273 matches found
CVE-2021-38662
Technical details for CVE-2021-38662 are not publicly available in the provided documents. Monitor for updates.
CVE-2022-21892
CVE-2022-21892 concerns Windows Resilient File System (ReFS). The initial entry identifies a Remote Code Execution Vulnerability in ReFS, with CVSS metrics showing a base score of 7.2 (AV:L/AC:L/Au:N/C:C/I:C/A:C) per NVD and a Microsoft 3.1 vector (CVSS:3.1) indicating physical access, low attack...
CVE-2022-21924
CVE-2022-21924 is described in the provided documents as a Workstation Service Remote Protocol Security Feature Bypass Vulnerability , with a MEDIUM severity (CVSS v2 base score 5.4 and CVSS v3.1 base score 5.3). The available sources stop short of naming affected products, versions, or root caus...
CVE-2022-21994
CVE-2022-21994 is a Windows elevation-of-privilege issue in the DWM Core Library that permits local escalation with low attack complexity and no user interaction (per CVSS data in the initial). Connected documents corroborate a Windows DWM Core Library vulnerability and show Microsoft remediation...
CVE-2022-23290
Technical details about CVE-2022-23290 are not publicly provided in the supplied connected documents. No concrete product/version/root-cause/impact/fix information is present beyond the generic vulnerability label. Monitor for official updates from primary sources.
CVE-2022-21834
Technical details for CVE-2022-21834 are not provided in the given documents. Monitor for updates from Microsoft and NVD; no affected products, root cause, impact, or remediation information is available here.
CVE-2018-8419
Technical details are not publicly available in the provided documents. Monitor for updates.
CVE-2022-21904
Technical details for CVE-2022-21904 are not publicly provided in the supplied documents. Monitor for updates.
CVE-2021-40456
CVE-2021-40456 is a Windows AD FS Server vulnerability described as a security feature bypass . The affected component is Active Directory Federation Services on Windows Server; the core issue is bypassing security restrictions within AD FS. Microsoft and security advisories indicate updates/fixe...
CVE-2022-21860
CVE-2022-21860 is a Windows vulnerability described as a Windows AppContracts API Server Elevation of Privilege. The NVD entry lists a CVSS v3.1 base score of 7.0 (HIGH) with LOCAL attack vector, HIGH impact on confidentiality, integrity, and availability, and requires LOW privileges and no user ...
CVE-2022-21876
Technical details for CVE-2022-21876 are not publicly available in the provided documents. Monitor for updates from the sources listed in the NVD entry and associated advisories.
CVE-2022-22712
CVE-2022-22712: Windows Hyper-V Denial of Service vulnerability. Affects Hyper-V; root cause details are not provided in the initial document, but CVSS metrics indicate Local attack vector with no authentication and no user interaction, leading to a high availability impact (CVE‑v2 base score 4.7...
CVE-2022-29125
Technical details (affected product/version, root cause, exploit info, or patch specifics) are not provided in the connected documents for CVE-2022-29125. Monitor for updates.
CVE-2021-43230
CVE-2021-43230 is a Windows NTFS Elevation of Privilege vulnerability (local, low attack complexity) with no user interaction required, per the initial CVE entry. The connected documents primarily discuss NTFS-related CVEs in the 2021-4323x family and describe a pool/size calculation overflow in ...
CVE-2022-21872
Technical details about CVE-2022-21872 are not provided in connected documents. Public input only labels it as Windows Event Tracing Elevation of Privilege Vulnerability; monitor for updates.
CVE-2022-29105
No technical details about CVE-2022-29105 are present in the provided connected documents; monitor for updates.
CVE-2021-42286
CVE-2021-42286: Windows Core Shell SI Host Extension Framework for Composable Shell Elevation of Privilege Vulnerability. Affected component: Windows Core Shell SI Host Extension Framework. Root cause: elevation of privilege in the Composable Shell path (Core Shell). Impact (per sources): local a...
