CVE-2021-40460

Technical details for CVE-2021-40460 are not publicly available in the provided documents. Monitor for updates.

CVE-2022-21880

CVE-2022-21880 is a Windows GDI+ Information Disclosure vulnerability. The NVD entry describes impact as a confidentiality breach with no integrity or availability impact. CVSS v2: base score 7.8 (NETWORK, LOW attack complexity, NONE auth, C:C/I:N/A:N). CVSS v3.1: base score 7.5 (AV:N/AC:L/PR:N/U...

CVE-2022-21916

Technical details about CVE-2022-21916 are not publicly provided in the supplied documents. Monitor for updates from Microsoft and CVE databases for affected products, root cause, and fixes.

CVE-2022-21958

Technical details about CVE-2022-21958 are not provided in the supplied documents. No specifics on affected builds, root cause, or fixes are available here; monitor official advisories for updates.

CVE-2022-30144

Technical details for CVE-2022-30144 (affected component, root cause, impact, and remediation) are not provided in the connected documents. Monitor Microsoft/NVD updates for confirmed exploit information and patch guidance.

CVE-2022-30155

Technical details about CVE-2022-30155 are not provided in the supplied documents. Public records confirm Windows Kernel Denial of Service vulnerability, but no specifics on affected versions, root cause, or fixes are included here. Monitor for updates.

CVE-2022-30166

Technical details for CVE-2022-30166 are not publicly provided in the supplied documents. No affected products, root cause, or remediation are specified here; monitor for updates from official advisories.

CVE-2022-30196

CVE-2022-30196 affects Windows Secure Channel (Schannel) and is categorized as a network-exploitable vulnerability with no user interaction. The base CVSSv3.1 score is 8.2 (High) with impact limited to confidentiality (Low) and availability (High); integrity is not affected. The issue is addresse...

CVE-2021-41367

CVE-2021-41367 is described as an NTFS Elevation of Privilege Vulnerability. The Connected NVD entry lists CVSS v3.1 base score 7.8 (HIGH) with LOCAL attack vector, LOW attack complexity, PRIVILEGES REQUIRED: LOW, and UI: NONE. Impact per CVSS3.1 indicates high confidentiality, integrity, and ava...

CVE-2022-21914

Technical details for CVE-2022-21914 are not publicly available in the provided documents. Monitor for updates.

CVE-2022-24550

Technical details for CVE-2022-24550 are not publicly provided in the connected documents. Available sources confirm the vulnerability title but do not specify affected products/versions, root cause, impact, or remediation here. Monitor for updates.

CVE-2022-26790

Technical details for CVE-2022-26790 are not publicly provided in the supplied documents. Monitor for updates.

CVE-2023-21759

CVE-2023-21759 is a Windows Smart Card Resource Management Server security feature bypass (local, low risk, CVSS 3.1 base 3.3). Connected sources confirm this CVE exists and has been cataloged by NVD and MSRC. Microsoft KBs linked to this CVE are KB5022303 (OS 22621.1105) and related January 2023...

CVE-2021-40489

Technical details for CVE-2021-40489 (Storage Spaces Controller Elevation of Privilege) are not provided in the supplied connected documents; no affected product/version/root-cause/impact or remediation details are stated here.

CVE-2022-23268

CVE-2022-23268 is a Windows Hyper-V Denial of Service vulnerability. Affected: Hyper-V component on Windows Server/Windows; under the CVSS3.1 basis vector CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H with a base score of 6.5 (MEDIUM). The vulnerability is local to exploit and results in a Denial ...

CVE-2022-41096

Technical details about CVE-2022-41096 are not publicly provided in the supplied documents. No affected products/versions or impact are explicitly described here. Monitor the connected sources for updates from Microsoft and NVD when more information becomes available.

CVE-2023-21760

Technical details about CVE-2023-21760 are not publicly provided in the supplied connected documents. The references show Windows KB security updates but do not specify affected products, root cause, impact, or fixes for this CVE. Monitor for updates.

