Microsoft
Page 95 of 100 — Microsoft CVEs from a corpus of 26181, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-41035 | Medium | 5.3 | 2022-10-11 | Microsoft Edge (Chromium-based) Spoofing Vulnerability |
CVE-2022-41034 | High | 7.8 | 2022-10-11 | Visual Studio Code Remote Code Execution Vulnerability |
CVE-2022-41033 | High | 7.8 | 2022-10-11 | Windows COM+ Event System Service Elevation of Privilege Vulnerability |
CVE-2022-41032 | High | 7.8 | 2022-10-11 | NuGet Client Elevation of Privilege Vulnerability |
CVE-2022-41031 | High | 7.8 | 2022-10-11 | Microsoft Word Remote Code Execution Vulnerability |
CVE-2022-38053 | High | 8.8 | 2022-10-11 | Microsoft SharePoint Server Remote Code Execution Vulnerability |
CVE-2022-38051 | High | 7.8 | 2022-10-11 | Windows Graphics Component Elevation of Privilege Vulnerability |
CVE-2022-38050 | High | 7.8 | 2022-10-11 | Win32k Elevation of Privilege Vulnerability |
CVE-2022-38049 | High | 7.8 | 2022-10-11 | Microsoft Office Graphics Remote Code Execution Vulnerability |
CVE-2022-38048 | High | 7.8 | 2022-10-11 | Microsoft Office Remote Code Execution Vulnerability |
CVE-2022-38047 | High | 8.1 | 2022-10-11 | Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability |
CVE-2022-38046 | High | 7.5 | 2022-10-11 | Web Account Manager Information Disclosure Vulnerability |
CVE-2022-38045 | High | 8.8 | 2022-10-11 | Windows Server Service Elevation of Privilege Vulnerability |
CVE-2022-38044 | High | 7.8 | 2022-10-11 | Windows CD-ROM File System Driver Remote Code Execution Vulnerability |
CVE-2022-38043 | Medium | 5.5 | 2022-10-11 | Windows Security Support Provider Interface Information Disclosure Vulnerability |
CVE-2022-38042 | High | 7.1 | 2022-10-11 | Active Directory Domain Services Elevation of Privilege Vulnerability |
CVE-2022-38041 | High | 7.5 | 2022-10-11 | Windows Secure Channel Denial of Service Vulnerability |
CVE-2022-38040 | High | 8.8 | 2022-10-11 | Microsoft ODBC Driver Remote Code Execution Vulnerability |
CVE-2022-38039 | High | 7.8 | 2022-10-11 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2022-38038 | High | 7.8 | 2022-10-11 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2022-38037 | High | 7.8 | 2022-10-11 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2022-38036 | High | 7.5 | 2022-10-11 | Internet Key Exchange (IKE) Protocol Denial of Service Vulnerability |
CVE-2022-38034 | High | 8.8 | 2022-10-11 | Windows Workstation Service Elevation of Privilege Vulnerability |
CVE-2022-38033 | Medium | 6.5 | 2022-10-11 | Windows Server Remotely Accessible Registry Keys Information Disclosure Vulnerability |
CVE-2022-38032 | Medium | 6.6 | 2022-10-11 | Windows Portable Device Enumerator Service Security Feature Bypass Vulnerability |
CVE-2022-38031 | High | 8.8 | 2022-10-11 | Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability |
CVE-2022-38030 | Medium | 4.3 | 2022-10-11 | Windows USB Serial Driver Information Disclosure Vulnerability |
CVE-2022-38029 | High | 7.0 | 2022-10-11 | Windows ALPC Elevation of Privilege Vulnerability |
CVE-2022-38028 | High | 7.8 | 2022-10-11 | Windows Print Spooler Elevation of Privilege Vulnerability |
CVE-2022-38027 | High | 7.0 | 2022-10-11 | Windows Storage Elevation of Privilege Vulnerability |
CVE-2022-38026 | Medium | 5.5 | 2022-10-11 | Windows DHCP Client Information Disclosure Vulnerability |
CVE-2022-38025 | Medium | 5.5 | 2022-10-11 | Windows Distributed File System (DFS) Information Disclosure Vulnerability |
CVE-2022-38022 | Low | 3.3 | 2022-10-11 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2022-38021 | High | 7.0 | 2022-10-11 | Connected User Experiences and Telemetry Elevation of Privilege Vulnerability |
CVE-2022-38017 | Medium | 6.8 | 2022-10-11 | StorSimple 8000 Series Elevation of Privilege Vulnerability |
CVE-2022-38016 | High | 8.8 | 2022-10-11 | Windows Local Security Authority (LSA) Elevation of Privilege Vulnerability |
CVE-2022-38003 | High | 7.8 | 2022-10-11 | Windows Resilient File System Elevation of Privilege |
CVE-2022-38001 | Medium | 6.5 | 2022-10-11 | Microsoft Office Spoofing Vulnerability |
CVE-2022-38000 | High | 8.1 | 2022-10-11 | Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability |
CVE-2022-37999 | High | 7.8 | 2022-10-11 | Windows Group Policy Preference Client Elevation of Privilege Vulnerability |
CVE-2022-37998 | High | 7.7 | 2022-10-11 | Windows Local Session Manager (LSM) Denial of Service Vulnerability |
CVE-2022-37997 | High | 7.8 | 2022-10-11 | Windows Graphics Component Elevation of Privilege Vulnerability |
CVE-2022-37996 | Medium | 5.5 | 2022-10-11 | Windows Kernel Memory Information Disclosure Vulnerability |
CVE-2022-37995 | High | 7.8 | 2022-10-11 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2022-37994 | High | 7.8 | 2022-10-11 | Windows Group Policy Preference Client Elevation of Privilege Vulnerability |
CVE-2022-37993 | High | 7.8 | 2022-10-11 | Windows Group Policy Preference Client Elevation of Privilege Vulnerability |
CVE-2022-37991 | High | 7.8 | 2022-10-11 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2022-37990 | High | 7.8 | 2022-10-11 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2022-37989 | High | 7.8 | 2022-10-11 | Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability |
CVE-2022-37988 | High | 7.8 | 2022-10-11 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2022-37987 | High | 7.8 | 2022-10-11 | Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability |
CVE-2022-37986 | High | 7.8 | 2022-10-11 | Windows Win32k Elevation of Privilege Vulnerability |
CVE-2022-37985 | Medium | 5.5 | 2022-10-11 | Windows Graphics Component Information Disclosure Vulnerability |
CVE-2022-37984 | High | 7.8 | 2022-10-11 | Windows WLAN Service Elevation of Privilege Vulnerability |
CVE-2022-37983 | High | 7.8 | 2022-10-11 | Microsoft DWM Core Library Elevation of Privilege Vulnerability |
CVE-2022-37982 | High | 8.8 | 2022-10-11 | Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability |
CVE-2022-37981 | Medium | 4.3 | 2022-10-11 | Windows Event Logging Service Denial of Service Vulnerability |
CVE-2022-37980 | High | 7.8 | 2022-10-11 | Windows DHCP Client Elevation of Privilege Vulnerability |
CVE-2022-37979 | High | 7.8 | 2022-10-11 | Windows Hyper-V Elevation of Privilege Vulnerability |
CVE-2022-37978 | High | 7.5 | 2022-10-11 | Windows Active Directory Certificate Services Security Feature Bypass |
CVE-2022-37977 | Medium | 6.5 | 2022-10-11 | Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability |
CVE-2022-37976 | High | 8.8 | 2022-10-11 | Active Directory Certificate Services Elevation of Privilege Vulnerability |
CVE-2022-37975 | High | 8.8 | 2022-10-11 | Windows Group Policy Elevation of Privilege Vulnerability |
CVE-2022-37974 | Medium | 6.5 | 2022-10-11 | Windows Mixed Reality Developer Tools Information Disclosure Vulnerability |
CVE-2022-37973 | High | 7.7 | 2022-10-11 | Windows Local Session Manager (LSM) Denial of Service Vulnerability |
CVE-2022-37971 | High | 7.1 | 2022-10-11 | Microsoft Windows Defender Elevation of Privilege Vulnerability |
CVE-2022-37970 | High | 7.8 | 2022-10-11 | Windows DWM Core Library Elevation of Privilege Vulnerability |
CVE-2022-37968 | Critical | 10.0 | 2022-10-11 | Microsoft has identified a vulnerability affecting the cluster connect feature of Azure Arc-enabled Kubernetes clusters. This vulnerability could allow an unau… |
CVE-2022-37965 | Medium | 5.9 | 2022-10-11 | Windows Point-to-Point Tunneling Protocol Denial of Service Vulnerability |
CVE-2022-35829 | Medium | 6.2 | 2022-10-11 | Service Fabric Explorer Spoofing Vulnerability |
CVE-2022-35770 | Medium | 6.5 | 2022-10-11 | Windows NTLM Spoofing Vulnerability |
CVE-2022-34689 | High | 7.5 | 2022-10-11 | Windows CryptoAPI Spoofing Vulnerability |
CVE-2022-33645 | High | 7.5 | 2022-10-11 | Windows TCP/IP Driver Denial of Service Vulnerability |
CVE-2022-33635 | High | 7.8 | 2022-10-11 | Windows GDI+ Remote Code Execution Vulnerability |
CVE-2022-33634 | High | 8.1 | 2022-10-11 | Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability |
CVE-2022-30198 | High | 8.1 | 2022-10-11 | Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability |
CVE-2022-24504 | High | 8.1 | 2022-10-11 | Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability |
CVE-2022-22035 | High | 8.1 | 2022-10-11 | Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability |
