273 matches found
CVE-2022-21851
Technical details for CVE-2022-21851 are not publicly available in the provided documents. No root cause, affected versions, or fixes are disclosed here; monitor for official updates from Microsoft and NVD.
CVE-2022-21843
CVE-2022-21843 affects Windows Internet Key Exchange (IKE) Protocol Extensions. The vulnerability is a Remote Code Execution in the Windows IKE Extension component, with a network-based attack surface and no user interaction required. Root cause is within the IKE Extensions implementation that ca...
CVE-2022-21890
Technical details for CVE-2022-21890 are not publicly available in the provided documents. Monitor for updates.
CVE-2022-21997
Technical details about CVE-2022-21997 are not provided in the supplied documents. Monitor for updates from NVD/Microsoft and ENISA KEV references.
CVE-2022-21863
CVE-2022-21863 is a Windows elevation-of-privilege vulnerability in the StateRepository API Server. The NVD entry confirms the issue and indicates a local attacker could obtain elevated privileges. Related OpenVAS entries show affected Windows platforms and list KB updates (KB5009543/KB5009545 an...
CVE-2022-23298
Technical details for CVE-2022-23298 are not provided in the connected documents. Public information is limited to generic vulnerability entries; monitor for updates from official sources.
CVE-2022-21885
Technical details for CVE-2022-21885 are not publicly provided in the supplied documents; no affected versions, root cause, or remediation are stated. Monitor for updates.
CVE-2022-21906
Technical details are not publicly available in the provided documents. Monitor for official disclosures and updates.
CVE-2022-21869
Technical details about CVE-2022-21869 (Clipboard User Service Elevation of Privilege) are not provided in the connected documents. Monitor for updates; current sources do not publicly disclose affected products, root cause, impact, or fixes in this dataset.
CVE-2022-22001
CVE-2022-22001 affects Windows Remote Access Connection Manager and is described as an Elevation of Privilege vulnerability. Connected documents confirm the CVE in Microsoft Windows contexts and list a CVSS v3.1 base score of 7.8 (LOCAL, LOW privileges required, NONE user interaction, HIGH impact...
CVE-2022-29102
Technical details about CVE-2022-29102 are not provided in the connected documents. The entry appears reserved/no public details in the supplied materials. Monitor for updates from official advisories; no product/vendor/version specifics are disclosed here.
CVE-2022-21833
CVE-2022-21833 is a Local Elevation of Privilege in Virtual Machine IDE Drive. The NVD entry lists CVSS-3.1 base score 7.8 (LOCAL, LOW privileges required, no user interaction, privilege escalation with CHANGED scope; impacts: CONFIDENTIALITY/HIGH, INTEGRITY/HIGH, AVAILABILITY/HIGH). Publicly vis...
CVE-2022-29121
Technical details about CVE-2022-29121 are not provided in the supplied documents. No information on affected products/versions or fixes is available here. Monitor for updates from Microsoft/MSRC and vendor advisories.
CVE-2021-40465
CVE-2021-40465, Windows Text Shaping Remote Code Execution Vulnerability, is documented with CVSS 3.1 base score 7.8 (HIGH) and CVSS2 base 6.8 (MEDIUM) by NVD/Microsoft, indicating LOCAL exploitability with LOW attack complexity and user interaction required. The available sources in the provided...
CVE-2022-29115
Technical details about CVE-2022-29115 are not publicly provided in the supplied documents. No affected product/version or remediation is specified here. Monitor for updates.
CVE-2022-29137
Technical details about CVE-2022-29137 (affected product/version, root cause, and remediation) are not provided in the supplied documents. Monitor official updates from Microsoft/CNVD sources for any concrete fix, impact, and mitigations.
CVE-2022-21848
Technical details about CVE-2022-21848 are not publicly available in the provided documents. Monitoring for updates is recommended.
CVE-2021-36953
Technical details about CVE-2021-36953 (affected component/version/impact) are not publicly available in the provided documents. Monitor for updates.
CVE-2021-42283
CVE-2021-42283 is an NTFS Elevation of Privilege vulnerability with documented CVSS 3.1 base score 7.8 (HIGH) and local attack vector with low complexity, no authentication, and user interaction not required. The entry also lists CVSS 2.0 data (MEDIUM) and a CNA score. There are no connected docu...
CVE-2021-42285
CVE-2021-42285 is a Windows kernel elevation-of-privilege vulnerability. The provided records describe it as a Windows Kernel Elevation of Privilege Vulnerability with a local attack vector and low attack complexity. In the NVD entry, the CVSS vectors are CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/...
CVE-2022-21889
Technical details about CVE-2022-21889 are not publicly provided in the supplied documents; monitoring for updates from vendors and CVE databases is advised.
CVE-2022-21963
CVE-2022-21963 is described as a Windows Resilient File System (ReFS) Remote Code Execution vulnerability. The available data shows a high-impact, local/physical-attack scenario with no user interaction, but no concrete remediation details or version-specific affected products are provided beyond...
CVE-2022-21992
Technical details about CVE-2022-21992 are not provided in the supplied documents. Connected records reference KEV listings and related Windows KB updates, but this set does not specify affected products, root cause, impact, or remediation for this CVE. Monitor for official disclosures or vendor ...
CVE-2022-22710
CVE-2022-22710 corresponds to a denial-of-service in the Windows Common Log File System Driver. The provided documents confirm the affected component (CLFS Driver) and give CVSS details (AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) with local access required and high availability impact, but do not speci...
CVE-2022-21881
Technical details about CVE-2022-21881 are not provided in the supplied documents. The entries reference Windows kernel elevation issues and related updates, but do not disclose affected products/versions or root cause specifics. Monitor for updates.
