CVSS: 7.5EPSS: 0%CPEs: 35EXPL: 0CVE-2022-21848 – Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability
https://notcve.org/view.php?id=CVE-2022-21848
Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability Una vulnerabilidad de Denegación de Servicio en Windows IKE Extension. Este ID de CVE es diferente de CVE-2022-21843, CVE-2022-21883, CVE-2022-21889, CVE-2022-21890 • https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-21848 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-21848 •
CVSS: 6.5EPSS: 0%CPEs: 9EXPL: 0CVE-2022-21847 – Windows Hyper-V Denial of Service Vulnerability
https://notcve.org/view.php?id=CVE-2022-21847
Windows Hyper-V Denial of Service Vulnerability Una vulnerabilidad de Denegación de Servicio en Windows Hyper-V • https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-21847 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-21847 •
CVSS: 7.5EPSS: 2%CPEs: 31EXPL: 0CVE-2022-21843 – Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability
https://notcve.org/view.php?id=CVE-2022-21843
Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability Una vulnerabilidad de Denegación de Servicio en Windows IKE Extension. Este ID de CVE es diferente de CVE-2022-21848, CVE-2022-21883, CVE-2022-21889, CVE-2022-21890 • https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-21843 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-21843 •
CVSS: 7.8EPSS: 0%CPEs: 19EXPL: 0CVE-2022-21838 – Windows Cleanup Manager Elevation of Privilege Vulnerability
https://notcve.org/view.php?id=CVE-2022-21838
Windows Cleanup Manager Elevation of Privilege Vulnerability Una vulnerabilidad de Elevación de Privilegios en Windows Cleanup Manager This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the SilentCleanup scheduled task. By creating a symbolic link, an attacker can abuse the task to delete a folder. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of SYSTEM. • https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-21838 https://www.zerodayinitiative.com/advisories/ZDI-22-049 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-21838 • CWE-59: Improper Link Resolution Before File Access ('Link Following') •
CVSS: 7.8EPSS: 0%CPEs: 20EXPL: 0CVE-2022-21836 – Windows Certificate Spoofing Vulnerability
https://notcve.org/view.php?id=CVE-2022-21836
Windows Certificate Spoofing Vulnerability Una vulnerabilidad de Suplantación de Windows Certificate • https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-21836 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-21836 • CWE-295: Improper Certificate Validation •