573 matches found
CVE-2021-43893
Technical details for CVE-2021-43893 are not provided in the connected documents; the initial entry lists a Windows EFS privilege issue but no public details (affected products, fixes) in the supplied materials. Monitor for updates.
CVE-2022-23279
Technical details about CVE-2022-23279 (affected product/component/versions/root cause) are not provided in the supplied documents. Publicly available information within the connected items is limited to generic vulnerability summaries and update notes. Monitor for updates.
CVE-2022-34710
Technical details about CVE-2022-34710 are not provided in the connected documents. No affected product/version/root-cause/fix is specified. Monitor for updates from these sources for concrete details.
CVE-2022-37958
CVE-2022-37958 is a SPNEGO Extended Negotiation (NEGOEX) Security Mechanism Remote Code Execution vulnerability. The connected materials confirm a network-exposed RCE path via SPNEGO negotiation in affected systems, with public reporting of an upgrade from High to Critical severity by Microsoft a...
CVE-2022-37987
CVE-2022-37987 is a Windows CSRSS local privilege-elevation vulnerability in the Client Server Run-time Subsystem. The CVSSv3.1 base score is 7.8 (HIGH) with local attack vector, low attack complexity, and privileges required: LOW; impact to confidentiality, integrity, and availability is HIGH. A...
CVE-2022-22037
CVE-2022-22037 is a Windows ALPC Elevation of Privilege vulnerability. The NVD entry states the issue affects Windows ALPC and yields high impact (confidentiality, integrity, availability) with CVSS 3.1 base score 7.5 and CVSS 2.0 base score 8.5. Connected OpenVAS entries reference multiple Micro...
CVE-2022-29112
Technical details for CVE-2022-29112 are not provided in the supplied documents. OpenVAS references the CVE among others, but no product/impact/fix specifics are given here. Monitor for updates.
CVE-2022-29128
Technical details for CVE-2022-29128 (affected product/version, root cause, impact, or fix) are not provided in the connected documents. The sources reference general LDAP RCE concerns and Windows updates, but no concrete vulnerability specifics. Monitor for updates.
CVE-2022-34703
Technical details for CVE-2022-34703 (affected products, root cause, impact or fixes) are not provided in the connected documents. Monitor for updates from the sources in the initial document.
CVE-2022-34707
CVE-2022-34707 is a Windows Kernel elevation-of-privilege vulnerability discussed in the connected material. It relies on a registry hive memory corruption path: a refcount/overflows in a security descriptor cell can trigger a use-after-free, enabling overflow of hive cells and enabling an attack...
CVE-2021-38672
CVE-2021-38672 is a Windows Hyper-V Remote Code Execution vulnerability affecting Hyper-V components on supported Windows client/server releases. Public details in connected sources indicate a code-execution risk via Hyper-V, with Microsoft patching it in October 2021 (e.g., KB5006674/KB5006699 a...
CVE-2022-30161
Technical details for CVE-2022-30161 are not provided in the supplied documents. Monitor for updates from Microsoft and vulnerability trackers for affected components, versions, exploit status, and remediation details.
CVE-2022-38042
CVE-2022-38042 is an Elevation of Privilege vulnerability in Active Directory Domain Services. The CVSS/description in the sources indicates network-access prerequisites with high impact (C/H, I/H, A/H) and a low-privilege, user-interaction-required path to obtain elevated rights in the AD DS con...
CVE-2022-22014
Technical details about CVE-2022-22014 are not provided in the supplied connected documents. The initial description notes a Windows LDAP RCE vulnerability, but there are no concrete details on affected products, versions, root cause, impact, or fixes within the provided materials. Monitor for up...
CVE-2022-22026
CVE-2022-22026 is a Windows CSRSS Elevation of Privilege vulnerability. The connected document confirms it as one of the CSRSS issues fixed during the July 2022 Patch Tuesday cycle, noting that two other CSRSS flaws (CVE-2022-22047 and CVE-2022-22049) were also fixed. The exact affected product s...
CVE-2022-30151
CVE-2022-30151 is described as a Windows Elevation of Privilege vulnerability in the Ancillary Function Driver for WinSock; no additional technical details are provided in the connected documents.
