CVE-2022-38036

CVE-2022-38036 is a denial-of-service vulnerability in the Windows Internet Key Exchange (IKE) protocol. Public sources identify affected Windows platforms (e.g., Windows Server 2022/Windows 11 family) and note exploitation potential via network interactions that could impact availability. CVSSv3...

CVE-2022-41050

Technical details about CVE-2022-41050 are not publicly available in the provided documents. No product/version/root-cause/exploit information is given here. Monitor for updates from official advisories and vulnerability databases.

CVE-2023-21558

Technical details about CVE-2023-21558 (affected product, version, exploitability, or remediation) are not provided in the supplied documents. Monitor for updates from official advisories.

CVE-2023-21760

Technical details about CVE-2023-21760 are not publicly provided in the supplied connected documents. The references show Windows KB security updates but do not specify affected products, root cause, impact, or fixes for this CVE. Monitor for updates.

CVE-2021-41332

Technical details for CVE-2021-41332 are not publicly provided in the connected documents; no specifics on affected products, root cause, impact, or remediation are present. Monitor for updates.

CVE-2022-21958

Technical details about CVE-2022-21958 are not provided in the supplied documents. No specifics on affected builds, root cause, or fixes are available here; monitor official advisories for updates.

CVE-2022-26798

Technical details about CVE-2022-26798 are not publicly available in the provided connected documents. The initial description notes a Windows Print Spooler Elevation of Privilege vulnerability, but there are no specific vendor/product/version/root-cause/fix details in the supplied materials. Mon...

CVE-2022-34690

Technical details about CVE-2022-34690 are not publicly provided in the supplied documents; no explicit affected products, exploit information, or fixes are described. Monitor for updates.

CVE-2022-37984

CVE-2022-37984 is a Windows WLAN Service privilege elevation vulnerability. Public sources describe it as an improper privilege assignment in the Windows WLAN Service that allows a local attacker to elevate to higher privileges (impact: increased entitlements). The CNVD/ENISA entries corroborate ...

CVE-2022-41045

Technical details about CVE-2022-41045 are not provided in the supplied documents. The connected records reference related Windows updates and KEV listings but do not specify affected products, root cause, or remediation.

CVE-2022-41074

Technical details for CVE-2022-41074 are not publicly provided in the supplied documents. Monitor updates from Microsoft/NVD for affected component, impact, and remediation.

CVE-2022-41109

Technical details about CVE-2022-41109 (affected products, root cause, impact, fix) are not provided in the supplied documents. The connected entries reference patches and related issues but do not disclose vulnerability specifics.

CVE-2023-21759

CVE-2023-21759 is a Windows Smart Card Resource Management Server security feature bypass (local, low risk, CVSS 3.1 base 3.3). Connected sources confirm this CVE exists and has been cataloged by NVD and MSRC. Microsoft KBs linked to this CVE are KB5022303 (OS 22621.1105) and related January 2023...

CVE-2021-38663

CVE-2021-38663 concerns a Windows exFAT File System Information Disclosure vulnerability. The entry lists impact as PARTIAL confidentiality loss (CVSS2) with LOCAL access and no authentication, and HIGH confidentiality impact (CVSS3) with LOCAL access, no exploitation details provided. The connec...

CVE-2021-41377

Technical details about CVE-2021-41377 are not publicly provided in the supplied documents. No affected products/versions, root cause, or fixes are disclosed here. Monitor for updates from official advisories.

CVE-2022-21852

Technical details for CVE-2022-21852 are not publicly available in the provided documents; monitor for updates.

CVE-2022-21864

Technical details for CVE-2022-21864 are not publicly provided in the supplied documents. Monitor for updates from official advisories for affected products, impact, and remediation.

CVE-2022-41098

Technical details for CVE-2022-41098 (affected product/component/versions/root cause/impact/remediation) are not provided in the connected or initial documents. Monitor for updates from official sources; no public details are included here.

CVE-2022-41114

CVE-2022-41114 is a Windows Bind Filter Driver Elevation of Privilege vulnerability. The CVE entry, with a CVSS v3.1 base score of 7.0 (HIGH), indicates a LOCAL attack vector requiring LOW privileges and no user interaction, with impact to confidentiality, integrity, and availability. Public refe...

CVE-2021-40455

Public technical details for CVE-2021-40455 are not present in the provided documents; monitor for updates from official advisories.

CVE-2021-41356

CVE-2021-41356 is a Windows Denial-of-Service vulnerability. The connected records confirm impact on Windows OS and patch availability: MSKB updates KB5007189 (Windows 10 18363.1916), KB5007207 (OS Build 10240.19119), KB5007215 (Windows 11 22000.318) address this CVE as part of November 2021 secu...

CVE-2021-41366

CVE-2021-41366 : Credential Security Support Provider Protocol (CredSSP) Elevation of Privilege. The NVD entry reports a high-severity (CVSS 3.1 base 7.8) vulnerability with a LOCAL attack vector, requiring LOW privileges and NO user interaction, leading to HIGH impact on confidentiality, integri...

CVE-2021-42280

CVE-2021-42280 is tied to the Windows Feedback Hub Elevation of Privilege vulnerability. Affected software is Windows Feedback Hub (Windows OS). The provided documents describe the vulnerability as local, with low attack complexity and high impact on confidentiality, integrity, and availability (...

CVE-2021-40464

Technical details about CVE-2021-40464 are not publicly available in the provided connected documents; monitor for updates.

CVE-2021-40477

Technical details for CVE-2021-40477 are not publicly provided in the connected documents. Monitor for updates; none of the supplied sources describe affected products, root cause, impact, or remediation for this CVE.

