Microsoft Security Vulnerabilities

CVE-2021-43876

Microsoft SharePoint Elevation of Privilege Vulnerability

CVE-2021-43877

ASP.NET Core and Visual Studio Elevation of Privilege Vulnerability

CVE-2021-43880

Windows Mobile Device Management Elevation of Privilege Vulnerability

CVE-2021-43882

Microsoft Defender for IoT Remote Code Execution Vulnerability

CVE-2021-43883

Windows Installer Elevation of Privilege Vulnerability

CVE-2021-43888

Microsoft Defender for IoT Information Disclosure Vulnerability

CVE-2021-43889

Microsoft Defender for IoT Remote Code Execution Vulnerability

CVE-2021-43890

We have investigated reports of a spoofing vulnerability in AppX installer that affects Microsoft Windows. Microsoft is aware of attacks that attempt to exploit this vulnerability by using specially crafted packages that include the malware family known as Emotet/Trickbot/Bazaloader.An attacker cou...

CVE-2021-43891

Visual Studio Code Remote Code Execution Vulnerability

CVE-2021-43892

Microsoft BizTalk ESB Toolkit Spoofing Vulnerability

CVE-2021-43893

Windows Encrypting File System (EFS) Elevation of Privilege Vulnerability

CVE-2021-43896

Microsoft PowerShell Spoofing Vulnerability

CVE-2021-43899

Microsoft 4K Wireless Display Adapter Remote Code Execution Vulnerability

CVE-2021-43905

Microsoft Office app Remote Code Execution Vulnerability

CVE-2021-43907

Visual Studio Code WSL Extension Remote Code Execution Vulnerability

CVE-2021-43908

Visual Studio Code Spoofing Vulnerability

CVE-2022-0280

A race condition vulnerability exists in the QuickClean feature of McAfee Total Protection for Windows prior to 16.0.43 that allows a local user to gain privilege elevation and perform an arbitrary file delete. This could lead to sensitive files being deleted and potentially cause denial of service...

CVE-2022-2170

The Microsoft Advertising Universal Event Tracking (UET) WordPress plugin before 1.0.4 does not sanitise and escape its settings, allowing high privilege users such as admin to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed. Due to the nature of this plu...

CVE-2022-21833

Virtual Machine IDE Drive Elevation of Privilege Vulnerability

CVE-2022-21834

Windows User-mode Driver Framework Reflector Driver Elevation of Privilege Vulnerability

CVE-2022-21835

Microsoft Cryptographic Services Elevation of Privilege Vulnerability

CVE-2022-21836

Windows Certificate Spoofing Vulnerability

CVE-2022-21837

Microsoft SharePoint Server Remote Code Execution Vulnerability

CVE-2022-21838

Windows Cleanup Manager Elevation of Privilege Vulnerability

CVE-2022-21839

Windows Event Tracing Discretionary Access Control List Denial of Service Vulnerability

CVE-2022-21840

Microsoft Office Remote Code Execution Vulnerability

CVE-2022-21841

Microsoft Excel Remote Code Execution Vulnerability

CVE-2022-21842

Microsoft Word Remote Code Execution Vulnerability

CVE-2022-21843

Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability

CVE-2022-21844

HEVC Video Extensions Remote Code Execution Vulnerability

CVE-2022-21845

Windows Kernel Information Disclosure Vulnerability

CVE-2022-21846

Microsoft Exchange Server Remote Code Execution Vulnerability

CVE-2022-21847

Windows Hyper-V Denial of Service Vulnerability

CVE-2022-21848

Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability

CVE-2022-21849

Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability

CVE-2022-21850

Remote Desktop Client Remote Code Execution Vulnerability

CVE-2022-21851

Remote Desktop Client Remote Code Execution Vulnerability

CVE-2022-21852

Windows DWM Core Library Elevation of Privilege Vulnerability

CVE-2022-21855

Microsoft Exchange Server Remote Code Execution Vulnerability

CVE-2022-21857

Active Directory Domain Services Elevation of Privilege Vulnerability

CVE-2022-21858

Windows Bind Filter Driver Elevation of Privilege Vulnerability

CVE-2022-21859

Windows Accounts Control Elevation of Privilege Vulnerability

CVE-2022-21860

Windows AppContracts API Server Elevation of Privilege Vulnerability

CVE-2022-21861

Task Flow Data Engine Elevation of Privilege Vulnerability

CVE-2022-21862

Windows Application Model Core API Elevation of Privilege Vulnerability

CVE-2022-21863

Windows StateRepository API Server file Elevation of Privilege Vulnerability

CVE-2022-21864

Windows UI Immersive Server API Elevation of Privilege Vulnerability

CVE-2022-21865

Connected Devices Platform Service Elevation of Privilege Vulnerability

CVE-2022-21866

Windows System Launcher Elevation of Privilege Vulnerability

CVE-2022-21867

Windows Push Notifications Apps Elevation of Privilege Vulnerability