CVE-2022-23283
CVE-2022-23283 is a Windows local elevation-of-privilege vulnerability in the ALPC subsystem. The NVD entry lists a CVSSv3.1 base score of 7.0 (HIGH) with local access, high impact on confidentiality, integrity, and availability, and no user interaction required. Connected sources reference a Mic...
CVE-2022-26803
Technical details for CVE-2022-26803 are not publicly provided in the supplied connected documents. The Windows Print Spooler elevation vulnerability is described at a high level here; monitor official advisories (MSRC/NVD) for impact, affected products, and remediation updates.
CVE-2022-26930
Technical details about CVE-2022-26930 (affected component, root cause, impact, or fixes) are not provided in the connected documents. The sources reference Windows updates and mitigations but do not disclose vulnerability specifics. Monitor for authoritative disclosures and updates.
CVE-2022-30202
Technical details (affected component, root cause, specific versions, and remediation) for CVE-2022-30202 are not provided in the supplied documents; monitor for updates.
CVE-2022-41113
CVE-2022-41113 is a Windows Win32 Kernel Subsystem elevation-of-privilege vulnerability. Connected docs corroborate exploitation in the Win32 Kernel area (item: Win32 Kernel Subsystem). Public exploits exist per Attackerkb listing. Microsoft advisories point to security updates addressing Windows...
CVE-2023-21758
Technical details for CVE-2023-21758 are not publicly available in the provided documents. The connected items do not describe affected products, root cause, impact, or fixes. Monitor official updates from Microsoft and standard vulnerability feeds for new information.
CVE-2022-24496
Technical details about CVE-2022-24496 are not publicly available in the provided documents. Monitoring for updates is advised.
CVE-2022-26830
CVE-2022-26830 is a Windows SMB vulnerability involving DiskUsage.exe that allows remote code execution. Multiple connected advisories confirm the vulnerability affects Windows SMB components and DiskUsage.exe, with public exploit code available. Public exploit activity is noted by third-party ad...
CVE-2022-26926
Public technical details for CVE-2022-26926 are not provided in the supplied documents. Monitor for updates.
CVE-2022-29141
Technical details about CVE-2022-29141 (Windows LDAP RCE) are not provided in the connected documents. OpenVAS references KB updates but does not specify affected products/versions, root cause, exploit info, or remediation beyond generic patching; monitor for future updates.
CVE-2022-30220
Technical details about CVE-2022-30220 (affected product, root cause, impact, or fix) are not provided in the connected documents. Monitor for updates from vendors and CVE sources.
CVE-2022-24493
Technical details about CVE-2022-24493 are not provided in the supplied documents. Monitor for updates from official advisories.
CVE-2022-24537
CVE-2022-24537 is a Windows Hyper-V Remote Code Execution vulnerability. Connected documents confirm affected product/role as Microsoft Windows Hyper-V and reference multiple Microsoft security updates (e.g., KB5012599, KB5012592, KB5012604, KB5012647, KB5012591) addressing this CVE in various Wi...
CVE-2022-26808
Technical details about CVE-2022-26808 are not publicly available in the provided documents; no affected products, root cause, or remediation are specified here. Monitor for updates.
CVE-2022-30152
CVE-2022-30152 is a Windows NAT Denial of Service vulnerability. The connected documents confirm a June 14, 2022 patch release cycle addressing this issue (e.g., KB5014678, KB5014697 and related security updates for Windows Server/OS builds). Patches aim to fix NAT/RRAS-related networking instabi...
CVE-2022-30162
CVE-2022-30162 is a Windows kernel information disclosure vulnerability. Public records cite CVSSv3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N with base score 5.5 (MEDIUM) and local access required; confidentiality impact is HIGH while integrity/availability are none. CVSSv2/2.0 shows a lower base sco...
CVE-2022-30203
Technical details about CVE-2022-30203 are not publicly provided in the supplied documents. The connected records reference Windows Boot Manager security bypass but do not disclose affected products, root cause, impact, or remediation. Monitor for official updates.
