CVE-2022-21913

The CVE-2022-21913 entry describes a Local Security Authority (Domain Policy) Remote Protocol Security Feature Bypass. Public documents present CVSS data from NVD (CVSS v3.1: 7.5, NETWORK, NONE privileges; CVSS v2.0: 5.0, PARTIAL impact). No concrete product/vendor/component/version/root-cause de...

CVE-2022-22050

CVE-2022-22050 is a Windows Fax Service elevation-of-privilege vulnerability. Documents indicate affected software is Windows Fax Service; vulnerability type is local privilege escalation with high impact (CVSSv3.1 base score 7.8) and low privileges required, no user interaction. No concrete expl...

CVE-2022-34706

Technical details about CVE-2022-34706 (affected products, root cause, impact, fixes) are not provided in the connected documents. Monitor for authoritative updates from Microsoft and CVE repositories.

CVE-2022-41058

Technical details for CVE-2022-41058 are not provided in the supplied documents. No affected products or fixes are described here. Monitor for updates in public advisories and the referenced sources.

CVE-2021-26443

Technical details (affected product/version, root cause, impact, and concrete remediation) are not publicly disclosed in the provided connected documents. Monitor vendor advisories and CVE records for updates to obtain authoritative remediation information.

CVE-2022-24549

CVE-2022-24549 is a Windows AppX Package Manager Elevation of Privilege vulnerability. The connected documents provide concrete details: affected component is Windows AppX Package Manager; root cause and exact vulnerable versions are not specified in the provided sources. CVSS data: CVSS v3.1 bas...

CVE-2022-26808

Technical details about CVE-2022-26808 are not publicly available in the provided documents; no affected products, root cause, or remediation are specified here. Monitor for updates.

CVE-2022-26927

CVE-2022-26927 : Affects the Windows Graphics Component and enables remote code execution. The CVSSv3.1 base score is 8.8 (HIGH) with a NETWORK attack vector, LOW attack complexity, NO privileges required, and USER INTERACTION REQUIRED; confidentiality, integrity and availability are all High. Th...

CVE-2022-26935

Technical details about CVE-2022-26935 are not provided in the connected documents. The Initial document offers a basic description and CVSS info, but no specifics on affected products/versions, root cause, remediation, or exploit status. Monitor for updates.

CVE-2022-30163

CVE-2022-30163 is a Windows Hyper-V remote code execution vulnerability. The available connected sources describe an issue where code executed inside a Hyper-V guest could lead to arbitrary code execution on the Hyper-V host. Microsoft released out-of-band and June 2022 security updates addressin...

CVE-2022-24483

CVE-2022-24483 is a Windows Kernel information disclosure vulnerability. Affected component is the Windows Kernel; the issue is an information disclosure likely arising from the nt!PfpPrivSourceEnum function, per a GitHub PoC describing an Information disclosure bug in that function. The connecte...

CVE-2022-33634

CVE-2022-33634 is listed in the connected NCSc advisory as a Windows PPTP vulnerability with an impact described as “Execution of random code” and a CVSS-like score of 8.10. The available connected documents do not provide explicit exploitation details, affected product versions, root cause, or a...

CVE-2022-38040

Technical details about CVE-2022-38040 (Microsoft ODBC Driver RCE) are not provided in the supplied documents. Public information on affected components, root cause, impact specifics, or fixes is not present here. Monitor for updates in the connected sources for any disclosed details.

CVE-2023-21767

Technical details for CVE-2023-21767 are not provided in the Connected documents or initial description. No affected products, root cause, impact, or fixes are disclosed here. Monitor for updates from official sources.

CVE-2022-24494

CVE-2022-24494 refers to a Windows vulnerability in the Windows Ancillary Function Driver for WinSock that allows Elevation of Privilege. The issue is a Local attack requiring Low privileges with no user interaction, and is described as affecting Confidentiality, Integrity, and Availability (per ...

CVE-2022-29140

Technical details about CVE-2022-29140 (Windows Print Spooler information disclosure) are not publicly provided in the supplied Connected Documents. No specific affected product/version or remediation is described here; monitor official advisories for updates.