CVE-2022-30212

CVE-2022-30212: A Windows Connected Devices Platform Service information-disclosure vulnerability. Affected product: Windows Connected Devices Platform Service. Underlying issue enables information disclosure; some sources describe it as exploitable remotely to obtain sensitive data. Remediation ...

CVE-2022-34690

Technical details about CVE-2022-34690 are not publicly provided in the supplied documents; no explicit affected products, exploit information, or fixes are described. Monitor for updates.

CVE-2022-35761

Technical details about CVE-2022-35761 (affected products, root cause, impact, and fixes) are not provided in the connected and initial documents. Monitor for updates and additional disclosures.

CVE-2022-41050

Technical details about CVE-2022-41050 are not publicly available in the provided documents. No product/version/root-cause/exploit information is given here. Monitor for updates from official advisories and vulnerability databases.

CVE-2021-40462

Technical details (affected product, component, version, root cause, or fixes) for CVE-2021-40462 are not provided in the connected documents; monitor for updates.

CVE-2021-41356

CVE-2021-41356 is a Windows Denial-of-Service vulnerability. The connected records confirm impact on Windows OS and patch availability: MSKB updates KB5007189 (Windows 10 18363.1916), KB5007207 (OS Build 10240.19119), KB5007215 (Windows 11 22000.318) address this CVE as part of November 2021 secu...

CVE-2021-41366

CVE-2021-41366 : Credential Security Support Provider Protocol (CredSSP) Elevation of Privilege. The NVD entry reports a high-severity (CVSS 3.1 base 7.8) vulnerability with a LOCAL attack vector, requiring LOW privileges and NO user interaction, leading to HIGH impact on confidentiality, integri...

CVE-2022-35804

CVE-2022-35804 is a Windows SMB Client/Server remote code execution vulnerability. The connected sources confirm it affects Windows SMB components and can allow an unauthenticated remote attacker to run code on affected servers/hosts. The public patch guidance centers on applying the August 2022 ...

CVE-2022-35836

CVE-2022-35836 affects the Microsoft WDAC OLE DB provider for SQL Server, described as a Remote Code Execution vulnerability. The connected AttackKB entry reiterates the same description. Provided details indicate the vulnerability is network-reachable with high impact to confidentiality, integri...

CVE-2022-38006

Technical details about CVE-2022-38006 are not publicly provided in the connected documents. Public information only reiterates a Windows Graphics Component Information Disclosure vulnerability. Monitor for updates; no vulnerability specifics (affected products, root cause, fixes) are disclosed h...

CVE-2022-41095

Technical details about CVE-2022-41095 are not present in the provided connected documents. The OpenVAS entries reference the CVE as part of Windows updates (KB5019966/KB5019980/KB5020003), but do not expose affected components, exploit vectors, or fixes beyond association.

CVE-2022-44667

Technical details are not publicly available in the provided documents. The supplied items only label CVE-2022-44667 as a Windows Media Remote Code Execution vulnerability; no specific affected product/version/root cause/fix is included. Monitor for updates.

CVE-2022-21835

CVE-2022-21835 : Microsoft Cryptographic Services Elevation of Privilege Vulnerability. The NVD entry lists a Local, low-attack-complexity vulnerability with a base score of 7.2 (CVSS2) and a CVSS-3.1 base score of 7.8 (HIGH) with LOCAL access, PR: LOW, UI: NONE, and UNCHANGED scope; affects conf...

CVE-2022-23296

Public technical details for CVE-2022-23296 are not provided in the connected documents. The sources list the CVE and references but do not specify affected product versions, root cause, exploit details, or remediation within the supplied material. Monitor for updates.

CVE-2022-30213

Technical details about CVE-2022-30213, including affected product/version, root cause, and exploit information, are not publicly provided in the connected documents. Monitor for updates as new information becomes available.

CVE-2022-21864

Technical details for CVE-2022-21864 are not publicly provided in the supplied documents. Monitor for updates from official advisories for affected products, impact, and remediation.

