CVE-2022-30163

CVE-2022-30163 is a Windows Hyper-V remote code execution vulnerability. The available connected sources describe an issue where code executed inside a Hyper-V guest could lead to arbitrary code execution on the Hyper-V host. Microsoft released out-of-band and June 2022 security updates addressin...

CVE-2022-34708

Technical details for CVE-2022-34708 are not provided in the connected documents. Public exploit vectors, affected products, and fixes are not stated here. Monitor for updates.

CVE-2022-38040

Technical details about CVE-2022-38040 (Microsoft ODBC Driver RCE) are not provided in the supplied documents. Public information on affected components, root cause, impact specifics, or fixes is not present here. Monitor for updates in the connected sources for any disclosed details.

CVE-2022-22045

Technical details about CVE-2022-22045 are not provided in the supplied documents. The inputs only state the vulnerability title without specifics (affected product/version, impact, exploit, or remediation). Monitor for updates.

CVE-2022-26935

Technical details about CVE-2022-26935 are not provided in the connected documents. The Initial document offers a basic description and CVSS info, but no specifics on affected products/versions, root cause, remediation, or exploit status. Monitor for updates.

CVE-2021-26443

Technical details (affected product/version, root cause, impact, and concrete remediation) are not publicly disclosed in the provided connected documents. Monitor vendor advisories and CVE records for updates to obtain authoritative remediation information.

CVE-2022-22050

CVE-2022-22050 is a Windows Fax Service elevation-of-privilege vulnerability. Documents indicate affected software is Windows Fax Service; vulnerability type is local privilege escalation with high impact (CVSSv3.1 base score 7.8) and low privileges required, no user interaction. No concrete expl...

CVE-2022-34706

Technical details about CVE-2022-34706 (affected products, root cause, impact, fixes) are not provided in the connected documents. Monitor for authoritative updates from Microsoft and CVE repositories.

CVE-2022-37988

CVE-2022-37988 is tied to a Windows registry hive memory corruption bug in which cells larger than 16 KiB are aligned to the next power of two during loading, causing a use-after-free when shrinking a cell. The connected material provides a detailed attacker workflow: trigger hive memory corrupti...

CVE-2022-41058

Technical details for CVE-2022-41058 are not provided in the supplied documents. No affected products or fixes are described here. Monitor for updates in public advisories and the referenced sources.

CVE-2022-21996

Technical details for CVE-2022-21996 are not publicly available in the provided documents. Monitor for updates; current sources indicate Win32k elevation of privilege but lack concrete impacted products, versions, root cause, or remediation in this set.

CVE-2022-24483

CVE-2022-24483 is a Windows Kernel information disclosure vulnerability. Affected component is the Windows Kernel; the issue is an information disclosure likely arising from the nt!PfpPrivSourceEnum function, per a GitHub PoC describing an Information disclosure bug in that function. The connecte...

CVE-2022-26796

Technical details about CVE-2022-26796 are not provided in the connected documents; no product/version/root-cause/fix information is available here. Monitor for updates.

CVE-2022-33634

CVE-2022-33634 is listed in the connected NCSc advisory as a Windows PPTP vulnerability with an impact described as “Execution of random code” and a CVSS-like score of 8.10. The available connected documents do not provide explicit exploitation details, affected product versions, root cause, or a...

CVE-2022-41076

Technical details for CVE-2022-41076 are not publicly available in the provided documents. Monitor for updates; no affected product/version or remediation details are given here.

CVE-2022-44668

CVE-2022-44668 is a Windows Media Remote Code Execution vulnerability with a CVSSv3.1 base score of 7.8 (HIGH). The vulnerability requires local access and user interaction, with potential HIGH impact to confidentiality, integrity, and availability. Connected sources confirm the CVE and its assoc...

CVE-2022-21913

The CVE-2022-21913 entry describes a Local Security Authority (Domain Policy) Remote Protocol Security Feature Bypass. Public documents present CVSS data from NVD (CVSS v3.1: 7.5, NETWORK, NONE privileges; CVSS v2.0: 5.0, PARTIAL impact). No concrete product/vendor/component/version/root-cause de...