CVE-2022-34708

Technical details for CVE-2022-34708 are not provided in the connected documents. Public exploit vectors, affected products, and fixes are not stated here. Monitor for updates.

CVE-2022-38041

CVE-2022-38041 is a Denial-of-Service vulnerability in Windows Secure Channel. Connected documents confirm the affected component is Windows Secure Channel and the impact is DoS (CVSSv3.1 base ~7.5). Microsoft issued security updates in the Oct 2022 cycle to fix this vulnerability; exploitation s...

CVE-2022-41076

Technical details for CVE-2022-41076 are not publicly available in the provided documents. Monitor for updates; no affected product/version or remediation details are given here.

CVE-2022-44668

CVE-2022-44668 is a Windows Media Remote Code Execution vulnerability with a CVSSv3.1 base score of 7.8 (HIGH). The vulnerability requires local access and user interaction, with potential HIGH impact to confidentiality, integrity, and availability. Connected sources confirm the CVE and its assoc...

CVE-2022-21843

CVE-2022-21843 affects Windows Internet Key Exchange (IKE) Protocol Extensions. The vulnerability is a Remote Code Execution in the Windows IKE Extension component, with a network-based attack surface and no user interaction required. Root cause is within the IKE Extensions implementation that ca...

CVE-2022-21883

CVE-2022-21883 is a Windows vulnerability in the IKE extension that can be exploited over the network to cause a denial of service . The NVD entry lists a network attack vector with high impact on availability (CVSS v3.1 base score 7.5; impact is confined to availability). The root cause is descr...

CVE-2022-21922

Technical details for CVE-2022-21922 are not publicly available in the provided documents. No affected products, versions, exploit information, or fixes are specified here. Monitor for updates in the connected sources for authoritative vulnerability details.

CVE-2022-30211

CVE-2022-30211 is described as a Windows L2TP Remote Code Execution vulnerability. The connected sources provide CVSS v3.1 data: vector NETWORK, high impact on confidentiality/integrity/availability (C:H/I:H/A:H) with base score 7.5, and attack complexity HIGH with privileges required LOW. The in...

CVE-2022-37988

CVE-2022-37988 is tied to a Windows registry hive memory corruption bug in which cells larger than 16 KiB are aligned to the next power of two during loading, causing a use-after-free when shrinking a cell. The connected material provides a detailed attacker workflow: trigger hive memory corrupti...

CVE-2022-21996

Technical details for CVE-2022-21996 are not publicly available in the provided documents. Monitor for updates; current sources indicate Win32k elevation of privilege but lack concrete impacted products, versions, root cause, or remediation in this set.

CVE-2022-26918

CVE-2022-26918 relates to a Windows Fax Compose Form remote code execution vulnerability. According to CNVD-2022-71976, the root cause is a failure to properly filter special elements of the input data during external input construction, enabling arbitrary code execution on affected systems. The ...

CVE-2022-37974

CVE-2022-37974 is an information-disclosure vulnerability in Windows Mixed Reality Developer Tools. The advisory entries in the connected set identify the affected component as Windows Mixed Reality Developer Tools and classify the impact as information disclosure, with CVSSv3.1 a base score of 6...

CVE-2022-21851

Technical details for CVE-2022-21851 are not publicly available in the provided documents. No root cause, affected versions, or fixes are disclosed here; monitor for official updates from Microsoft and NVD.

CVE-2022-21995

CVE-2022-21995 is a Windows Hyper-V Remote Code Execution vulnerability. According to the connected sources, it affects Microsoft Hyper-V and has a CVSS v3.1 base score of 7.9 (HIGH) with an adjacent network attack vector, high attack complexity, no privileges required, and user interaction requi...

CVE-2022-22040

Technical details about CVE-2022-22040 are not publicly provided in the supplied documents. Monitor for updates from official sources for affected products, impact specifics, and fixes before taking action.

CVE-2021-43215

CVE-2021-43215 affects the iSNS (Internet Storage Name Service) server. It is a memory corruption vulnerability that can lead to remote code execution when an attacker sends a specially crafted request to an affected iSNS server. The issue is network-exploitable (no user interaction) and is consi...

