Microsoft
Page 93 of 100 — Microsoft CVEs from a corpus of 26181, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-31700 | High | 7.2 | 2022-12-14 | VMware Workspace ONE Access and Identity Manager contain an authenticated remote code execution vulnerability. VMware has evaluated the severity of this issue… |
CVE-2022-4439 | High | 8.8 | 2022-12-14 | Use after free in Aura in Google Chrome on Windows prior to 108.0.5359.124 allowed a remote attacker who convinced the user to engage in specific UI interactio… |
CVE-2022-47213 | High | 7.8 | 2022-12-13 | Microsoft Office Graphics Remote Code Execution Vulnerability |
CVE-2022-47212 | High | 7.8 | 2022-12-13 | Microsoft Office Graphics Remote Code Execution Vulnerability |
CVE-2022-47211 | High | 7.8 | 2022-12-13 | Microsoft Office Graphics Remote Code Execution Vulnerability |
CVE-2022-44713 | High | 7.5 | 2022-12-13 | Microsoft Outlook for Mac Spoofing Vulnerability |
CVE-2022-44710 | High | 7.8 | 2022-12-13 | DirectX Graphics Kernel Elevation of Privilege Vulnerability |
CVE-2022-44708 | High | 8.3 | 2022-12-13 | Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability |
CVE-2022-44707 | Medium | 6.5 | 2022-12-13 | Windows Kernel Denial of Service Vulnerability |
CVE-2022-44704 | High | 7.8 | 2022-12-13 | Microsoft Windows System Monitor (Sysmon) Elevation of Privilege Vulnerability |
CVE-2022-44702 | High | 7.8 | 2022-12-13 | Windows Terminal Remote Code Execution Vulnerability |
CVE-2022-44699 | Medium | 5.5 | 2022-12-13 | Azure Network Watcher Agent Security Feature Bypass Vulnerability |
CVE-2022-44698 | Medium | 5.4 | 2022-12-13 | Windows SmartScreen Security Feature Bypass Vulnerability |
CVE-2022-44697 | High | 7.8 | 2022-12-13 | Windows Graphics Component Elevation of Privilege Vulnerability |
CVE-2022-44696 | High | 7.8 | 2022-12-13 | Microsoft Office Visio Remote Code Execution Vulnerability |
CVE-2022-44695 | High | 7.8 | 2022-12-13 | Microsoft Office Visio Remote Code Execution Vulnerability |
CVE-2022-44694 | High | 7.8 | 2022-12-13 | Microsoft Office Visio Remote Code Execution Vulnerability |
CVE-2022-44693 | High | 8.8 | 2022-12-13 | Microsoft SharePoint Server Remote Code Execution Vulnerability |
CVE-2022-44692 | High | 7.8 | 2022-12-13 | Microsoft Office Graphics Remote Code Execution Vulnerability |
CVE-2022-44691 | High | 7.8 | 2022-12-13 | Microsoft Office OneNote Remote Code Execution Vulnerability |
CVE-2022-44690 | High | 8.8 | 2022-12-13 | Microsoft SharePoint Server Remote Code Execution Vulnerability |
CVE-2022-44689 | High | 7.8 | 2022-12-13 | Windows Subsystem for Linux (WSL2) Kernel Elevation of Privilege Vulnerability |
CVE-2022-44688 | Medium | 4.3 | 2022-12-13 | Microsoft Edge (Chromium-based) Spoofing Vulnerability |
CVE-2022-44687 | High | 7.8 | 2022-12-13 | Raw Image Extension Remote Code Execution Vulnerability |
CVE-2022-44683 | High | 7.8 | 2022-12-13 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2022-44682 | Medium | 6.8 | 2022-12-13 | Windows Hyper-V Denial of Service Vulnerability |
CVE-2022-44681 | High | 7.8 | 2022-12-13 | Windows Print Spooler Elevation of Privilege Vulnerability |
CVE-2022-44680 | High | 7.8 | 2022-12-13 | Windows Graphics Component Elevation of Privilege Vulnerability |
CVE-2022-44679 | Medium | 6.5 | 2022-12-13 | Windows Graphics Component Information Disclosure Vulnerability |
CVE-2022-44678 | High | 7.8 | 2022-12-13 | Windows Print Spooler Elevation of Privilege Vulnerability |
