169 matches found
CVE-2022-21907
CVE-2022-21907 concerns the HTTP Protocol Stack (http.sys) in Windows, enabling remote code execution via specially crafted packets. Public documentation and PoCs indicate impact on Windows 10 (notably 2004) and Windows Server variants, with multiple exploits and PoCs surfacing publicly. Mitigati...
CVE-2022-22012
Technical details about CVE-2022-22012 are not publicly provided in the connected documents. The materials mention updates and mitigations but do not specify affected products/versions or remediation for this CVE. Monitor for updates.
CVE-2022-21990
CVE-2022-21990 — Remote Desktop Client RCE . The connected sources confirm a remote code execution vulnerability in the Windows Remote Desktop Client triggered when a user connects to a malicious RDP server. This is a client-side flaw exploited via a crafted server, enabling code execution on the...
CVE-2022-21894
CVE-2022-21894 is a Secure Boot security feature bypass exploited by the BlackLotus UEFI bootkit. It bypasses Secure Boot to load malicious EFI components, enabling persistence, disabling HVCI and Defender, and prior to OS load. Attack requires elevated privileges or physical access; bootkit impl...
CVE-2022-23288
CVE-2022-23288 is a Windows vulnerability in the DWM Core Library identified as an elevation of privilege (local) issue affecting the Windows DWM Core Library. The connected documents confirm the affected component as the Windows DWM Core Library and describe the impact as elevation of privileges...
CVE-2022-26931
CVE-2022-26931 is a Windows Kerberos elevation-of-privilege issue tied to certificate-to-account mapping changes in Active Directory. Microsoft KBs and Citrix documents describe remediation via certificate-mapping updates (e.g., KB5014754 and related out‑of‑band mitigations) to address how certif...
CVE-2021-43217
CVE-2021-43217 is a Windows Encrypting File System (EFS) remote code execution vulnerability. The connected exploit document documents a practical demonstration of an EFS bypass on Windows 10 and shows use of Kali Linux, Metasploit and reverse TCP payloads, indicating an attacker could achieve co...
CVE-2022-23293
Technical details for CVE-2022-23293 are not publicly available in the provided Connected documents. Monitor for updates.
CVE-2022-23284
Technical details for CVE-2022-23284 (affected product, root cause, impact, and fix) are not publicly available in the provided Connected documents. Monitor for updates from official sources.
CVE-2022-21849
CVE-2022-21849 is a remote code execution vulnerability in Windows IKE Extension. The IDS/attack surface centers on the IPSec/IKE service; a remote attacker could trigger multiple vulnerabilities when the IPSec service is running, without authentication. Public details in connected documents iden...
CVE-2021-43883
CVE-2021-43883 is a Windows Installer Elevation of Privilege vulnerability. The Windows Installer component can be abused when a user is tricked into installing a malicious package, enabling an attacker to gain elevated privileges on the system. The CVSS details in the provided data show a local ...
CVE-2022-24459
CVE-2022-24459 is an Elevation of Privilege in Windows Fax and Scan service. Connected sources note a PoC exploit exists and that Microsoft patched vulnerabilities in March 2022 Patch Tuesday, but no concrete product/version/fix details are provided in the documents.
CVE-2022-21974
CVE-2022-21974 corresponds to Microsoft Roaming Security Rights Management Services remote code execution. Connected sources corroborate a user-assisted scenario where exploitation involves opening a malicious RTF file in Microsoft Word, implying phishing-like delivery. The AVLEONOV post explicit...
CVE-2022-23281
CVE-2022-23281 corresponds to a Windows Common Log File System Driver information-disclosure vulnerability. Connected sources describe it as an information leak in the CLFS driver, with CNVD noting “excessive data output” as the underlying issue. Impact is a confidentiality risk; CVSS metrics in ...
CVE-2022-23294
Technical details about CVE-2022-23294 are not publicly provided in the supplied documents. Monitor for updates.
CVE-2022-24460
Technical details for CVE-2022-24460 are not publicly provided in the supplied documents; no concrete affected product versions or remediation are specified. Monitor for updates.
