CVE-2022-24466

Technical details for CVE-2022-24466 are not publicly provided in the supplied documents. The connected entries reference this CVE among others but do not describe affected products, root cause, impact, or fixes.

CVE-2022-34719

Technical details about CVE-2022-34719 are not publicly available in the provided connected documents. Monitor for updates from official sources to learn affected products, root cause, and fixes.

CVE-2022-24488

CVE-2022-24488 is a Windows Desktop Bridge elevation of privilege vulnerability. Connected sources (NCSC advisory) assign CVSSv3.1 7.8, impact: Obtaining Increased Entitlements, within Windows App Store/Windows Desktop Bridge context; no public exploit details or remediation steps are provided in...

CVE-2022-26793

Technical details (affected component, root cause, vulnerable versions, exploitability) are not provided in the supplied documents. Monitor for updates.

CVE-2022-37979

CVE-2022-37979 is a Windows Hyper-V elevation-of-privilege vulnerability. Public sources describe it as a local privilege escalation stemming from improper privilege assignment within the Hyper-V component. The CVE affects Windows Hyper-V with a CVSS v3.1 vector of Local, High severity (7.8). Rem...

CVE-2022-37985

CVE-2022-37985 affects the Microsoft Windows Graphics Component and is classified as an information disclosure vulnerability. The NT its entry indicates the affected component is the Windows Graphics Component, with CVSS v3.1 base score 5.5 (Attack Vector: Local, Attack Complexity: Low, Privilege...

CVE-2022-21873

Technical details for CVE-2022-21873 are not publicly provided in the supplied documents. No affected products, root cause, impact, or remediation are stated here; monitor for updates.

CVE-2022-34720

CVE-2022-34720 is a Windows IKE Extension Denial of Service vulnerability. The provided data notes a network-based attack vector with low complexity, no privileges required, and a HIGH availability impact (CVSS v3.1 base score 7.5). No exploit details or remediation/patch information is provided ...

CVE-2022-35797

Technical details about CVE-2022-35797 (affected product/component, root cause, versions, exploitability) are not publicly disclosed in the provided documents. Monitor official advisories for updates.

CVE-2022-41074

Technical details for CVE-2022-41074 are not publicly provided in the supplied documents. Monitor updates from Microsoft/NVD for affected component, impact, and remediation.

CVE-2022-41086

Technical details about CVE-2022-41086 (affected product/component/versions/root cause/impact/fix) are not publicly provided in the connected documents. Monitor for updates from official advisories or vendor advisories to obtain concrete exploitability, affected software, and remediation steps.

CVE-2021-36970

Technical details for CVE-2021-36970 are not provided in the supplied documents. No specifics on affected products, root cause, impact, or remediation are present here; monitor for updates from official sources.

CVE-2021-41345

Technical details for CVE-2021-41345 are not publicly available in the provided connected documents. Monitor for updates from official advisories.

CVE-2021-41371

CVE-2021-41371 is a Windows RDP information-disclosure vulnerability affecting the RDP implementation on Windows client/server versions from Windows 7 through Windows 11 and Windows Server 2008–2019. Public reporting indicates the flaw enables an attacker with local access to view the RDP passwor...

CVE-2022-21850

CVE-2022-21850 is described in the provided materials as a Remote Desktop Client Remote Code Execution vulnerability. The connected documents confirm the vulnerability relates to the Windows Remote Desktop Client but do not provide concrete technical specifics (e.g., root cause, affected versions...

CVE-2022-21900

Technical details for CVE-2022-21900 are not provided in the connected documents. The initial description is general; monitor for updates from official advisories (no exploit specifics or affected products confirmed here).

CVE-2022-41053

Technical details about CVE-2022-41053 are not publicly provided in the supplied documents. No affected products, exploit information, or mitigations are specified here. Monitor for updates.

CVE-2022-21960

CVE-2022-21960 affects Windows Resilient File System (ReFS) and is described as a remote code execution vulnerability. The provided documents only state the vulnerability title and CVSS metrics from NVD (CVSSv3.1 base score 6.8, vector CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) and MSRC refere...

