruption class triggered by a 16‑bit integer overflow when calculating a dynamically allocated buffer length during registry hive operat...

CVE-2022-37999

CVE-2022-37999 is a Windows Group Policy Preference Client privilege-elevation vulnerability. The CNVD entry describes it as an elevation of privilege in the Windows Group Policy Preference Client stemming from improper privilege assignment, enabling a local attacker with LOW privileges (LOCAL, L...

CVE-2022-38004

Technical details about CVE-2022-38004 are not publicly available in the provided documents; the connected records reference Windows Fax Service and a remote code execution vulnerability but do not disclose affected versions, root cause, exploit info, or fixes. Monitor for updates.

CVE-2022-38022

CVE-2022-38022 is listed in the ENISA/NCSC (Windows Kernel) catalog as a Windows Kernel elevation-of-privilege vulnerability. The NCSc table places CVE-2022-38022 under Windows Kernel with the impact category “Obtaining Increased Entitlements.” No explicit root-cause, affected versions, or remedi...

CVE-2022-41101

CVE-2022-41101 is a Windows Overlay Filter Elevation of Privilege vulnerability with CVSS 3.1 base score 7.8 (HIGH). It is a LOCAL exploit requiring LOW privileges and no user interaction, with full impact on confidentiality, integrity, and availability as per the score. The provided documents id...

CVE-2021-41347

Technical details about CVE-2021-41347 are not publicly provided in the connected documents. The affected software/impact specifics are not disclosed here. Monitor for official advisories from Microsoft and CVE listings for updated exploit information and remediation.

CVE-2021-43222

CVE-2021-43222 documents a Microsoft Message Queuing information disclosure vulnerability. The issue affects MSMQ when handling messages over the network, enabling an attacker with network access and no authentication to potentially access confidential information. According to the CVE entry, the...

CVE-2021-43229

CVE-2021-43229 is an NTFS elevation-of-privilege vulnerability affecting Windows systems. The connected exploit walkthrough describes a pool-based overflow caused by an integer overflow during allocation size computation (directory path length + file name length) in several NTFS paths (e.g., Ntfs...

CVE-2022-21962

CVE-2022-21962 corresponds to a Windows Resilient File System (ReFS) remote code execution vulnerability. The NVD entry lists two CVSS assessments: CVSS v2 base score 7.2 (LOCAL, with no user interaction, impact to confidentiality/integrity/availability) and CVSS v3.1 base score 6.8 (attack vecto...