CVE-2023-21765

Technical details for CVE-2023-21765 are not provided in the supplied documents; no affected products, root cause, or remediation are disclosed here. Monitor official advisories and connected sources for updates.

CVE-2022-41048

Technical details about CVE-2022-41048 (affected product, root cause, impact, or remediation) are not provided in the supplied documents; no public details are present here. Monitor for updates.

CVE-2021-42279

CVE-2021-42279 concerns a memory corruption vulnerability in the Chakra Scripting Engine / ChakraCore. Connected sources indicate an out-of-bounds write as the root cause, enabling memory corruption with a network-accessible context and high impact characteristics (I/H, A/H) per CVSS details, tho...

CVE-2022-22001

CVE-2022-22001 affects Windows Remote Access Connection Manager and is described as an Elevation of Privilege vulnerability. Connected documents confirm the CVE in Microsoft Windows contexts and list a CVSS v3.1 base score of 7.8 (LOCAL, LOW privileges required, NONE user interaction, HIGH impact...

CVE-2022-24494

CVE-2022-24494 refers to a Windows vulnerability in the Windows Ancillary Function Driver for WinSock that allows Elevation of Privilege. The issue is a Local attack requiring Low privileges with no user interaction, and is described as affecting Confidentiality, Integrity, and Availability (per ...

CVE-2022-26789

CVE-2022-26789 is a Windows Print Spooler Elevation of Privilege vulnerability. According to the sources, the CVSS v3.1 base score is 7.8 (LOCAL, LOW attack complexity, NONE authentication, HIGH confidentiality/integrity/availability impact). Documented exploitation details are not provided in th...

CVE-2022-26917

CVE-2022-26917 is a Windows Fax Compose Form Remote Code Execution vulnerability. The provided sources identify it as a local- or network-vector issue with high impact on confidentiality, integrity, and availability per CVSS v3.1, but do not specify affected Windows versions, faulty component det...

CVE-2022-30197

Technical details for CVE-2022-30197 are not provided in the supplied documents. Public information appears limited to a generic Windows Kernel information disclosure context; monitor official advisories and vendor updates for any concrete details or fixes.

CVE-2022-30225

Technical details about CVE-2022-30225 are not provided in the connected documents. Public information in the initial entry is limited to a generic vulnerability description; monitor for updates from official advisories.

CVE-2022-37970

CVE-2022-37970 affects the Windows DWM Core Library, enabling local privilege escalation (attack vector: LOCAL; privileges required: LOW; UI: NONE). The CVSS base notes HIGH impact on confidentiality, integrity, and availability. Microsoft has released security updates (referenced in MSRC/KB advi...

CVE-2022-37980

Technical details about CVE-2022-37980 (affected software, root cause, impact, and fix) are not publicly disclosed in the provided documents. Monitor official sources for updates.

CVE-2022-38037

CVE-2022-38037 is described in the sources as a Windows kernel memory corruption vulnerability caused by the registry hive loader not enforcing a correct relationship between the hive file version (minor) and the subkey list structures. Specifically, the hive loader may assume a given minor versi...

CVE-2022-21885

Technical details for CVE-2022-21885 are not publicly provided in the supplied documents; no affected versions, root cause, or remediation are stated. Monitor for updates.

CVE-2022-21906

Technical details are not publicly available in the provided documents. Monitor for official disclosures and updates.

CVE-2022-30147

Technical details about CVE-2022-30147 are not provided in the supplied documents; no affected products, versions, root cause, or remediation are specified here. Monitor for official vulnerability advisories for specifics.

CVE-2022-23298

Technical details for CVE-2022-23298 are not provided in the connected documents. Public information is limited to generic vulnerability entries; monitor for updates from official sources.

CVE-2022-26827

Technical details (affected product/version, root cause, impact, or remediation) for CVE-2022-26827 are not provided in the connected documents. Monitoring for updates is advised; no public details are present in the supplied sources.