CVE-2022-22036
Technical details for CVE-2022-22036 are not publicly available in the provided documents. Monitor for updates.
CVE-2022-26935
Technical details about CVE-2022-26935 are not provided in the connected documents. The Initial document offers a basic description and CVSS info, but no specifics on affected products/versions, root cause, remediation, or exploit status. Monitor for updates.
CVE-2022-22009
CVE-2022-22009 is a Windows Hyper-V remote code execution vulnerability. The connected sources confirm Hyper-V is affected and provide concrete product scope: Windows Hyper-V on affected Windows Server/Windows versions with the hypervisor component implicated. CVSS details from the sources indica...
CVE-2022-24502
Technical details about CVE-2022-24502 are not provided in the supplied documents. The provided materials do not include affected products/versions/root cause/fix information. Monitor for updates.
CVE-2022-24479
Technical details about CVE-2022-24479 are not provided in the connected documents. The entry's description is general; no information on affected product, root cause, impact, or remediation is present here. Monitor for updates.
CVE-2022-30163
CVE-2022-30163 is a Windows Hyper-V remote code execution vulnerability. The available connected sources describe an issue where code executed inside a Hyper-V guest could lead to arbitrary code execution on the Hyper-V host. Microsoft released out-of-band and June 2022 security updates addressin...
CVE-2022-30222
Technical details about CVE-2022-30222 (Windows Shell Remote Code Execution Vulnerability) are not provided in the supplied documents. The connected items reference the vulnerability but do not specify affected products, root cause, impact, fixes, or exploit information. Monitor for updates.
CVE-2023-21767
Technical details for CVE-2023-21767 are not provided in the Connected documents or initial description. No affected products, root cause, impact, or fixes are disclosed here. Monitor for updates from official sources.
CVE-2022-22045
Technical details about CVE-2022-22045 are not provided in the supplied documents. The inputs only state the vulnerability title without specifics (affected product/version, impact, exploit, or remediation). Monitor for updates.
CVE-2022-22050
CVE-2022-22050 is a Windows Fax Service elevation-of-privilege vulnerability. Documents indicate affected software is Windows Fax Service; vulnerability type is local privilege escalation with high impact (CVSSv3.1 base score 7.8) and low privileges required, no user interaction. No concrete expl...
CVE-2022-24495
CVE-2022-24495 corresponds to a Windows DirectShow remote code execution vulnerability. The connected documents confirm the affected technology (Windows DirectShow) and the CVE’s existence, but they do not provide concrete patch details, affected product/version specifics, or explicit remediation...
CVE-2022-24549
CVE-2022-24549 is a Windows AppX Package Manager Elevation of Privilege vulnerability. The connected documents provide concrete details: affected component is Windows AppX Package Manager; root cause and exact vulnerable versions are not specified in the provided sources. CVSS data: CVSS v3.1 bas...
CVE-2021-40461
CVE-2021-40461 is a Windows Hyper-V Remote Code Execution vulnerability. Affected: Windows Hyper-V component on Windows 10/11 and Windows Server (various versions). Root cause/impact: allows remote code execution with adjacent network access and no user interaction; CVSS3.1 base score 9.0 (HIGH) ...
CVE-2022-26927
CVE-2022-26927 : Affects the Windows Graphics Component and enables remote code execution. The CVSSv3.1 base score is 8.8 (HIGH) with a NETWORK attack vector, LOW attack complexity, NO privileges required, and USER INTERACTION REQUIRED; confidentiality, integrity and availability are all High. Th...
CVE-2022-41058
Technical details for CVE-2022-41058 are not provided in the supplied documents. No affected products or fixes are described here. Monitor for updates in public advisories and the referenced sources.
CVE-2022-33635
CVE-2022-33635 is tied to the Windows Graphics Component (GDI+) with a vulnerability that could allow an attacker to execute arbitrary code. The CVSSv3 vector indicates a High-severity issue (7.8) with a Local attack vector and required user interaction, meaning an attacker would need a logged-in...
CVE-2022-34708
Technical details for CVE-2022-34708 are not provided in the connected documents. Public exploit vectors, affected products, and fixes are not stated here. Monitor for updates.