573 matches found
CVE-2022-30196
CVE-2022-30196 affects Windows Secure Channel (Schannel) and is categorized as a network-exploitable vulnerability with no user interaction. The base CVSSv3.1 score is 8.2 (High) with impact limited to confidentiality (Low) and availability (High); integrity is not affected. The issue is addresse...
CVE-2022-35761
Technical details about CVE-2022-35761 (affected products, root cause, impact, and fixes) are not provided in the connected and initial documents. Monitor for updates and additional disclosures.
CVE-2022-38015
Technical details about CVE-2022-38015 (Windows Hyper-V DoS) are not publicly provided in the supplied documents. Monitor for updates from Microsoft/NVD and related advisories.
CVE-2022-38037
CVE-2022-38037 is described in the sources as a Windows kernel memory corruption vulnerability caused by the registry hive loader not enforcing a correct relationship between the hive file version (minor) and the subkey list structures. Specifically, the hive loader may assume a given minor versi...
CVE-2021-41343
Technical details for CVE-2021-41343 are not publicly provided in the supplied documents. No confirmed affected products, root cause, or remediation are described here. Monitor for updates from official advisories.
CVE-2022-21959
Technical details about CVE-2022-21959 are not publicly provided in the supplied documents. Monitor for updates from NVD and vendor advisories.
CVE-2022-22002
Technical details for CVE-2022-22002 are not publicly provided in the connected documents. Available sources mention the vulnerability title, but no affected products, root cause, impact, or fixes are included here. Monitor for updates.
CVE-2022-23268
CVE-2022-23268 is a Windows Hyper-V Denial of Service vulnerability. Affected: Hyper-V component on Windows Server/Windows; under the CVSS3.1 basis vector CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H with a base score of 6.5 (MEDIUM). The vulnerability is local to exploit and results in a Denial ...
CVE-2022-30140
Technical details for CVE-2022-30140 are not publicly available in the provided documents; no affected products, root cause, or fixes are specified here. Monitor for updates from official sources.
CVE-2022-41077
CVE-2022-41077 is Windows Fax Compose Form Elevation of Privilege. Affected component: Windows Fax service (Fax/Compose form). Root cause and impact as per provided data: local attacker with low privileges can exploit the vulnerability with no user interaction to achieve elevation of privilege, w...
CVE-2022-41093
Technical details for CVE-2022-41093 are not publicly available in the provided documents. No affected products, root cause, or fixes are described here. Monitor official advisories for updates on impact and remediation.
CVE-2022-21961
CVE-2022-21961 relates to Windows Resilient File System (ReFS) and is described as a Remote Code Execution vulnerability. Public details in the initial entry indicate impact to confidentiality, integrity, and availability (C/C/I) with a local? or unspecified vector; CVSS metrics are shown (v2 bas...
CVE-2022-22043
CVE-2022-22043 is a Windows vulnerability affecting the Fast FAT File System Driver, described as an Elevation of Privilege. The NVD entry lists a Local attack vector, Low privileges required, and no user interaction, with a high impact on confidentiality, integrity, and availability (CVSSv3.1: A...
CVE-2022-34733
CVE-2022-34733 pertains to the Microsoft WDAC OLE DB provider for SQL Server, described as a Remote Code Execution vulnerability. NVD lists CVSS v3.1 base score 8.8 (HIGH) with Network attack vector, no privileges required, user interaction needed, and high impact on confidentiality, integrity, a...
CVE-2022-41121
CVE-2022-41121 is a Windows Graphics Component Elevation of Privilege vulnerability with a CVSS v3.1 base score of 7.8 (HIGH), requiring LOCAL access with LOW privileges and no user interaction. The available descriptions identify the affected component as Windows Graphics Component but provide n...
CVE-2022-21847
CVE-2022-21847 is a Windows Hyper-V Denial of Service vulnerability. Public records confirm this CVE exists and is associated with local attack requirements and a medium overall risk (NVD: CVSS v3.1 base 6.5, CVSS v2: 4.9). Affected context is Hyper-V on Windows, but the exact root cause, vulnera...
CVE-2022-21993
CVE-2022-21993 corresponds to a Microsoft Windows NFS ONCRPC XDR Driver information disclosure vulnerability. The connected advisory CPAI-2022-0336 states an information disclosure exists and that successful exploitation by a remote attacker would allow obtaining sensitive information. No further...
CVE-2022-34723
CVE-2022-34723 is a Windows DPAPI information disclosure vulnerability. The provided sources indicate the issue affects Windows DPAPI with confidentiality impact and local access requirements (CVSS v3.1: 5.5, Local, Low Privileges, Low Attack Complexity). No explicit root-cause details are given ...
CVE-2022-41088
Technical details for CVE-2022-41088 are not provided in the connected documents. No affected product/component/version, root-cause, impact, or remediation details are given here; monitor official sources for updates.
CVE-2022-44667
Technical details are not publicly available in the provided documents. The supplied items only label CVE-2022-44667 as a Windows Media Remote Code Execution vulnerability; no specific affected product/version/root cause/fix is included. Monitor for updates.
CVE-2021-38662
Technical details for CVE-2021-38662 are not publicly available in the provided documents. Monitor for updates.
CVE-2021-40443
Technical details for CVE-2021-40443 are not publicly provided in the supplied documents. No affected products, exploit info, or remediation are specified here. Monitor for updates in the connected feeds.
CVE-2022-21834
Technical details for CVE-2022-21834 are not provided in the given documents. Monitor for updates from Microsoft and NVD; no affected products, root cause, impact, or remediation information is available here.
CVE-2022-21918
Technical details about CVE-2022-21918 are not publicly provided in the connected documents. Monitor for updates and rely on official advisories for affected products, versions, and remediation.
