Microsoft
Page 94 of 100 — Microsoft CVEs from a corpus of 26181, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-41106 | High | 8.8 | 2022-11-09 | Microsoft Excel Remote Code Execution Vulnerability |
CVE-2022-41105 | Medium | 5.5 | 2022-11-09 | Microsoft Excel Information Disclosure Vulnerability |
CVE-2022-41104 | Medium | 5.5 | 2022-11-09 | Microsoft Excel Security Feature Bypass Vulnerability |
CVE-2022-41103 | Medium | 5.5 | 2022-11-09 | Microsoft Word Information Disclosure Vulnerability |
CVE-2022-41102 | High | 7.8 | 2022-11-09 | Windows Overlay Filter Elevation of Privilege Vulnerability |
CVE-2022-41101 | High | 7.8 | 2022-11-09 | Windows Overlay Filter Elevation of Privilege Vulnerability |
CVE-2022-41100 | High | 7.8 | 2022-11-09 | Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability |
CVE-2022-41099 | Medium | 4.6 | 2022-11-09 | BitLocker Security Feature Bypass Vulnerability |
CVE-2022-41098 | Medium | 5.5 | 2022-11-09 | Windows GDI+ Information Disclosure Vulnerability |
CVE-2022-41097 | Medium | 6.5 | 2022-11-09 | Network Policy Server (NPS) RADIUS Protocol Information Disclosure Vulnerability |
CVE-2022-41096 | High | 7.8 | 2022-11-09 | Microsoft DWM Core Library Elevation of Privilege Vulnerability |
CVE-2022-41095 | High | 7.8 | 2022-11-09 | Windows Digital Media Receiver Elevation of Privilege Vulnerability |
CVE-2022-41093 | High | 7.8 | 2022-11-09 | Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability |
CVE-2022-41092 | High | 7.8 | 2022-11-09 | Windows Win32k Elevation of Privilege Vulnerability |
CVE-2022-41091 | Medium | 5.4 | 2022-11-09 | Windows Mark of the Web Security Feature Bypass Vulnerability |
CVE-2022-41090 | Medium | 5.9 | 2022-11-09 | Windows Point-to-Point Tunneling Protocol Denial of Service Vulnerability |
CVE-2022-41088 | High | 8.1 | 2022-11-09 | Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability |
CVE-2022-41086 | Medium | 6.4 | 2022-11-09 | Windows Group Policy Elevation of Privilege Vulnerability |
CVE-2022-41085 | High | 7.5 | 2022-11-09 | Azure CycleCloud Elevation of Privilege Vulnerability |
CVE-2022-41080 | High | 8.8 | 2022-11-09 | Microsoft Exchange Server Elevation of Privilege Vulnerability |
CVE-2022-41079 | High | 8.0 | 2022-11-09 | Microsoft Exchange Server Spoofing Vulnerability |
CVE-2022-41078 | High | 8.0 | 2022-11-09 | Microsoft Exchange Server Spoofing Vulnerability |
CVE-2022-41073 | High | 7.8 | 2022-11-09 | Windows Print Spooler Elevation of Privilege Vulnerability |
CVE-2022-41066 | Medium | 4.4 | 2022-11-09 | Microsoft Dynamics Business Central Information Disclosure Vulnerability |
CVE-2022-41064 | Medium | 5.8 | 2022-11-09 | .NET Framework Information Disclosure Vulnerability |
CVE-2022-41063 | High | 7.8 | 2022-11-09 | Microsoft Excel Remote Code Execution Vulnerability |
CVE-2022-41062 | High | 8.8 | 2022-11-09 | Microsoft SharePoint Server Remote Code Execution Vulnerability |
CVE-2022-41061 | High | 7.8 | 2022-11-09 | Microsoft Word Remote Code Execution Vulnerability |
CVE-2022-41060 | Medium | 5.5 | 2022-11-09 | Microsoft Word Information Disclosure Vulnerability |
CVE-2022-41058 | High | 7.5 | 2022-11-09 | Windows Network Address Translation (NAT) Denial of Service Vulnerability |
CVE-2022-41057 | High | 7.8 | 2022-11-09 | Windows HTTP.sys Elevation of Privilege Vulnerability |
CVE-2022-41056 | High | 7.5 | 2022-11-09 | Network Policy Server (NPS) RADIUS Protocol Denial of Service Vulnerability |