CVE-2022-30142

CVE-2022-30142 is a Windows File History Remote Code Execution vulnerability reported with CVSS v3.1 base score 7.5 (HIGH) and network attack vector, requiring user interaction. The vulnerability affects Windows File History and involves a high-impact compromise of confidentiality, integrity, and...

CVE-2022-21908

CVE-2022-21908 is a Windows Installer Elevation of Privilege vulnerability. The NVD entry lists a CVSS v3.1 base score of 7.8 (HIGH) with LOCAL attack vector, LOW attack complexity, PRIVILEGES REQUIRED: LOW, UI: NONE, and scope UNCHANGED; impact to Confidentiality, Integrity, and Availability is ...

CVE-2022-21914

Technical details for CVE-2022-21914 are not publicly available in the provided documents. Monitor for updates.

CVE-2022-21928

This CVE affects the Windows Resilient File System (ReFS). The entry documents a Remote Code Execution vulnerability in ReFS, with CVSSv3.1 base score 6.4 (MEDIUM) and a physical attack vector, no user interaction, and high impact on confidentiality, integrity, and availability. The Connected doc...

CVE-2022-21985

CVE-2022-21985 is a Windows vulnerability described as an Information Disclosure vulnerability in the Windows Remote Access Connection Manager. The CVSS details show a local attack vector with low complexity (CVSSv3.1 base score 5.5, MEDIUM severity), where confidentiality is impacted. The descri...

CVE-2022-22715

CVE-2022-22715 corresponds to a Windows Named Pipe File System Elevation of Privilege vulnerability. The Electronically published data indicate a local, low‑privilege attack with no user interaction that could yield high impact to confidentiality, integrity, and availability. The connected record...

CVE-2022-41057

Technical details about CVE-2022-41057 are not provided in the connected documents. Public information here does not specify affected products, root cause, impact, or fixes. Monitor official advisories for updates.

CVE-2022-21958

Technical details about CVE-2022-21958 are not provided in the supplied documents. No specifics on affected builds, root cause, or fixes are available here; monitor official advisories for updates.

CVE-2022-23299

Technical details about CVE-2022-23299 (affected product, root cause, impact, fix) are not publicly available in the provided documents. Monitor for updates as new information may be released.

CVE-2022-26920

The CVE-2022-26920 entry refers to a Windows Graphics Components information-disclosure vulnerability. Connected sources confirm the flaw resides in Microsoft Windows Graphics Components (a graphics driver component) and arises from configuration errors during operation, enabling information disc...

CVE-2022-41121

CVE-2022-41121 is a Windows Graphics Component Elevation of Privilege vulnerability with a CVSS v3.1 base score of 7.8 (HIGH), requiring LOCAL access with LOW privileges and no user interaction. The available descriptions identify the affected component as Windows Graphics Component but provide n...

CVE-2021-38665

CVE-2021-38665 is described as a Remote Desktop Protocol Client Information Disclosure Vulnerability. The provided records show CVSSv3.1 base score 6.5 (NETWORK, LOW ATTACK COMPLEXITY, NONE PRIVILEGES, UI: REQUIRED) and a CNA-provided score of 7.4 (HIGH confidentiality impact). Exploitation detai...

CVE-2021-40467

CVE-2021-40467 is a Windows Common Log File System Driver elevation-of-privilege vulnerability. According to the records, it enables a local attacker to escalate privileges via the CLFS component, with high impact on confidentiality, integrity, and availability (vector: LOCAL, low attack complexi...

CVE-2021-41342

Technical details for CVE-2021-41342 are not publicly available in the provided documents; the materials reference the vulnerability name but do not specify affected products, root cause, impact, or fixes. Monitor for updates.

CVE-2021-42275

Public details in the provided documents do not include concrete technical specifics for CVE-2021-42275 (product, affected versions, root cause, impact or fixes). The materials offer high-level references and CVSS values but no implementation-level details.

CVE-2022-21877

CVE-2022-21877 is a Windows storage space controller information-disclosure vulnerability. The connected OpenVAS exploit entry describes an out-of-bounds read in the spaceport.sys driver that can leak data past the system buffer, indicating a local information-leak impact. A GitHub repository pro...

