CVE-2022-21989

CVE-2022-21989 is a Windows Kernel elevation-of-privilege vulnerability. A local attacker can exploit it to escalate privileges and execute code at a higher integrity level, as indicated by Microsoft’s advisory and related coverage. Exploitation requires local access and may depend on additional ...

CVE-2022-22019

Technical details for CVE-2022-22019 are not provided in the connected documents. Public details (affected products, exploit info, impact, remediation) are not present here. Monitor for official updates.

CVE-2021-36936

Technical details about CVE-2021-36936 are not publicly provided in the connected documents. No vendor/product/version specifics or remediation steps are present here. Monitor for updates from official advisories and trusted security trackers.

CVE-2022-30223

CVE-2022-30223 affects Windows Hyper-V and is categorized as an information-disclosure vulnerability. The provided data indicate a Confidentiality impact (C) of High with no Integrity or Availability impact (I/N, A/N) and a Medium overall severity (CVSSv3.1 base score 5.7; AV:A, AC:L, PR:L, UI:N,...

CVE-2022-21845

Public technical details for CVE-2022-21845 are not present in the provided documents. Connected sources reference KBs and KEV listings but do not specify affected components, versions, root cause, or remediation. Monitor for updates.

CVE-2012-0152

CVE-2012-0152 is a denial-of-service vulnerability in the RDP/Terminal Server component of Windows: affected OSes include Windows 7 and Windows Server 2008 R2 (and SP1). It can be triggered by a sequence of crafted RDP packets, causing an application hang. The issue is addressed by MS12-020, whic...

CVE-2022-22024

CVE-2022-22024 is a Windows Fax Service Remote Code Execution vulnerability. Affected: Windows Fax Service on Windows OS. Root cause: unspecified in the provided docs, but described as a remote code execution vulnerability with network/local access vectors in the CVSS data. Impact: high (CVE metr...

CVE-2023-21524

Technical details about CVE-2023-21524 (affected product/component/root cause/impact/fix) are not provided in the connected documents. The materials only reference the vulnerability title and general advisories; monitor for updates.

CVE-2015-2517

CVE-2015-2517 is a local privilege escalation in Windows Win32k memory corruption affecting multiple Windows releases (Vista to Windows 10). Connected sources confirm public exploitation (Exploit-DB 38278) and reference a memory-corruption root cause in the Win32k subsystem; no remediation detail...

CVE-2021-34535

CVE-2021-34535 is a Remote Desktop Client remote code execution vulnerability in Windows. According to the connected sources, it affects the Windows Remote Desktop Client component and is rated High (CVSS v3.1 base 8.8). Exploitation was addressed in Microsoft’s August 2021 Patch Tuesday updates;...

CVE-2022-24541

CVE-2022-24541 is described in the initial entry as a Windows Server Service Remote Code Execution vulnerability. Connected material explicitly associates the CVE with a Windows SMB-based remote code execution context, indicating the vulnerability affects the Windows Server service and can enable...

CVE-2020-0668

CVE-2020-0668 is a Windows kernel local privilege-elevation issue. The vulnerability arises from how the Windows kernel handles objects in memory, enabling an attacker with local access to escalate privileges to SYSTEM. Connected documents provide concrete context: an exploit PoC leverages a trus...

CVE-2015-2511

CVE-2015-2511 is a kernel-mode Win32k memory corruption privilege-escalation vulnerability that affects multiple Windows versions (Vista SP2 to Windows 10). The flaw is triggered by a crafted application via the Windows kernel-mode driver, leading to local privilege elevation. Public exploit refe...

CVE-2021-41335

Technical details for CVE-2021-41335 are not publicly available in the provided documents. Monitor for updates.

CVE-2022-22013

Technical details about CVE-2022-22013 are not provided in the connected documents; no affected products, root cause, or fixes are specified here. Monitor for updates.

CVE-2019-0630

CVE-2019-0630 is a remote code-execution flaw in the Windows SMBv2 server as described by connected sources. The vulnerability arises in how the SMBv2 server handles certain requests, enabling an attacker to execute arbitrary code on a affected system. The linked 0day page notes no mitigations or...

