273 matches found
CVE-2022-21858
Technical details (affected components, root cause, versions, exploitability, or fixes) are not publicly provided in the supplied documents. Monitor official MSRC/NVD entries and OpenVAS feeds for updates.
CVE-2018-0825
CVE-2018-0825 corresponds to a Microsoft StructuredQuery remote code execution vulnerability. According to the CNVD entry, it exists in Microsoft Windows’ StructuredQuery component and stems from improper handling of objects in memory, enabling a remote attacker to execute arbitrary code when a s...
CVE-2018-8410
CVE-2018-8410 is a Windows Kernel API elevation-of-privilege vulnerability caused by improper handling of registry objects in memory. The Windows kernel vulnerability affects multiple OS versions (Windows 7, Server 2012/2012 R2, RT 8.1, 8.1, 10, 2016/2008 R2 etc.) as listed in the initial descrip...
CVE-2022-21835
CVE-2022-21835 : Microsoft Cryptographic Services Elevation of Privilege Vulnerability. The NVD entry lists a Local, low-attack-complexity vulnerability with a base score of 7.2 (CVSS2) and a CVSS-3.1 base score of 7.8 (HIGH) with LOCAL access, PR: LOW, UI: NONE, and UNCHANGED scope; affects conf...
CVE-2022-21852
Technical details for CVE-2022-21852 are not publicly available in the provided documents; monitor for updates.
CVE-2022-21867
Technical details for CVE-2022-21867 are not publicly available in the provided documents. Monitor for updates.
CVE-2022-21910
Technical details about CVE-2022-21910 (affected product, impact, exploitability, or fixes) are not provided in the supplied documents. Monitor for official disclosures and updates from Microsoft and security advisories.
CVE-2017-11927
Technical details about CVE-2017-11927 are not publicly available in the provided connected documents. Monitor for updates; include affected products/versions and remediation when disclosures become available.
CVE-2021-38663
CVE-2021-38663 concerns a Windows exFAT File System Information Disclosure vulnerability. The entry lists impact as PARTIAL confidentiality loss (CVSS2) with LOCAL access and no authentication, and HIGH confidentiality impact (CVSS3) with LOCAL access, no exploitation details provided. The connec...
CVE-2022-21864
Technical details for CVE-2022-21864 are not publicly provided in the supplied documents. Monitor for updates from official advisories for affected products, impact, and remediation.
CVE-2022-21958
Technical details about CVE-2022-21958 are not provided in the supplied documents. No specifics on affected builds, root cause, or fixes are available here; monitor official advisories for updates.
CVE-2022-23285
CVE-2022-23285 is a Remote Desktop Client Remote Code Execution vulnerability (CVSS v3.1 base 8.8) elevated to HIGH by NVD. It is referenced in March 2022 Microsoft Patch Tuesday coverage as a Remote Desktop/RDP-related issue addressed by the accompanying security updates (e.g., KB5011497, KB5011...
CVE-2021-40455
Public technical details for CVE-2021-40455 are not present in the provided documents; monitor for updates from official advisories.
CVE-2021-40464
Technical details about CVE-2021-40464 are not publicly available in the provided connected documents; monitor for updates.
CVE-2018-0811
Technical details are not publicly available in the provided connected documents. Monitor for updates on EUVD entries and any new disclosures related to CVE-2018-0811.
CVE-2018-0813
Technical details for CVE-2018-0813 are not publicly available in the provided documents. Monitor for updates from authoritative sources.
CVE-2022-21866
Technical details for CVE-2022-21866 are not provided in the supplied documents; affected products, root cause, exploit info, and fixes are not specified here. Monitor for updates.
CVE-2022-21875
CVE-2022-21875 is documented as a Windows Storage Elevation of Privilege vulnerability. The NVD entry lists LOCAL attack vector, LOW attack complexity, and no user interaction required, with high impact on confidentiality, integrity, and availability. The CVE is also included in multiple OpenVAS/...
CVE-2022-21884
Technical details for CVE-2022-21884 are not publicly provided in the connected documents; monitor official disclosures or advisories for affected products, impact, and remediation.
CVE-2022-23296
Public technical details for CVE-2022-23296 are not provided in the connected documents. The sources list the CVE and references but do not specify affected product versions, root cause, exploit details, or remediation within the supplied material. Monitor for updates.
CVE-2018-0897
CVE-2018-0897: Information disclosure in the Windows kernel across multiple Windows versions (Server 2008 SP2/R2 SP1, Windows 7 SP1, 8.1/RT 8.1, Server 2012/R2, Windows 10 1511–1709, Server 2016) due to how memory addresses are handled. The vulnerability is mapped to “Windows Kernel Information D...
CVE-2021-42284
Technical details (affected product, vulnerable component, root cause, and remediation) are not provided in the supplied documents for CVE-2021-42284. Please monitor for updates from official sources; no exploitable details or patch information are available here.
CVE-2022-21838
Technical details about CVE-2022-21838 are not provided in the supplied documents. No affected products, root cause, impact, or remediation are specified here. Monitor for updates from official sources.
CVE-2022-21916
Technical details about CVE-2022-21916 are not publicly provided in the supplied documents. Monitor for updates from Microsoft and CVE databases for affected products, root cause, and fixes.
CVE-2018-0898
Technical details about CVE-2018-0898 are not publicly available in the provided connected documents. Monitor for updates; no explicit affected products, root cause, impact, or remediation are detailed here.
