573 matches found
CVE-2022-44680
CVE-2022-44680 is a Windows Graphics Component Elevation of Privilege vulnerability. The CVSSv3.1 vector (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) indicates a local, low-complexity exploit requiring low privileges with no user interaction, capable of compromising confidentiality, integrity, and avail...
CVE-2021-40464
Technical details about CVE-2021-40464 are not publicly available in the provided connected documents; monitor for updates.
CVE-2021-40488
CVE-2021-40488 corresponds to a Storage Spaces Controller Elevation of Privilege vulnerability. The CVSS details show a LOCAL attack with LOW attack complexity and NO authentication required, potentially impacting confidentiality, integrity, and availability (C/C/I/A = HIGH). The vulnerability is...
CVE-2022-21961
CVE-2022-21961 relates to Windows Resilient File System (ReFS) and is described as a Remote Code Execution vulnerability. Public details in the initial entry indicate impact to confidentiality, integrity, and availability (C/C/I) with a local? or unspecified vector; CVSS metrics are shown (v2 bas...
CVE-2022-22031
Technical details about CVE-2022-22031 (Windows Credential Guard domain-joined public key privilege elevation) are not publicly provided in the supplied documents. No affected products, versions, root cause, impact, or fixes are specified here; monitor for updates from the cited sources.
CVE-2022-30148
CVE-2022-30148 is a Windows DSC information disclosure vulnerability affecting the Windows Desired State Configuration component. The connected sources confirm the issue is described as a DSC information disclosure vulnerability and indicate remediation is through Microsoft security updates relea...
CVE-2022-41094
Technical details about CVE-2022-41094 are not publicly provided in the connected documents. The records show a Windows Hyper-V Elevation of Privilege entry but do not specify affected products/versions or root cause. Monitor for updates.
CVE-2021-41332
Technical details for CVE-2021-41332 are not publicly provided in the connected documents; no specifics on affected products, root cause, impact, or remediation are present. Monitor for updates.
CVE-2022-21862
Technical details for CVE-2022-21862 are not publicly provided in the connected documents. Monitor for updates.
CVE-2022-21981
Technical details for CVE-2022-21981 are not publicly available in the provided documents. Monitoring for future updates or disclosures is advised.
CVE-2022-35834
CVE-2022-35834 : The vulnerability is described as a Remote Code Execution issue affecting the Microsoft WDAC OLE DB provider for SQL Server. The provided documents only state this product/weakness at a high level and do not include technical details such as affected versions, root cause, specifi...
CVE-2022-35840
Technical details about CVE-2022-35840 are not publicly available in the provided documents. Monitor for updates from the cited sources to learn affected products, impact, and remediation.
CVE-2022-37992
Technical details for CVE-2022-37992 (Windows Group Policy Elevation of Privilege) are not publicly provided in the supplied Connected documents. Monitor for updates from Microsoft/MSRC and NVD; no product/version/impact specifics are available here.
CVE-2022-38021
CVE-2022-38021 corresponds to a local privilege escalation vulnerability in Microsoft Windows Connected User Experiences and Telemetry. The connected documents identify the affected surface as the Windows component “Connected User Experiences and Telemetry” and classify the impact as obtaining in...
CVE-2022-41054
Technical details about CVE-2022-41054 (affected product, root cause, impact, and remediation) are not provided in the connected documents. Monitor for updates from Microsoft or security advisories.
CVE-2022-41077
CVE-2022-41077 is Windows Fax Compose Form Elevation of Privilege. Affected component: Windows Fax service (Fax/Compose form). Root cause and impact as per provided data: local attacker with low privileges can exploit the vulnerability with no user interaction to achieve elevation of privilege, w...
CVE-2022-41102
Technical details for CVE-2022-41102 are not provided in the supplied documents. No affected products, versions, root cause, or remediation are specified here. Monitor official sources for updates.