CVE-2021-40489

Technical details for CVE-2021-40489 (Storage Spaces Controller Elevation of Privilege) are not provided in the supplied connected documents; no affected product/version/root-cause/impact or remediation details are stated here.

CVE-2022-30150

Technical details about CVE-2022-30150 (Windows Defender Remote Credential Guard Elevation of Privilege) are not provided in the connected documents. The records include the CVE entry and references but do not specify root cause, affected versions, exploitability, or mitigations within the suppli...

CVE-2022-30213

Technical details about CVE-2022-30213, including affected product/version, root cause, and exploit information, are not publicly provided in the connected documents. Monitor for updates as new information becomes available.

CVE-2022-38033

CVE-2022-38033 is described in connected sources as a Windows Server vulnerability titled “Remotely Accessible Registry Keys Information Disclosure Vulnerability.” The common thread across documents is that this issue allows access to sensitive data via registry keys exposed remotely, with an imp...

CVE-2022-41095

Technical details about CVE-2022-41095 are not present in the provided connected documents. The OpenVAS entries reference the CVE as part of Windows updates (KB5019966/KB5019980/KB5020003), but do not expose affected components, exploit vectors, or fixes beyond association.

CVE-2021-40488

CVE-2021-40488 corresponds to a Storage Spaces Controller Elevation of Privilege vulnerability. The CVSS details show a LOCAL attack with LOW attack complexity and NO authentication required, potentially impacting confidentiality, integrity, and availability (C/C/I/A = HIGH). The vulnerability is...

CVE-2022-21838

Technical details about CVE-2022-21838 are not provided in the supplied documents. No affected products, root cause, impact, or remediation are specified here. Monitor for updates from official sources.

CVE-2022-23296

Public technical details for CVE-2022-23296 are not provided in the connected documents. The sources list the CVE and references but do not specify affected product versions, root cause, exploit details, or remediation within the supplied material. Monitor for updates.

CVE-2022-26790

Technical details for CVE-2022-26790 are not publicly provided in the supplied documents. Monitor for updates.

CVE-2022-30212

CVE-2022-30212: A Windows Connected Devices Platform Service information-disclosure vulnerability. Affected product: Windows Connected Devices Platform Service. Underlying issue enables information disclosure; some sources describe it as exploitable remotely to obtain sensitive data. Remediation ...

CVE-2022-37998

CVE-2022-37998 is a DoS vulnerability in Windows Local Session Manager (LSM). Root cause described as improper handling of error messages leading to denial of service. Public exploits exist (per KLA20000). Affected product is Windows OS; remediation is to apply the Microsoft security updates that...

CVE-2022-38021

CVE-2022-38021 corresponds to a local privilege escalation vulnerability in Microsoft Windows Connected User Experiences and Telemetry. The connected documents identify the affected surface as the Windows component “Connected User Experiences and Telemetry” and classify the impact as obtaining in...

CVE-2021-40466

Technical details about CVE-2021-40466 (affected product/component, root cause, impact, and fixes) are not provided in the connected documents; available sources only state the vulnerability at a high level. Monitor for updates.

CVE-2021-42284

Technical details (affected product, vulnerable component, root cause, and remediation) are not provided in the supplied documents for CVE-2021-42284. Please monitor for updates from official sources; no exploitable details or patch information are available here.

CVE-2022-21862

Technical details for CVE-2022-21862 are not publicly provided in the connected documents. Monitor for updates.

CVE-2022-21866

Technical details for CVE-2022-21866 are not provided in the supplied documents; affected products, root cause, exploit info, and fixes are not specified here. Monitor for updates.

CVE-2022-21870

Technical details for CVE-2022-21870 are not provided in the supplied documents. The initial entry offers only a brief description. Monitor for updates.

CVE-2022-30145

The CVE is Windows Encrypting File System (EFS) Remote Code Execution (CVE-2022-30145). Public records in the connected documents confirm this as a Windows OS vulnerability affecting EFS functionality, with multiple Microsoft security updates released in June 2022 (e.g., KB5014699, KB5014678, KB5...

CVE-2022-30196

CVE-2022-30196 affects Windows Secure Channel (Schannel) and is categorized as a network-exploitable vulnerability with no user interaction. The base CVSSv3.1 score is 8.2 (High) with impact limited to confidentiality (Low) and availability (High); integrity is not affected. The issue is addresse...

CVE-2022-38015

Technical details about CVE-2022-38015 (Windows Hyper-V DoS) are not publicly provided in the supplied documents. Monitor for updates from Microsoft/NVD and related advisories.

CVE-2022-41056

Technical details for CVE-2022-41056 are not present in the provided documents. Related items cover Kerberos/Netlogon CVEs, but no affected product/version/impact for this CVE is specified here. Monitor for updates.

CVE-2021-41340

Technical details for CVE-2021-41340 are not publicly provided in the connected documents. Monitor for updates as only high-level description is available from initial and related sources.

CVE-2022-21877

CVE-2022-21877 is a Windows storage space controller information-disclosure vulnerability. The connected OpenVAS exploit entry describes an out-of-bounds read in the spaceport.sys driver that can leak data past the system buffer, indicating a local information-leak impact. A GitHub repository pro...

CVE-2022-21916

Technical details about CVE-2022-21916 are not publicly provided in the supplied documents. Monitor for updates from Microsoft and CVE databases for affected products, root cause, and fixes.

CVE-2022-22041

CVE-2022-22041 is a Windows Print Spooler elevation of privilege vulnerability affecting Windows Print Spooler components. The Connected documents reference this CVE as part of the July 2022 Patch Tuesday fixes addressing multiple Print Spooler elevation-of-privilege flaws, with remediation deliv...