CVE-2022-34728

CVE-2022-34728 is described as a Windows Graphics Component Information Disclosure Vulnerability. The provided metrics indicate a CVSSv3.1 base score of 5.5 (MEDIUM), with LOCAL attack vector, LOW attack complexity, LOW privileges required, and NONE user interaction. The confidentiality impact is...

CVE-2022-38025

CVE-2022-38025 corresponds to a Windows DFS Information Disclosure vulnerability. The connected advisory (NCSC) flags DFS as affected with an impact category of Access to sensitive data and a CVSS-like rating around 5.5. Public materials in the Connected set do not provide root-cause or exploit d...

CVE-2022-38030

Technical details about CVE-2022-38030 are not provided in the supplied documents. Public information about affected product versions, exploitation status, and fixes is not available here; monitor for updates from official advisories.

CVE-2021-43247

CVE-2021-43247 affects the Windows TCP/IP driver, enabling local elevation of privilege. It is rated HIGH (CVSSv3.1: LOCAL, LOW privileges required, NONE user interaction) withImpact/H. The vulnerability is addressed by Microsoft security updates (e.g., KB5008212/KB5008218 family; OS builds 19041...

CVE-2022-24486

Technical details for CVE-2022-24486 are not provided in the supplied documents. No affected product/version, root cause, or remediation is described here. Monitor for updates.

CVE-2022-35838

CVE-2022-35838 is a Windows HTTP.sys Denial of Service vulnerability. It affects Microsoft Windows where HTTP.sys handles HTTP/3 requests, enabling a network-based DoS. The CVSS v3.1 base score is 7.5 (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H). There is no explicit exploit status in the provided docum...

CVE-2022-38032

Technical details for CVE-2022-38032 are not publicly provided in the supplied documents; monitor for updates from Microsoft MSRC and related references.

CVE-2021-43238

CVE-2021-43238 is a Windows local elevation-of-privilege vulnerability. The NVD entry shows LOCAL vector, LOW attack complexity, and no authentication required (CVSS2: AV:L/AC:L/Au:N/C:P/I:P/A:P; CVSS3.1: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). However, the connected documents do not provi...

CVE-2022-37965

CVE-2022-37965 concerns Windows PPTP Denial of Service. The documents describe a network-exploitable vulnerability in the Windows Point-to-Point Tunneling Protocol that impacts availability (I) with no confidentiality or integrity impact (C/I). CVSSv3.1 metrics show AV:N, AC:H, PR:N, UI:N, S:U, C...

CVE-2022-33645

CVE-2022-33645 is a Windows TCP/IP driver denial-of-service vulnerability. Public sources (NVD/CNVD) describe it as a DoS in the Windows TCP/IP component caused by mishandling of incoming error messages, with the CVE listed as affecting Windows TCP/IP and assigned a CVSSv3 score of 7.5 (HIGH). Co...

CVE-2022-38003

The CVE-2022-38003 issue is described in connected CNVD as a Windows Resilient File System (ReFS) Elevation of Privilege vulnerability stemming from improper privilege assignment in an application. This means local attackers could escalate privileges on affected Windows systems. The vulnerability...

CVE-2021-43219

CVE-2021-43219 corresponds to a DirectX Graphics Kernel File Denial of Service vulnerability affecting Windows DXGK file handling. The primary concrete details in the available documents are: (1) affected component: DirectX Graphics Kernel File (DXGK) within Windows, (2) impact as indicated by CV...

CVE-2021-43231

Technical details for CVE-2021-43231 are not publicly available in the provided documents. Monitor for updates from official advisories to obtain affected products, impact, and remediation information.

CVE-2021-43236

Technical details for CVE-2021-43236 are not publicly available in the provided documents. Monitor for updates from official advisories to confirm affected products, impact, and remediation.

CVE-2021-43880

CVE-2021-43880 is a Windows Mobile Device Management elevation of privilege vulnerability. The connected records corroborate that it affects Windows Mobile Device Management and can lead to obtaining increased privileges (privilege escalation). Public exploitation status is not detailed in the pr...

CVE-2022-34712

Technical details about CVE-2022-34712 are not publicly provided in the connected documents. Based on the supplied sources, we cannot determine affected products, root cause, or remediation. Monitor for updates from official advisories and CVE records.

CVE-2022-35793

Technical details about CVE-2022-35793 are not provided in the connected documents. The set contains only general MSKB updates; monitor official disclosures or vendor advisories for affected products, root cause, impact, and fixes.

CVE-2021-43237

CVE-2021-43237 is a Windows Setup Elevation of Privilege vulnerability. Affected: Windows setup components (local vector). Impact per CVSS: high confidentiality, integrity, and availability; local, low/medium complexity with low privileges required (per CVSS 3.1) and user interaction may be requi...

CVE-2022-37993

Technical details for CVE-2022-37993 are not publicly provided in the supplied documents. No concrete affected products, root cause, or remediation are present here. Monitor for updates from official sources.

CVE-2021-43235

Technical details for CVE-2021-43235 are not publicly available in the provided documents. Monitor for updates from official sources; currently only CVSS metrics and references are noted.

CVE-2021-43239

CVE-2021-43239 is a Windows Privilege Escalation vulnerability affecting the Windows Recovery Environment (WinRE) Agent. The NVD entry describes a local, low-attack-complexity flaw with high impact on confidentiality, integrity, and availability (CVSSv3.1 base score 7.8). NCSC integration lists r...

CVE-2021-43227

CVE-2021-43227 is described as a Storage Spaces Controller Information Disclosure Vulnerability. The connected sources provide CVSS data: CVSS v3.1 vector CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N with a base score of 5.5 (MEDIUM) and a LOCAL attack vector with LOW complexity, requiring LOW pr...

CVE-2023-44216

The CVE-2023-44216 entry concerns PVRIC (PowerVR Image Compression) on Imagination 2018+ GPU devices. The vulnerability stems from software-transparent compression that enables cross-origin pixel-stealing attacks against SVG Filter functions like feTurbulence and feBlend (GPU.zip issue). Affected...