CVE-2022-21915
Technical details for CVE-2022-21915 are not publicly detailed in the provided documents. Monitor for updates; available data include CVSS scores, but no explicit exploit vectors, affected products, or remediation steps are provided here.
CVE-2022-22002
Technical details for CVE-2022-22002 are not publicly provided in the connected documents. Available sources mention the vulnerability title, but no affected products, root cause, impact, or fixes are included here. Monitor for updates.
CVE-2022-24544
Technical details for CVE-2022-24544 are not publicly available in the provided documents. Monitor for updates.
CVE-2022-34731
CVE-2022-34731 affects the Microsoft WDAC OLE DB provider for SQL Server and is categorized as a Remote Code Execution vulnerability. The CVSS v3.1 base score is 8.8 (HIGH) with network attack vector, no privileges required, but user interaction required. The connected documents identify the affe...
CVE-2022-38015
Technical details about CVE-2022-38015 (Windows Hyper-V DoS) are not publicly provided in the supplied documents. Monitor for updates from Microsoft/NVD and related advisories.
CVE-2022-41093
Technical details for CVE-2022-41093 are not publicly available in the provided documents. No affected products, root cause, or fixes are described here. Monitor official advisories for updates on impact and remediation.
CVE-2022-21870
Technical details for CVE-2022-21870 are not provided in the supplied documents. The initial entry offers only a brief description. Monitor for updates.
CVE-2022-22041
CVE-2022-22041 is a Windows Print Spooler elevation of privilege vulnerability affecting Windows Print Spooler components. The Connected documents reference this CVE as part of the July 2022 Patch Tuesday fixes addressing multiple Print Spooler elevation-of-privilege flaws, with remediation deliv...
CVE-2022-22043
CVE-2022-22043 is a Windows vulnerability affecting the Fast FAT File System Driver, described as an Elevation of Privilege. The NVD entry lists a Local attack vector, Low privileges required, and no user interaction, with a high impact on confidentiality, integrity, and availability (CVSSv3.1: A...
CVE-2022-34711
Technical details about CVE-2022-34711 are not publicly available in the provided connected documents. No explicit affected product/component/versions or remediation are stated here. Monitor for updates from official sources.
CVE-2022-35770
CVE-2022-35770 is a Windows NTLM spoofing vulnerability. The connected records classify it under Windows NTLM with an impact described as “Pretend to be another user” and a CVSS v3.1 base score of 6.5 (Network attack, Low attack complexity, No privileges required, User interaction required; Confi...
CVE-2022-37957
Technical details about CVE-2022-37957 are not publicly provided in the supplied documents. The connected items reference the vulnerability generally as a Windows Kernel Elevation of Privilege issue but do not include affected product versions, root cause, CVSS specifics beyond the CVSS score in ...
CVE-2022-38038
CVE-2022-38038 is a Windows kernel registry vulnerability caused by a 16-bit integer overflow during dynamic buffer length calculations in hive loading, leading to hive-based memory corruption and local privilege escalation. The issue is tied to regf/hive loading paths and is grouped with other r...
CVE-2021-40455
Public technical details for CVE-2021-40455 are not present in the provided documents; monitor for updates from official advisories.
CVE-2021-41343
Technical details for CVE-2021-41343 are not publicly provided in the supplied documents. No confirmed affected products, root cause, or remediation are described here. Monitor for updates from official advisories.
CVE-2021-42280
CVE-2021-42280 is tied to the Windows Feedback Hub Elevation of Privilege vulnerability. Affected software is Windows Feedback Hub (Windows OS). The provided documents describe the vulnerability as local, with low attack complexity and high impact on confidentiality, integrity, and availability (...
CVE-2022-21847
CVE-2022-21847 is a Windows Hyper-V Denial of Service vulnerability. Public records confirm this CVE exists and is associated with local attack requirements and a medium overall risk (NVD: CVSS v3.1 base 6.5, CVSS v2: 4.9). Affected context is Hyper-V on Windows, but the exact root cause, vulnera...