CVE-2022-21897
Technical details about CVE-2022-21897 are not publicly provided in the supplied documents. No specific affected products/versions or fixes are listed here. Monitor for updates.
CVE-2022-26936
Technical details about CVE-2022-26936 are not provided in the Connected documents; only general security update KB articles are present. Monitor Microsoft advisories (KB5013941/3942/3943, etc.) for vulnerability-specific information and fixes.
CVE-2022-29138
Technical details (affected products/components, root cause, exploit information, or remediation) are not provided in the supplied documents. Monitor official disclosures from Microsoft and the referenced KB/MSRC pages for updates.
CVE-2022-21888
Technical details about CVE-2022-21888 are not publicly provided in the supplied documents. No affected products, versions, or fixes are specified. Monitor for updates from official sources.
CVE-2018-8332
CVE-2018-8332 is a remote code execution vulnerability in the Windows font library (Win32k) where specially crafted embedded fonts are mishandled. It affects a broad set of Windows platforms including Windows 7, Windows 8.1, Windows 10 (and server equivalents listed in the initial entry), as well...
CVE-2021-36970
Technical details for CVE-2021-36970 are not provided in the supplied documents. No specifics on affected products, root cause, impact, or remediation are present here; monitor for updates from official sources.
CVE-2022-21865
CVE-2022-21865 is described by the NVD as a Connected Devices Platform Service Elevation of Privilege vulnerability in Microsoft Windows. The OpenVAS entry for KB5009545 lists CVE-2022-21865 under Windows vulnerabilities with the impact “Obtain increased privileges,” and notes this vulnerability ...
CVE-2022-21901
Technical details for CVE-2022-21901 are not publicly available in the provided documents. No explicit affected components, root cause, impact, or remediation are disclosed here. Monitor for updates from official advisories.
CVE-2022-21873
Technical details for CVE-2022-21873 are not publicly provided in the supplied documents. No affected products, root cause, impact, or remediation are stated here; monitor for updates.
CVE-2022-21850
CVE-2022-21850 is described in the provided materials as a Remote Desktop Client Remote Code Execution vulnerability. The connected documents confirm the vulnerability relates to the Windows Remote Desktop Client but do not provide concrete technical specifics (e.g., root cause, affected versions...
CVE-2022-21900
Technical details for CVE-2022-21900 are not provided in the connected documents. The initial description is general; monitor for updates from official advisories (no exploit specifics or affected products confirmed here).
CVE-2022-21908
CVE-2022-21908 is a Windows Installer Elevation of Privilege vulnerability. The NVD entry lists a CVSS v3.1 base score of 7.8 (HIGH) with LOCAL attack vector, LOW attack complexity, PRIVILEGES REQUIRED: LOW, UI: NONE, and scope UNCHANGED; impact to Confidentiality, Integrity, and Availability is ...
CVE-2022-21985
CVE-2022-21985 is a Windows vulnerability described as an Information Disclosure vulnerability in the Windows Remote Access Connection Manager. The CVSS details show a local attack vector with low complexity (CVSSv3.1 base score 5.5, MEDIUM severity), where confidentiality is impacted. The descri...
CVE-2018-0877
CVE-2018-0877 affects the WCIFS (Windows Desktop Bridge VFS) driver. The root cause is improper handling of file paths in privileged Windows directories, allowing a reparse to a user-controlled location during a file-create path when the requested file did not exist in a trusted directory. This c...
CVE-2022-21928
This CVE affects the Windows Resilient File System (ReFS). The entry documents a Remote Code Execution vulnerability in ReFS, with CVSSv3.1 base score 6.4 (MEDIUM) and a physical attack vector, no user interaction, and high impact on confidentiality, integrity, and availability. The Connected doc...
CVE-2022-21912
CVE-2022-21912 is a DirectX Graphics Kernel vulnerability affecting Windows DirectX components. The entry notes DirectX Graphics Kernel Remote Code Execution Vulnerability with patch guidance from Microsoft (KB5009543, KB5009545, KB5009557, KB5009543 family). Vulnerable component: DirectX Graphic...
CVE-2022-23299
Technical details about CVE-2022-23299 (affected product, root cause, impact, fix) are not publicly available in the provided documents. Monitor for updates as new information may be released.
CVE-2022-21880
CVE-2022-21880 is a Windows GDI+ Information Disclosure vulnerability. The NVD entry describes impact as a confidentiality breach with no integrity or availability impact. CVSS v2: base score 7.8 (NETWORK, LOW attack complexity, NONE auth, C:C/I:N/A:N). CVSS v3.1: base score 7.5 (AV:N/AC:L/PR:N/U...
CVE-2022-21914
Technical details for CVE-2022-21914 are not publicly available in the provided documents. Monitor for updates.
CVE-2022-21960
CVE-2022-21960 affects Windows Resilient File System (ReFS) and is described as a remote code execution vulnerability. The provided documents only state the vulnerability title and CVSS metrics from NVD (CVSSv3.1 base score 6.8, vector CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) and MSRC refere...
CVE-2022-22715
CVE-2022-22715 corresponds to a Windows Named Pipe File System Elevation of Privilege vulnerability. The Electronically published data indicate a local, low‑privilege attack with no user interaction that could yield high impact to confidentiality, integrity, and availability. The connected record...
CVE-2021-40460
Technical details for CVE-2021-40460 are not publicly available in the provided documents. Monitor for updates.
CVE-2021-40462
Technical details (affected product, component, version, root cause, or fixes) for CVE-2021-40462 are not provided in the connected documents; monitor for updates.