CVE-2022-22015

Technical details about CVE-2022-22015 are not provided in the connected documents. The MSKB entries listed pertain to OS/security updates but do not disclose affected RDP components, exploit specifics, or patch details for this CVE. Monitor for updates.

CVE-2022-24454

Technical details for CVE-2022-24454 are not publicly provided in the supplied documents. No affected product/version/impact/fix details are present here. Monitor for updates.

CVE-2020-16891

Technical details for CVE-2020-16891 are not provided in the connected documents. Public details appear limited to the initial description; monitor for updates and additional disclosures.

CVE-2022-26903

Technical details about CVE-2022-26903 (affected components, root cause, impact, and fixes) are not provided in the supplied documents. Monitor for updates from Microsoft and CVE databases for official disclosures and remediation information.

CVE-2022-23297

CVE-2022-23297 is described as Windows NT LAN Manager Datagram Receiver Driver Information Disclosure Vulnerability. According to the initial entry, it has a CVSSv3.1 base score of 5.5 (MEDIUM) with LOCAL attack vector, LOW attack complexity, and LOW privileges required, causing HIGH confidential...

CVE-2016-7182

CVE-2016-7182 is a true‑type font parsing elevation of privilege vulnerability in the Windows Graphics component. The flaw affects multiple Windows OS versions (Vista SP2, Server 2008 SP2/R2 SP1, Windows 7/8.1/10, Windows Server 2012 R2, Windows RT 8.1, Office 2007/2010, Word Viewer, Skype for Bu...

CVE-2023-21557

CVE-2023-21557 concerns the Windows LDAP (Lightweight Directory Access Protocol) Denial of Service vulnerability. The provided documents identify the affected component as Windows LDAP but do not specify affected product versions, root cause details, exploitation methods, or a concrete fix. Conne...

CVE-2013-3918

CVE-2013-3918 is an out-of-bounds write vulnerability in the InformationCardSigninHelper Class ActiveX control (icardie.dll) used by Internet Explorer. The flaw exists when the ActiveX control is instantiated via a crafted webpage, enabling remote code execution with the current user’s privileges...

CVE-2021-26899

Technical details for CVE-2021-26899, including affected product/version, root cause, impact, and fix, are not provided in the connected documents. Monitor for updates from official sources.

CVE-2022-29132

Technical details about CVE-2022-29132 (Windows Print Spooler elevation) are not provided in the supplied documents. No affected product/version or remediation is specified here. Monitor for official updates.

CVE-2022-30141

CVE-2022-30141 is listed as one of seven high‑level LDAP remote code execution vulnerabilities disclosed for Windows LDAP during Patch Tuesday 2022. The linked Avleonov post explicitly groups CVE-2022-30141 among Windows LDAP RCEs and notes that for three LDAP CVEs (including this one) an affecte...

CVE-2015-2518

Technical details for CVE-2015-2518 are not provided in the supplied documents. No affected products, root cause, or remediation are stated here. Monitor updates from official advisories and connected sources.

CVE-2021-38671

Technical details about CVE-2021-38671 are not publicly available in the provided documents; monitor for updates and cross-check with official advisories for affected products and fixes.

CVE-2016-3310

CVE-2016-3310 is a Win32k Elevation of Privilege vulnerability affecting multiple Windows versions. The issue arises in kernel‑mode drivers where improper handling of memory objects enables a local user to execute code with SYSTEM privileges via a crafted application. This is a local, non‑authent...

CVE-2022-21836

CVE-2022-21836 is a Windows kernel-level spoofing flaw that could bypass WPBT verification by presenting a small number of compromised certificates. Microsoft mitigated this by adding those certificates to the Windows kernel driver block list, blocking them even if present in WPBT. The CVE is dis...

CVE-2022-21893

Technical details about CVE-2022-21893 are not provided in the connected documents. The supplied sources include high-level vulnerability descriptions and update references, but no specifics on affected products/versions or fixes. Monitor for updated, concrete disclosures.

CVE-2019-1089

Technical details about CVE-2019-1089 are not publicly provided in the connected documents. The initial entry notes an elevation of privilege in rpcss.dll but no vendor/product/version specifics are given here. Monitor for updates.