CVE-2022-21981
Technical details for CVE-2022-21981 are not publicly available in the provided documents. Monitoring for future updates or disclosures is advised.
CVE-2022-26826
Technical details for CVE-2022-26826 are not publicly provided in the supplied documents. Monitor for updates from vendors and security advisories to obtain affected products, impact, and remediation information.
CVE-2022-35840
Technical details about CVE-2022-35840 are not publicly available in the provided documents. Monitor for updates from the cited sources to learn affected products, impact, and remediation.
CVE-2022-37955
Technical details for CVE-2022-37955 are not publicly provided in the supplied documents; the materials reference only updates without specific vulnerable components, root cause, or fixes. Monitor for official disclosures and patch guidance.
CVE-2022-37992
Technical details for CVE-2022-37992 (Windows Group Policy Elevation of Privilege) are not publicly provided in the supplied Connected documents. Monitor for updates from Microsoft/MSRC and NVD; no product/version/impact specifics are available here.
CVE-2022-41054
Technical details about CVE-2022-41054 (affected product, root cause, impact, and remediation) are not provided in the connected documents. Monitor for updates from Microsoft or security advisories.
CVE-2022-41092
Technical details about CVE-2022-41092 are not publicly provided in the supplied documents; no affected versions or fixes are specified here. Monitor for updates.
CVE-2022-21994
CVE-2022-21994 is a Windows elevation-of-privilege issue in the DWM Core Library that permits local escalation with low attack complexity and no user interaction (per CVSS data in the initial). Connected documents corroborate a Windows DWM Core Library vulnerability and show Microsoft remediation...
CVE-2022-22031
Technical details about CVE-2022-22031 (Windows Credential Guard domain-joined public key privilege elevation) are not publicly provided in the supplied documents. No affected products, versions, root cause, impact, or fixes are specified here; monitor for updates from the cited sources.
CVE-2021-41378
CVE-2021-41378 corresponds to a Windows NTFS remote code execution vulnerability. The CNVD entry describes a Windows NTFS RCE vulnerability, and NVD echoes a Windows NTFS RCE description for this CVE. Public details in connected sources do not specify the affected product version(s) or root cause...
CVE-2022-21924
CVE-2022-21924 is described in the provided documents as a Workstation Service Remote Protocol Security Feature Bypass Vulnerability , with a MEDIUM severity (CVSS v2 base score 5.4 and CVSS v3.1 base score 5.3). The available sources stop short of naming affected products, versions, or root caus...
CVE-2022-26794
Technical details for CVE-2022-26794 are not publicly provided in the supplied documents. No specifics on affected components, root cause, impact, or fixes are present here. Monitor for updates in connected sources.
CVE-2022-29103
Technical details for CVE-2022-29103 are not publicly provided in the supplied documents. The connected items discuss Windows update KB entries and security issues, but none specify affected products/versions or remediation for this CVE.
CVE-2022-34730
Technical details about CVE-2022-34730 are not publicly provided in the supplied connected documents. No product/version/impact/fix details are present here; monitor for updates from official advisories.
CVE-2022-35831
CVE-2022-35831 affects the Windows Remote Access Connection Manager and is described as an Information Disclosure vulnerability. The connected data provides technical details: affected component is the Remote Access Connection Manager; root cause is an information disclosure fault; impact is Conf...
CVE-2022-41097
Technical details about CVE-2022-41097 (NPS RADIUS information disclosure) are not provided in the supplied documents. Monitor for updates from official sources for affected products, versions, and fixes.
CVE-2022-41102
Technical details for CVE-2022-41102 are not provided in the supplied documents. No affected products, versions, root cause, or remediation are specified here. Monitor official sources for updates.
CVE-2022-21915
Technical details for CVE-2022-21915 are not publicly detailed in the provided documents. Monitor for updates; available data include CVSS scores, but no explicit exploit vectors, affected products, or remediation steps are provided here.
CVE-2022-35834
CVE-2022-35834 : The vulnerability is described as a Remote Code Execution issue affecting the Microsoft WDAC OLE DB provider for SQL Server. The provided documents only state this product/weakness at a high level and do not include technical details such as affected versions, root cause, specifi...
CVE-2022-35836
CVE-2022-35836 affects the Microsoft WDAC OLE DB provider for SQL Server, described as a Remote Code Execution vulnerability. The connected AttackKB entry reiterates the same description. Provided details indicate the vulnerability is network-reachable with high impact to confidentiality, integri...
CVE-2022-35841
Technical details about CVE-2022-35841 (Windows Enterprise App Management Service RCE) are not publicly provided in the connected documents. No explicit root cause, affected versions, or fixes are disclosed here; monitor Microsoft/NVD updates for technical specifics.
CVE-2022-37975
Technical details about CVE-2022-37975 (root cause, affected products/versions, exploit info, or explicit fix) are not provided in the connected documents. Monitor for official updates from Microsoft and CVE advisories for concrete remediation guidance.
CVE-2022-37978
CVE-2022-37978 is a Windows Active Directory Certificate Services security feature bypass (Circumvention of security measure) with CVSS v3.1 base score 7.5. Affected component: Active Directory Certificate Services in Windows. Root cause details are not fully disclosed in the provided connected d...
CVE-2022-41094
Technical details about CVE-2022-41094 are not publicly provided in the connected documents. The records show a Windows Hyper-V Elevation of Privilege entry but do not specify affected products/versions or root cause. Monitor for updates.
CVE-2021-41347
Technical details about CVE-2021-41347 are not publicly provided in the connected documents. The affected software/impact specifics are not disclosed here. Monitor for official advisories from Microsoft and CVE listings for updated exploit information and remediation.
CVE-2022-26792
Technical details for CVE-2022-26792 are not publicly provided in the supplied documents. Monitor for updates from authoritative sources as more information becomes available.