CVE-2022-24474

Technical details about CVE-2022-24474 are not publicly available in the provided documents; no affected products, versions, or fixes are specified here. Monitor for updates.

CVE-2022-23283

CVE-2022-23283 is a Windows local elevation-of-privilege vulnerability in the ALPC subsystem. The NVD entry lists a CVSSv3.1 base score of 7.0 (HIGH) with local access, high impact on confidentiality, integrity, and availability, and no user interaction required. Connected sources reference a Mic...

CVE-2022-24499

Technical details about CVE-2022-24499 are not provided in the connected documents; public specifics (affected products, root cause, exploit info, or remediation) are not available here. Monitor for updates.

CVE-2021-38672

CVE-2021-38672 is a Windows Hyper-V Remote Code Execution vulnerability affecting Hyper-V components on supported Windows client/server releases. Public details in connected sources indicate a code-execution risk via Hyper-V, with Microsoft patching it in October 2021 (e.g., KB5006674/KB5006699 a...

CVE-2022-22023

CVE-2022-22023 corresponds to a Windows vulnerability described as a Windows Portable Device Enumerator Service Security Feature Bypass. The NVD entry provides CVSS scores: CVSS v2 base 6.9 (LOCAL, MEDIUM) and CVSS v3.1 base 6.6 (PHYSICAL access, LOW complexity, LOW privileges). Impact indicators...

CVE-2022-22035

Technical details for CVE-2022-22035 are not publicly available in the provided documents. Monitor for vendor advisories and updates. The connected sources mention the CVE in KEV lists and risk context but do not disclose affected components, root causes, or fixes.

CVE-2022-29141

Technical details about CVE-2022-29141 (Windows LDAP RCE) are not provided in the connected documents. OpenVAS references KB updates but does not specify affected products/versions, root cause, exploit info, or remediation beyond generic patching; monitor for future updates.

CVE-2022-30132

Technical details for CVE-2022-30132 are not provided in the connected documents. Public details (product, impact, fix) are not present here. Monitor for updates from authoritative sources.

CVE-2023-21776

Technical details for CVE-2023-21776 are not publicly provided in the connected documents. Based on the supplied sources, we cannot specify affected product versions, root cause, impact, or fixes. Monitor for updates from Microsoft and vulnerability feeds.

CVE-2021-43893

Technical details for CVE-2021-43893 are not provided in the connected documents; the initial entry lists a Windows EFS privilege issue but no public details (affected products, fixes) in the supplied materials. Monitor for updates.

CVE-2022-34707

CVE-2022-34707 is a Windows Kernel elevation-of-privilege vulnerability discussed in the connected material. It relies on a registry hive memory corruption path: a refcount/overflows in a security descriptor cell can trigger a use-after-free, enabling overflow of hive cells and enabling an attack...

CVE-2022-37987

CVE-2022-37987 is a Windows CSRSS local privilege-elevation vulnerability in the Client Server Run-time Subsystem. The CVSSv3.1 base score is 7.8 (HIGH) with local attack vector, low attack complexity, and privileges required: LOW; impact to confidentiality, integrity, and availability is HIGH. A...

CVE-2022-22027

Technical details for CVE-2022-22027 are not publicly provided in the supplied documents. Monitor for updates and availability of affected product/version, root cause, impact, or fixes.

CVE-2022-41113

CVE-2022-41113 is a Windows Win32 Kernel Subsystem elevation-of-privilege vulnerability. Connected docs corroborate exploitation in the Win32 Kernel area (item: Win32 Kernel Subsystem). Public exploits exist per Attackerkb listing. Microsoft advisories point to security updates addressing Windows...

CVE-2022-22037

CVE-2022-22037 is a Windows ALPC Elevation of Privilege vulnerability. The NVD entry states the issue affects Windows ALPC and yields high impact (confidentiality, integrity, availability) with CVSS 3.1 base score 7.5 and CVSS 2.0 base score 8.5. Connected OpenVAS entries reference multiple Micro...

CVE-2022-30146

Technical details about CVE-2022-30146 are not provided in the connected documents; the sources mention LDAP RCE in general terms without specific affected products, versions, root cause, or fixes. Monitor for updates.