CVE-2021-43224
CVE-2021-43224 targets the Windows Common Log File System (CLFS) Driver with an information disclosure vulnerability. The connected exploit repository for this CVE indicates a Proof-of-Concept that yields a crash (BSOD) on Windows 20H2 (build 19042.1387) and is labeled as a Windows CLFS Driver Po...
CVE-2022-21879
Technical details for CVE-2022-21879 are not publicly provided in the supplied documents; no affected products or fixes are described here. Monitor for official disclosures and updates.
CVE-2021-43222
CVE-2021-43222 documents a Microsoft Message Queuing information disclosure vulnerability. The issue affects MSMQ when handling messages over the network, enabling an attacker with network access and no authentication to potentially access confidential information. According to the CVE entry, the...
CVE-2022-21861
Technical details about CVE-2022-21861 are not provided in the connected documents; publicly available content in the initial entry is limited to a high-level description and scores. Monitor for updates.
CVE-2022-21962
CVE-2022-21962 corresponds to a Windows Resilient File System (ReFS) remote code execution vulnerability. The NVD entry lists two CVSS assessments: CVSS v2 base score 7.2 (LOCAL, with no user interaction, impact to confidentiality/integrity/availability) and CVSS v3.1 base score 6.8 (attack vecto...
CVE-2022-26933
Technical details about CVE-2022-26933 (NTFS Information Disclosure) are not provided in the connected documents. Monitor for updates; no affected products, root cause, impact, or fixes are disclosed here.
CVE-2018-0883
CVE-2018-0883 is a remote code execution vulnerability in Windows Shell caused by improper validation of file copy destinations. Affected are Windows Shell components across multiple Windows platforms (Windows 7 SP1, Windows 8.1/RT 8.1, Windows Server 2008 R2/2012/2016 and Windows 10 builds up to...
CVE-2021-43229
CVE-2021-43229 is an NTFS elevation-of-privilege vulnerability affecting Windows systems. The connected exploit walkthrough describes a pool-based overflow caused by an integer overflow during allocation size computation (directory path length + file name length) in several NTFS paths (e.g., Ntfs...
CVE-2018-0882
CVE-2018-0882 affects Windows 10 (versions 1607, 1703, 1709) and Windows Server 2016/1709, due to how the Desktop Bridge virtual registry is managed. This creates a local elevation-of-privilege condition. The CIRCL/CVE references indicate exploitation evidence (Exploit-DB: 44315). Public technica...
CVE-2018-8335
Technical details about CVE-2018-8335 are not publicly provided in the connected documents. Monitor for updates.
CVE-2021-43228
CVE-2021-43228 is a SymCrypt Denial of Service vulnerability with a CVSS v3.1 base score of 7.5 (HIGH), vector AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H. The issue is described in multiple sources as a Denial of Service vulnerability and is associated with Microsoft’s SymCrypt component. The connected ...
CVE-2017-11830
CVE-2017-11830 is a Windows Device Guard security feature bypass. Connected sources describe a TOCTOU race in the WDAC cache signing path (CiSetFileCache) that can allow an unsigned file to appear signed. The issue was addressed previously via NtSetCachedSigningLevel, but public reports (Exploit-...
CVE-2018-0885
CVE-2018-0885 : DoS in the Microsoft Hyper-V Network Switch triggered by unvalidated input from a guest OS. Affected: 64‑bit Windows Server 2008 SP2/ R2 SP1; Windows Server 2012/R2; Windows 10 (various builds); Windows Server 2016; and Windows Server version 1709. Root cause is described as impro...
CVE-2022-22000
Technical details about CVE-2022-22000 are not provided in the connected documents. The available sources confirm the vulnerability label but do not document affected products, root cause, or fixes here. Monitor for updates.
CVE-2022-22717
CVE-2022-22717 is a Windows Print Spooler elevation-of-privilege vulnerability. Affected: Windows OS with Print Spooler; the provided docs do not specify the exact root cause. CVSSv3.1 base score 7.0 (HIGH), vector LOCAL, Privileges Required LOW, User Interaction NONE, and impacts to confidential...
CVE-2018-0814
Technical details for CVE-2018-0814 are not publicly available in the provided Connected documents. No explicit affected products, versions, root cause, impact, or remediation are disclosed here. Monitor for updates from official advisories.