CVE-2022-21989
CVE-2022-21989 is a Windows Kernel elevation-of-privilege vulnerability. A local attacker can exploit it to escalate privileges and execute code at a higher integrity level, as indicated by Microsoft’s advisory and related coverage. Exploitation requires local access and may depend on additional ...
CVE-2022-22019
Technical details for CVE-2022-22019 are not provided in the connected documents. Public details (affected products, exploit info, impact, remediation) are not present here. Monitor for official updates.
CVE-2021-43207
Technical details (affected component, root cause, exploitability, and fixes) for CVE-2021-43207 are not provided in the connected documents. Only the vulnerability name and CVSS metrics are present. Monitor official disclosures for specifics.
CVE-2022-22010
Technical details for CVE-2022-22010 are not publicly provided in the supplied documents. No concrete exploit vectors, affected products, or remediation are present here. Monitor for updates from official sources as more information becomes available.
CVE-2022-23287
CVE-2022-23287 is described in connected documents as a Windows ALPC elevation of privilege vulnerability. The core issue involves Local privilege escalation via ALPC in Windows; impact is reported as high for confidentiality, integrity, and availability (C/I/A). The CVSS data (3.1) from NVD indi...
CVE-2022-26938
CVE-2022-26938 is described as a Storage Spaces Direct Elevation of Privilege vulnerability. The connected data confirms a local-attack vector (CVSS3.1: AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) with high impact on confidentiality, integrity, and availability. The CVSS v2 metrics also indicate local a...
CVE-2022-22013
Technical details about CVE-2022-22013 are not provided in the connected documents; no affected products, root cause, or fixes are specified here. Monitor for updates.
CVE-2022-24454
Technical details for CVE-2022-24454 are not publicly provided in the supplied documents. No affected product/version/impact/fix details are present here. Monitor for updates.
CVE-2022-22015
Technical details about CVE-2022-22015 are not provided in the connected documents. The MSKB entries listed pertain to OS/security updates but do not disclose affected RDP components, exploit specifics, or patch details for this CVE. Monitor for updates.
CVE-2022-21975
CVE-2022-21975 is a Windows Hyper-V Denial of Service vulnerability. The NVD entry indicates the affected component is Windows Hyper-V and that exploitation requires local access with high attack complexity and low privileges, resulting in a high availability impact (A: HIGH) while confidentialit...
CVE-2022-23297
CVE-2022-23297 is described as Windows NT LAN Manager Datagram Receiver Driver Information Disclosure Vulnerability. According to the initial entry, it has a CVSSv3.1 base score of 5.5 (MEDIUM) with LOCAL attack vector, LOW attack complexity, and LOW privileges required, causing HIGH confidential...
CVE-2022-21893
Technical details about CVE-2022-21893 are not provided in the connected documents. The supplied sources include high-level vulnerability descriptions and update references, but no specifics on affected products/versions or fixes. Monitor for updated, concrete disclosures.
CVE-2022-21836
CVE-2022-21836 is a Windows kernel-level spoofing flaw that could bypass WPBT verification by presenting a small number of compromised certificates. Microsoft mitigated this by adding those certificates to the Windows kernel driver block list, blocking them even if present in WPBT. The CVE is dis...
CVE-2022-23270
Technical details about CVE-2022-23270 are not present in the provided connected documents. Public information on affected products, root cause, and remediation is not provided here. Monitor Microsoft Security Update Guide and MSRC advisories for official details and fixes.
CVE-2022-21874
CVE-2022-21874 is a Windows Security Center API RCE vulnerability. Public details in the connected documents describe it as an RCE in the Windows Security Center API with a CVSS v3.1 base score of 7.8 (High) and a Local attack vector requiring user interaction for exploitation. Exploitation conte...
CVE-2022-29122
Technical details for CVE-2022-29122 (affected product, root cause, exploit scope) are not provided in the supplied documents. Monitor official Microsoft advisories and the CVE entry for updates and remediation guidance.
CVE-2022-21984
CVE-2022-21984 is a Windows DNS Server Remote Code Execution vulnerability. The issue affects Windows DNS Server when dynamic updates are enabled, potentially allowing an attacker to take over the DNS server and execute code with elevated privileges. Mitigation in the provided documents points to...