CVE-2022-24540

CVE-2022-24540 is identified as a Windows ALPC Elevation of Privilege vulnerability. Connected data confirms the CVE is listed in Windows security advisories and KEV-tracking feeds; CVSS v3.1 vector indicates LOCAL, high impact with LOW privileges required and NO user interaction (7.0 base score)...

CVE-2022-21922

Technical details for CVE-2022-21922 are not publicly available in the provided documents. No affected products, versions, exploit information, or fixes are specified here. Monitor for updates in the connected sources for authoritative vulnerability details.

CVE-2022-30208

Public technical details about CVE-2022-30208 are not provided in the connected documents. The entry describes a Windows SAM DoS vulnerability but includes no affected product versions, exploit specifics, or remediation. Monitor for official advisories and updates.

CVE-2022-21851

Technical details for CVE-2022-21851 are not publicly available in the provided documents. No root cause, affected versions, or fixes are disclosed here; monitor for official updates from Microsoft and NVD.

CVE-2022-21890

Technical details for CVE-2022-21890 are not publicly available in the provided documents. Monitor for updates.

CVE-2022-29127

Technical details (affected product/component/versions/root cause/impact/fix) are not publicly provided in the supplied documents. Monitor for updates from the connected sources; these materials do not allow confirmation of vulnerability specifics or remediation actions.

CVE-2022-21843

CVE-2022-21843 affects Windows Internet Key Exchange (IKE) Protocol Extensions. The vulnerability is a Remote Code Execution in the Windows IKE Extension component, with a network-based attack surface and no user interaction required. Root cause is within the IKE Extensions implementation that ca...

CVE-2022-21883

CVE-2022-21883 is a Windows vulnerability in the IKE extension that can be exploited over the network to cause a denial of service . The NVD entry lists a network attack vector with high impact on availability (CVSS v3.1 base score 7.5; impact is confined to availability). The root cause is descr...

CVE-2022-29140

Technical details about CVE-2022-29140 (Windows Print Spooler information disclosure) are not publicly provided in the supplied Connected Documents. No specific affected product/version or remediation is described here; monitor official advisories for updates.

CVE-2022-24542

Technical details for CVE-2022-24542 are not provided in the connected documents. The EUVD/CNVD entries reference Win32k elevation issues but do not supply affected products, versions, root cause, or fixes for this CVE. Monitor for updates.

CVE-2022-21995

CVE-2022-21995 is a Windows Hyper-V Remote Code Execution vulnerability. According to the connected sources, it affects Microsoft Hyper-V and has a CVSS v3.1 base score of 7.9 (HIGH) with an adjacent network attack vector, high attack complexity, no privileges required, and user interaction requi...

CVE-2022-22040

Technical details about CVE-2022-22040 are not publicly provided in the supplied documents. Monitor for updates from official sources for affected products, impact specifics, and fixes before taking action.

CVE-2022-30143

CVE-2022-30143 is an LDAP Remote Code Execution vulnerability affecting Windows LDAP, where exploitation is contingent on the LDAP MaxReceiveBuffer policy being configured higher than the default. The Linked AVLEONOV content notes that the vulnerability exists for LDAP RCEs during Patch Tuesday J...

CVE-2022-34701

Technical details about CVE-2022-34701 (affected product, root cause, impact, or fix) are not provided in the connected documents; monitor for official disclosures and updates.

CVE-2022-34722

CVE-2022-34722 is a Windows IKE Protocol Extensions RCE affecting systems with IPSec enabled and IKEv1 in use. An unauthenticated attacker could send a crafted IP packet to execute arbitrary code on vulnerable Windows hosts; Ikev2 is not affected. The vulnerability is classified as critical (CVSS...

CVE-2022-37974

CVE-2022-37974 is an information-disclosure vulnerability in Windows Mixed Reality Developer Tools. The advisory entries in the connected set identify the affected component as Windows Mixed Reality Developer Tools and classify the impact as information disclosure, with CVSSv3.1 a base score of 6...

CVE-2022-38041

CVE-2022-38041 is a Denial-of-Service vulnerability in Windows Secure Channel. Connected documents confirm the affected component is Windows Secure Channel and the impact is DoS (CVSSv3.1 base ~7.5). Microsoft issued security updates in the Oct 2022 cycle to fix this vulnerability; exploitation s...