CVE-2018-0899
Technical details for CVE-2018-0899 are not publicly provided in the supplied documents. Monitor for updates from official advisories.
CVE-2018-0902
CVE-2018-0902 affects the Cryptography Next Generation (CNG) kernel-mode driver (cng.sys) in Windows 10 (Gold/1511/1607/1703/1709) and Windows Server 2016/1709. The vulnerability arises from how cng.sys validates and enforces impersonation levels, constituting a kernel-mode security feature bypas...
CVE-2018-0884
Technical details for CVE-2018-0884 are not publicly available in the provided documents. Monitor for updates from Microsoft MSRC and related advisories.
CVE-2021-43233
CVE-2021-43233 is a Windows Remote Desktop Client remote code execution vulnerability. Public data (NVD) rates it as CVSS v3.1 7.5 (HIGH) with NETWORK access, high attack complexity, and no privileges required, but user interaction is required. A connected document notes an additional assessment:...
CVE-2021-43240
Technical details about CVE-2021-43240 are not publicly provided in the supplied documents. No affected products, root cause, fixes, or exploitation details are specified here. Monitor official disclosures and updates.
CVE-2018-0888
CVE-2018-0888 corresponds to a vulnerability in the Microsoft Hyper-V Network Switch where 64-bit Windows clients/servers (Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012/R2; Windows 10 versions 1511–1709; Windows Server 2016) are exposed to information disclos...
CVE-2021-43238
CVE-2021-43238 is a Windows local elevation-of-privilege vulnerability. The NVD entry shows LOCAL vector, LOW attack complexity, and no authentication required (CVSS2: AV:L/AC:L/Au:N/C:P/I:P/A:P; CVSS3.1: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). However, the connected documents do not provi...
CVE-2018-0881
CVE-2018-0881 concerns a privilege-elevation flaw in the Microsoft Video Control component. The vulnerability stems from how objects are handled in memory, enabling an attacker who can log on and run a crafted application to execute code with elevated/system privileges on affected Windows release...
CVE-2021-43223
CVE-2021-43223 affects the Windows Remote Access Connection Manager and is described as an Elevation of Privilege vulnerability. The NVD entry provides CVSS v3.1 details: AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H with a base score of 7.8 (HIGH). The vector indicates a local attacker with low privileges...
CVE-2021-43248
Technical details for CVE-2021-43248 are not publicly available in the provided documents; monitor for updates.
CVE-2022-21998
CVE-2022-21998 affects the Windows Common Log File System Driver and is described as a local-information-disclosure vulnerability. The CVSS details indicate a Local attack vector, low attack complexity, no user interaction, and a confidentiality impact of High (C:H) with no integrity or availabil...
CVE-2018-0904
The CVE-2018-0904 entry concerns a Windows kernel information disclosure vulnerability affecting Windows kernel in multiple client/server OS builds (Windows 7/8.1/10, Windows Server 2008 R2/2012/2016, etc.). Root cause: memory address handling in the kernel allows partial information disclosure w...
CVE-2021-43216
Technical details for CVE-2021-43216 are not publicly provided in the supplied documents. Monitor for updates from the referenced sources; no public specifics on affected products, versions, or impacts are included here.
CVE-2022-29114
Technical details about CVE-2022-29114 are not provided in the supplied documents. No affected products, root cause, impact, or fixes are specified here. Monitor for updates from the provided references as needed.
CVE-2017-11788
CVE-2017-11788 affects Windows Search in multiple Windows versions (7 SP1, 8.1, 10, Server SKUs) where unauthenticated attackers can remotely send crafted messages to trigger a denial-of-service by mismanaging in-memory objects. The vulnerability is documented across NVD and CNVD entries, with Op...
CVE-2021-43232
CVE-2021-43232 corresponds to a Windows Event Tracing (ETW) remote code execution vulnerability. The CNVD entry explicitly identifies ETW as the affected component and states the vulnerability enables remote code execution on Windows. The CVE record itself notes Windows Event Tracing RCE with a m...