CVE-2022-44677 | High | 7.8 | 2022-12-13 | Windows Projected File System Elevation of Privilege Vulnerability |
CVE-2022-44676 | High | 8.1 | 2022-12-13 | Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability |
CVE-2022-44675 | High | 7.8 | 2022-12-13 | Windows Bluetooth Driver Elevation of Privilege Vulnerability |
CVE-2022-44674 | Medium | 5.5 | 2022-12-13 | Windows Bluetooth Driver Information Disclosure Vulnerability |
CVE-2022-44673 | High | 7.0 | 2022-12-13 | Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability |
CVE-2022-44671 | High | 7.8 | 2022-12-13 | Windows Graphics Component Elevation of Privilege Vulnerability |
CVE-2022-44670 | High | 8.1 | 2022-12-13 | Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability |
CVE-2022-44669 | High | 7.0 | 2022-12-13 | Windows Error Reporting Elevation of Privilege Vulnerability |
CVE-2022-44668 | High | 7.8 | 2022-12-13 | Windows Media Remote Code Execution Vulnerability |
CVE-2022-44667 | High | 7.8 | 2022-12-13 | Windows Media Remote Code Execution Vulnerability |
CVE-2022-44666 | High | 7.8 | 2022-12-13 | Windows Contacts Remote Code Execution Vulnerability |
CVE-2022-41127 | High | 8.5 | 2022-12-13 | Microsoft Dynamics NAV and Microsoft Dynamics 365 Business Central (On Premises) Remote Code Execution Vulnerability |
CVE-2022-41121 | High | 7.8 | 2022-12-13 | Windows Graphics Component Elevation of Privilege Vulnerability |
CVE-2022-41115 | Medium | 6.6 | 2022-12-13 | Microsoft Edge (Chromium-based) Update Elevation of Privilege Vulnerability |
CVE-2022-41094 | High | 7.8 | 2022-12-13 | Windows Hyper-V Elevation of Privilege Vulnerability |
CVE-2022-41089 | High | 7.8 | 2022-12-13 | .NET Framework Remote Code Execution Vulnerability |
CVE-2022-41077 | High | 7.8 | 2022-12-13 | Windows Fax Compose Form Elevation of Privilege Vulnerability |
CVE-2022-41076 | High | 8.5 | 2022-12-13 | PowerShell Remote Code Execution Vulnerability |
CVE-2022-41074 | Medium | 5.5 | 2022-12-13 | Windows Graphics Component Information Disclosure Vulnerability |
CVE-2022-26806 | High | 7.8 | 2022-12-13 | Microsoft Office Graphics Remote Code Execution Vulnerability |
CVE-2022-26805 | High | 7.8 | 2022-12-13 | Microsoft Office Graphics Remote Code Execution Vulnerability |
CVE-2022-26804 | High | 7.8 | 2022-12-13 | Microsoft Office Graphics Remote Code Execution Vulnerability |
CVE-2022-24480 | Medium | 6.3 | 2022-12-13 | Outlook for Android Elevation of Privilege Vulnerability |
CVE-2022-41261 | Medium | 6.0 | 2022-12-12 | SAP Solution Manager (Diagnostic Agent) - version 7.20, allows an authenticated attacker on Windows system to access a file containing sensitive data which can… |
CVE-2022-44650 | High | 7.8 | 2022-12-12 | A memory corruption vulnerability in the Unauthorized Change Prevention service of Trend Micro Apex One and Apex One as a Service could allow a local attacker… |
CVE-2022-44649 | High | 7.8 | 2022-12-12 | An out-of-bounds access vulnerability in the Unauthorized Change Prevention service of Trend Micro Apex One and Apex One as a Service could allow a local attac… |
CVE-2022-44648 | Medium | 5.5 | 2022-12-12 | An Out-of-bounds read vulnerability in Trend Micro Apex One and Apex One as a Service could allow a local attacker to disclose sensitive information on affecte… |
CVE-2022-44647 | Medium | 5.5 | 2022-12-12 | An Out-of-bounds read vulnerability in Trend Micro Apex One and Apex One as a Service could allow a local attacker to disclose sensitive information on affecte… |
