CVSS: 7.8EPSS: 0%CPEs: 19EXPL: 0CVE-2022-21838 – Windows Cleanup Manager Elevation of Privilege Vulnerability
https://notcve.org/view.php?id=CVE-2022-21838
Windows Cleanup Manager Elevation of Privilege Vulnerability Una vulnerabilidad de Elevación de Privilegios en Windows Cleanup Manager This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the SilentCleanup scheduled task. By creating a symbolic link, an attacker can abuse the task to delete a folder. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of SYSTEM. • https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-21838 https://www.zerodayinitiative.com/advisories/ZDI-22-049 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-21838 • CWE-59: Improper Link Resolution Before File Access ('Link Following') •
CVSS: 7.8EPSS: 0%CPEs: 20EXPL: 0CVE-2022-21836 – Windows Certificate Spoofing Vulnerability
https://notcve.org/view.php?id=CVE-2022-21836
Windows Certificate Spoofing Vulnerability Una vulnerabilidad de Suplantación de Windows Certificate • https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-21836 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-21836 • CWE-295: Improper Certificate Validation •
CVSS: 7.8EPSS: 0%CPEs: 20EXPL: 0CVE-2022-21835 – Microsoft Cryptographic Services Elevation of Privilege Vulnerability
https://notcve.org/view.php?id=CVE-2022-21835
Microsoft Cryptographic Services Elevation of Privilege Vulnerability Una vulnerabilidad de Elevación de Privilegios en Microsoft Cryptographic Services • https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-21835 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-21835 •
CVSS: 7.8EPSS: 0%CPEs: 20EXPL: 0CVE-2022-21834 – Windows User-mode Driver Framework Reflector Driver Elevation of Privilege Vulnerability
https://notcve.org/view.php?id=CVE-2022-21834
Windows User-mode Driver Framework Reflector Driver Elevation of Privilege Vulnerability Una vulnerabilidad de Elevación de Privilegios en Windows User-mode Driver • https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-21834 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-21834 •
CVSS: 7.8EPSS: 0%CPEs: 20EXPL: 0CVE-2022-21833 – Virtual Machine IDE Drive Elevation of Privilege Vulnerability
https://notcve.org/view.php?id=CVE-2022-21833
Virtual Machine IDE Drive Elevation of Privilege Vulnerability Una vulnerabilidad de Elevación de Privilegios de Virtual Machine IDE Drive • https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-21833 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-21833 •