CVE-2022-35841

Technical details about CVE-2022-35841 (Windows Enterprise App Management Service RCE) are not publicly provided in the connected documents. No explicit root cause, affected versions, or fixes are disclosed here; monitor Microsoft/NVD updates for technical specifics.

CVE-2022-38038

CVE-2022-38038 is a Windows kernel registry vulnerability caused by a 16-bit integer overflow during dynamic buffer length calculations in hive loading, leading to hive-based memory corruption and local privilege escalation. The issue is tied to regf/hive loading paths and is grouped with other r...

CVE-2022-35836

CVE-2022-35836 affects the Microsoft WDAC OLE DB provider for SQL Server, described as a Remote Code Execution vulnerability. The connected AttackKB entry reiterates the same description. Provided details indicate the vulnerability is network-reachable with high impact to confidentiality, integri...

CVE-2022-37978

CVE-2022-37978 is a Windows Active Directory Certificate Services security feature bypass (Circumvention of security measure) with CVSS v3.1 base score 7.5. Affected component: Active Directory Certificate Services in Windows. Root cause details are not fully disclosed in the provided connected d...

CVE-2022-41055

Technical details about CVE-2022-41055 (affected product, root cause, impact, or fix) are not provided in the connected documents. Monitor for updates from the vendor and vulnerability feeds.

CVE-2021-40476

CVE-2021-40476 is a Windows AppContainer Elevation of Privilege vulnerability. The provided documents identify the impacted component as Windows AppContainer, with CVSS v3.1 base score 7.8 (LOCAL, LOW ATTACK COMPLEXITY, NO PRIVILEGES REQUIRED, UI REQUIRED, HIGH impact to C/I/A) and CVSS2 metrics ...

CVE-2021-41347

Technical details about CVE-2021-41347 are not publicly provided in the connected documents. The affected software/impact specifics are not disclosed here. Monitor for official advisories from Microsoft and CVE listings for updated exploit information and remediation.

CVE-2022-21921

CVE-2022-21921 is a Windows Defender Credential Guard security feature bypass. Connected documents identify Windows Defender as affected, with the issue categorized as a security-measure bypass (CVSS/Impact cited in sources such as Microsoft KBs and security advisories). The root cause and exact ...

CVE-2022-29125

Technical details (affected product/version, root cause, exploit info, or patch specifics) are not provided in the connected documents for CVE-2022-29125. Monitor for updates.

CVE-2022-30198

CVE-2022-30198 is mapped to Windows Point-to-Point Tunneling Protocol with an 8.10 CVSS equivalent and is described as enabling remote code execution (Executing Random Code) on affected Windows PPTP components. Connected data confirms this CVE is listed among Windows vulnerabilites fixed/monitore...

CVE-2022-34725

Technical details about CVE-2022-34725 are not publicly provided in the supplied documents. No affected products, vulnerable components, exploit information, or remediation specifics are present. Monitor for official disclosures or updates from vendors.

CVE-2022-35804

CVE-2022-35804 is a Windows SMB Client/Server remote code execution vulnerability. The connected sources confirm it affects Windows SMB components and can allow an unauthenticated remote attacker to run code on affected servers/hosts. The public patch guidance centers on applying the August 2022 ...

CVE-2022-38016

CVE-2022-38016 is a Windows Local Security Authority (LSA) Elevation of Privilege vulnerability. Affects Windows LSA component; root cause involves improper privilege handling within LSA, enabling local attackers with LOW privileges and NO user interaction to gain SYSTEM-level access. CVSS v3.1 m...

CVE-2021-40478

CVE-2021-40478 is described in the connected NVD entry as a Storage Spaces Controller Elevation of Privilege vulnerability. The CVSSv3.1 base score is 7.8 (HIGH), with attack vector LOCAL, attack complexity LOW, privileges required LOW, and no user interaction. The impact is listed as high confid...

CVE-2021-41339

Technical details about CVE-2021-41339 are not publicly available in the provided documents. Monitor for updates from Microsoft and vulnerability feeds.

CVE-2021-42274

CVE-2021-42274 is a Windows Hyper‑V Discrete Device Assignment (DDA) Denial of Service vulnerability. The connected documents indicate a Hyper‑V DoS issue without detailing exploit vectors or root cause in code. Mitigations are version‑specific Windows updates from November 2021 (e.g., KB5007205,...