CVE-2022-23511 | High | 7.1 | 2022-12-12 | A privilege escalation issue exists within the Amazon CloudWatch Agent for Windows, software for collecting metrics and logs from Amazon EC2 instances and on-p… |
CVE-2022-45797 | High | 7.1 | 2022-12-12 | An arbitrary file deletion vulnerability in the Damage Cleanup Engine component of Trend Micro Apex One and Trend Micro Apex One as a Service could allow a loc… |
CVE-2022-3724 | Medium | 6.3 | 2022-12-09 | Crash in the USB HID protocol dissector in Wireshark 3.6.0 to 3.6.8 allows denial of service via packet injection or crafted capture file on Windows |
CVE-2022-41720 | High | 7.5 | 2022-12-07 | On Windows, restricted files can be accessed via os.DirFS and http.Dir. The os.DirFS function and http.Dir type provide access to a tree of files rooted at a g… |
CVE-2020-36565 | Medium | 5.3 | 2022-12-07 | Due to improper sanitization of user input on Windows, the static file handler allows for directory traversal, allowing an attacker to read files outside of th… |
CVE-2022-34361 | Medium | 5.9 | 2022-12-06 | IBM Sterling Secure Proxy 6.0.3 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X… |
CVE-2022-34881 | Low | 3.3 | 2022-12-06 | Generation of Error Message Containing Sensitive Information vulnerability in Hitachi JP1/Automatic Operation allows local users to gain sensitive information… |
CVE-2022-43516 | Medium | 6.5 | 2022-12-05 | A Firewall Rule which allows all incoming TCP connections to all programs from any source and to all ports is created in Windows Firewall after Zabbix agent in… |
CVE-2022-4187 | Medium | 6.5 | 2022-11-30 | Insufficient policy enforcement in DevTools in Google Chrome on Windows prior to 108.0.5359.71 allowed a remote attacker to bypass filesystem restrictions via… |
CVE-2022-41157 | High | 8.1 | 2022-11-25 | A specific file on the sERP server if Kyungrinara(ERP solution) has a fixed password with the SYSTEM authority. This vulnerability could allow attackers to lea… |
CVE-2022-41156 | High | 7.8 | 2022-11-25 | Remote code execution vulnerability due to insufficient verification of URLs, etc. in OndiskPlayerAgent. A remote attacker could exploit the vulnerability to c… |
CVE-2022-38166 | High | 7.5 | 2022-11-25 | In F-Secure Endpoint Protection for Windows and macOS before channel with Capricorn database 2022-11-22_07, the aerdl.dll unpacker handler crashes. This can le… |
CVE-2022-4135 | Critical | 9.6 | 2022-11-25 | Heap buffer overflow in GPU in Google Chrome prior to 107.0.5304.121 allowed a remote attacker who had compromised the renderer process to potentially perform… |
CVE-2022-41924 | Critical | 9.6 | 2022-11-23 | A vulnerability identified in the Tailscale Windows client allows a malicious website to reconfigure the Tailscale daemon `tailscaled`, which can then be used… |
CVE-2022-40746 | High | 7.2 | 2022-11-21 | IBM i Access Family 1.1.2 through 1.1.4 and 1.1.4.3 through 1.1.9.0 could allow a local authenticated attacker to execute arbitrary code on the system, caused… |
CVE-2022-34667 | Medium | 4.4 | 2022-11-19 | NVIDIA CUDA Toolkit SDK contains a stack-based buffer overflow vulnerability in cuobjdump, where an unprivileged remote attacker could exploit this buffer over… |
CVE-2022-34665 | Medium | 6.5 | 2022-11-19 | NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where a local user with basic capabilities can cause a null-… |