CVE-2022-41749 | High | 7.8 | 2022-10-10 | An origin validation error vulnerability in Trend Micro Apex One agents could allow a local attacker to escalate privileges on affected installations. Please n… |
CVE-2022-41748 | Medium | 6.7 | 2022-10-10 | A registry permissions vulnerability in the Trend Micro Apex One Data Loss Prevention (DLP) module could allow a local attacker with administrative credentials… |
CVE-2022-41747 | High | 7.8 | 2022-10-10 | An improper certification validation vulnerability in Trend Micro Apex One agents could allow a local attacker to load a DLL file with system service privilege… |
CVE-2022-41746 | Critical | 9.1 | 2022-10-10 | A forced browsing vulnerability in Trend Micro Apex One could allow an attacker with access to the Apex One console on affected installations to escalate privi… |
CVE-2022-41745 | High | 7.0 | 2022-10-10 | An Out-of-Bounds access vulnerability in Trend Micro Apex One could allow a local attacker to create a specially crafted message to cause memory corruption on… |
CVE-2022-41744 | High | 7.0 | 2022-10-10 | A Time-of-Check Time-Of-Use vulnerability in the Trend Micro Apex One Vulnerability Protection integrated component could allow a local attacker to escalate pr… |
CVE-2022-39959 | High | 7.8 | 2022-10-07 | Panini Everest Engine 2.0.4 allows unprivileged users to create a file named Everest.exe in the %PROGRAMDATA%\Panini folder. This leads to privilege escalation… |
CVE-2022-41291 | Medium | 6.5 | 2022-10-07 | IBM InfoSphere Information Server 11.7 does not invalidate session after logout which could allow an authenticated user to impersonate another user on the syst… |
CVE-2022-36772 | Medium | 6.5 | 2022-10-07 | IBM InfoSphere Information Server 11.7 could allow an authenticated user to obtain sensitive information that should only be available to a privileged user. |
CVE-2022-26238 | Medium | 5.5 | 2022-10-06 | The default privileges for the running service Normand Service Manager in Beckman Coulter Remisol Advance v2.0.12.1 and prior allows non-privileged users to ov… |
CVE-2022-26236 | Medium | 5.5 | 2022-10-06 | The default privileges for the running service Normand Remisol Advance Launcher in Beckman Coulter Remisol Advance v2.0.12.1 and prior allows non-privileged us… |
CVE-2022-41294 | Medium | 6.5 | 2022-10-06 | IBM Robotic Process Automation 21.0.0, 21.0.1, 21.0.2, 21.0.3, and 21.0.4 is vulnerable to cross origin resource sharing using the bot api. IBM X-Force ID: 236… |
CVE-2022-38709 | Medium | 6.1 | 2022-10-06 | IBM Robotic Process Automation 21.0.1, 21.0.2, and 21.0.3 for Cloud Pak is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitra… |
CVE-2022-36774 | Medium | 5.3 | 2022-10-06 | IBM Robotic Process Automation 21.0.0, 21.0.1, and 21.0.2 is vulnerable to man in the middle attacks through manipulation of the client proxy configuration. IB… |
CVE-2022-26240 | Medium | 6.5 | 2022-10-06 | The default privileges for the running service Normand Message Buffer in Beckman Coulter Remisol Advance v2.0.12.1 and prior allows non-privileged users to ove… |
CVE-2022-26239 | Medium | 5.5 | 2022-10-06 | The default privileges for the running service Normand License Manager in Beckman Coulter Remisol Advance v2.0.12.1 and prior allows unprivileged users to over… |
CVE-2022-26237 | Medium | 5.5 | 2022-10-06 | The default privileges for the running service Normand Viewer Service in Beckman Coulter Remisol Advance v2.0.12.1 and prior allows non-privileged users to ove… |
CVE-2022-41082 | High | 8.0 | 2022-10-03 | Microsoft Exchange Server Remote Code Execution Vulnerability |
CVE-2022-41040 | High | 8.8 | 2022-10-03 | Microsoft Exchange Server Elevation of Privilege Vulnerability |
CVE-2022-41975 | High | 7.8 | 2022-09-30 | RealVNC VNC Server before 6.11.0 and VNC Viewer before 6.22.826 on Windows allow local privilege escalation via MSI installer Repair mode. |
CVE-2022-2778 | Critical | 9.8 | 2022-09-30 | In affected versions of Octopus Deploy it is possible to bypass rate limiting on login using null bytes. |
CVE-2022-40710 | High | 7.8 | 2022-09-28 | A link following vulnerability in Trend Micro Deep Security 20 and Cloud One - Workload Security Agent for Windows could allow a local attacker to escalate pri… |