CVE-2022-37958

CVE-2022-37958 is a SPNEGO Extended Negotiation (NEGOEX) Security Mechanism Remote Code Execution vulnerability. The connected materials confirm a network-exposed RCE path via SPNEGO negotiation in affected systems, with public reporting of an upgrade from High to Critical severity by Microsoft a...

CVE-2022-22026

CVE-2022-22026 is a Windows CSRSS Elevation of Privilege vulnerability. The connected document confirms it as one of the CSRSS issues fixed during the July 2022 Patch Tuesday cycle, noting that two other CSRSS flaws (CVE-2022-22047 and CVE-2022-22049) were also fixed. The exact affected product s...

CVE-2022-24495

CVE-2022-24495 corresponds to a Windows DirectShow remote code execution vulnerability. The connected documents confirm the affected technology (Windows DirectShow) and the CVE’s existence, but they do not provide concrete patch details, affected product/version specifics, or explicit remediation...

CVE-2022-26803

Technical details for CVE-2022-26803 are not publicly provided in the supplied connected documents. The Windows Print Spooler elevation vulnerability is described at a high level here; monitor official advisories (MSRC/NVD) for impact, affected products, and remediation updates.

CVE-2022-30151

CVE-2022-30151 is described as a Windows Elevation of Privilege vulnerability in the Ancillary Function Driver for WinSock; no additional technical details are provided in the connected documents.

CVE-2022-30152

CVE-2022-30152 is a Windows NAT Denial of Service vulnerability. The connected documents confirm a June 14, 2022 patch release cycle addressing this issue (e.g., KB5014678, KB5014697 and related security updates for Windows Server/OS builds). Patches aim to fix NAT/RRAS-related networking instabi...

CVE-2022-34710

Technical details about CVE-2022-34710 are not provided in the connected documents. No affected product/version/root-cause/fix is specified. Monitor for updates from these sources for concrete details.

CVE-2022-21833

CVE-2022-21833 is a Local Elevation of Privilege in Virtual Machine IDE Drive. The NVD entry lists CVSS-3.1 base score 7.8 (LOCAL, LOW privileges required, no user interaction, privilege escalation with CHANGED scope; impacts: CONFIDENTIALITY/HIGH, INTEGRITY/HIGH, AVAILABILITY/HIGH). Publicly vis...

CVE-2022-24537

CVE-2022-24537 is a Windows Hyper-V Remote Code Execution vulnerability. Connected documents confirm affected product/role as Microsoft Windows Hyper-V and reference multiple Microsoft security updates (e.g., KB5012599, KB5012592, KB5012604, KB5012647, KB5012591) addressing this CVE in various Wi...

CVE-2022-29128

Technical details for CVE-2022-29128 (affected product/version, root cause, impact, or fix) are not provided in the connected documents. The sources reference general LDAP RCE concerns and Windows updates, but no concrete vulnerability specifics. Monitor for updates.

CVE-2022-26830

CVE-2022-26830 is a Windows SMB vulnerability involving DiskUsage.exe that allows remote code execution. Multiple connected advisories confirm the vulnerability affects Windows SMB components and DiskUsage.exe, with public exploit code available. Public exploit activity is noted by third-party ad...

CVE-2022-26926

Public technical details for CVE-2022-26926 are not provided in the supplied documents. Monitor for updates.

CVE-2022-29112

Technical details for CVE-2022-29112 are not provided in the supplied documents. OpenVAS references the CVE among others, but no product/impact/fix specifics are given here. Monitor for updates.

CVE-2022-30161

Technical details for CVE-2022-30161 are not provided in the supplied documents. Monitor for updates from Microsoft and vulnerability trackers for affected components, versions, exploit status, and remediation details.

CVE-2022-30202

Technical details (affected component, root cause, specific versions, and remediation) for CVE-2022-30202 are not provided in the supplied documents; monitor for updates.

CVE-2023-21758

Technical details for CVE-2023-21758 are not publicly available in the provided documents. The connected items do not describe affected products, root cause, impact, or fixes. Monitor official updates from Microsoft and standard vulnerability feeds for new information.

