CVE-2022-34302

CVE-2022-34302 affects signed bootloaders in the UEFI Secure Boot chain (New Horizon Datasys bootloader). An attacker can bypass Secure Boot and load unsigned code in the pre-boot stage by replacing the currently used signed bootloader. This requires access to the EFI System Partition to boot wit...

CVE-2022-30211

CVE-2022-30211 is described as a Windows L2TP Remote Code Execution vulnerability. The connected sources provide CVSS v3.1 data: vector NETWORK, high impact on confidentiality/integrity/availability (C:H/I:H/A:H) with base score 7.5, and attack complexity HIGH with privileges required LOW. The in...

CVE-2022-37970

CVE-2022-37970 affects the Windows DWM Core Library, enabling local privilege escalation (attack vector: LOCAL; privileges required: LOW; UI: NONE). The CVSS base notes HIGH impact on confidentiality, integrity, and availability. Microsoft has released security updates (referenced in MSRC/KB advi...

CVE-2022-21885

Technical details for CVE-2022-21885 are not publicly provided in the supplied documents; no affected versions, root cause, or remediation are stated. Monitor for updates.

CVE-2022-21906

Technical details are not publicly available in the provided documents. Monitor for official disclosures and updates.

CVE-2022-26789

CVE-2022-26789 is a Windows Print Spooler Elevation of Privilege vulnerability. According to the sources, the CVSS v3.1 base score is 7.8 (LOCAL, LOW attack complexity, NONE authentication, HIGH confidentiality/integrity/availability impact). Documented exploitation details are not provided in th...

CVE-2022-30225

Technical details about CVE-2022-30225 are not provided in the connected documents. Public information in the initial entry is limited to a generic vulnerability description; monitor for updates from official advisories.

CVE-2022-34301

CVE-2022-34301 describes a vulnerability in third‑party UEFI bootloaders (CryptoPro Secure Disk) that can bypass Secure Boot and execute unsigned code in the pre‑boot phase. An attacker must access the EFI System Partition and replace the signed bootloader with a vulnerable one, enabling local co...

CVE-2022-35820

Technical details about CVE-2022-35820 (affected Windows Bluetooth driver, root cause, impact, and fix) are not present in the provided connected documents. Monitor for updates in the sources above to obtain concrete information.

CVE-2022-22001

CVE-2022-22001 affects Windows Remote Access Connection Manager and is described as an Elevation of Privilege vulnerability. Connected documents confirm the CVE in Microsoft Windows contexts and list a CVSS v3.1 base score of 7.8 (LOCAL, LOW privileges required, NONE user interaction, HIGH impact...

CVE-2022-23298

Technical details for CVE-2022-23298 are not provided in the connected documents. Public information is limited to generic vulnerability entries; monitor for updates from official sources.

CVE-2022-30147

Technical details about CVE-2022-30147 are not provided in the supplied documents; no affected products, versions, root cause, or remediation are specified here. Monitor for official vulnerability advisories for specifics.

CVE-2022-30197

Technical details for CVE-2022-30197 are not provided in the supplied documents. Public information appears limited to a generic Windows Kernel information disclosure context; monitor official advisories and vendor updates for any concrete details or fixes.

CVE-2022-22022

Technical details about CVE-2022-22022 are not publicly available in the provided documents. No affected product/version or root cause is disclosed here. Monitor for updates in the connected sources.

CVE-2022-29137

Technical details about CVE-2022-29137 (affected product/version, root cause, and remediation) are not provided in the supplied documents. Monitor official updates from Microsoft/CNVD sources for any concrete fix, impact, and mitigations.

CVE-2022-44676

Technical details for CVE-2022-44676 are not provided in the supplied documents. Public availability of affected products, root cause, and fixes cannot be confirmed here; monitor for updates from official sources.

CVE-2022-26827

Technical details (affected product/version, root cause, impact, or remediation) for CVE-2022-26827 are not provided in the connected documents. Monitoring for updates is advised; no public details are present in the supplied sources.