CVE-2022-21890

Technical details for CVE-2022-21890 are not publicly available in the provided documents. Monitor for updates.

CVE-2022-24540

CVE-2022-24540 is identified as a Windows ALPC Elevation of Privilege vulnerability. Connected data confirms the CVE is listed in Windows security advisories and KEV-tracking feeds; CVSS v3.1 vector indicates LOCAL, high impact with LOW privileges required and NO user interaction (7.0 base score)...

CVE-2022-24542

Technical details for CVE-2022-24542 are not provided in the connected documents. The EUVD/CNVD entries reference Win32k elevation issues but do not supply affected products, versions, root cause, or fixes for this CVE. Monitor for updates.

CVE-2022-29127

Technical details (affected product/component/versions/root cause/impact/fix) are not publicly provided in the supplied documents. Monitor for updates from the connected sources; these materials do not allow confirmation of vulnerability specifics or remediation actions.

CVE-2022-30143

CVE-2022-30143 is an LDAP Remote Code Execution vulnerability affecting Windows LDAP, where exploitation is contingent on the LDAP MaxReceiveBuffer policy being configured higher than the default. The Linked AVLEONOV content notes that the vulnerability exists for LDAP RCEs during Patch Tuesday J...

CVE-2022-34301

CVE-2022-34301 describes a vulnerability in third‑party UEFI bootloaders (CryptoPro Secure Disk) that can bypass Secure Boot and execute unsigned code in the pre‑boot phase. An attacker must access the EFI System Partition and replace the signed bootloader with a vulnerable one, enabling local co...

CVE-2021-41333

CVE-2021-41333 is a Windows Print Spooler Elevation of Privilege vulnerability. The available connected sources confirm affected software as Windows OS with the Print Spooler service vulnerable to local elevation of privileges. The root cause is a flaw in the Print Spooler handling that could all...

CVE-2022-23298

Technical details for CVE-2022-23298 are not provided in the connected documents. Public information is limited to generic vulnerability entries; monitor for updates from official sources.

CVE-2022-30153

CVE-2022-30153 is cited in connected materials as a Windows LDAP Remote Code Execution vulnerability, listed among several Windows LDAP RCEs. The AVLEONOV post notes that some LDAP RCEs depend on the LDAP MaxReceiveBuffer policy, implying a conditional exploitation vector for certain LDAP configu...

CVE-2022-34701

Technical details about CVE-2022-34701 (affected product, root cause, impact, or fix) are not provided in the connected documents; monitor for official disclosures and updates.

CVE-2021-38631

CVE-2021-38631 is a Windows RDP information-disclosure vulnerability. Public sources and patches indicate it affects Remote Desktop Protocol handling on Windows 7–11 and Windows Server 2008–2019, allowing an attacker with local access to view the RDP password. Microsoft released fixes as part of ...

CVE-2022-35835

Technical details (affected component, root cause, exploitability, and remediation) are not provided in the connected documents. Monitor for updates from official sources.

CVE-2022-21997

Technical details about CVE-2022-21997 are not provided in the supplied documents. Monitor for updates from NVD/Microsoft and ENISA KEV references.

CVE-2022-30194

Technical details about CVE-2022-30194 are not publicly provided in the supplied documents; no affected products, exploit info, or remediation details are included. Monitor for updates.

CVE-2022-34302

CVE-2022-34302 affects signed bootloaders in the UEFI Secure Boot chain (New Horizon Datasys bootloader). An attacker can bypass Secure Boot and load unsigned code in the pre-boot stage by replacing the currently used signed bootloader. This requires access to the EFI System Partition to boot wit...

CVE-2022-35820

Technical details about CVE-2022-35820 (affected Windows Bluetooth driver, root cause, impact, and fix) are not present in the provided connected documents. Monitor for updates in the sources above to obtain concrete information.

CVE-2022-26827

Technical details (affected product/version, root cause, impact, or remediation) for CVE-2022-26827 are not provided in the connected documents. Monitoring for updates is advised; no public details are present in the supplied sources.

CVE-2022-34696

Technical details for CVE-2022-34696 are not publicly available in the provided documents; no affected products, root cause, impact, or remediation are included. Monitor for updates.