573 matches found
CVE-2022-26930
Technical details about CVE-2022-26930 (affected component, root cause, impact, or fixes) are not provided in the connected documents. The sources reference Windows updates and mitigations but do not disclose vulnerability specifics. Monitor for authoritative disclosures and updates.
CVE-2022-30146
Technical details about CVE-2022-30146 are not provided in the connected documents; the sources mention LDAP RCE in general terms without specific affected products, versions, root cause, or fixes. Monitor for updates.
CVE-2022-38029
Summary : CVE-2022-38029 is a Windows ALPC elevation-of-privilege vulnerability. It is a local issue that can grant high-impact privileges to an attacker with low privileges and no user interaction, as indicated by the CVSS vector in the Initial document (CVSS v3.1: AV=L/AC=H/PR=L/UI=N/S=U/C=H/I=...
CVE-2022-38042
CVE-2022-38042 is an Elevation of Privilege vulnerability in Active Directory Domain Services. The CVSS/description in the sources indicates network-access prerequisites with high impact (C/H, I/H, A/H) and a low-privilege, user-interaction-required path to obtain elevated rights in the AD DS con...
CVE-2021-38672
CVE-2021-38672 is a Windows Hyper-V Remote Code Execution vulnerability affecting Hyper-V components on supported Windows client/server releases. Public details in connected sources indicate a code-execution risk via Hyper-V, with Microsoft patching it in October 2021 (e.g., KB5006674/KB5006699 a...
CVE-2022-22037
CVE-2022-22037 is a Windows ALPC Elevation of Privilege vulnerability. The NVD entry states the issue affects Windows ALPC and yields high impact (confidentiality, integrity, availability) with CVSS 3.1 base score 7.5 and CVSS 2.0 base score 8.5. Connected OpenVAS entries reference multiple Micro...
CVE-2022-23279
Technical details about CVE-2022-23279 (affected product/component/versions/root cause) are not provided in the supplied documents. Publicly available information within the connected items is limited to generic vulnerability summaries and update notes. Monitor for updates.
CVE-2022-37958
CVE-2022-37958 is a SPNEGO Extended Negotiation (NEGOEX) Security Mechanism Remote Code Execution vulnerability. The connected materials confirm a network-exposed RCE path via SPNEGO negotiation in affected systems, with public reporting of an upgrade from High to Critical severity by Microsoft a...
CVE-2022-29128
Technical details for CVE-2022-29128 (affected product/version, root cause, impact, or fix) are not provided in the connected documents. The sources reference general LDAP RCE concerns and Windows updates, but no concrete vulnerability specifics. Monitor for updates.
CVE-2022-29112
Technical details for CVE-2022-29112 are not provided in the supplied documents. OpenVAS references the CVE among others, but no product/impact/fix specifics are given here. Monitor for updates.
CVE-2022-30161
Technical details for CVE-2022-30161 are not provided in the supplied documents. Monitor for updates from Microsoft and vulnerability trackers for affected components, versions, exploit status, and remediation details.
CVE-2022-34703
Technical details for CVE-2022-34703 (affected products, root cause, impact or fixes) are not provided in the connected documents. Monitor for updates from the sources in the initial document.
CVE-2022-37987
CVE-2022-37987 is a Windows CSRSS local privilege-elevation vulnerability in the Client Server Run-time Subsystem. The CVSSv3.1 base score is 7.8 (HIGH) with local attack vector, low attack complexity, and privileges required: LOW; impact to confidentiality, integrity, and availability is HIGH. A...
CVE-2022-23283
CVE-2022-23283 is a Windows local elevation-of-privilege vulnerability in the ALPC subsystem. The NVD entry lists a CVSSv3.1 base score of 7.0 (HIGH) with local access, high impact on confidentiality, integrity, and availability, and no user interaction required. Connected sources reference a Mic...
CVE-2022-24537
CVE-2022-24537 is a Windows Hyper-V Remote Code Execution vulnerability. Connected documents confirm affected product/role as Microsoft Windows Hyper-V and reference multiple Microsoft security updates (e.g., KB5012599, KB5012592, KB5012604, KB5012647, KB5012591) addressing this CVE in various Wi...