CVE-2022-41055 | Medium | 5.5 | 2022-11-09 | Windows Human Interface Device Information Disclosure Vulnerability |
CVE-2022-41054 | High | 7.8 | 2022-11-09 | Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability |
CVE-2022-41053 | High | 7.5 | 2022-11-09 | Windows Kerberos Denial of Service Vulnerability |
CVE-2022-41052 | High | 7.8 | 2022-11-09 | Windows Graphics Component Remote Code Execution Vulnerability |
CVE-2022-41051 | High | 7.8 | 2022-11-09 | Azure RTOS GUIX Studio Remote Code Execution Vulnerability |
CVE-2022-41050 | High | 7.8 | 2022-11-09 | Windows Extensible File Allocation Table Elevation of Privilege Vulnerability |
CVE-2022-41049 | Medium | 5.4 | 2022-11-09 | Windows Mark of the Web Security Feature Bypass Vulnerability |
CVE-2022-41048 | High | 8.8 | 2022-11-09 | Microsoft ODBC Driver Remote Code Execution Vulnerability |
CVE-2022-41047 | High | 8.8 | 2022-11-09 | Microsoft ODBC Driver Remote Code Execution Vulnerability |
CVE-2022-41045 | High | 7.8 | 2022-11-09 | Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability |
CVE-2022-41044 | High | 8.1 | 2022-11-09 | Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability |
CVE-2022-41039 | High | 8.1 | 2022-11-09 | Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability |
CVE-2022-38023 | High | 8.1 | 2022-11-09 | Netlogon RPC Elevation of Privilege Vulnerability |
CVE-2022-38015 | Medium | 6.5 | 2022-11-09 | Windows Hyper-V Denial of Service Vulnerability |
CVE-2022-38014 | High | 7.0 | 2022-11-09 | Windows Subsystem for Linux (WSL2) Kernel Elevation of Privilege Vulnerability |
CVE-2022-37992 | High | 7.8 | 2022-11-09 | Windows Group Policy Elevation of Privilege Vulnerability |
CVE-2022-37967 | High | 7.2 | 2022-11-09 | Windows Kerberos Elevation of Privilege Vulnerability |
CVE-2022-37966 | High | 8.1 | 2022-11-09 | Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability |
CVE-2022-27674 | High | 7.5 | 2022-11-09 | Insufficient validation in the IOCTL input/output buffer in AMD μProf may allow an attacker to bypass bounds checks potentially leading to a Windows kernel cra… |
CVE-2022-23831 | High | 7.5 | 2022-11-09 | Insufficient validation of the IOCTL input buffer in AMD μProf may allow an attacker to send an arbitrary buffer leading to a potential Windows kernel crash re… |
CVE-2022-41205 | Medium | 5.5 | 2022-11-08 | SAP GUI allows an authenticated attacker to execute scripts in the local network. On successful exploitation, the attacker can gain access to registries which… |
CVE-2022-39343 | Medium | 5.6 | 2022-11-08 | Azure RTOS FileX is a FAT-compatible file system that’s fully integrated with Azure RTOS ThreadX. In versions before 6.2.0, the Fault Tolerant feature of Azure… |
CVE-2022-36077 | High | 7.2 | 2022-11-08 | The Electron framework enables writing cross-platform desktop applications using JavaScript, HTML and CSS. In versions prior to 21.0.0-beta.1, 20.0.1, 19.0.11… |
CVE-2022-2188 | Medium | 6.5 | 2022-11-07 | Privilege escalation vulnerability in DXL Broker for Windows prior to 6.0.0.280 allows local users to gain elevated privileges by exploiting weak directory con… |
CVE-2022-39344 | Critical | 9.8 | 2022-11-04 | Azure RTOS USBX is a USB host, device, and on-the-go (OTG) embedded stack, that is fully integrated with Azure RTOS ThreadX. Prior to version 6.1.12, the USB D… |
CVE-2022-40747 | Critical | 9.1 | 2022-11-03 | "IBM InfoSphere Information Server 11.7 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploi… |
