Microsoft Security Vulnerabilities

CVE-2022-38034

Windows Workstation Service Elevation of Privilege Vulnerability

CVE-2022-38036

Internet Key Exchange (IKE) Protocol Denial of Service Vulnerability

CVE-2022-38037

Windows Kernel Elevation of Privilege Vulnerability

CVE-2022-38038

Windows Kernel Elevation of Privilege Vulnerability

CVE-2022-38039

Windows Kernel Elevation of Privilege Vulnerability

CVE-2022-38040

Microsoft ODBC Driver Remote Code Execution Vulnerability

CVE-2022-38041

Windows Secure Channel Denial of Service Vulnerability

CVE-2022-38042

Active Directory Domain Services Elevation of Privilege Vulnerability

CVE-2022-38043

Windows Security Support Provider Interface Information Disclosure Vulnerability

CVE-2022-38044

Windows CD-ROM File System Driver Remote Code Execution Vulnerability

CVE-2022-38045

Windows Server Service Elevation of Privilege Vulnerability

CVE-2022-38046

Web Account Manager Information Disclosure Vulnerability

CVE-2022-38047

Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability

CVE-2022-38048

Microsoft Office Remote Code Execution Vulnerability

CVE-2022-38049

Microsoft Office Graphics Remote Code Execution Vulnerability

CVE-2022-38050

Win32k Elevation of Privilege Vulnerability

CVE-2022-38051

Windows Graphics Component Elevation of Privilege Vulnerability

CVE-2022-38053

Microsoft SharePoint Server Remote Code Execution Vulnerability

CVE-2022-38396

HP Factory Preinstalled Images on certain systems that shipped with Windows 10 versions 20H2 and earlier OS versions might allow escalation of privilege via execution of certain files outside the restricted path. This potential vulnerability was remediated starting with Windows 10 versions 21H2 on ...

CVE-2022-39293

Azure RTOS USBX is a high-performance USB host, device, and on-the-go (OTG) embedded stack, that is fully integrated with Azure RTOS ThreadX. The case is, in _ux_host_class_pima_read , there is data length from device response, returned in the very first packet, and read by L165 code , as header_le...

CVE-2022-39327

Azure CLI is the command-line interface for Microsoft Azure. In versions previous to 2.40.0, Azure CLI contains a vulnerability for potential code injection. Critical scenarios are where a hosting machine runs an Azure CLI command where parameter values have been provided by an external source. The...

CVE-2022-39343

Azure RTOS FileX is a FAT-compatible file system that’s fully integrated with Azure RTOS ThreadX. In versions before 6.2.0, the Fault Tolerant feature of Azure RTOS FileX includes integer under and overflows which may be exploited to achieve buffer overflow and modify memory contents. When a valid ...

CVE-2022-39344

Azure RTOS USBX is a USB host, device, and on-the-go (OTG) embedded stack, that is fully integrated with Azure RTOS ThreadX. Prior to version 6.1.12, the USB DFU UPLOAD functionality may be utilized to introduce a buffer overflow resulting in overwrite of memory contents. In particular cases this m...

CVE-2022-41031

Microsoft Word Remote Code Execution Vulnerability

CVE-2022-41032

NuGet Client Elevation of Privilege Vulnerability

CVE-2022-41033

Windows COM+ Event System Service Elevation of Privilege Vulnerability

CVE-2022-41034

Visual Studio Code Remote Code Execution Vulnerability

CVE-2022-41035

Microsoft Edge (Chromium-based) Spoofing Vulnerability

CVE-2022-41036

Microsoft SharePoint Server Remote Code Execution Vulnerability

CVE-2022-41037

Microsoft SharePoint Server Remote Code Execution Vulnerability

CVE-2022-41038

Microsoft SharePoint Server Remote Code Execution Vulnerability

CVE-2022-41039

Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability

CVE-2022-41040

Microsoft Exchange Server Elevation of Privilege Vulnerability

CVE-2022-41042

Visual Studio Code Information Disclosure Vulnerability

CVE-2022-41043

Microsoft Office Information Disclosure Vulnerability

CVE-2022-41044

Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability

CVE-2022-41045

Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability

CVE-2022-41047

Microsoft ODBC Driver Remote Code Execution Vulnerability

CVE-2022-41048

Microsoft ODBC Driver Remote Code Execution Vulnerability

CVE-2022-41049

Windows Mark of the Web Security Feature Bypass Vulnerability

CVE-2022-41050

Windows Extensible File Allocation Table Elevation of Privilege Vulnerability

CVE-2022-41051

Azure RTOS GUIX Studio Remote Code Execution Vulnerability

CVE-2022-41052

Windows Graphics Component Remote Code Execution Vulnerability

CVE-2022-41053

Windows Kerberos Denial of Service Vulnerability

CVE-2022-41054

Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability

CVE-2022-41055

Windows Human Interface Device Information Disclosure Vulnerability

CVE-2022-41056

Network Policy Server (NPS) RADIUS Protocol Denial of Service Vulnerability

CVE-2022-41057

Windows HTTP.sys Elevation of Privilege Vulnerability

CVE-2022-41058

Windows Network Address Translation (NAT) Denial of Service Vulnerability

CVE-2022-41060

Microsoft Word Information Disclosure Vulnerability