CVE-2022-30220
Technical details about CVE-2022-30220 (affected product, root cause, impact, or fix) are not provided in the connected documents. Monitor for updates from vendors and CVE sources.
CVE-2022-34707
CVE-2022-34707 is a Windows Kernel elevation-of-privilege vulnerability discussed in the connected material. It relies on a registry hive memory corruption path: a refcount/overflows in a security descriptor cell can trigger a use-after-free, enabling overflow of hive cells and enabling an attack...
CVE-2022-34710
Technical details about CVE-2022-34710 are not provided in the connected documents. No affected product/version/root-cause/fix is specified. Monitor for updates from these sources for concrete details.
CVE-2022-30151
CVE-2022-30151 is described as a Windows Elevation of Privilege vulnerability in the Ancillary Function Driver for WinSock; no additional technical details are provided in the connected documents.
CVE-2022-22026
CVE-2022-22026 is a Windows CSRSS Elevation of Privilege vulnerability. The connected document confirms it as one of the CSRSS issues fixed during the July 2022 Patch Tuesday cycle, noting that two other CSRSS flaws (CVE-2022-22047 and CVE-2022-22049) were also fixed. The exact affected product s...
CVE-2022-26803
Technical details for CVE-2022-26803 are not publicly provided in the supplied connected documents. The Windows Print Spooler elevation vulnerability is described at a high level here; monitor official advisories (MSRC/NVD) for impact, affected products, and remediation updates.
CVE-2022-29141
Technical details about CVE-2022-29141 (Windows LDAP RCE) are not provided in the connected documents. OpenVAS references KB updates but does not specify affected products/versions, root cause, exploit info, or remediation beyond generic patching; monitor for future updates.
CVE-2022-24493
Technical details about CVE-2022-24493 are not provided in the supplied documents. Monitor for updates from official advisories.
CVE-2022-24496
Technical details about CVE-2022-24496 are not publicly available in the provided documents. Monitoring for updates is advised.
CVE-2022-30202
Technical details (affected component, root cause, specific versions, and remediation) for CVE-2022-30202 are not provided in the supplied documents; monitor for updates.
CVE-2022-22036
Technical details for CVE-2022-22036 are not publicly available in the provided documents. Monitor for updates.
CVE-2022-26830
CVE-2022-26830 is a Windows SMB vulnerability involving DiskUsage.exe that allows remote code execution. Multiple connected advisories confirm the vulnerability affects Windows SMB components and DiskUsage.exe, with public exploit code available. Public exploit activity is noted by third-party ad...
CVE-2022-30152
CVE-2022-30152 is a Windows NAT Denial of Service vulnerability. The connected documents confirm a June 14, 2022 patch release cycle addressing this issue (e.g., KB5014678, KB5014697 and related security updates for Windows Server/OS builds). Patches aim to fix NAT/RRAS-related networking instabi...
CVE-2022-41113
CVE-2022-41113 is a Windows Win32 Kernel Subsystem elevation-of-privilege vulnerability. Connected docs corroborate exploitation in the Win32 Kernel area (item: Win32 Kernel Subsystem). Public exploits exist per Attackerkb listing. Microsoft advisories point to security updates addressing Windows...
CVE-2023-21758
Technical details for CVE-2023-21758 are not publicly available in the provided documents. The connected items do not describe affected products, root cause, impact, or fixes. Monitor official updates from Microsoft and standard vulnerability feeds for new information.
CVE-2022-26926
Public technical details for CVE-2022-26926 are not provided in the supplied documents. Monitor for updates.
CVE-2022-30162
CVE-2022-30162 is a Windows kernel information disclosure vulnerability. Public records cite CVSSv3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N with base score 5.5 (MEDIUM) and local access required; confidentiality impact is HIGH while integrity/availability are none. CVSSv2/2.0 shows a lower base sco...
CVE-2021-40461
CVE-2021-40461 is a Windows Hyper-V Remote Code Execution vulnerability. Affected: Windows Hyper-V component on Windows 10/11 and Windows Server (various versions). Root cause/impact: allows remote code execution with adjacent network access and no user interaction; CVSS3.1 base score 9.0 (HIGH) ...
CVE-2022-26808
Technical details about CVE-2022-26808 are not publicly available in the provided documents; no affected products, root cause, or remediation are specified here. Monitor for updates.
