Microsoft
Page 97 of 100 — Microsoft CVEs from a corpus of 26181, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-35841 | High | 8.8 | 2022-09-13 | Windows Enterprise App Management Service Remote Code Execution Vulnerability |
CVE-2022-35840 | High | 8.8 | 2022-09-13 | Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability |
CVE-2022-35838 | High | 7.5 | 2022-09-13 | HTTP V3 Denial of Service Vulnerability |
CVE-2022-35837 | Medium | 6.5 | 2022-09-13 | Windows Graphics Component Information Disclosure Vulnerability |
CVE-2022-35836 | High | 8.8 | 2022-09-13 | Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability |
CVE-2022-35835 | High | 8.8 | 2022-09-13 | Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability |
CVE-2022-35834 | High | 8.8 | 2022-09-13 | Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability |
CVE-2022-35833 | High | 7.5 | 2022-09-13 | Windows Secure Channel Denial of Service Vulnerability |
CVE-2022-35832 | Medium | 5.5 | 2022-09-13 | Windows Event Tracing Denial of Service Vulnerability |
CVE-2022-35831 | Medium | 5.5 | 2022-09-13 | Windows Remote Access Connection Manager Information Disclosure Vulnerability |
CVE-2022-35830 | High | 8.1 | 2022-09-13 | Remote Procedure Call Runtime Remote Code Execution Vulnerability |
CVE-2022-35828 | High | 7.8 | 2022-09-13 | Microsoft Defender for Endpoint for Mac Elevation of Privilege Vulnerability |
CVE-2022-35823 | High | 8.8 | 2022-09-13 | Microsoft SharePoint Remote Code Execution Vulnerability |
CVE-2022-35805 | High | 8.8 | 2022-09-13 | Microsoft Dynamics CRM (on-premises) Remote Code Execution Vulnerability |
CVE-2022-35803 | High | 7.8 | 2022-09-13 | Windows Common Log File System Driver Elevation of Privilege Vulnerability |
CVE-2022-34734 | High | 8.8 | 2022-09-13 | Microsoft ODBC Driver Remote Code Execution Vulnerability |
CVE-2022-34733 | High | 8.8 | 2022-09-13 | Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability |
CVE-2022-34732 | High | 8.8 | 2022-09-13 | Microsoft ODBC Driver Remote Code Execution Vulnerability |
CVE-2022-34731 | High | 8.8 | 2022-09-13 | Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability |
CVE-2022-34730 | High | 8.8 | 2022-09-13 | Microsoft ODBC Driver Remote Code Execution Vulnerability |
CVE-2022-34729 | High | 7.8 | 2022-09-13 | Windows GDI Elevation of Privilege Vulnerability |
CVE-2022-34728 | Medium | 5.5 | 2022-09-13 | Windows Graphics Component Information Disclosure Vulnerability |
CVE-2022-34727 | High | 8.8 | 2022-09-13 | Microsoft ODBC Driver Remote Code Execution Vulnerability |
CVE-2022-34726 | High | 8.8 | 2022-09-13 | Microsoft ODBC Driver Remote Code Execution Vulnerability |
CVE-2022-34725 | High | 7.0 | 2022-09-13 | Windows ALPC Elevation of Privilege Vulnerability |
CVE-2022-34724 | High | 7.5 | 2022-09-13 | Windows DNS Server Denial of Service Vulnerability |
CVE-2022-34723 | Medium | 5.5 | 2022-09-13 | Windows DPAPI (Data Protection Application Programming Interface) Information Disclosure Vulnerability |
CVE-2022-34722 | Critical | 9.8 | 2022-09-13 | Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability |
CVE-2022-34721 | Critical | 9.8 | 2022-09-13 | Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability |
CVE-2022-34720 | High | 7.5 | 2022-09-13 | Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability |
CVE-2022-34719 | High | 7.8 | 2022-09-13 | Windows Distributed File System (DFS) Elevation of Privilege Vulnerability |
CVE-2022-34718 | Critical | 9.8 | 2022-09-13 | Windows TCP/IP Remote Code Execution Vulnerability |
CVE-2022-34700 | High | 8.8 | 2022-09-13 | Microsoft Dynamics CRM (on-premises) Remote Code Execution Vulnerability |
CVE-2022-33679 | High | 8.1 | 2022-09-13 | Windows Kerberos Elevation of Privilege Vulnerability |
CVE-2022-33647 | High | 8.1 | 2022-09-13 | Windows Kerberos Elevation of Privilege Vulnerability |
CVE-2022-30200 | High | 7.8 | 2022-09-13 | Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability |
CVE-2022-30196 | High | 8.2 | 2022-09-13 | Windows Secure Channel Denial of Service Vulnerability |
CVE-2022-30170 | High | 7.3 | 2022-09-13 | Windows Credential Roaming Service Elevation of Privilege Vulnerability |
CVE-2022-26929 | High | 7.8 | 2022-09-13 | .NET Framework Remote Code Execution Vulnerability |
CVE-2022-26928 | High | 7.0 | 2022-09-13 | Windows Photo Import API Elevation of Privilege Vulnerability |
CVE-2022-34165 | Medium | 5.4 | 2022-09-09 | IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 and IBM WebSphere Application Server Liberty 17.0.0.3 through 22.0.0.9 are vulnerable to HTTP header in… |
CVE-2022-36088 | Medium | 5.0 | 2022-09-07 | GoCD is a continuous delivery server. Windows installations via either the server or agent installers for GoCD prior to 22.2.0 do not adequately restrict permi… |
CVE-2022-36070 | High | 7.3 | 2022-09-07 | Poetry is a dependency manager for Python. To handle dependencies that come from a Git repository, Poetry executes various commands, e.g. `git config`. These c… |
CVE-2022-37771 | Medium | 6.7 | 2022-09-06 | IObit Malware Fighter v9.2 for Microsoft Windows lacks tamper protection, allowing authenticated attackers with Administrator privileges to modify processes wi… |
CVE-2022-23678 | Medium | 5.9 | 2022-09-06 | A vulnerability in the Aruba Virtual Intranet Access (VIA) client for Microsoft Windows operating system client communications that could allow for an attacker… |
CVE-2022-34883 | High | 7.2 | 2022-09-06 | OS Command Injection vulnerability in Hitachi RAID Manager Storage Replication Adapter allows remote authenticated users to execute arbitrary OS commands. This… |
CVE-2022-34882 | Critical | 9.0 | 2022-09-06 | Information Exposure Through an Error Message vulnerability in Hitachi RAID Manager Storage Replication Adapter allows remote authenticated users to gain sensi… |
CVE-2022-28199 | Medium | 6.5 | 2022-09-01 | NVIDIA’s distribution of the Data Plane Development Kit (MLNX_DPDK) contains a vulnerability in the network stack, where error recovery is not handled properly… |
CVE-2022-37173 | High | 7.8 | 2022-08-30 | An issue in the installer of gvim 9.0.0000 allows authenticated attackers to execute arbitrary code via a binary hijacking attack on C:\Program.exe. |
CVE-2022-36564 | High | 8.8 | 2022-08-30 | Incorrect access control in the install directory (C:\Strawberry) of StrawberryPerl v5.32.1.1 and below allows authenticated attackers to execute arbitrary cod… |
CVE-2022-2330 | Medium | 6.5 | 2022-08-30 | Improper Restriction of XML External Entity Reference vulnerability in DLP Endpoint for Windows prior to 11.9.100 allows a remote attacker to cause the DLP Age… |
CVE-2022-25641 | Medium | 5.5 | 2022-08-29 | Foxit PDF Reader before 11.2.2 and PDF Editor before 11.2.2, and PhantomPDF before 10.1.8, mishandle cross-reference information during compressed-object parsi… |
CVE-2021-41785 | High | 7.8 | 2022-08-29 | Foxit PDF Reader before 11.1 and PDF Editor before 11.1, and PhantomPDF before 10.1.6, allow attackers to trigger a use-after-free and execute arbitrary code b… |
CVE-2021-41784 | High | 7.8 | 2022-08-29 | Foxit PDF Reader before 11.1 and PDF Editor before 11.1, and PhantomPDF before 10.1.6, allow attackers to trigger a use-after-free and execute arbitrary code b… |
CVE-2021-41783 | High | 7.8 | 2022-08-29 | Foxit PDF Reader before 11.1 and PDF Editor before 11.1, and PhantomPDF before 10.1.6, allow attackers to trigger a use-after-free and execute arbitrary code b… |
CVE-2021-41782 | High | 7.8 | 2022-08-29 | Foxit PDF Reader before 11.1 and PDF Editor before 11.1, and PhantomPDF before 10.1.6, allow attackers to trigger a use-after-free and execute arbitrary code b… |
CVE-2021-41781 | High | 7.8 | 2022-08-29 | Foxit PDF Reader before 11.1 and PDF Editor before 11.1, and PhantomPDF before 10.1.6, allow attackers to trigger a use-after-free and execute arbitrary code b… |
CVE-2021-41780 | High | 7.8 | 2022-08-29 | Foxit PDF Reader before 11.1 and PDF Editor before 11.1, and PhantomPDF before 10.1.6, allow attackers to trigger a use-after-free and execute arbitrary code b… |