CVE-2022-31617 | High | 7.8 | 2022-11-19 | NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys), where a local user with basic capabilities can cause an… |
CVE-2022-31616 | Medium | 6.1 | 2022-11-19 | NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape, where a local user with basic… |
CVE-2022-31613 | High | 7.1 | 2022-11-19 | NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer, where any local user can cause a null-pointer dereference, which may l… |
CVE-2022-31612 | High | 7.1 | 2022-11-19 | NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape, where a local user with basic… |
CVE-2022-31610 | High | 7.8 | 2022-11-19 | NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys), where a local user with basic capabilities can cause an… |
CVE-2022-31606 | High | 7.8 | 2022-11-19 | NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape, where a failure to properly v… |
CVE-2022-23748 | High | 7.8 | 2022-11-17 | mDNSResponder.exe is vulnerable to DLL Sideloading attack. Executable improperly specifies how to load the DLL, from which folder and under what conditions. In… |
CVE-2022-40752 | Critical | 9.8 | 2022-11-16 | IBM InfoSphere DataStage 11.7 is vulnerable to a command injection vulnerability due to improper neutralization of special elements. IBM X-Force ID: 236687. |
CVE-2022-40753 | Medium | 5.4 | 2022-11-15 | IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI… |
CVE-2022-40750 | Medium | 5.4 | 2022-11-11 | IBM WebSphere Application Server 8.5, and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the… |
CVE-2022-31772 | Medium | 5.3 | 2022-11-11 | IBM MQ 8.0, 9.0 LTS, 9.1 CD, 9.1 LTS, 9.2 CD, and 9.2 LTS could allow an authenticated and authorized user to cause a denial of service to the MQTT channels… |
CVE-2022-33973 | Low | 3.3 | 2022-11-11 | Improper access control in the Intel(R) WAPI Security software for Windows 10/11 before version 22.2150.0.1 may allow an authenticated user to potentially enab… |
CVE-2022-34666 | Medium | 6.5 | 2022-11-10 | NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where a local user with basic capabilities can cause a null-… |
CVE-2022-41128 | High | 8.8 | 2022-11-09 | Windows Scripting Languages Remote Code Execution Vulnerability |
CVE-2022-41125 | High | 7.8 | 2022-11-09 | Windows CNG Key Isolation Service Elevation of Privilege Vulnerability |
CVE-2022-41123 | High | 7.8 | 2022-11-09 | Microsoft Exchange Server Elevation of Privilege Vulnerability |
CVE-2022-41122 | Medium | 6.5 | 2022-11-09 | Microsoft SharePoint Server Spoofing Vulnerability |
CVE-2022-41120 | High | 7.8 | 2022-11-09 | Microsoft Windows System Monitor (Sysmon) Elevation of Privilege Vulnerability |
CVE-2022-41119 | High | 7.8 | 2022-11-09 | Visual Studio Remote Code Execution Vulnerability |
CVE-2022-41118 | High | 7.5 | 2022-11-09 | Windows Scripting Languages Remote Code Execution Vulnerability |
CVE-2022-41116 | Medium | 5.9 | 2022-11-09 | Windows Point-to-Point Tunneling Protocol Denial of Service Vulnerability |
CVE-2022-41114 | High | 7.0 | 2022-11-09 | Windows Bind Filter Driver Elevation of Privilege Vulnerability |
CVE-2022-41113 | High | 7.8 | 2022-11-09 | Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability |
CVE-2022-41109 | High | 7.8 | 2022-11-09 | Windows Win32k Elevation of Privilege Vulnerability |
CVE-2022-41107 | High | 7.8 | 2022-11-09 | Microsoft Office Graphics Remote Code Execution Vulnerability |