273 matches found
CVE-2022-21985
CVE-2022-21985 is a Windows vulnerability described as an Information Disclosure vulnerability in the Windows Remote Access Connection Manager. The CVSS details show a local attack vector with low complexity (CVSSv3.1 base score 5.5, MEDIUM severity), where confidentiality is impacted. The descri...
CVE-2022-21858
Technical details (affected components, root cause, versions, exploitability, or fixes) are not publicly provided in the supplied documents. Monitor official MSRC/NVD entries and OpenVAS feeds for updates.
CVE-2022-21914
Technical details for CVE-2022-21914 are not publicly available in the provided documents. Monitor for updates.
CVE-2018-0825
CVE-2018-0825 corresponds to a Microsoft StructuredQuery remote code execution vulnerability. According to the CNVD entry, it exists in Microsoft Windows’ StructuredQuery component and stems from improper handling of objects in memory, enabling a remote attacker to execute arbitrary code when a s...
CVE-2022-21880
CVE-2022-21880 is a Windows GDI+ Information Disclosure vulnerability. The NVD entry describes impact as a confidentiality breach with no integrity or availability impact. CVSS v2: base score 7.8 (NETWORK, LOW attack complexity, NONE auth, C:C/I:N/A:N). CVSS v3.1: base score 7.5 (AV:N/AC:L/PR:N/U...
CVE-2021-40460
Technical details for CVE-2021-40460 are not publicly available in the provided documents. Monitor for updates.
CVE-2017-11927
Technical details about CVE-2017-11927 are not publicly available in the provided connected documents. Monitor for updates; include affected products/versions and remediation when disclosures become available.
CVE-2018-8410
CVE-2018-8410 is a Windows Kernel API elevation-of-privilege vulnerability caused by improper handling of registry objects in memory. The Windows kernel vulnerability affects multiple OS versions (Windows 7, Server 2012/2012 R2, RT 8.1, 8.1, 10, 2016/2008 R2 etc.) as listed in the initial descrip...
CVE-2021-40462
Technical details (affected product, component, version, root cause, or fixes) for CVE-2021-40462 are not provided in the connected documents; monitor for updates.
CVE-2022-21867
Technical details for CVE-2022-21867 are not publicly available in the provided documents. Monitor for updates.
CVE-2022-23296
Public technical details for CVE-2022-23296 are not provided in the connected documents. The sources list the CVE and references but do not specify affected product versions, root cause, exploit details, or remediation within the supplied material. Monitor for updates.
CVE-2022-21910
Technical details about CVE-2022-21910 (affected product, impact, exploitability, or fixes) are not provided in the supplied documents. Monitor for official disclosures and updates from Microsoft and security advisories.
CVE-2022-21916
Technical details about CVE-2022-21916 are not publicly provided in the supplied documents. Monitor for updates from Microsoft and CVE databases for affected products, root cause, and fixes.
CVE-2022-29131
CVE-2022-29131 is a Windows LDAP remote-code-execution vulnerability. The connected OpenVAS/Microsoft KB entries identify this CVE among patched issues in KB5013943 (OS Build 22000.675 for Windows 11) and related updates, indicating a network-vector, LDAP-service issue that could allow RCE. The v...
CVE-2021-40464
Technical details about CVE-2021-40464 are not publicly available in the provided connected documents; monitor for updates.
CVE-2022-21864
Technical details for CVE-2022-21864 are not publicly provided in the supplied documents. Monitor for updates from official advisories for affected products, impact, and remediation.
CVE-2022-21852
Technical details for CVE-2022-21852 are not publicly available in the provided documents; monitor for updates.
CVE-2022-21875
CVE-2022-21875 is documented as a Windows Storage Elevation of Privilege vulnerability. The NVD entry lists LOCAL attack vector, LOW attack complexity, and no user interaction required, with high impact on confidentiality, integrity, and availability. The CVE is also included in multiple OpenVAS/...
CVE-2022-21895
Technical details for CVE-2022-21895 are not publicly provided in the connected documents. The sources reference the CVE at a high level without product specifics, root cause, or remediation. Monitor for updates as new documents may disclose details.
CVE-2018-0898
Technical details about CVE-2018-0898 are not publicly available in the provided connected documents. Monitor for updates; no explicit affected products, root cause, impact, or remediation are detailed here.
CVE-2021-38663
CVE-2021-38663 concerns a Windows exFAT File System Information Disclosure vulnerability. The entry lists impact as PARTIAL confidentiality loss (CVSS2) with LOCAL access and no authentication, and HIGH confidentiality impact (CVSS3) with LOCAL access, no exploitation details provided. The connec...
CVE-2022-21835
CVE-2022-21835 : Microsoft Cryptographic Services Elevation of Privilege Vulnerability. The NVD entry lists a Local, low-attack-complexity vulnerability with a base score of 7.2 (CVSS2) and a CVSS-3.1 base score of 7.8 (HIGH) with LOCAL access, PR: LOW, UI: NONE, and UNCHANGED scope; affects conf...
CVE-2022-21866
Technical details for CVE-2022-21866 are not provided in the supplied documents; affected products, root cause, exploit info, and fixes are not specified here. Monitor for updates.
CVE-2018-0900
Technical details are not publicly available in the provided connected documents; monitor for updates.
CVE-2022-21838
Technical details about CVE-2022-21838 are not provided in the supplied documents. No affected products, root cause, impact, or remediation are specified here. Monitor for updates from official sources.