CVE-2022-29115

Technical details about CVE-2022-29115 are not publicly provided in the supplied documents. No affected product/version or remediation is specified here. Monitor for updates.

CVE-2022-38037

CVE-2022-38037 is described in the sources as a Windows kernel memory corruption vulnerability caused by the registry hive loader not enforcing a correct relationship between the hive file version (minor) and the subkey list structures. Specifically, the hive loader may assume a given minor versi...

CVE-2022-38046

CVE-2022-38046 is a real vulnerability in Windows Web Account Manager that could lead to information disclosure. The affected component is part of Windows, and the risk is described as HIGH (CVSSv3.1 7.5). Public exploits exist per a Kaspersky vulnerability outline, and Microsoft has released sec...

CVE-2021-41333

CVE-2021-41333 is a Windows Print Spooler Elevation of Privilege vulnerability. The available connected sources confirm affected software as Windows OS with the Print Spooler service vulnerable to local elevation of privileges. The root cause is a flaw in the Print Spooler handling that could all...

CVE-2022-21848

Technical details about CVE-2022-21848 are not publicly available in the provided documents. Monitoring for updates is recommended.

CVE-2022-29121

Technical details about CVE-2022-29121 are not provided in the supplied documents. No information on affected products/versions or fixes is available here. Monitor for updates from Microsoft/MSRC and vendor advisories.

CVE-2022-34699

Summary: CVE-2022-34699 is a Windows Win32k elevation-of-privilege vulnerability. The affected component is Win32k; the issue enables local privilege escalation with high impact (C/H/I/A: High) when exploited locally. The CVSS 3.1 base score is 7.8 (Attack Vector: Local; Attack Complexity: Low; P...

CVE-2022-34727

Technical details (affected components, root cause, exploitability, and fixes) are not publicly available in the provided documents; monitor for updates from Microsoft and vulnerability trackers for concrete remediation and impact information.

CVE-2023-21757

Technical details for CVE-2023-21757 are not publicly provided in the supplied documents. No information on affected products/versions, impact, or fixes. Monitor for updates from official sources.

CVE-2021-42283

CVE-2021-42283 is an NTFS Elevation of Privilege vulnerability with documented CVSS 3.1 base score 7.8 (HIGH) and local attack vector with low complexity, no authentication, and user interaction not required. The entry also lists CVSS 2.0 data (MEDIUM) and a CNA score. There are no connected docu...

CVE-2021-42285

CVE-2021-42285 is a Windows kernel elevation-of-privilege vulnerability. The provided records describe it as a Windows Kernel Elevation of Privilege Vulnerability with a local attack vector and low attack complexity. In the NVD entry, the CVSS vectors are CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/...

CVE-2022-37980

Technical details about CVE-2022-37980 (affected software, root cause, impact, and fix) are not publicly disclosed in the provided documents. Monitor official sources for updates.

CVE-2022-38027

CVE-2022-38027 is a Windows Storage Elevation of Privilege vulnerability affecting Microsoft Windows Storage, arising from improper assignment of privileges to applications. The issue enables local privilege escalation with high impacts to confidentiality, integrity, and availability (local acces...

CVE-2022-21889

Technical details about CVE-2022-21889 are not publicly provided in the supplied documents; monitoring for updates from vendors and CVE databases is advised.

CVE-2022-21963

CVE-2022-21963 is described as a Windows Resilient File System (ReFS) Remote Code Execution vulnerability. The available data shows a high-impact, local/physical-attack scenario with no user interaction, but no concrete remediation details or version-specific affected products are provided beyond...

CVE-2022-34702

Technical details about CVE-2022-34702 are not publicly provided in the connected documents. No affected products, vectors, or remediation are stated beyond the initial description. Monitor for updates and additional authoritative disclosures.

CVE-2022-21888

Technical details about CVE-2022-21888 are not publicly provided in the supplied documents. No affected products, versions, or fixes are specified. Monitor for updates from official sources.