CVE-2022-40235 | Medium | 6.5 | 2022-11-03 | "IBM InfoSphere Information Server 11.7 could allow a user to cause a denial of service by removing the ability to run jobs due to improper input validation. I… |
CVE-2022-38712 | Medium | 5.9 | 2022-11-03 | "IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 Web services could allow a man-in-the-middle attacker to conduct SOAPAction spoofing to execute unwant… |
CVE-2022-38710 | Medium | 5.3 | 2022-11-03 | IBM Robotic Process Automation 21.0.1 and 21.0.2 could disclose sensitive version to an unauthorized control sphere information that could aid in further attac… |
CVE-2022-35717 | High | 7.8 | 2022-11-03 | "IBM InfoSphere Information Server 11.7 could allow a locally authenticated attacker to execute arbitrary commands on the system by sending a specially crafted… |
CVE-2022-35642 | Medium | 5.4 | 2022-11-03 | "IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI… |
CVE-2022-30615 | Medium | 5.4 | 2022-11-03 | "IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI… |
CVE-2022-30608 | High | 8.8 | 2022-11-03 | "IBM InfoSphere Information Server 11.7 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions… |
CVE-2022-22442 | Medium | 6.5 | 2022-11-03 | "IBM InfoSphere Information Server 11.7 could allow an authenticated user to access information restricted to users with elevated privileges due to improper ac… |
CVE-2022-22425 | Critical | 9.8 | 2022-11-03 | "IBM InfoSphere Information Server 11.7 is potentially vulnerable to CSV Injection. A remote attacker could execute arbitrary commands on the system, caused by… |
CVE-2022-41716 | High | 7.5 | 2022-11-02 | Due to unsanitized NUL values, attackers may be able to maliciously set environment variables on Windows. In syscall.StartProcess and os/exec.Cmd, invalid envi… |
CVE-2022-39949 | Medium | 4.4 | 2022-11-02 | An improper control of a resource through its lifetime vulnerability [CWE-664] in FortiEDR CollectorWindows 4.0.0 through 4.1, 5.0.0 through 5.0.3.751, 5.1.0 m… |
CVE-2022-41552 | Critical | 9.8 | 2022-11-01 | Server-Side Request Forgery (SSRF) vulnerability in Hitachi Infrastructure Analytics Advisor on Linux (Data Center Analytics, Analytics probe components), Hita… |
CVE-2020-36605 | Medium | 6.6 | 2022-11-01 | Incorrect Default Permissions vulnerability in Hitachi Infrastructure Analytics Advisor on Linux (Analytics probe component), Hitachi Ops Center Analyzer on Li… |
CVE-2022-3734 | Medium | 6.3 | 2022-10-28 | A vulnerability was found in a port or fork of Redis. It has been declared as critical. This vulnerability affects unknown code in the library C:/Program Files… |
CVE-2022-39327 | High | 8.1 | 2022-10-25 | Azure CLI is the command-line interface for Microsoft Azure. In versions previous to 2.40.0, Azure CLI contains a vulnerability for potential code injection. C… |
CVE-2022-38436 | High | 7.8 | 2022-10-25 | Adobe Illustrator versions 26.4 (and earlier) and 25.4.7 (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which c… |
CVE-2022-38435 | High | 7.8 | 2022-10-25 | Adobe Illustrator versions 26.4 (and earlier) and 25.4.7 (and earlier) are affected by an Improper Input Validation vulnerability that could result in arbitrar… |
CVE-2022-36122 | High | 7.8 | 2022-10-21 | The Automox Agent before 40 on Windows incorrectly sets permissions on key files. |