CVE-2021-40326 | Medium | 5.5 | 2022-08-29 | Foxit PDF Reader before 11.1 and PDF Editor before 11.1, and PhantomPDF before 10.1.6, mishandle hidden and incremental data in signed documents. An attacker c… |
CVE-2022-34303 | Medium | 6.7 | 2022-08-26 | A flaw was found in Eurosoft bootloaders before 2022-06-01. An attacker may use this bootloader to bypass or tamper with Secure Boot protections. In order to l… |
CVE-2022-34302 | Medium | 6.7 | 2022-08-26 | A flaw was found in New Horizon Datasys bootloaders before 2022-06-01. An attacker may use this bootloader to bypass or tamper with Secure Boot protections. In… |
CVE-2022-34301 | Medium | 6.7 | 2022-08-26 | A flaw was found in CryptoPro Secure Disk bootloaders before 2022-06-01. An attacker may use this bootloader to bypass or tamper with Secure Boot protections… |
CVE-2022-31676 | High | 7.8 | 2022-08-23 | VMware Tools (12.0.0, 11.x.y and 10.x.y) contains a local privilege escalation vulnerability. A malicious actor with local non-administrative access to the Gue… |
CVE-2022-28883 | Low | 3.5 | 2022-08-23 | A Denial-of-Service (DoS) vulnerability was discovered in F-Secure & WithSecure products whereby the aerdl unpack function crashes. This can lead to a possible… |
CVE-2022-28882 | Medium | 4.3 | 2022-08-23 | A Denial-of-Service (DoS) vulnerability was discovered in F-Secure & WithSecure products whereby the aegen.dll will go into an infinite loop when unpacking PE… |
CVE-2022-22489 | Critical | 9.1 | 2022-08-19 | IBM MQ 8.0, (9.0, 9.1, 9.2 LTS), and (9.1 and 9.2 CD) are vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attack… |
CVE-2022-36263 | High | 7.3 | 2022-08-19 | StreamLabs Desktop Application 1.9.0 is vulnerable to Incorrect Access Control via obs64.exe. An attacker can execute arbitrary code via a crafted .exe file. |
CVE-2022-2075 | High | 7.5 | 2022-08-19 | In affected versions of Octopus Deploy it is possible to perform a Regex Denial of Service targeting the build information request validation. |
CVE-2022-2074 | High | 7.5 | 2022-08-19 | In affected versions of Octopus Deploy it is possible to perform a Regex Denial of Service using the Variable Project Template. |
CVE-2022-2049 | High | 7.5 | 2022-08-19 | In affected versions of Octopus Deploy it is possible to perform a Regex Denial of Service via the package upload function. |
CVE-2022-1901 | Medium | 5.3 | 2022-08-19 | In affected versions of Octopus Deploy it is possible to unmask sensitive variables by using variable preview. |
CVE-2022-36947 | Critical | 9.8 | 2022-08-18 | Unsafe Parsing of a PNG tRNS chunk in FastStone Image Viewer through 7.5 results in a stack buffer overflow. |
CVE-2022-23764 | High | 8.8 | 2022-08-17 | The vulnerability causing from insufficient verification procedures for downloaded files during WebCube update. Remote attackers can bypass this verification l… |
CVE-2021-39087 | Medium | 6.5 | 2022-08-16 | IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.5, 6.1.0.0 through 6.1.0.4, and 6.1.1.0 through 6.1.1.1 could allow an authenticated user to… |
CVE-2021-39086 | Medium | 5.3 | 2022-08-16 | IBM Sterling File Gateway 6.0.0.0 through 6.0.3.5, 6.1.0.0 through 6.1.0.4, and 6.1.1.0 through 6.1.1.1 could allow a remote attacker to obtain sensitive infor… |
CVE-2021-39085 | Critical | 9.8 | 2022-08-16 | IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.5, 6.1.0.0 through 6.1.0.4, and 6.1.1.0 through 6.1.1.1 is vulnerable to SQL injection. A re… |
CVE-2021-39035 | Medium | 5.4 | 2022-08-16 | IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.5, 6.1.0.0 through 6.1.0.4, and 6.1.1.0 through 6.1.1.1 is vulnerable to cross-site scriptin… |
CVE-2021-30490 | High | 7.8 | 2022-08-16 | upsMonitor in ViewPower (aka ViewPowerHTML) 1.04-21012 through 1.04-21353 has insecure permissions for the service binary that enable an Authenticated User to… |
CVE-2022-35822 | High | 7.1 | 2022-08-15 | Windows Defender Credential Guard Security Feature Bypass Vulnerability |
