273 matches found
CVE-2022-29122
Technical details for CVE-2022-29122 (affected product, root cause, exploit scope) are not provided in the supplied documents. Monitor official Microsoft advisories and the CVE entry for updates and remediation guidance.
CVE-2022-23297
CVE-2022-23297 is described as Windows NT LAN Manager Datagram Receiver Driver Information Disclosure Vulnerability. According to the initial entry, it has a CVSSv3.1 base score of 5.5 (MEDIUM) with LOCAL attack vector, LOW attack complexity, and LOW privileges required, causing HIGH confidential...
CVE-2022-23270
Technical details about CVE-2022-23270 are not present in the provided connected documents. Public information on affected products, root cause, and remediation is not provided here. Monitor Microsoft Security Update Guide and MSRC advisories for official details and fixes.
CVE-2022-21857
Technical details for CVE-2022-21857 (Active Directory Domain Services Elevation of Privilege) are not provided in the connected documents. The initial description confirms AD DS Elevation of Privilege, but no affected product versions, root cause, impact, or fixes are included here. Monitor for ...
CVE-2022-23253
CVE-2022-23253 is a Windows PPTP Denial of Service vulnerability. The records show it has a CVSS v3.1 base score of 6.5 (Network, Low attack complexity, Privileges Low, No user interaction) with HIGH availability impact. Concrete details about affected products, versions, or exploit activity are ...
CVE-2022-29104
Technical details (affected products/components, root cause, impact, and exploit info) for CVE-2022-29104 are not provided in the connected documents. Monitor for updates; current sources here do not publish public vulnerability specifics beyond the CVE entry.
CVE-2022-21898
CVE-2022-21898 is a DirectX Graphics Kernel Remote Code Execution vulnerability in Windows. The entry notes a network-based, no-user-interaction exploit with high/critical impact (C: High, I: High, A: High) and local/remote exploitation in different entries; the primary CVE description identifies...
CVE-2022-29129
CVE-2022-29129 is described as a Windows LDAP Remote Code Execution vulnerability. The connected CNVD entry (CNVD-2022-72859) also labels “Microsoft Windows LDAP Remote Code Execution Vulnerability,” confirming LDAP RCE wording in the CVE context. However, the connected documents do not provide c...
CVE-2022-29113
Technical details about CVE-2022-29113 (affected components, root cause, impact, and fixes) are not publicly provided in the supplied documents. Monitor for updates from official advisories.
CVE-2022-21836
CVE-2022-21836 is a Windows kernel-level spoofing flaw that could bypass WPBT verification by presenting a small number of compromised certificates. Microsoft mitigated this by adding those certificates to the Windows kernel driver block list, blocking them even if present in WPBT. The CVE is dis...
CVE-2022-21896
CVE-2022-21896 concerns the Windows DWM Core Library Elevation of Privilege. The NVD entry describes a local, privilege-escalation vulnerability with a CVSS v3.1 base score of 7.0 (HIGH) and an older CVSS v2 base score of 6.9 (MEDIUM). The CVE is associated with Windows components and is referenc...
CVE-2022-21902
Technical details about CVE-2022-21902 are not provided in the supplied documents. No affected products, root cause, impact, or remediation are disclosed here. Monitor for updates.
CVE-2022-22016
Technical details for CVE-2022-22016 are not publicly available in the provided documents. No information on affected products, root cause, exploitability, or fixes is present. Monitor for updates.
CVE-2022-21920
CVE-2022-21920 is a Windows Kerberos Elevation of Privilege vulnerability with CVSS 3.1 base score 8.8 (HIGH). Attack vector: NETWORK; Attack complexity: LOW; Privileges required: LOW; User interaction: NONE; Scope: UNCHANGED; Impacts: confidentiality, integrity, and availability HIGH. The initia...
CVE-2022-23286
CVE-2022-23286 affects the Windows Cloud Files Mini Filter Driver and enables local elevation of privilege. Evidence in CNVD/CVE records confirms the driver-related root cause and impact (arbitrary code with elevated privileges). Remediation reported in connected docs includes applying March 2022...
CVE-2022-29139
Technical details about CVE-2022-29139 are not provided in the supplied documents. Public info in the connected entries does not describe affected products/versions, exploit methods, or remediation beyond general LDAP RCE context. Monitor for updates.