CVE-2022-21961
CVE-2022-21961 relates to Windows Resilient File System (ReFS) and is described as a Remote Code Execution vulnerability. Public details in the initial entry indicate impact to confidentiality, integrity, and availability (C/C/I) with a local? or unspecified vector; CVSS metrics are shown (v2 bas...
CVE-2018-8554
CVE-2018-8554 is an elevation of privilege vulnerability in which DirectX mismanages memory objects. The initial CVE description indicates impact on Windows 10 (client) and Windows Server 2019/Windows 10 Server variants, with a local attack vector and low complexity. The connected sources (e.g., ...
CVE-2021-40455
Public technical details for CVE-2021-40455 are not present in the provided documents; monitor for updates from official advisories.
CVE-2022-21862
Technical details for CVE-2022-21862 are not publicly provided in the connected documents. Monitor for updates.
CVE-2022-21847
CVE-2022-21847 is a Windows Hyper-V Denial of Service vulnerability. Public records confirm this CVE exists and is associated with local attack requirements and a medium overall risk (NVD: CVSS v3.1 base 6.5, CVSS v2: 4.9). Affected context is Hyper-V on Windows, but the exact root cause, vulnera...
CVE-2022-21884
Technical details for CVE-2022-21884 are not publicly provided in the connected documents; monitor official disclosures or advisories for affected products, impact, and remediation.
CVE-2018-0813
Technical details for CVE-2018-0813 are not publicly available in the provided documents. Monitor for updates from authoritative sources.
CVE-2018-0895
Technical details for CVE-2018-0895 are not provided in the connected documents. Public information in this dataset does not specify affected products/versions/impact. Monitor for updates.
CVE-2022-21870
Technical details for CVE-2022-21870 are not provided in the supplied documents. The initial entry offers only a brief description. Monitor for updates.
CVE-2022-21993
CVE-2022-21993 corresponds to a Microsoft Windows NFS ONCRPC XDR Driver information disclosure vulnerability. The connected advisory CPAI-2022-0336 states an information disclosure exists and that successful exploitation by a remote attacker would allow obtaining sensitive information. No further...
CVE-2022-21981
Technical details for CVE-2022-21981 are not publicly available in the provided documents. Monitoring for future updates or disclosures is advised.
CVE-2018-0901
Technical details about CVE-2018-0901 are not publicly available in the provided connected documents; monitor for updates.
CVE-2021-42284
Technical details (affected product, vulnerable component, root cause, and remediation) are not provided in the supplied documents for CVE-2021-42284. Please monitor for updates from official sources; no exploitable details or patch information are available here.
CVE-2022-21915
Technical details for CVE-2022-21915 are not publicly detailed in the provided documents. Monitor for updates; available data include CVSS scores, but no explicit exploit vectors, affected products, or remediation steps are provided here.
CVE-2022-21918
Technical details about CVE-2022-21918 are not publicly provided in the connected documents. Monitor for updates and rely on official advisories for affected products, versions, and remediation.
CVE-2022-21921
CVE-2022-21921 is a Windows Defender Credential Guard security feature bypass. Connected documents identify Windows Defender as affected, with the issue categorized as a security-measure bypass (CVSS/Impact cited in sources such as Microsoft KBs and security advisories). The root cause and exact ...
CVE-2022-21959
Technical details about CVE-2022-21959 are not publicly provided in the supplied documents. Monitor for updates from NVD and vendor advisories.
CVE-2022-22002
Technical details for CVE-2022-22002 are not publicly provided in the connected documents. Available sources mention the vulnerability title, but no affected products, root cause, impact, or fixes are included here. Monitor for updates.
CVE-2009-1133
CVE-2009-1133 corresponds to a heap-based buffer overflow in Microsoft Remote Desktop Connection (mstsc/ mstscax.dll) affecting RDP clients (RDP 5.0–6.1 on Windows and Mac 2.0). The underlying flaw occurs during parsing of data from the RDP server, allowing a remote attacker to execute arbitrary ...
CVE-2018-0880
CVE-2018-0880 affects Windows Desktop Bridge by improper handling of the virtual registry, enabling Privilege Escalation on Windows 10 v1607/v1703/v1709 and corresponding Server SKUs. Connected sources document public PoCs and indicate the fix (MSRC case 42755) did not cover all variants, with re...
CVE-2021-40443
Technical details for CVE-2021-40443 are not publicly provided in the supplied documents. No affected products, exploit info, or remediation are specified here. Monitor for updates in the connected feeds.
CVE-2022-21903
Technical details about CVE-2022-21903 are not publicly provided in the supplied documents; no affected products, impact, nor remediation specifics are given here. Monitor for updates from official advisories.
CVE-2022-29103
Technical details for CVE-2022-29103 are not publicly provided in the supplied documents. The connected items discuss Windows update KB entries and security issues, but none specify affected products/versions or remediation for this CVE.
CVE-2018-8438
CVE-2018-8438 is a denial-of-service vulnerability in Microsoft Hyper-V Network Switch. The issue occurs when the host fails to properly validate input from a privileged user on a guest OS, potentially impacting availability. Affected products include Windows Server 2012 R2, Windows RT 8.1, Windo...
CVE-2018-0757
Technical details about CVE-2018-0757 are not publicly available in the provided documents. Connected sources discuss malware and general Windows kernel disclosures but do not specify affected products, versions, or fixes. Monitor for official updates.