CVE-2022-21857

Technical details for CVE-2022-21857 (Active Directory Domain Services Elevation of Privilege) are not provided in the connected documents. The initial description confirms AD DS Elevation of Privilege, but no affected product versions, root cause, impact, or fixes are included here. Monitor for ...

CVE-2022-23253

CVE-2022-23253 is a Windows PPTP Denial of Service vulnerability. The records show it has a CVSS v3.1 base score of 6.5 (Network, Low attack complexity, Privileges Low, No user interaction) with HIGH availability impact. Concrete details about affected products, versions, or exploit activity are ...

CVE-2022-30226

Technical details and indicators for CVE-2022-30226 are not provided in the supplied documents. No affected product/version specifics or remediation are included here; monitor official advisories for updates.

CVE-2022-22034

Technical details about CVE-2022-22034 are not publicly provided in the supplied documents. Monitor for updates from official vendors when more information becomes available.

CVE-2022-26919

Technical details about CVE-2022-26919 are not publicly available in the provided connected documents. Monitor for updates from official advisories to learn affected products, root cause, impact, and recommended mitigations.

CVE-2022-26940

CVE-2022-26940 is a Remote Desktop Protocol Client Information Disclosure Vulnerability affecting the Microsoft Remote Desktop Client. Public documents confirm the issue pertains to information disclosure within the RDP client component, with linked references to Microsoft’s advisory (KB/MSRC) an...

CVE-2022-29104

Technical details (affected products/components, root cause, impact, and exploit info) for CVE-2022-29104 are not provided in the connected documents. Monitor for updates; current sources here do not publish public vulnerability specifics beyond the CVE entry.

CVE-2022-34709

CVE-2022-34709 relates to a Windows Defender Credential Guard security feature bypass. The entry lists a CVSS v3.1 base score of 6.0 (MEDIUM), with LOCAL attack vector, LOW attack complexity, HIGH privileges required, and no user interaction. Confidentiality and integrity impact are HIGH, availab...

CVE-2022-29129

CVE-2022-29129 is described as a Windows LDAP Remote Code Execution vulnerability. The connected CNVD entry (CNVD-2022-72859) also labels “Microsoft Windows LDAP Remote Code Execution Vulnerability,” confirming LDAP RCE wording in the CVE context. However, the connected documents do not provide c...

CVE-2022-35766

CVE-2022-35766 is described in the connected CNNVD entry as a code injection vulnerability in the Windows Secure Socket Tunneling Protocol (SSTP) that can lead to remote code execution. The CNNVD note lists affected Windows releases (e.g., various Windows 10/11 and Windows Server versions) but do...

CVE-2022-29113

Technical details about CVE-2022-29113 (affected components, root cause, impact, and fixes) are not publicly provided in the supplied documents. Monitor for updates from official advisories.

CVE-2022-33670

Technical details about CVE-2022-33670 (affected components, exploit vectors, impact, and fixes) are not provided in the supplied documents; no concrete information is available. Monitor for updates.

CVE-2022-21836

CVE-2022-21836 is a Windows kernel-level spoofing flaw that could bypass WPBT verification by presenting a small number of compromised certificates. Microsoft mitigated this by adding those certificates to the Windows kernel driver block list, blocking them even if present in WPBT. The CVE is dis...

CVE-2022-24492

CVE-2022-24492 is a Remote Code Execution vulnerability in Windows RPC Runtime. The connected Akamai blog notes that Windows RPC-related RCE vulnerabilities were patched in Microsoft’s April 2022 Patch Tuesday, including CVE-2022-24492, with patches issued as part of the Windows security updates....

CVE-2022-26914

CVE-2022-26914 is a Win32k elevation-of-privilege vulnerability in Windows Win32k. The CVSS info in the initial record indicates local, low-privilege requirements with high impacts on confidentiality/integrity/availability. Connected documents reference Microsoft update notes (KB5012604, KB501264...

CVE-2022-21896

CVE-2022-21896 concerns the Windows DWM Core Library Elevation of Privilege. The NVD entry describes a local, privilege-escalation vulnerability with a CVSS v3.1 base score of 7.0 (HIGH) and an older CVSS v2 base score of 6.9 (MEDIUM). The CVE is associated with Windows components and is referenc...