CVE-2022-30144

Technical details for CVE-2022-30144 (affected component, root cause, impact, and remediation) are not provided in the connected documents. Monitor Microsoft/NVD updates for confirmed exploit information and patch guidance.

CVE-2022-30155

Technical details about CVE-2022-30155 are not provided in the supplied documents. Public records confirm Windows Kernel Denial of Service vulnerability, but no specifics on affected versions, root cause, or fixes are included here. Monitor for updates.

CVE-2022-34689

CVE-2022-34689 is a Windows CryptoAPI spoofing vulnerability in which the certificate cache index key (MD5-based) can be exploited to masquerade as a legitimate entity. A PoC was released (HIVEPRO PoC report) detailing the attack, underscoring public proof-of-concept availability. The advisory co...

CVE-2022-41100

CVE-2022-41100 is a Windows ALPC Elevation of Privilege vulnerability. The Connected/OpenVAS documents confirm the CVE exists as part of Windows vulnerability listings and include it in multiple CVE compilations, but none provide concrete details on affected product versions, root cause specifics...

CVE-2022-44689

CVE-2022-44689 affects Windows Subsystem for Linux (WSL2) kernel, enabling local elevation of privilege. The NVD entry lists a local attack vector with low complexity and low privileges required, resulting in high impact to confidentiality, integrity, and availability. Connected sources corrobora...

CVE-2021-41356

CVE-2021-41356 is a Windows Denial-of-Service vulnerability. The connected records confirm impact on Windows OS and patch availability: MSKB updates KB5007189 (Windows 10 18363.1916), KB5007207 (OS Build 10240.19119), KB5007215 (Windows 11 22000.318) address this CVE as part of November 2021 secu...

CVE-2021-41367

CVE-2021-41367 is described as an NTFS Elevation of Privilege Vulnerability. The Connected NVD entry lists CVSS v3.1 base score 7.8 (HIGH) with LOCAL attack vector, LOW attack complexity, PRIVILEGES REQUIRED: LOW, and UI: NONE. Impact per CVSS3.1 indicates high confidentiality, integrity, and ava...

CVE-2022-21880

CVE-2022-21880 is a Windows GDI+ Information Disclosure vulnerability. The NVD entry describes impact as a confidentiality breach with no integrity or availability impact. CVSS v2: base score 7.8 (NETWORK, LOW attack complexity, NONE auth, C:C/I:N/A:N). CVSS v3.1: base score 7.5 (AV:N/AC:L/PR:N/U...

CVE-2022-21905

CVE-2022-21905 technical details are not publicly available in the provided documents. No affected products, root cause, impact, or fixes are specified here. Monitor for updated disclosures.

CVE-2022-24485

Technical details about CVE-2022-24485 are not provided in the connected documents. No affected product/version information or exploit specifics are available here. Monitor for official updates and vendor advisories.

CVE-2022-30200

Technical details about CVE-2022-30200 are not publicly provided in the connected documents. The sources reference the CVE in KEV listings and OpenVAS entries but do not specify affected products, root cause, impact, or fixes. Monitor for updates.

CVE-2022-41096

Technical details about CVE-2022-41096 are not publicly provided in the supplied documents. No affected products/versions or impact are explicitly described here. Monitor the connected sources for updates from Microsoft and NVD when more information becomes available.

CVE-2021-40462

Technical details (affected product, component, version, root cause, or fixes) for CVE-2021-40462 are not provided in the connected documents; monitor for updates.

CVE-2021-41370

Technical details about CVE-2021-41370 are not provided in the supplied documents; no concrete affected products, root cause, or fixes are disclosed here. Monitor for updates from official advisories.

CVE-2022-30166

Technical details for CVE-2022-30166 are not publicly provided in the supplied documents. No affected products, root cause, or remediation are specified here; monitor for updates from official advisories.

CVE-2022-37956

CVE-2022-37956 is a Windows kernel elevation-of-privilege vulnerability involving local, memory-corruption in the registry hive path. The CVE is described as a Windows Kernel Elevation of Privilege Vulnerability with a CVSSv3.1 base score of 7.8 (HIGH); attack vector LOCAL, complexity LOW, privil...