CVE-2022-21983

CVE-2022-21983 is a Win32 Stream Enumeration Remote Code Execution vulnerability. The connected sources show an in-scope CVE with a network attack vector and high impact: CVSSv3.1 base score 7.5 (HIGH), with no authentication (NONE) and user interaction required (REQUIRED); confidentiality, integ...

CVE-2022-23270

Technical details about CVE-2022-23270 are not present in the provided connected documents. Public information on affected products, root cause, and remediation is not provided here. Monitor Microsoft Security Update Guide and MSRC advisories for official details and fixes.

CVE-2015-6108

CVE-2015-6108 affects the Windows font library across multiple Windows OS versions (Vista through Windows 8.1/Server 2012) and related Microsoft products, where a crafted embedded font can trigger remote code execution. The vulnerability is described as a memory corruption issue in handling embed...

CVE-2023-21556

Technical details about CVE-2023-21556 are not publicly provided in the supplied documents; no affected products, root cause, or fixes are specified here. Monitor for updates from official sources.

CVE-2021-34480

Technical details about CVE-2021-34480 are not provided in the connected documents. Public descriptions exist, but no specifics on affected products, root cause, impact, or fixes are included here. Monitor for updates.

CVE-2022-35769

Technical details for CVE-2022-35769 (Windows PPP DoS) are not provided in the supplied documents. No affected product/version or remediation is described here. Monitor for updates from Microsoft and Vulners for confirmed specifics.

CVE-2022-26831

CVE-2022-26831 : Windows LDAP Denial of Service vulnerability. The vulnerability is described as a Windows LDAP DoS issue with a Network attack vector (no user interaction) and a high-impact on availability (per CVSS v3.1: 7.5, HIGH; CVSS v2: 5.0, MEDIUM). Connected sources confirm the Windows LD...

CVE-2022-34714

Technical details about CVE-2022-34714 are not provided in the attached documents. The connected items do not describe affected products, root cause, impact, or remediation for this CVE. Monitor for updates.

CVE-2013-3175

CVE-2013-3175 is a Windows elevation-of-privilege issue in the handling of asynchronous RPC requests. Affected products include Windows XP SP2/SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2/R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, and Windows RT. Root cause...

CVE-2022-29104

Technical details (affected products/components, root cause, impact, and exploit info) for CVE-2022-29104 are not provided in the connected documents. Monitor for updates; current sources here do not publish public vulnerability specifics beyond the CVE entry.

CVE-2023-21541

Technical details about CVE-2023-21541 are not provided in the connected documents. Based on available data, no specifics on affected components, root cause, or fixes are included here. Monitor for updates from authoritative sources.

CVE-2022-21857

Technical details for CVE-2022-21857 (Active Directory Domain Services Elevation of Privilege) are not provided in the connected documents. The initial description confirms AD DS Elevation of Privilege, but no affected product versions, root cause, impact, or fixes are included here. Monitor for ...

CVE-2022-21920

CVE-2022-21920 is a Windows Kerberos Elevation of Privilege vulnerability with CVSS 3.1 base score 8.8 (HIGH). Attack vector: NETWORK; Attack complexity: LOW; Privileges required: LOW; User interaction: NONE; Scope: UNCHANGED; Impacts: confidentiality, integrity, and availability HIGH. The initia...

CVE-2022-23253

CVE-2022-23253 is a Windows PPTP Denial of Service vulnerability. The records show it has a CVSS v3.1 base score of 6.5 (Network, Low attack complexity, Privileges Low, No user interaction) with HIGH availability impact. Concrete details about affected products, versions, or exploit activity are ...

CVE-2021-26435

Technical details about CVE-2021-26435 are not publicly available in the provided connected documents. The records reference the vulnerability and related CVEs but do not disclose affected components, root cause, impact, or fixes. Monitor for updates.

CVE-2022-26919

Technical details about CVE-2022-26919 are not publicly available in the provided connected documents. Monitor for updates from official advisories to learn affected products, root cause, impact, and recommended mitigations.

CVE-2022-30226

Technical details and indicators for CVE-2022-30226 are not provided in the supplied documents. No affected product/version specifics or remediation are included here; monitor official advisories for updates.