CVE-2022-26915
CVE-2022-26915 is described as a Windows Secure Channel Denial of Service vulnerability. The CNVD entry notes the issue stems from Microsoft Windows’ handling of incoming error messages, enabling a DoS condition. Related entries (NVD/NVD-linked pages and Microsoft KBs) confirm the vulnerability a...
CVE-2022-34723
CVE-2022-34723 is a Windows DPAPI information disclosure vulnerability. The provided sources indicate the issue affects Windows DPAPI with confidentiality impact and local access requirements (CVSS v3.1: 5.5, Local, Low Privileges, Low Attack Complexity). No explicit root-cause details are given ...
CVE-2022-35841
Technical details about CVE-2022-35841 (Windows Enterprise App Management Service RCE) are not publicly provided in the connected documents. No explicit root cause, affected versions, or fixes are disclosed here; monitor Microsoft/NVD updates for technical specifics.
CVE-2022-37975
Technical details about CVE-2022-37975 (root cause, affected products/versions, exploit info, or explicit fix) are not provided in the connected documents. Monitor for official updates from Microsoft and CVE advisories for concrete remediation guidance.
CVE-2022-41097
Technical details about CVE-2022-41097 (NPS RADIUS information disclosure) are not provided in the supplied documents. Monitor for updates from official sources for affected products, versions, and fixes.
CVE-2022-44697
CVE-2022-44697 corresponds to a Windows Graphics Component Elevation of Privilege vulnerability. The CVE entry indicates a LOCAL attack vector with LOW privileges required and NO user interaction, resulting in HIGH impact on confidentiality, integrity, and availability (CVSSv3.1 base score 7.8). ...
CVE-2022-21834
Technical details for CVE-2022-21834 are not provided in the given documents. Monitor for updates from Microsoft and NVD; no affected products, root cause, impact, or remediation information is available here.
CVE-2022-30140
Technical details for CVE-2022-30140 are not publicly available in the provided documents; no affected products, root cause, or fixes are specified here. Monitor for updates from official sources.
CVE-2022-30198
CVE-2022-30198 is mapped to Windows Point-to-Point Tunneling Protocol with an 8.10 CVSS equivalent and is described as enabling remote code execution (Executing Random Code) on affected Windows PPTP components. Connected data confirms this CVE is listed among Windows vulnerabilites fixed/monitore...
CVE-2022-37954
CVE-2022-37954 is a Elevation of Privilege vulnerability in the DirectX Graphics Kernel component of Windows. The initial CVSSv3.1 data indicates Local exploitability with Low attack complexity and Low privileges required, yielding a high base score of 7.8 (C:H, I:H, A:H). The vulnerability affec...
CVE-2022-37977
CVE-2022-37977 is a Local Security Authority Subsystem Service (LSASS) Denial of Service vulnerability in Windows. CNVD’s description attributes the issue to a failure in properly handling incoming error messages, which could allow an attacker to trigger an application DoS. Multiple national advi...
CVE-2022-41088
Technical details for CVE-2022-41088 are not provided in the connected documents. No affected product/component/version, root-cause, impact, or remediation details are given here; monitor official sources for updates.
CVE-2021-41340
Technical details for CVE-2021-41340 are not publicly provided in the connected documents. Monitor for updates as only high-level description is available from initial and related sources.
CVE-2021-42284
Technical details (affected product, vulnerable component, root cause, and remediation) are not provided in the supplied documents for CVE-2021-42284. Please monitor for updates from official sources; no exploitable details or patch information are available here.
CVE-2022-21921
CVE-2022-21921 is a Windows Defender Credential Guard security feature bypass. Connected documents identify Windows Defender as affected, with the issue categorized as a security-measure bypass (CVSS/Impact cited in sources such as Microsoft KBs and security advisories). The root cause and exact ...