CVE-2022-21866

Technical details for CVE-2022-21866 are not provided in the supplied documents; affected products, root cause, exploit info, and fixes are not specified here. Monitor for updates.

CVE-2022-24504

Technical details for CVE-2022-24504 are not publicly provided in the supplied documents. Monitor for updates in the connected sources for affected products, impact specifics, and remediation information.

CVE-2022-26798

Technical details about CVE-2022-26798 are not publicly available in the provided connected documents. The initial description notes a Windows Print Spooler Elevation of Privilege vulnerability, but there are no specific vendor/product/version/root-cause/fix details in the supplied materials. Mon...

CVE-2022-29131

CVE-2022-29131 is a Windows LDAP remote-code-execution vulnerability. The connected OpenVAS/Microsoft KB entries identify this CVE among patched issues in KB5013943 (OS Build 22000.675 for Windows 11) and related updates, indicating a network-vector, LDAP-service issue that could allow RCE. The v...

CVE-2022-30150

Technical details about CVE-2022-30150 (Windows Defender Remote Credential Guard Elevation of Privilege) are not provided in the connected documents. The records include the CVE entry and references but do not specify root cause, affected versions, exploitability, or mitigations within the suppli...

CVE-2022-41090

Technical details for CVE-2022-41090 (Windows PPTP DoS) are not provided in the connected documents. No affected products, versions, or fixes are listed here. Monitor official advisories for updates and remediation guidance.

CVE-2021-38663

CVE-2021-38663 concerns a Windows exFAT File System Information Disclosure vulnerability. The entry lists impact as PARTIAL confidentiality loss (CVSS2) with LOCAL access and no authentication, and HIGH confidentiality impact (CVSS3) with LOCAL access, no exploitation details provided. The connec...

CVE-2021-40477

Technical details for CVE-2021-40477 are not publicly provided in the connected documents. Monitor for updates; none of the supplied sources describe affected products, root cause, impact, or remediation for this CVE.

CVE-2021-41370

Technical details about CVE-2021-41370 are not provided in the supplied documents; no concrete affected products, root cause, or fixes are disclosed here. Monitor for updates from official advisories.

CVE-2021-41377

Technical details about CVE-2021-41377 are not publicly provided in the supplied documents. No affected products/versions, root cause, or fixes are disclosed here. Monitor for updates from official advisories.

CVE-2022-21852

Technical details for CVE-2022-21852 are not publicly available in the provided documents; monitor for updates.

CVE-2022-30145

The CVE is Windows Encrypting File System (EFS) Remote Code Execution (CVE-2022-30145). Public records in the connected documents confirm this as a Windows OS vulnerability affecting EFS functionality, with multiple Microsoft security updates released in June 2022 (e.g., KB5014699, KB5014678, KB5...

CVE-2022-37955

Technical details for CVE-2022-37955 are not publicly provided in the supplied documents; the materials reference only updates without specific vulnerable components, root cause, or fixes. Monitor for official disclosures and patch guidance.

CVE-2022-37998

CVE-2022-37998 is a DoS vulnerability in Windows Local Session Manager (LSM). Root cause described as improper handling of error messages leading to denial of service. Public exploits exist (per KLA20000). Affected product is Windows OS; remediation is to apply the Microsoft security updates that...

CVE-2022-38051

CVE-2022-38051 relates to a privilege-elevation vulnerability in the Windows Graphics Component. According to the connected CNVD entry, the issue stems from improper privilege assignment within Microsoft Graphics Component, enabling a local attacker to escalate privileges. The NCSC advisory corro...

CVE-2022-41056

Technical details for CVE-2022-41056 are not present in the provided documents. Related items cover Kerberos/Netlogon CVEs, but no affected product/version/impact for this CVE is specified here. Monitor for updates.

CVE-2022-41114

CVE-2022-41114 is a Windows Bind Filter Driver Elevation of Privilege vulnerability. The CVE entry, with a CVSS v3.1 base score of 7.0 (HIGH), indicates a LOCAL attack vector requiring LOW privileges and no user interaction, with impact to confidentiality, integrity, and availability. Public refe...