CVE-2022-30203
Technical details about CVE-2022-30203 are not publicly provided in the supplied documents. The connected records reference Windows Boot Manager security bypass but do not disclose affected products, root cause, impact, or remediation. Monitor for official updates.
CVE-2022-22009
CVE-2022-22009 is a Windows Hyper-V remote code execution vulnerability. The connected sources confirm Hyper-V is affected and provide concrete product scope: Windows Hyper-V on affected Windows Server/Windows versions with the hypervisor component implicated. CVSS details from the sources indica...
CVE-2022-24479
Technical details about CVE-2022-24479 are not provided in the connected documents. The entry's description is general; no information on affected product, root cause, impact, or remediation is present here. Monitor for updates.
CVE-2022-24495
CVE-2022-24495 corresponds to a Windows DirectShow remote code execution vulnerability. The connected documents confirm the affected technology (Windows DirectShow) and the CVE’s existence, but they do not provide concrete patch details, affected product/version specifics, or explicit remediation...
CVE-2022-24502
Technical details about CVE-2022-24502 are not provided in the supplied documents. The provided materials do not include affected products/versions/root cause/fix information. Monitor for updates.
CVE-2022-26935
Technical details about CVE-2022-26935 are not provided in the connected documents. The Initial document offers a basic description and CVSS info, but no specifics on affected products/versions, root cause, remediation, or exploit status. Monitor for updates.
CVE-2022-30163
CVE-2022-30163 is a Windows Hyper-V remote code execution vulnerability. The available connected sources describe an issue where code executed inside a Hyper-V guest could lead to arbitrary code execution on the Hyper-V host. Microsoft released out-of-band and June 2022 security updates addressin...
CVE-2022-30222
Technical details about CVE-2022-30222 (Windows Shell Remote Code Execution Vulnerability) are not provided in the supplied documents. The connected items reference the vulnerability but do not specify affected products, root cause, impact, fixes, or exploit information. Monitor for updates.
CVE-2023-21767
Technical details for CVE-2023-21767 are not provided in the Connected documents or initial description. No affected products, root cause, impact, or fixes are disclosed here. Monitor for updates from official sources.
CVE-2022-24549
CVE-2022-24549 is a Windows AppX Package Manager Elevation of Privilege vulnerability. The connected documents provide concrete details: affected component is Windows AppX Package Manager; root cause and exact vulnerable versions are not specified in the provided sources. CVSS data: CVSS v3.1 bas...
CVE-2022-22045
Technical details about CVE-2022-22045 are not provided in the supplied documents. The inputs only state the vulnerability title without specifics (affected product/version, impact, exploit, or remediation). Monitor for updates.
CVE-2022-22050
CVE-2022-22050 is a Windows Fax Service elevation-of-privilege vulnerability. Documents indicate affected software is Windows Fax Service; vulnerability type is local privilege escalation with high impact (CVSSv3.1 base score 7.8) and low privileges required, no user interaction. No concrete expl...
CVE-2022-26927
CVE-2022-26927 : Affects the Windows Graphics Component and enables remote code execution. The CVSSv3.1 base score is 8.8 (HIGH) with a NETWORK attack vector, LOW attack complexity, NO privileges required, and USER INTERACTION REQUIRED; confidentiality, integrity and availability are all High. Th...
CVE-2022-33635
CVE-2022-33635 is tied to the Windows Graphics Component (GDI+) with a vulnerability that could allow an attacker to execute arbitrary code. The CVSSv3 vector indicates a High-severity issue (7.8) with a Local attack vector and required user interaction, meaning an attacker would need a logged-in...
CVE-2022-35768
CVE-2022-35768 is a Windows kernel elevation-of-privilege vulnerability tied to registry/hive memory; the connected docs describe an out-of-bounds read that could disclose kernel pool memory to the hive file, enabling local attacker memory leakage and potential escalation. The CVE is cited in MSR...
CVE-2022-38040
Technical details about CVE-2022-38040 (Microsoft ODBC Driver RCE) are not provided in the supplied documents. Public information on affected components, root cause, impact specifics, or fixes is not present here. Monitor for updates in the connected sources for any disclosed details.