CVE-2022-22036

Technical details for CVE-2022-22036 are not publicly available in the provided documents. Monitor for updates.

CVE-2022-24493

Technical details about CVE-2022-24493 are not provided in the supplied documents. Monitor for updates from official advisories.

CVE-2022-24496

Technical details about CVE-2022-24496 are not publicly available in the provided documents. Monitoring for updates is advised.

CVE-2022-34722

CVE-2022-34722 is a Windows IKE Protocol Extensions RCE affecting systems with IPSec enabled and IKEv1 in use. An unauthenticated attacker could send a crafted IP packet to execute arbitrary code on vulnerable Windows hosts; Ikev2 is not affected. The vulnerability is classified as critical (CVSS...

CVE-2022-26796

Technical details about CVE-2022-26796 are not provided in the connected documents; no product/version/root-cause/fix information is available here. Monitor for updates.

CVE-2022-30162

CVE-2022-30162 is a Windows kernel information disclosure vulnerability. Public records cite CVSSv3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N with base score 5.5 (MEDIUM) and local access required; confidentiality impact is HIGH while integrity/availability are none. CVSSv2/2.0 shows a lower base sco...

CVE-2022-35768

CVE-2022-35768 is a Windows kernel elevation-of-privilege vulnerability tied to registry/hive memory; the connected docs describe an out-of-bounds read that could disclose kernel pool memory to the hive file, enabling local attacker memory leakage and potential escalation. The CVE is cited in MSR...

CVE-2021-40461

CVE-2021-40461 is a Windows Hyper-V Remote Code Execution vulnerability. Affected: Windows Hyper-V component on Windows 10/11 and Windows Server (various versions). Root cause/impact: allows remote code execution with adjacent network access and no user interaction; CVSS3.1 base score 9.0 (HIGH) ...

CVE-2022-24502

Technical details about CVE-2022-24502 are not provided in the supplied documents. The provided materials do not include affected products/versions/root cause/fix information. Monitor for updates.

CVE-2022-30203

Technical details about CVE-2022-30203 are not publicly provided in the supplied documents. The connected records reference Windows Boot Manager security bypass but do not disclose affected products, root cause, impact, or remediation. Monitor for official updates.

CVE-2022-30208

Public technical details about CVE-2022-30208 are not provided in the connected documents. The entry describes a Windows SAM DoS vulnerability but includes no affected product versions, exploit specifics, or remediation. Monitor for official advisories and updates.

CVE-2021-40454

CVE-2021-40454 is an information-disclosure vulnerability in the Rich Text Edit Control used by Microsoft Office. The issue is documented as a local, low-complexity disclosure that can impact confidentiality (CVE-2021-40454) with a MEDIUM overall severity (CVSS v3.1 base score 5.5). The connected...

CVE-2022-30222

Technical details about CVE-2022-30222 (Windows Shell Remote Code Execution Vulnerability) are not provided in the supplied documents. The connected items reference the vulnerability but do not specify affected products, root cause, impact, fixes, or exploit information. Monitor for updates.

CVE-2022-22009

CVE-2022-22009 is a Windows Hyper-V remote code execution vulnerability. The connected sources confirm Hyper-V is affected and provide concrete product scope: Windows Hyper-V on affected Windows Server/Windows versions with the hypervisor component implicated. CVSS details from the sources indica...

CVE-2022-24479

Technical details about CVE-2022-24479 are not provided in the connected documents. The entry's description is general; no information on affected product, root cause, impact, or remediation is present here. Monitor for updates.

CVE-2022-26808

Technical details about CVE-2022-26808 are not publicly available in the provided documents; no affected products, root cause, or remediation are specified here. Monitor for updates.

CVE-2021-26443

Technical details (affected product/version, root cause, impact, and concrete remediation) are not publicly disclosed in the provided connected documents. Monitor vendor advisories and CVE records for updates to obtain authoritative remediation information.

CVE-2022-22045

Technical details about CVE-2022-22045 are not provided in the supplied documents. The inputs only state the vulnerability title without specifics (affected product/version, impact, exploit, or remediation). Monitor for updates.