CVE-2022-21880

CVE-2022-21880 is a Windows GDI+ Information Disclosure vulnerability. The NVD entry describes impact as a confidentiality breach with no integrity or availability impact. CVSS v2: base score 7.8 (NETWORK, LOW attack complexity, NONE auth, C:C/I:N/A:N). CVSS v3.1: base score 7.5 (AV:N/AC:L/PR:N/U...

CVE-2021-40462

Technical details (affected product, component, version, root cause, or fixes) for CVE-2021-40462 are not provided in the connected documents; monitor for updates.

CVE-2021-40460

Technical details for CVE-2021-40460 are not publicly available in the provided documents. Monitor for updates.

CVE-2022-21858

Technical details (affected components, root cause, versions, exploitability, or fixes) are not publicly provided in the supplied documents. Monitor official MSRC/NVD entries and OpenVAS feeds for updates.

CVE-2022-21867

Technical details for CVE-2022-21867 are not publicly available in the provided documents. Monitor for updates.

CVE-2022-29131

CVE-2022-29131 is a Windows LDAP remote-code-execution vulnerability. The connected OpenVAS/Microsoft KB entries identify this CVE among patched issues in KB5013943 (OS Build 22000.675 for Windows 11) and related updates, indicating a network-vector, LDAP-service issue that could allow RCE. The v...

CVE-2018-8410

CVE-2018-8410 is a Windows Kernel API elevation-of-privilege vulnerability caused by improper handling of registry objects in memory. The Windows kernel vulnerability affects multiple OS versions (Windows 7, Server 2012/2012 R2, RT 8.1, 8.1, 10, 2016/2008 R2 etc.) as listed in the initial descrip...

CVE-2022-21835

CVE-2022-21835 : Microsoft Cryptographic Services Elevation of Privilege Vulnerability. The NVD entry lists a Local, low-attack-complexity vulnerability with a base score of 7.2 (CVSS2) and a CVSS-3.1 base score of 7.8 (HIGH) with LOCAL access, PR: LOW, UI: NONE, and UNCHANGED scope; affects conf...

CVE-2017-11927

Technical details about CVE-2017-11927 are not publicly available in the provided connected documents. Monitor for updates; include affected products/versions and remediation when disclosures become available.

CVE-2021-38663

CVE-2021-38663 concerns a Windows exFAT File System Information Disclosure vulnerability. The entry lists impact as PARTIAL confidentiality loss (CVSS2) with LOCAL access and no authentication, and HIGH confidentiality impact (CVSS3) with LOCAL access, no exploitation details provided. The connec...

CVE-2022-21852

Technical details for CVE-2022-21852 are not publicly available in the provided documents; monitor for updates.

CVE-2022-21866

Technical details for CVE-2022-21866 are not provided in the supplied documents; affected products, root cause, exploit info, and fixes are not specified here. Monitor for updates.

CVE-2022-21910

Technical details about CVE-2022-21910 (affected product, impact, exploitability, or fixes) are not provided in the supplied documents. Monitor for official disclosures and updates from Microsoft and security advisories.

CVE-2021-40455

Public technical details for CVE-2021-40455 are not present in the provided documents; monitor for updates from official advisories.

CVE-2022-21864

Technical details for CVE-2022-21864 are not publicly provided in the supplied documents. Monitor for updates from official advisories for affected products, impact, and remediation.

CVE-2018-0811

Technical details are not publicly available in the provided connected documents. Monitor for updates on EUVD entries and any new disclosures related to CVE-2018-0811.

CVE-2018-0897

CVE-2018-0897: Information disclosure in the Windows kernel across multiple Windows versions (Server 2008 SP2/R2 SP1, Windows 7 SP1, 8.1/RT 8.1, Server 2012/R2, Windows 10 1511–1709, Server 2016) due to how memory addresses are handled. The vulnerability is mapped to “Windows Kernel Information D...

CVE-2021-40464

Technical details about CVE-2021-40464 are not publicly available in the provided connected documents; monitor for updates.

CVE-2022-21838

Technical details about CVE-2022-21838 are not provided in the supplied documents. No affected products, root cause, impact, or remediation are specified here. Monitor for updates from official sources.

CVE-2022-21875

CVE-2022-21875 is documented as a Windows Storage Elevation of Privilege vulnerability. The NVD entry lists LOCAL attack vector, LOW attack complexity, and no user interaction required, with high impact on confidentiality, integrity, and availability. The CVE is also included in multiple OpenVAS/...

CVE-2022-21916

Technical details about CVE-2022-21916 are not publicly provided in the supplied documents. Monitor for updates from Microsoft and CVE databases for affected products, root cause, and fixes.

CVE-2018-0898

Technical details about CVE-2018-0898 are not publicly available in the provided connected documents. Monitor for updates; no explicit affected products, root cause, impact, or remediation are detailed here.

CVE-2022-21870

Technical details for CVE-2022-21870 are not provided in the supplied documents. The initial entry offers only a brief description. Monitor for updates.

CVE-2022-21884

Technical details for CVE-2022-21884 are not publicly provided in the connected documents; monitor official disclosures or advisories for affected products, impact, and remediation.

CVE-2022-21961

CVE-2022-21961 relates to Windows Resilient File System (ReFS) and is described as a Remote Code Execution vulnerability. Public details in the initial entry indicate impact to confidentiality, integrity, and availability (C/C/I) with a local? or unspecified vector; CVSS metrics are shown (v2 bas...

CVE-2018-0813

Technical details for CVE-2018-0813 are not publicly available in the provided documents. Monitor for updates from authoritative sources.