CVE-2018-8554
CVE-2018-8554 is an elevation of privilege vulnerability in which DirectX mismanages memory objects. The initial CVE description indicates impact on Windows 10 (client) and Windows Server 2019/Windows 10 Server variants, with a local attack vector and low complexity. The connected sources (e.g., ...
CVE-2022-21862
Technical details for CVE-2022-21862 are not publicly provided in the connected documents. Monitor for updates.
CVE-2022-21870
Technical details for CVE-2022-21870 are not provided in the supplied documents. The initial entry offers only a brief description. Monitor for updates.
CVE-2022-21877
CVE-2022-21877 is a Windows storage space controller information-disclosure vulnerability. The connected OpenVAS exploit entry describes an out-of-bounds read in the spaceport.sys driver that can leak data past the system buffer, indicating a local information-leak impact. A GitHub repository pro...
CVE-2022-21959
Technical details about CVE-2022-21959 are not publicly provided in the supplied documents. Monitor for updates from NVD and vendor advisories.
CVE-2022-22002
Technical details for CVE-2022-22002 are not publicly provided in the connected documents. Available sources mention the vulnerability title, but no affected products, root cause, impact, or fixes are included here. Monitor for updates.
CVE-2018-0880
CVE-2018-0880 affects Windows Desktop Bridge by improper handling of the virtual registry, enabling Privilege Escalation on Windows 10 v1607/v1703/v1709 and corresponding Server SKUs. Connected sources document public PoCs and indicate the fix (MSRC case 42755) did not cover all variants, with re...
CVE-2022-21847
CVE-2022-21847 is a Windows Hyper-V Denial of Service vulnerability. Public records confirm this CVE exists and is associated with local attack requirements and a medium overall risk (NVD: CVSS v3.1 base 6.5, CVSS v2: 4.9). Affected context is Hyper-V on Windows, but the exact root cause, vulnera...
CVE-2022-21961
CVE-2022-21961 relates to Windows Resilient File System (ReFS) and is described as a Remote Code Execution vulnerability. Public details in the initial entry indicate impact to confidentiality, integrity, and availability (C/C/I) with a local? or unspecified vector; CVSS metrics are shown (v2 bas...
CVE-2022-21981
Technical details for CVE-2022-21981 are not publicly available in the provided documents. Monitoring for future updates or disclosures is advised.
CVE-2018-0757
Technical details about CVE-2018-0757 are not publicly available in the provided documents. Connected sources discuss malware and general Windows kernel disclosures but do not specify affected products, versions, or fixes. Monitor for official updates.
CVE-2022-21993
CVE-2022-21993 corresponds to a Microsoft Windows NFS ONCRPC XDR Driver information disclosure vulnerability. The connected advisory CPAI-2022-0336 states an information disclosure exists and that successful exploitation by a remote attacker would allow obtaining sensitive information. No further...
CVE-2021-38662
Technical details for CVE-2021-38662 are not publicly available in the provided documents. Monitor for updates.
CVE-2021-40443
Technical details for CVE-2021-40443 are not publicly provided in the supplied documents. No affected products, exploit info, or remediation are specified here. Monitor for updates in the connected feeds.
CVE-2022-21834
Technical details for CVE-2022-21834 are not provided in the given documents. Monitor for updates from Microsoft and NVD; no affected products, root cause, impact, or remediation information is available here.
CVE-2022-21895
Technical details for CVE-2022-21895 are not publicly provided in the connected documents. The sources reference the CVE at a high level without product specifics, root cause, or remediation. Monitor for updates as new documents may disclose details.
CVE-2022-21918
Technical details about CVE-2022-21918 are not publicly provided in the connected documents. Monitor for updates and rely on official advisories for affected products, versions, and remediation.
CVE-2021-40456
CVE-2021-40456 is a Windows AD FS Server vulnerability described as a security feature bypass . The affected component is Active Directory Federation Services on Windows Server; the core issue is bypassing security restrictions within AD FS. Microsoft and security advisories indicate updates/fixe...
CVE-2022-21903
Technical details about CVE-2022-21903 are not publicly provided in the supplied documents; no affected products, impact, nor remediation specifics are given here. Monitor for updates from official advisories.
CVE-2022-21994
CVE-2022-21994 is a Windows elevation-of-privilege issue in the DWM Core Library that permits local escalation with low attack complexity and no user interaction (per CVSS data in the initial). Connected documents corroborate a Windows DWM Core Library vulnerability and show Microsoft remediation...
CVE-2022-21915
Technical details for CVE-2022-21915 are not publicly detailed in the provided documents. Monitor for updates; available data include CVSS scores, but no explicit exploit vectors, affected products, or remediation steps are provided here.
CVE-2022-21924
CVE-2022-21924 is described in the provided documents as a Workstation Service Remote Protocol Security Feature Bypass Vulnerability , with a MEDIUM severity (CVSS v2 base score 5.4 and CVSS v3.1 base score 5.3). The available sources stop short of naming affected products, versions, or root caus...
CVE-2022-29103
Technical details for CVE-2022-29103 are not publicly provided in the supplied documents. The connected items discuss Windows update KB entries and security issues, but none specify affected products/versions or remediation for this CVE.
CVE-2009-1133
CVE-2009-1133 corresponds to a heap-based buffer overflow in Microsoft Remote Desktop Connection (mstsc/ mstscax.dll) affecting RDP clients (RDP 5.0–6.1 on Windows and Mac 2.0). The underlying flaw occurs during parsing of data from the RDP server, allowing a remote attacker to execute arbitrary ...