CVE-2022-21857
Technical details for CVE-2022-21857 (Active Directory Domain Services Elevation of Privilege) are not provided in the connected documents. The initial description confirms AD DS Elevation of Privilege, but no affected product versions, root cause, impact, or fixes are included here. Monitor for ...
CVE-2022-23253
CVE-2022-23253 is a Windows PPTP Denial of Service vulnerability. The records show it has a CVSS v3.1 base score of 6.5 (Network, Low attack complexity, Privileges Low, No user interaction) with HIGH availability impact. Concrete details about affected products, versions, or exploit activity are ...
CVE-2022-29104
Technical details (affected products/components, root cause, impact, and exploit info) for CVE-2022-29104 are not provided in the connected documents. Monitor for updates; current sources here do not publish public vulnerability specifics beyond the CVE entry.
CVE-2022-21898
CVE-2022-21898 is a DirectX Graphics Kernel Remote Code Execution vulnerability in Windows. The entry notes a network-based, no-user-interaction exploit with high/critical impact (C: High, I: High, A: High) and local/remote exploitation in different entries; the primary CVE description identifies...
CVE-2022-21920
CVE-2022-21920 is a Windows Kerberos Elevation of Privilege vulnerability with CVSS 3.1 base score 8.8 (HIGH). Attack vector: NETWORK; Attack complexity: LOW; Privileges required: LOW; User interaction: NONE; Scope: UNCHANGED; Impacts: confidentiality, integrity, and availability HIGH. The initia...
CVE-2022-21896
CVE-2022-21896 concerns the Windows DWM Core Library Elevation of Privilege. The NVD entry describes a local, privilege-escalation vulnerability with a CVSS v3.1 base score of 7.0 (HIGH) and an older CVSS v2 base score of 6.9 (MEDIUM). The CVE is associated with Windows components and is referenc...
CVE-2022-21902
Technical details about CVE-2022-21902 are not provided in the supplied documents. No affected products, root cause, impact, or remediation are disclosed here. Monitor for updates.
CVE-2022-22014
Technical details about CVE-2022-22014 are not provided in the supplied connected documents. The initial description notes a Windows LDAP RCE vulnerability, but there are no concrete details on affected products, versions, root cause, impact, or fixes within the provided materials. Monitor for up...
CVE-2022-22016
Technical details for CVE-2022-22016 are not publicly available in the provided documents. No information on affected products, root cause, exploitability, or fixes is present. Monitor for updates.
CVE-2022-23286
CVE-2022-23286 affects the Windows Cloud Files Mini Filter Driver and enables local elevation of privilege. Evidence in CNVD/CVE records confirms the driver-related root cause and impact (arbitrary code with elevated privileges). Remediation reported in connected docs includes applying March 2022...
CVE-2022-26930
Technical details about CVE-2022-26930 (affected component, root cause, impact, or fixes) are not provided in the connected documents. The sources reference Windows updates and mitigations but do not disclose vulnerability specifics. Monitor for authoritative disclosures and updates.
CVE-2022-23291
CVE-2022-23291 is a Windows DWM Core Library elevation-of-privilege vulnerability with local attack vector, low complexity, and impact on confidentiality, integrity, and availability. The NVD/Microsoft entries assign high severity (CVSS v3.1: 7.8) and note an elevation of privileges via the Deskt...
CVE-2022-26934
CVE-2022-26934 is a Windows Graphics Component information disclosure vulnerability. Affects Windows graphics handling (Windows Graphics Component) and is disclosed as a network-exposed information disclosure with a base CVSSv3.1 score of 6.5 (vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N)...
CVE-2022-21859
Technical details for CVE-2022-21859 are not publicly available in the provided documents. Monitor for updates from NVD, CVE records, and vendor advisories.
CVE-2022-21878
CVE-2022-21878 is a Windows Geolocation Service Remote Code Execution Vulnerability. Affected software: Windows Geolocation Service component; root cause and exact exploit path are not detailed in the provided documents. CVSS2 score is 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C); CVSS3.1 score is 7.8 (AV:L/...
CVE-2021-43893
Technical details for CVE-2021-43893 are not provided in the connected documents; the initial entry lists a Windows EFS privilege issue but no public details (affected products, fixes) in the supplied materials. Monitor for updates.