CVE-2022-23769 | High | 7.5 | 2022-10-17 | Remote code execution vulnerability due to insufficient user privilege verification in reverseWall-MDS. Remote attackers can exploit the vulnerability such as… |
CVE-2022-42342 | Medium | 5.5 | 2022-10-14 | Adobe Acrobat Reader versions 22.002.20212 (and earlier) and 20.005.30381 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to… |
CVE-2022-42339 | High | 7.8 | 2022-10-14 | Adobe Acrobat Reader versions 22.002.20212 (and earlier) and 20.005.30381 (and earlier) are affected by a Stack-based Buffer Overflow vulnerability that could… |
CVE-2022-38450 | High | 7.8 | 2022-10-14 | Adobe Acrobat Reader versions 22.002.20212 (and earlier) and 20.005.30381 (and earlier) are affected by a Stack-based Buffer Overflow vulnerability that could… |
CVE-2022-38449 | Medium | 5.5 | 2022-10-14 | Adobe Acrobat Reader versions 22.002.20212 (and earlier) and 20.005.30381 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to… |
CVE-2022-38448 | High | 7.8 | 2022-10-14 | Adobe Dimension versions 3.4.5 is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user… |
CVE-2022-38447 | High | 7.8 | 2022-10-14 | Adobe Dimension versions 3.4.5 is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user… |
CVE-2022-38446 | High | 7.8 | 2022-10-14 | Adobe Dimension versions 3.4.5 is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user… |
CVE-2022-38445 | High | 7.8 | 2022-10-14 | Adobe Dimension versions 3.4.5 is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user… |
CVE-2022-38444 | High | 7.8 | 2022-10-14 | Adobe Dimension versions 3.4.5 is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user… |
CVE-2022-38443 | Medium | 5.5 | 2022-10-14 | Adobe Dimension versions 3.4.5 is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage… |
CVE-2022-38442 | High | 7.8 | 2022-10-14 | Adobe Dimension versions 3.4.5 is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user… |
CVE-2022-38441 | High | 7.8 | 2022-10-14 | Adobe Dimension versions 3.4.5 is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an… |
CVE-2022-38440 | High | 7.8 | 2022-10-14 | Adobe Dimension versions 3.4.5 is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an… |
CVE-2022-38437 | Medium | 5.5 | 2022-10-14 | Adobe Acrobat Reader versions 22.002.20212 (and earlier) and 20.005.30381 (and earlier) are affected by a Use After Free vulnerability that could lead to discl… |
CVE-2022-35691 | Medium | 5.5 | 2022-10-14 | Adobe Acrobat Reader versions 22.002.20212 (and earlier) and 20.005.30381 (and earlier) are affected by a NULL Pointer Dereference vulnerability. An unauthenti… |
CVE-2022-28887 | Medium | 4.3 | 2022-10-12 | Multiple Denial-of-Service (DoS) vulnerability was discovered in F-Secure & WithSecure products whereby the aerdl.dll unpacker handler function crashes. This c… |
CVE-2022-41083 | High | 7.8 | 2022-10-11 | Visual Studio Code Elevation of Privilege Vulnerability |
CVE-2022-41081 | High | 8.1 | 2022-10-11 | Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability |
CVE-2022-41043 | Low | 3.3 | 2022-10-11 | Microsoft Office Information Disclosure Vulnerability |
CVE-2022-41042 | High | 7.4 | 2022-10-11 | Visual Studio Code Information Disclosure Vulnerability |
CVE-2022-41038 | High | 8.8 | 2022-10-11 | Microsoft SharePoint Server Remote Code Execution Vulnerability |
CVE-2022-41037 | High | 8.8 | 2022-10-11 | Microsoft SharePoint Server Remote Code Execution Vulnerability |
CVE-2022-41036 | High | 8.8 | 2022-10-11 | Microsoft SharePoint Server Remote Code Execution Vulnerability |