CVE-2022-21897

Technical details about CVE-2022-21897 are not publicly provided in the supplied documents. No specific affected products/versions or fixes are listed here. Monitor for updates.

CVE-2022-21992

Technical details about CVE-2022-21992 are not provided in the supplied documents. Connected records reference KEV listings and related Windows KB updates, but this set does not specify affected products, root cause, impact, or remediation for this CVE. Monitor for official disclosures or vendor ...

CVE-2022-30205

Technical details (affected product/version, root cause, exploitability, and remediation) for CVE-2022-30205 are not provided in the connected documents. Only high-level references to the Windows Group Policy elevation vulnerability are present. Monitor for updates.

CVE-2022-38031

CVE-2022-38031 concerns Microsoft WDAC OLE DB provider for SQL Server and is described as a Remote Code Execution vulnerability. The connected documents confirm the affected component as the WDAC OLE DB provider for SQL and show that Microsoft issued updates (e.g., KB5018419 and related security ...

CVE-2022-41052

CVE-2022-41052 is a Windows Graphics Component remote code execution vulnerability. The CVSS 3.1 base score is 7.8 (HIGH) with an attack vector of LOCAL, requiring user interaction, and impact on confidentiality, integrity, and availability (all HIGH). Affected details (product, component, root c...

CVE-2022-26786

Technical details for CVE-2022-26786 are not publicly available within the provided documents. No concrete affected products, versions, or fixes are stated here. Monitor for updates from official sources to obtain remediation and impact information.

CVE-2022-30164

Technical details for CVE-2022-30164 (affected software, root cause, impact, or fixes) are not provided in the connected documents. Public info appears limited to general references; monitor official advisories for updates.

CVE-2022-35803

CVE-2022-35803 affects the Windows Common Log File System Driver. The vulnerability is a local elevation-of-privilege in CLFS that could allow an attacker with low privileges to gain SYSTEM-level access, with impact to confidentiality, integrity, and availability rated high. The entry notes a CVS...

CVE-2022-38026

CVE-2022-38026 is a Windows DHCP Client Information Disclosure vulnerability. Affected component: Windows DHCP Client. Root cause: insufficient protection of sensitive information on the network. Impact: data disclosure (CVE entry lists confidentiality impact as High). Exploitability: Local acces...

CVE-2022-41047

CVE-2022-41047 relates to a Microsoft ODBC Driver issue affecting the Microsoft ODBC SQL Server Driver (sqlsrv32.dll) used for ODBC connections. OpenVAS-derived entries reference post-update behavior where apps using the ODBC driver may fail to connect or encounter protocol errors in TDS streams,...

CVE-2022-44666

CVE-2022-44666 is a Windows Contacts RCE affecting the Windows Contacts components (VCF/Contact handling) where an href/link attribute processing flow could reach SafeExecute and execute arbitrary code. Affected context centers on wab32.dll/wab.exe usage within Windows Contacts; PoCs and public w...

CVE-2021-36953

Technical details about CVE-2021-36953 (affected component/version/impact) are not publicly available in the provided documents. Monitor for updates.

CVE-2022-21901

Technical details for CVE-2022-21901 are not publicly available in the provided documents. No explicit affected components, root cause, impact, or remediation are disclosed here. Monitor for updates from official advisories.

CVE-2022-24487

CVE-2022-24487 concerns Windows LSASS remote code execution. Connected documents show multiple Microsoft security updates (KB5012599, KB5012592, KB5012604, KB5012591, KB5012647, KB5012592, etc.) and MSRC entries that address Windows security issues and servicing stack updates across Windows Serve...

CVE-2022-26936

Technical details about CVE-2022-26936 are not provided in the Connected documents; only general security update KB articles are present. Monitor Microsoft advisories (KB5013941/3942/3943, etc.) for vulnerability-specific information and fixes.

CVE-2022-22710

CVE-2022-22710 corresponds to a denial-of-service in the Windows Common Log File System Driver. The provided documents confirm the affected component (CLFS Driver) and give CVSS details (AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) with local access required and high availability impact, but do not speci...