CVE-2022-29137

Technical details about CVE-2022-29137 (affected product/version, root cause, and remediation) are not provided in the supplied documents. Monitor official updates from Microsoft/CNVD sources for any concrete fix, impact, and mitigations.

CVE-2022-38046

CVE-2022-38046 is a real vulnerability in Windows Web Account Manager that could lead to information disclosure. The affected component is part of Windows, and the risk is described as HIGH (CVSSv3.1 7.5). Public exploits exist per a Kaspersky vulnerability outline, and Microsoft has released sec...

CVE-2021-42285

CVE-2021-42285 is a Windows kernel elevation-of-privilege vulnerability. The provided records describe it as a Windows Kernel Elevation of Privilege Vulnerability with a local attack vector and low attack complexity. In the NVD entry, the CVSS vectors are CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/...

CVE-2022-22022

Technical details about CVE-2022-22022 are not publicly available in the provided documents. No affected product/version or root cause is disclosed here. Monitor for updates in the connected sources.

CVE-2022-29115

Technical details about CVE-2022-29115 are not publicly provided in the supplied documents. No affected product/version or remediation is specified here. Monitor for updates.

CVE-2022-34699

Summary: CVE-2022-34699 is a Windows Win32k elevation-of-privilege vulnerability. The affected component is Win32k; the issue enables local privilege escalation with high impact (C/H/I/A: High) when exploited locally. The CVSS 3.1 base score is 7.8 (Attack Vector: Local; Attack Complexity: Low; P...

CVE-2022-41052

CVE-2022-41052 is a Windows Graphics Component remote code execution vulnerability. The CVSS 3.1 base score is 7.8 (HIGH) with an attack vector of LOCAL, requiring user interaction, and impact on confidentiality, integrity, and availability (all HIGH). Affected details (product, component, root c...

CVE-2022-44676

Technical details for CVE-2022-44676 are not provided in the supplied documents. Public availability of affected products, root cause, and fixes cannot be confirmed here; monitor for updates from official sources.

CVE-2023-21757

Technical details for CVE-2023-21757 are not publicly provided in the supplied documents. No information on affected products/versions, impact, or fixes. Monitor for updates from official sources.

CVE-2021-42283

CVE-2021-42283 is an NTFS Elevation of Privilege vulnerability with documented CVSS 3.1 base score 7.8 (HIGH) and local attack vector with low complexity, no authentication, and user interaction not required. The entry also lists CVSS 2.0 data (MEDIUM) and a CNA score. There are no connected docu...

CVE-2022-21848

Technical details about CVE-2022-21848 are not publicly available in the provided documents. Monitoring for updates is recommended.

CVE-2022-29121

Technical details about CVE-2022-29121 are not provided in the supplied documents. No information on affected products/versions or fixes is available here. Monitor for updates from Microsoft/MSRC and vendor advisories.

CVE-2022-34727

Technical details (affected components, root cause, exploitability, and fixes) are not publicly available in the provided documents; monitor for updates from Microsoft and vulnerability trackers for concrete remediation and impact information.

CVE-2022-21889

Technical details about CVE-2022-21889 are not publicly provided in the supplied documents; monitoring for updates from vendors and CVE databases is advised.

CVE-2022-38027

CVE-2022-38027 is a Windows Storage Elevation of Privilege vulnerability affecting Microsoft Windows Storage, arising from improper assignment of privileges to applications. The issue enables local privilege escalation with high impacts to confidentiality, integrity, and availability (local acces...

CVE-2022-38031

CVE-2022-38031 concerns Microsoft WDAC OLE DB provider for SQL Server and is described as a Remote Code Execution vulnerability. The connected documents confirm the affected component as the WDAC OLE DB provider for SQL and show that Microsoft issued updates (e.g., KB5018419 and related security ...