CVE-2022-23291
CVE-2022-23291 is a Windows DWM Core Library elevation-of-privilege vulnerability with local attack vector, low complexity, and impact on confidentiality, integrity, and availability. The NVD/Microsoft entries assign high severity (CVSS v3.1: 7.8) and note an elevation of privileges via the Deskt...
CVE-2022-21859
Technical details for CVE-2022-21859 are not publicly available in the provided documents. Monitor for updates from NVD, CVE records, and vendor advisories.
CVE-2021-43893
Technical details for CVE-2021-43893 are not provided in the connected documents; the initial entry lists a Windows EFS privilege issue but no public details (affected products, fixes) in the supplied materials. Monitor for updates.
CVE-2021-42282
Technical details for CVE-2021-42282 are not publicly provided in the connected documents. No specifics on affected product versions, root cause, or remediation are present. Monitor for updates.
CVE-2022-29135
CVE-2022-29135 is described as a Windows CSV Elevation of Privilege vulnerability. The connected documents reference CSV-related issues and protections within Microsoft security updates issued May 2022, including CVE coverage notes and known issues about CSV ownership and certificate-mapping hand...
CVE-2022-29112
Technical details for CVE-2022-29112 are not provided in the supplied documents. OpenVAS references the CVE among others, but no product/impact/fix specifics are given here. Monitor for updates.
CVE-2022-29150
CVE-2022-29150 is a Windows Cluster Shared Volume (CSV) Elevation of Privilege vulnerability. Public details in the provided documents are limited to the vulnerability title and related Microsoft security updates; no explicit root-cause, affected product/version specifics, or exploit details are ...
CVE-2022-22014
Technical details about CVE-2022-22014 are not provided in the supplied connected documents. The initial description notes a Windows LDAP RCE vulnerability, but there are no concrete details on affected products, versions, root cause, impact, or fixes within the provided materials. Monitor for up...
CVE-2022-26934
CVE-2022-26934 is a Windows Graphics Component information disclosure vulnerability. Affects Windows graphics handling (Windows Graphics Component) and is disclosed as a network-exposed information disclosure with a base CVSSv3.1 score of 6.5 (vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N)...
CVE-2022-29128
Technical details for CVE-2022-29128 (affected product/version, root cause, impact, or fix) are not provided in the connected documents. The sources reference general LDAP RCE concerns and Windows updates, but no concrete vulnerability specifics. Monitor for updates.
CVE-2022-21868
Technical details about CVE-2022-21868 are not publicly provided in the supplied documents. Monitor for updates from official sources.
CVE-2022-21878
CVE-2022-21878 is a Windows Geolocation Service Remote Code Execution Vulnerability. Affected software: Windows Geolocation Service component; root cause and exact exploit path are not detailed in the provided documents. CVSS2 score is 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C); CVSS3.1 score is 7.8 (AV:L/...
CVE-2018-8420
CVE-2018-8420 is a remote code execution vulnerability in the Microsoft XML Core Services MSXML parser that processes user input. Affected software includes Windows platforms listed in the description (Windows 7, Windows 8.1, Windows 10, Windows Server 2008/2012/2016, and others). The underlying ...
CVE-2022-23283
CVE-2022-23283 is a Windows local elevation-of-privilege vulnerability in the ALPC subsystem. The NVD entry lists a CVSSv3.1 base score of 7.0 (HIGH) with local access, high impact on confidentiality, integrity, and availability, and no user interaction required. Connected sources reference a Mic...
CVE-2022-26930
Technical details about CVE-2022-26930 (affected component, root cause, impact, or fixes) are not provided in the connected documents. The sources reference Windows updates and mitigations but do not disclose vulnerability specifics. Monitor for authoritative disclosures and updates.
CVE-2022-26926
Public technical details for CVE-2022-26926 are not provided in the supplied documents. Monitor for updates.
CVE-2022-29134
Technical details about CVE-2022-29134 (affected products, root cause, exploitability, and fixes) are not provided in the connected documents. Monitor for updates from official advisories.
CVE-2022-29141
Technical details about CVE-2022-29141 (Windows LDAP RCE) are not provided in the connected documents. OpenVAS references KB updates but does not specify affected products/versions, root cause, exploit info, or remediation beyond generic patching; monitor for future updates.