CVE-2021-43215

CVE-2021-43215 affects the iSNS (Internet Storage Name Service) server. It is a memory corruption vulnerability that can lead to remote code execution when an attacker sends a specially crafted request to an affected iSNS server. The issue is network-exploitable (no user interaction) and is consi...

CVE-2022-26918

CVE-2022-26918 relates to a Windows Fax Compose Form remote code execution vulnerability. According to CNVD-2022-71976, the root cause is a failure to properly filter special elements of the input data during external input construction, enabling arbitrary code execution on affected systems. The ...

CVE-2022-30153

CVE-2022-30153 is cited in connected materials as a Windows LDAP Remote Code Execution vulnerability, listed among several Windows LDAP RCEs. The AVLEONOV post notes that some LDAP RCEs depend on the LDAP MaxReceiveBuffer policy, implying a conditional exploitation vector for certain LDAP configu...

CVE-2021-38631

CVE-2021-38631 is a Windows RDP information-disclosure vulnerability. Public sources and patches indicate it affects Remote Desktop Protocol handling on Windows 7–11 and Windows Server 2008–2019, allowing an attacker with local access to view the RDP password. Microsoft released fixes as part of ...

CVE-2022-35835

Technical details (affected component, root cause, exploitability, and remediation) are not provided in the connected documents. Monitor for updates from official sources.

CVE-2022-21997

Technical details about CVE-2022-21997 are not provided in the supplied documents. Monitor for updates from NVD/Microsoft and ENISA KEV references.

CVE-2022-30194

Technical details about CVE-2022-30194 are not publicly provided in the supplied documents; no affected products, exploit info, or remediation details are included. Monitor for updates.

CVE-2022-41118

Technical details about CVE-2022-41118 are not provided in the supplied documents. No product/vendor/version or exploit information is available here. Monitor for updates from official sources; further details and remediation would require vendor advisories.

CVE-2023-21765

Technical details for CVE-2023-21765 are not provided in the supplied documents; no affected products, root cause, or remediation are disclosed here. Monitor official advisories and connected sources for updates.

CVE-2022-34302

CVE-2022-34302 affects signed bootloaders in the UEFI Secure Boot chain (New Horizon Datasys bootloader). An attacker can bypass Secure Boot and load unsigned code in the pre-boot stage by replacing the currently used signed bootloader. This requires access to the EFI System Partition to boot wit...

CVE-2022-34696

Technical details for CVE-2022-34696 are not publicly available in the provided documents; no affected products, root cause, impact, or remediation are included. Monitor for updates.

CVE-2022-35820

Technical details about CVE-2022-35820 (affected Windows Bluetooth driver, root cause, impact, and fix) are not present in the provided connected documents. Monitor for updates in the sources above to obtain concrete information.

CVE-2022-38047

CVE-2022-38047 is a Windows Point‑to‑Point Tunneling Protocol (PPTP) remote code execution vulnerability. The CVE affects the PPTP component in Windows, with a network‑level attack surface, high impact (C/H/I/A all high) and no user interaction required per CVSS v3.1. Connected sources corroborat...

CVE-2021-41333

CVE-2021-41333 is a Windows Print Spooler Elevation of Privilege vulnerability. The available connected sources confirm affected software as Windows OS with the Print Spooler service vulnerable to local elevation of privileges. The root cause is a flaw in the Print Spooler handling that could all...

CVE-2022-30206

CVE-2022-30206 is a Windows Print Spooler Elevation of Privilege vulnerability. The connected exploit PoC demonstrates local EoP by abusing the Print Spooler to delete an arbitrary TargetFile via a spooler-related file operation (creating a printer, setting SpoolDirectory, triggering an oplock on...

CVE-2022-30211

CVE-2022-30211 is described as a Windows L2TP Remote Code Execution vulnerability. The connected sources provide CVSS v3.1 data: vector NETWORK, high impact on confidentiality/integrity/availability (C:H/I:H/A:H) with base score 7.5, and attack complexity HIGH with privileges required LOW. The in...