CVE-2022-21872

Technical details about CVE-2022-21872 are not provided in connected documents. Public input only labels it as Windows Event Tracing Elevation of Privilege Vulnerability; monitor for updates.

CVE-2022-21962

CVE-2022-21962 corresponds to a Windows Resilient File System (ReFS) remote code execution vulnerability. The NVD entry lists two CVSS assessments: CVSS v2 base score 7.2 (LOCAL, with no user interaction, impact to confidentiality/integrity/availability) and CVSS v3.1 base score 6.8 (attack vecto...

CVE-2022-22712

CVE-2022-22712: Windows Hyper-V Denial of Service vulnerability. Affects Hyper-V; root cause details are not provided in the initial document, but CVSS metrics indicate Local attack vector with no authentication and no user interaction, leading to a high availability impact (CVE‑v2 base score 4.7...

CVE-2022-37995

CVE-2022-37995 is a Windows Kernel elevation-of-privilege vulnerability. The initial entry notes a local attacker could achieve a high-severity (CVSS 7.8) impact with low attack complexity and no user interaction required. Connected documents list this CVE under Windows Kernel and enumerate fixes...

CVE-2022-38051

CVE-2022-38051 relates to a privilege-elevation vulnerability in the Windows Graphics Component. According to the connected CNVD entry, the issue stems from improper privilege assignment within Microsoft Graphics Component, enabling a local attacker to escalate privileges. The NCSC advisory corro...

CVE-2021-40470

CVE-2021-40470 is a DirectX Graphics Kernel Elevation of Privilege vulnerability. The initial record indicates a LOCAL, low-logging, no-interaction attack with HIGH impact via CVSSv3.1 vector CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H (base 7.8). The connected documents reference Microsoft advi...

CVE-2021-40475

CVE-2021-40475 refers to the Windows Cloud Files Mini Filter Driver Information Disclosure Vulnerability. Available sources identify the affected component as the Windows Cloud Files Mini Filter Driver and classify the issue as an information disclosure vulnerability with local attack potential. ...

CVE-2022-21876

Technical details for CVE-2022-21876 are not publicly available in the provided documents. Monitor for updates from the sources listed in the NVD entry and associated advisories.

CVE-2022-23290

Technical details about CVE-2022-23290 are not publicly provided in the supplied connected documents. No concrete product/version/root-cause/impact/fix information is present beyond the generic vulnerability label. Monitor for official updates from primary sources.

CVE-2022-26933

Technical details about CVE-2022-26933 (NTFS Information Disclosure) are not provided in the connected documents. Monitor for updates; no affected products, root cause, impact, or fixes are disclosed here.

CVE-2022-29105

No technical details about CVE-2022-29105 are present in the provided connected documents; monitor for updates.

CVE-2022-34711

Technical details about CVE-2022-34711 are not publicly available in the provided connected documents. No explicit affected product/component/versions or remediation are stated here. Monitor for updates from official sources.

CVE-2022-34732

CVE-2022-34732 corresponds to a Microsoft ODBC Driver Remote Code Execution vulnerability. According to the provided data, it has a CVSS v3.1 base score of 8.8 (HIGH) with network attack, no privileges required, user interaction needed, and impacts to confidentiality, integrity, and availability....

CVE-2022-35837

Technical details about CVE-2022-35837 are not publicly provided in the supplied documents. Monitor for updates from official sources; current materials only confirm the vulnerability name and CVE ID without specifics.

CVE-2022-37957

Technical details about CVE-2022-37957 are not publicly provided in the supplied documents. The connected items reference the vulnerability generally as a Windows Kernel Elevation of Privilege issue but do not include affected product versions, root cause, CVSS specifics beyond the CVSS score in ...

CVE-2022-37982

CVE-2022-37982 relates to the Microsoft WDAC OLE DB provider for SQL Server, with a Remote Code Execution vulnerability. Connected documents identify the affected component as the WDAC OLE DB provider for SQL and indicate an impact of executing arbitrary code, consistent with a high-severity netw...

CVE-2023-21766

CVE-2023-21766 corresponds to a Windows Overlay Filter information-disclosure vulnerability. The CVE entry lists a local attack surface with a Confidentiality impact of High, no Integrity/Availability impact, and a CVSS 3.1 base score of 4.7 (Attack Vector: Local; Attack Complexity: High; Privile...

CVE-2022-22711

Technical details about CVE-2022-22711 are not provided in the supplied documents; no affected product/version or exploit information is disclosed. Monitor for updates from official sources.