CVE-2022-24537
CVE-2022-24537 is a Windows Hyper-V Remote Code Execution vulnerability. Connected documents confirm affected product/role as Microsoft Windows Hyper-V and reference multiple Microsoft security updates (e.g., KB5012599, KB5012592, KB5012604, KB5012647, KB5012591) addressing this CVE in various Wi...
CVE-2022-26935
Technical details about CVE-2022-26935 are not provided in the connected documents. The Initial document offers a basic description and CVSS info, but no specifics on affected products/versions, root cause, remediation, or exploit status. Monitor for updates.
CVE-2022-24502
Technical details about CVE-2022-24502 are not provided in the supplied documents. The provided materials do not include affected products/versions/root cause/fix information. Monitor for updates.
CVE-2021-40461
CVE-2021-40461 is a Windows Hyper-V Remote Code Execution vulnerability. Affected: Windows Hyper-V component on Windows 10/11 and Windows Server (various versions). Root cause/impact: allows remote code execution with adjacent network access and no user interaction; CVSS3.1 base score 9.0 (HIGH) ...
CVE-2022-21871
Technical details about CVE-2022-21871 are not publicly provided in the supplied documents; no affected product/version, root cause, or remediation are described here. Monitor for official disclosures and updates.
CVE-2022-26927
CVE-2022-26927 : Affects the Windows Graphics Component and enables remote code execution. The CVSSv3.1 base score is 8.8 (HIGH) with a NETWORK attack vector, LOW attack complexity, NO privileges required, and USER INTERACTION REQUIRED; confidentiality, integrity and availability are all High. Th...
CVE-2022-21913
The CVE-2022-21913 entry describes a Local Security Authority (Domain Policy) Remote Protocol Security Feature Bypass. Public documents present CVSS data from NVD (CVSS v3.1: 7.5, NETWORK, NONE privileges; CVSS v2.0: 5.0, PARTIAL impact). No concrete product/vendor/component/version/root-cause de...
CVE-2022-21922
Technical details for CVE-2022-21922 are not publicly available in the provided documents. No affected products, versions, exploit information, or fixes are specified here. Monitor for updates in the connected sources for authoritative vulnerability details.
CVE-2022-29127
Technical details (affected product/component/versions/root cause/impact/fix) are not publicly provided in the supplied documents. Monitor for updates from the connected sources; these materials do not allow confirmation of vulnerability specifics or remediation actions.
CVE-2022-22011
Technical details (affected components, root cause, impact, and fixes) for CVE-2022-22011 are not provided in the supplied documents. No public details are included here. Monitor official advisories for updates.
CVE-2022-29140
Technical details about CVE-2022-29140 (Windows Print Spooler information disclosure) are not publicly provided in the supplied Connected Documents. No specific affected product/version or remediation is described here; monitor official advisories for updates.
CVE-2022-21883
CVE-2022-21883 is a Windows vulnerability in the IKE extension that can be exploited over the network to cause a denial of service . The NVD entry lists a network attack vector with high impact on availability (CVSS v3.1 base score 7.5; impact is confined to availability). The root cause is descr...
CVE-2022-29151
CVE-2022-29151 is a Windows CSV (Cluster Shared Volume) Elevation of Privilege vulnerability. The NVD entry and MSRC reference describe it as a local-privilege issue in CSV with high impact (confidentiality, integrity, and availability all affected). CVSSv3.1 shows a base score of 7.0, attack vec...
CVE-2021-40454
CVE-2021-40454 is an information-disclosure vulnerability in the Rich Text Edit Control used by Microsoft Office. The issue is documented as a local, low-complexity disclosure that can impact confidentiality (CVE-2021-40454) with a MEDIUM overall severity (CVSS v3.1 base score 5.5). The connected...
CVE-2021-43215
CVE-2021-43215 affects the iSNS (Internet Storage Name Service) server. It is a memory corruption vulnerability that can lead to remote code execution when an attacker sends a specially crafted request to an affected iSNS server. The issue is network-exploitable (no user interaction) and is consi...
CVE-2022-21843
CVE-2022-21843 affects Windows Internet Key Exchange (IKE) Protocol Extensions. The vulnerability is a Remote Code Execution in the Windows IKE Extension component, with a network-based attack surface and no user interaction required. Root cause is within the IKE Extensions implementation that ca...