CVE-2022-23296

Public technical details for CVE-2022-23296 are not provided in the connected documents. The sources list the CVE and references but do not specify affected product versions, root cause, exploit details, or remediation within the supplied material. Monitor for updates.

CVE-2018-8554

CVE-2018-8554 is an elevation of privilege vulnerability in which DirectX mismanages memory objects. The initial CVE description indicates impact on Windows 10 (client) and Windows Server 2019/Windows 10 Server variants, with a local attack vector and low complexity. The connected sources (e.g., ...

CVE-2021-42284

Technical details (affected product, vulnerable component, root cause, and remediation) are not provided in the supplied documents for CVE-2021-42284. Please monitor for updates from official sources; no exploitable details or patch information are available here.

CVE-2022-21847

CVE-2022-21847 is a Windows Hyper-V Denial of Service vulnerability. Public records confirm this CVE exists and is associated with local attack requirements and a medium overall risk (NVD: CVSS v3.1 base 6.5, CVSS v2: 4.9). Affected context is Hyper-V on Windows, but the exact root cause, vulnera...

CVE-2022-21862

Technical details for CVE-2022-21862 are not publicly provided in the connected documents. Monitor for updates.

CVE-2022-21959

Technical details about CVE-2022-21959 are not publicly provided in the supplied documents. Monitor for updates from NVD and vendor advisories.

CVE-2022-21981

Technical details for CVE-2022-21981 are not publicly available in the provided documents. Monitoring for future updates or disclosures is advised.

CVE-2022-22002

Technical details for CVE-2022-22002 are not publicly provided in the connected documents. Available sources mention the vulnerability title, but no affected products, root cause, impact, or fixes are included here. Monitor for updates.

CVE-2018-0757

Technical details about CVE-2018-0757 are not publicly available in the provided documents. Connected sources discuss malware and general Windows kernel disclosures but do not specify affected products, versions, or fixes. Monitor for official updates.

CVE-2018-0880

CVE-2018-0880 affects Windows Desktop Bridge by improper handling of the virtual registry, enabling Privilege Escalation on Windows 10 v1607/v1703/v1709 and corresponding Server SKUs. Connected sources document public PoCs and indicate the fix (MSRC case 42755) did not cover all variants, with re...

CVE-2022-21993

CVE-2022-21993 corresponds to a Microsoft Windows NFS ONCRPC XDR Driver information disclosure vulnerability. The connected advisory CPAI-2022-0336 states an information disclosure exists and that successful exploitation by a remote attacker would allow obtaining sensitive information. No further...

CVE-2021-40443

Technical details for CVE-2021-40443 are not publicly provided in the supplied documents. No affected products, exploit info, or remediation are specified here. Monitor for updates in the connected feeds.

CVE-2022-21895

Technical details for CVE-2022-21895 are not publicly provided in the connected documents. The sources reference the CVE at a high level without product specifics, root cause, or remediation. Monitor for updates as new documents may disclose details.

CVE-2022-21918

Technical details about CVE-2022-21918 are not publicly provided in the connected documents. Monitor for updates and rely on official advisories for affected products, versions, and remediation.

CVE-2021-38662

Technical details for CVE-2021-38662 are not publicly available in the provided documents. Monitor for updates.

CVE-2022-21834

Technical details for CVE-2022-21834 are not provided in the given documents. Monitor for updates from Microsoft and NVD; no affected products, root cause, impact, or remediation information is available here.

CVE-2022-21892

CVE-2022-21892 concerns Windows Resilient File System (ReFS). The initial entry identifies a Remote Code Execution Vulnerability in ReFS, with CVSS metrics showing a base score of 7.2 (AV:L/AC:L/Au:N/C:C/I:C/A:C) per NVD and a Microsoft 3.1 vector (CVSS:3.1) indicating physical access, low attack...

CVE-2022-21915

Technical details for CVE-2022-21915 are not publicly detailed in the provided documents. Monitor for updates; available data include CVSS scores, but no explicit exploit vectors, affected products, or remediation steps are provided here.

CVE-2022-21921

CVE-2022-21921 is a Windows Defender Credential Guard security feature bypass. Connected documents identify Windows Defender as affected, with the issue categorized as a security-measure bypass (CVSS/Impact cited in sources such as Microsoft KBs and security advisories). The root cause and exact ...

CVE-2022-21903

Technical details about CVE-2022-21903 are not publicly provided in the supplied documents; no affected products, impact, nor remediation specifics are given here. Monitor for updates from official advisories.

CVE-2022-21924

CVE-2022-21924 is described in the provided documents as a Workstation Service Remote Protocol Security Feature Bypass Vulnerability , with a MEDIUM severity (CVSS v2 base score 5.4 and CVSS v3.1 base score 5.3). The available sources stop short of naming affected products, versions, or root caus...

CVE-2009-1133

CVE-2009-1133 corresponds to a heap-based buffer overflow in Microsoft Remote Desktop Connection (mstsc/ mstscax.dll) affecting RDP clients (RDP 5.0–6.1 on Windows and Mac 2.0). The underlying flaw occurs during parsing of data from the RDP server, allowing a remote attacker to execute arbitrary ...

CVE-2018-0900

Technical details are not publicly available in the provided connected documents; monitor for updates.

CVE-2018-8438

CVE-2018-8438 is a denial-of-service vulnerability in Microsoft Hyper-V Network Switch. The issue occurs when the host fails to properly validate input from a privileged user on a guest OS, potentially impacting availability. Affected products include Windows Server 2012 R2, Windows RT 8.1, Windo...