CVE-2022-21902

Technical details about CVE-2022-21902 are not provided in the supplied documents. No affected products, root cause, impact, or remediation are disclosed here. Monitor for updates.

CVE-2022-37991

CVE-2022-37991 is a Windows kernel registry issue tied to regf hive loading where key/value name length checks were not enforced (e.g., key names up to 1040 chars). This could lead to memory corruption or crashes during hive load; connected materials describe related hive/registry memory-corrupti...

CVE-2021-41338

Technical details about CVE-2021-41338 (Windows AppContainer Firewall Rules Security Feature Bypass) are not provided in the connected documents. Monitor for updates.

CVE-2022-22016

Technical details for CVE-2022-22016 are not publicly available in the provided documents. No information on affected products, root cause, exploitability, or fixes is present. Monitor for updates.

CVE-2022-22042

CVE-2022-22042 is described in the Initial Document as a Windows Hyper-V Information Disclosure Vulnerability. The Connected Documents do not provide concrete technical details (affected product version, root cause, impact, or remediation) for this CVE. Therefore, the available information remain...

CVE-2021-38666

CVE-2021-38666 is described as a Remote Desktop Client Remote Code Execution vulnerability. The vulnerability affects the Windows Remote Desktop Client, with the CVSS3.1 score indicating network-exposed, no privileges required, user interaction needed, and high impact to confidentiality, integrit...

CVE-2022-30224

Technical details for CVE-2022-30224 are not publicly provided in the connected documents. The materials mention the vulnerability at a high level but do not specify affected products, root cause, impact, or remediation. Monitor for updated disclosures and official advisories.

CVE-2022-21920

CVE-2022-21920 is a Windows Kerberos Elevation of Privilege vulnerability with CVSS 3.1 base score 8.8 (HIGH). Attack vector: NETWORK; Attack complexity: LOW; Privileges required: LOW; User interaction: NONE; Scope: UNCHANGED; Impacts: confidentiality, integrity, and availability HIGH. The initia...

CVE-2022-23257

Technical details about CVE-2022-23257 are not provided in the supplied documents; no affected products, vulnerable components, impact, or remediation are specified. Monitor for updates.

CVE-2022-23286

CVE-2022-23286 affects the Windows Cloud Files Mini Filter Driver and enables local elevation of privilege. Evidence in CNVD/CVE records confirms the driver-related root cause and impact (arbitrary code with elevated privileges). Remediation reported in connected docs includes applying March 2022...

CVE-2022-29139

Technical details about CVE-2022-29139 are not provided in the supplied documents. Public info in the connected entries does not describe affected products/versions, exploit methods, or remediation beyond general LDAP RCE context. Monitor for updates.

CVE-2022-22025

CVE-2022-22025 refers to a Denial of Service vulnerability in the Windows Internet Information Services Cachuri Module. The available document describes it as a module DoS issue but does not provide details on affected product versions, root cause, attack vector, or fix. Exploitation details are ...

CVE-2022-38043

No additional technical details about CVE-2022-38043 are provided in the connected documents. The sources only reiterate the vulnerability name/description. Monitor for updates and verify affected products, root cause, and fixes when new information is published.

CVE-2022-24530

CVE-2022-24530 is a Windows Installer Elevation of Privilege vulnerability. The NVD entry lists a CVSSv3.1 base score of 7.8 (LOCAL, LOW privileges required, UI NONE, S C changed, impact: HIGH on confidentiality, integrity, and availability). It reflects a local privilege escalation in the Window...

CVE-2022-41039

Technical details about CVE-2022-41039 are not provided in the supplied documents. Public details, affected products, or fixes are not included here. Monitor for updates from official sources.

CVE-2022-23291

CVE-2022-23291 is a Windows DWM Core Library elevation-of-privilege vulnerability with local attack vector, low complexity, and impact on confidentiality, integrity, and availability. The NVD/Microsoft entries assign high severity (CVSS v3.1: 7.8) and note an elevation of privileges via the Deskt...