CVE-2022-34711 | High | 7.8 | 2022-08-15 | Windows Defender Credential Guard Elevation of Privilege Vulnerability |
CVE-2022-38221 | Critical | 9.8 | 2022-08-15 | A buffer overflow in the FTcpListener thread in The Isle Evrima (the dedicated server on Windows and Linux) 0.9.88.07 before 2022-08-12 allows a remote attacke… |
CVE-2022-2622 | Medium | 6.5 | 2022-08-12 | Insufficient validation of untrusted input in Safe Browsing in Google Chrome on Windows prior to 104.0.5112.79 allowed a remote attacker to bypass download res… |
CVE-2022-35678 | Medium | 5.5 | 2022-08-11 | Adobe Acrobat Reader versions 22.001.20169 (and earlier), 20.005.30362 (and earlier) and 17.012.30249 (and earlier) are affected by an out-of-bounds read vulne… |
CVE-2022-35677 | High | 7.8 | 2022-08-11 | Adobe FrameMaker versions 2019 Update 8 (and earlier) and 2020 Update 4 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could res… |
CVE-2022-35676 | High | 7.8 | 2022-08-11 | Adobe FrameMaker versions 2019 Update 8 (and earlier) and 2020 Update 4 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could res… |
CVE-2022-35675 | High | 7.8 | 2022-08-11 | Adobe FrameMaker versions 2019 Update 8 (and earlier) and 2020 Update 4 (and earlier) are affected by a Use After Free vulnerability that could result in arbit… |
CVE-2022-35674 | High | 7.8 | 2022-08-11 | Adobe FrameMaker versions 2019 Update 8 (and earlier) and 2020 Update 4 (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafte… |
CVE-2022-35673 | High | 7.8 | 2022-08-11 | Adobe FrameMaker versions 2019 Update 8 (and earlier) and 2020 Update 4 (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafte… |
CVE-2022-35671 | Medium | 5.5 | 2022-08-11 | Adobe Acrobat Reader versions 22.001.20169 (and earlier), 20.005.30362 (and earlier) and 17.012.30249 (and earlier) are affected by an out-of-bounds read vulne… |
CVE-2022-35670 | Medium | 5.5 | 2022-08-11 | Adobe Acrobat Reader versions 22.001.20169 (and earlier), 20.005.30362 (and earlier) and 17.012.30249 (and earlier) are affected by a Use After Free vulnerabil… |
CVE-2022-35668 | Medium | 5.5 | 2022-08-11 | Adobe Acrobat Reader versions 22.001.20169 (and earlier), 20.005.30362 (and earlier) and 17.012.30249 (and earlier) are affected by an Improper Input Validatio… |
CVE-2022-35667 | High | 7.8 | 2022-08-11 | Adobe Acrobat Reader versions 22.001.20169 (and earlier), 20.005.30362 (and earlier) and 17.012.30249 (and earlier) are affected by an out-of-bounds write vuln… |
CVE-2022-35666 | High | 7.8 | 2022-08-11 | Adobe Acrobat Reader versions 22.001.20169 (and earlier), 20.005.30362 (and earlier) and 17.012.30249 (and earlier) are affected by an Improper Input Validatio… |
CVE-2022-35665 | High | 7.8 | 2022-08-11 | Adobe Acrobat Reader versions 22.001.20169 (and earlier), 20.005.30362 (and earlier) and 17.012.30249 (and earlier) are affected by a Use After Free vulnerabil… |
CVE-2022-34264 | Medium | 5.5 | 2022-08-11 | Adobe FrameMaker versions 2019 Update 8 (and earlier) and 2020 Update 4 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to di… |
CVE-2022-34263 | High | 7.8 | 2022-08-11 | Adobe Illustrator versions 26.3.1 (and earlier) and 25.4.6 (and earlier) are affected by a Use After Free vulnerability that could result in arbitrary code exe… |
CVE-2022-34262 | Medium | 5.5 | 2022-08-11 | Adobe Illustrator versions 26.3.1 (and earlier) and 25.4.6 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of s… |
CVE-2022-34261 | Medium | 5.5 | 2022-08-11 | Adobe Illustrator versions 26.3.1 (and earlier) and 25.4.6 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of s… |
CVE-2022-34260 | High | 7.8 | 2022-08-11 | Adobe Illustrator versions 26.3.1 (and earlier) and 25.4.6 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary co… |
CVE-2022-34235 | High | 7.8 | 2022-08-11 | Adobe Premiere Elements version 2020v20 (and earlier) is affected by an Uncontrolled Search Path Element which could lead to Privilege Escalation. An attacker… |