CVE-2022-37989

CSRSS Elevation of Privilege (CVE-2022-37989) is a Windows local privilege escalation vulnerability in the Client Server Run-time Subsystem. The issue permits a local attacker to elevate privileges (to SYSTEM) on vulnerable Windows versions. Public details describe CSRSS as the Windows user-mode ...

CVE-2022-38000

CVE-2022-38000 is a Windows Point-to-Point Tunneling Protocol (PPTP) remote code execution vulnerability. Connected MS updates document this CVE under the Windows PPTP entry and indicate it is addressed by October 2022 security updates (e.g., KB5018410/KB5018427). The vulnerability affects the PP...

CVE-2021-43224

CVE-2021-43224 targets the Windows Common Log File System (CLFS) Driver with an information disclosure vulnerability. The connected exploit repository for this CVE indicates a Proof-of-Concept that yields a crash (BSOD) on Windows 20H2 (build 19042.1387) and is labeled as a Windows CLFS Driver Po...

CVE-2022-21861

Technical details about CVE-2022-21861 are not provided in the connected documents; publicly available content in the initial entry is limited to a high-level description and scores. Monitor for updates.

CVE-2022-37977

CVE-2022-37977 is a Local Security Authority Subsystem Service (LSASS) Denial of Service vulnerability in Windows. CNVD’s description attributes the issue to a failure in properly handling incoming error messages, which could allow an attacker to trigger an application DoS. Multiple national advi...

CVE-2022-37990

CVE-2022-37990 is a Windows kernel elevation-of-privilege issue tied to registry/hive memory handling. The connected analysis places this bug in a pool memory corruption class triggered by a 16‑bit integer overflow when calculating a dynamically allocated buffer length during registry hive operat...

CVE-2022-41101

CVE-2022-41101 is a Windows Overlay Filter Elevation of Privilege vulnerability with CVSS 3.1 base score 7.8 (HIGH). It is a LOCAL exploit requiring LOW privileges and no user interaction, with full impact on confidentiality, integrity, and availability as per the score. The provided documents id...

CVE-2022-44678

Technical details for CVE-2022-44678 are not provided in the connected documents. No product/version/impact/fix details are present here. Monitor for official disclosures and vendor advisories for updates.

CVE-2022-44697

CVE-2022-44697 corresponds to a Windows Graphics Component Elevation of Privilege vulnerability. The CVE entry indicates a LOCAL attack vector with LOW privileges required and NO user interaction, resulting in HIGH impact on confidentiality, integrity, and availability (CVSSv3.1 base score 7.8). ...

CVE-2021-43230

CVE-2021-43230 is a Windows NTFS Elevation of Privilege vulnerability (local, low attack complexity) with no user interaction required, per the initial CVE entry. The connected documents primarily discuss NTFS-related CVEs in the 2021-4323x family and describe a pool/size calculation overflow in ...

CVE-2022-24498

CVE-2022-24498 is a Windows iSCSI Target Service Information Disclosure vulnerability. The available data show that it affects the Windows iSCSI Target Service and has a CVSS v3.1 base score of 6.5 (Network, Low attack complexity, Low privileges required, No user interaction, Confidentiality impa...

CVE-2022-24544

Technical details for CVE-2022-24544 are not publicly available in the provided documents. Monitor for updates.

CVE-2022-34726

Technical details (affected component, root cause, impact, and fix) are not provided in the supplied documents; no concrete technical specifics are available. Monitor for official disclosures and updates.

CVE-2022-34731

CVE-2022-34731 affects the Microsoft WDAC OLE DB provider for SQL Server and is categorized as a Remote Code Execution vulnerability. The CVSS v3.1 base score is 8.8 (HIGH) with network attack vector, no privileges required, but user interaction required. The connected documents identify the affe...

CVE-2022-35833

Technical details about CVE-2022-35833 are not publicly available in the provided documents. The sources mention a Windows Secure Channel Denial of Service vulnerability, but no specifics on affected products, versions, impact, or fixes are included.

CVE-2022-37954

CVE-2022-37954 is a Elevation of Privilege vulnerability in the DirectX Graphics Kernel component of Windows. The initial CVSSv3.1 data indicates Local exploitability with Low attack complexity and Low privileges required, yielding a high base score of 7.8 (C:H, I:H, A:H). The vulnerability affec...