CVE-2022-26801

CVE-2022-26801 is a Windows Print Spooler Elevation of Privilege vulnerability (Local, Low attack complexity; no user interaction required per description). The connected documents show confirmed details on the vulnerability’s existence and CVSS metrics (CVSS 3.1 base score 7.8; confidentiality/i...

CVE-2022-34705

Technical details about CVE-2022-34705 are not publicly provided in the supplied documents. No concrete affected components, root cause, impact, or fixes are present beyond the vulnerability title and references. Monitor for official disclosures or updates.

CVE-2022-38044

CVE-2022-38044 is a Windows CD-ROM File System Driver vulnerability that enables code execution when processing crafted input. Trusted sources in connected data identify the affected component as the Windows CD-ROM Driver and describe the root cause as improper handling/filtering of external inpu...

CVE-2022-41081

CVE-2022-41081 is a Windows PPTP Remote Code Execution vulnerability in the Point-to-Point Tunneling Protocol. The root cause is the PPTP implementation failing to properly filter external input during code segment construction, enabling arbitrary code execution when exploited over a network. The...

CVE-2022-34729

Technical details about CVE-2022-34729 are not publicly available in the provided connected documents. Monitor for updates; the entry is described as a Windows GDI Elevation of Privilege vulnerability with local access and high impact in the initial description.

CVE-2022-37986

Technical details about CVE-2022-37986 (affected component, root cause, impact, or fixes) are not provided in the connected or initial documents. Monitor for updates and additional technical disclosure.

CVE-2022-24474

Technical details about CVE-2022-24474 are not publicly available in the provided documents; no affected products, versions, or fixes are specified here. Monitor for updates.

CVE-2022-24499

Technical details about CVE-2022-24499 are not provided in the connected documents; public specifics (affected products, root cause, exploit info, or remediation) are not available here. Monitor for updates.

CVE-2021-42277

Technical details about CVE-2021-42277 are not provided in the connected documents; only generic vulnerability labels and references are available. Monitor for official advisories or CVE records for affected products, fixes, and mitigations.

CVE-2021-26442

Technical details for CVE-2021-26442 are not present in the connected documents. Public info here is generic. Monitor for updates from official advisories; no product/version/impact specifics are provided in the supplied materials.

CVE-2022-30132

Technical details for CVE-2022-30132 are not provided in the connected documents. Public details (product, impact, fix) are not present here. Monitor for updates from authoritative sources.

CVE-2022-30165

Technical details for CVE-2022-30165 are not publicly available in the provided documents; monitor for updates.

CVE-2022-38029

Summary : CVE-2022-38029 is a Windows ALPC elevation-of-privilege vulnerability. It is a local issue that can grant high-impact privileges to an attacker with low privileges and no user interaction, as indicated by the CVSS vector in the Initial document (CVSS v3.1: AV=L/AC=H/PR=L/UI=N/S=U/C=H/I=...

CVE-2022-38050

CVE-2022-38050 is a Win32K elevation of privilege vulnerability in the Windows Win32K subsystem. The issue allows a local attacker to obtain the highest-privilege level (SYSTEM) by exploiting a flaw in privilege handling within Win32K. Microsoft’s advisories and cumulative updates fix this by add...

CVE-2022-22023

CVE-2022-22023 corresponds to a Windows vulnerability described as a Windows Portable Device Enumerator Service Security Feature Bypass. The NVD entry provides CVSS scores: CVSS v2 base 6.9 (LOCAL, MEDIUM) and CVSS v3.1 base 6.6 (PHYSICAL access, LOW complexity, LOW privileges). Impact indicators...

CVE-2021-43893

Technical details for CVE-2021-43893 are not provided in the connected documents; the initial entry lists a Windows EFS privilege issue but no public details (affected products, fixes) in the supplied materials. Monitor for updates.

CVE-2022-22027

Technical details for CVE-2022-22027 are not publicly provided in the supplied documents. Monitor for updates and availability of affected product/version, root cause, impact, or fixes.

CVE-2022-30146

Technical details about CVE-2022-30146 are not provided in the connected documents; the sources mention LDAP RCE in general terms without specific affected products, versions, root cause, or fixes. Monitor for updates.