R2 Security Vulnerabilities

CVE-2022-21859

Windows Accounts Control Elevation of Privilege...

CVE-2022-21862

Windows Application Model Core API Elevation of Privilege...

CVE-2022-21864

Windows UI Immersive Server API Elevation of Privilege...

CVE-2022-21868

Windows Devices Human Interface Elevation of Privilege...

CVE-2022-21867

Windows Push Notifications Apps Elevation of Privilege...

CVE-2022-21870

Tablet Windows User Interface Application Core Elevation of Privilege...

CVE-2022-21857

Active Directory Domain Services Elevation of Privilege...

CVE-2022-21835

Microsoft Cryptographic Services Elevation of Privilege...

CVE-2022-21838

Windows Cleanup Manager Elevation of Privilege...

CVE-2022-21848

Windows Internet Key Exchange (IKE) Extension Denial of Service...

CVE-2022-21836

Windows Certificate Spoofing...

CVE-2022-21843

Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution...

CVE-2022-21833

Virtual Machine IDE Drive Elevation of Privilege...

CVE-2022-21834

Windows User-mode Driver Framework Reflector Driver Elevation of Privilege...

CVE-2022-21850

Remote Desktop Client Remote Code Execution...

CVE-2022-21851

Remote Desktop Client Remote Code Execution...

CVE-2021-43883

Windows Installer Elevation of Privilege...

CVE-2021-43893

Windows Encrypting File System (EFS) Elevation of Privilege...

CVE-2021-43238

Windows Remote Access Elevation of Privilege...

CVE-2021-43248

Windows Digital Media Receiver Elevation of Privilege...

CVE-2021-43234

Windows Fax Service Remote Code Execution...

CVE-2021-43236

Microsoft Message Queuing Information Disclosure...

CVE-2021-43233

Remote Desktop Client Remote Code Execution...

CVE-2021-43245

Windows Digital TV Tuner Elevation of Privilege...

CVE-2021-43224

Windows Common Log File System Driver Information Disclosure...

CVE-2021-43216

Microsoft Local Security Authority (LSA) Server Information Disclosure...

CVE-2021-43226

Windows Common Log File System Driver Elevation of Privilege...

CVE-2021-43229

Windows NTFS Elevation of Privilege...

CVE-2021-43215

iSNS Server Memory Corruption Vulnerability Can Lead to Remote Code...

CVE-2021-43222

Microsoft Message Queuing Information Disclosure...

CVE-2021-43232

Windows Event Tracing Remote Code Execution...

CVE-2021-43207

Windows Common Log File System Driver Elevation of Privilege...

CVE-2021-43223

Windows Remote Access Connection Manager Elevation of Privilege...

CVE-2021-43217

Windows Encrypting File System (EFS) Remote Code Execution...

CVE-2021-43230

Windows NTFS Elevation of Privilege...

CVE-2021-41333

Windows Print Spooler Elevation of Privilege...

CVE-2021-40441

Windows Media Center Elevation of Privilege...

CVE-2021-23860

An error in a page handler of the VRM may lead to a reflected cross site scripting (XSS) in the web-based interface. To exploit this vulnerability an attack must be able to modify the HTTP header that is sent. This issue also affects installations of the DIVAR IP and BVMS with VRM...

CVE-2021-23859

An unauthenticated attacker is able to send a special HTTP request, that causes a service to crash. In case of a standalone VRM or BVMS with VRM installation this crash also opens the possibility to send further unauthenticated commands to the service. On some products the interface is only local.....

CVE-2021-23861

By executing a special command, an user with administrative rights can get access to extended debug functionality on the VRM allowing an impact on integrity or availability of the installed software. This issue also affects installations of the DIVAR IP and BVMS with VRM...

CVE-2021-23862

A crafted configuration packet sent by an authenticated administrative user can be used to execute arbitrary commands in system context. This issue also affects installations of the VRM, DIVAR IP, BVMS with VRM installed, the VIDEOJET decoder (VJD-7513 and...

CVE-2021-36323

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in...

CVE-2021-36324

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in...

CVE-2021-36325

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in...

CVE-2021-42291

Active Directory Domain Services Elevation of Privilege...

CVE-2021-42287

Active Directory Domain Services Elevation of Privilege...

CVE-2021-42283

NTFS Elevation of Privilege...

CVE-2021-42285

Windows Kernel Elevation of Privilege...

CVE-2021-42284

Windows Hyper-V Denial of Service...

CVE-2021-42282

Active Directory Domain Services Elevation of Privilege...