CVE-2021-36953

Technical details about CVE-2021-36953 (affected component/version/impact) are not publicly available in the provided documents. Monitor for updates.

CVE-2022-34702

Technical details about CVE-2022-34702 are not publicly provided in the connected documents. No affected products, vectors, or remediation are stated beyond the initial description. Monitor for updates and additional authoritative disclosures.

CVE-2022-21888

Technical details about CVE-2022-21888 are not publicly provided in the supplied documents. No affected products, versions, or fixes are specified. Monitor for updates from official sources.

CVE-2022-21963

CVE-2022-21963 is described as a Windows Resilient File System (ReFS) Remote Code Execution vulnerability. The available data shows a high-impact, local/physical-attack scenario with no user interaction, but no concrete remediation details or version-specific affected products are provided beyond...

CVE-2022-21992

Technical details about CVE-2022-21992 are not provided in the supplied documents. Connected records reference KEV listings and related Windows KB updates, but this set does not specify affected products, root cause, impact, or remediation for this CVE. Monitor for official disclosures or vendor ...

CVE-2022-21897

Technical details about CVE-2022-21897 are not publicly provided in the supplied documents. No specific affected products/versions or fixes are listed here. Monitor for updates.

CVE-2022-30205

Technical details (affected product/version, root cause, exploitability, and remediation) for CVE-2022-30205 are not provided in the connected documents. Only high-level references to the Windows Group Policy elevation vulnerability are present. Monitor for updates.

CVE-2022-35803

CVE-2022-35803 affects the Windows Common Log File System Driver. The vulnerability is a local elevation-of-privilege in CLFS that could allow an attacker with low privileges to gain SYSTEM-level access, with impact to confidentiality, integrity, and availability rated high. The entry notes a CVS...

CVE-2022-41047

CVE-2022-41047 relates to a Microsoft ODBC Driver issue affecting the Microsoft ODBC SQL Server Driver (sqlsrv32.dll) used for ODBC connections. OpenVAS-derived entries reference post-update behavior where apps using the ODBC driver may fail to connect or encounter protocol errors in TDS streams,...

CVE-2022-21901

Technical details for CVE-2022-21901 are not publicly available in the provided documents. No explicit affected components, root cause, impact, or remediation are disclosed here. Monitor for updates from official advisories.

CVE-2022-26786

Technical details for CVE-2022-26786 are not publicly available within the provided documents. No concrete affected products, versions, or fixes are stated here. Monitor for updates from official sources to obtain remediation and impact information.

CVE-2022-30164

Technical details for CVE-2022-30164 (affected software, root cause, impact, or fixes) are not provided in the connected documents. Public info appears limited to general references; monitor official advisories for updates.

CVE-2022-34719

Technical details about CVE-2022-34719 are not publicly available in the provided connected documents. Monitor for updates from official sources to learn affected products, root cause, and fixes.

CVE-2022-38026

CVE-2022-38026 is a Windows DHCP Client Information Disclosure vulnerability. Affected component: Windows DHCP Client. Root cause: insufficient protection of sensitive information on the network. Impact: data disclosure (CVE entry lists confidentiality impact as High). Exploitability: Local acces...

CVE-2022-22710

CVE-2022-22710 corresponds to a denial-of-service in the Windows Common Log File System Driver. The provided documents confirm the affected component (CLFS Driver) and give CVSS details (AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) with local access required and high availability impact, but do not speci...

CVE-2022-24487

CVE-2022-24487 concerns Windows LSASS remote code execution. Connected documents show multiple Microsoft security updates (KB5012599, KB5012592, KB5012604, KB5012591, KB5012647, KB5012592, etc.) and MSRC entries that address Windows security issues and servicing stack updates across Windows Serve...

CVE-2022-26936

Technical details about CVE-2022-26936 are not provided in the Connected documents; only general security update KB articles are present. Monitor Microsoft advisories (KB5013941/3942/3943, etc.) for vulnerability-specific information and fixes.