CVE-2022-21990 – Remote Desktop Client Remote Code Execution Vulnerability
https://notcve.org/view.php?id=CVE-2022-21990
Remote Desktop Client Remote Code Execution Vulnerability Una vulnerabilidad de Ejecución de Código Remota en Remote Desktop Client. Este ID de CVE es diferente de CVE-2022-23285 • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-21990 •
CVE-2022-21977 – Media Foundation Information Disclosure Vulnerability
https://notcve.org/view.php?id=CVE-2022-21977
Media Foundation Information Disclosure Vulnerability Una vulnerabilidad de Divulgación de Información de Media Foundation. Este ID de CVE es diferente de CVE-2022-22010 • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-21977 •
CVE-2022-21975 – Windows Hyper-V Denial of Service Vulnerability
https://notcve.org/view.php?id=CVE-2022-21975
Windows Hyper-V Denial of Service Vulnerability Una vulnerabilidad de Denegación de Servicio en Windows Hyper-V • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-21975 • CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') •
CVE-2022-21967 – Xbox Live Auth Manager for Windows Elevation of Privilege Vulnerability
https://notcve.org/view.php?id=CVE-2022-21967
Xbox Live Auth Manager for Windows Elevation of Privilege Vulnerability Una vulnerabilidad de Elevación de Privilegios en Xbox Live Auth Manager para Windows • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-21967 •
CVE-2022-24455 – Windows CD-ROM Driver Elevation of Privilege Vulnerability
https://notcve.org/view.php?id=CVE-2022-24455
Windows CD-ROM Driver Elevation of Privilege Vulnerability Una vulnerabilidad de Elevación de Privilegios de Windows CD-ROM Driver This vulnerability allows local attackers to escalate privileges on vulnerable installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the CD-ROM driver. Crafted data sent to IOCTL 0x0056c064 can trigger access to a pointer prior to initialization. An attacker can leverage this vulnerability to escalate privileges to the level of SYSTEM. • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-24455 •