Microsoft Security Vulnerabilities

CVE-2022-41128

Windows Scripting Languages Remote Code Execution Vulnerability

CVE-2022-4135

Heap buffer overflow in GPU in Google Chrome prior to 107.0.5304.121 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

CVE-2022-43516

A Firewall Rule which allows all incoming TCP connections to all programs from any source and to all ports is created in Windows Firewall after Zabbix agent installation (MSI)

CVE-2022-44666

Windows Contacts Remote Code Execution Vulnerability

CVE-2022-44667

Windows Media Remote Code Execution Vulnerability

CVE-2022-44668

Windows Media Remote Code Execution Vulnerability

CVE-2022-44669

Windows Error Reporting Elevation of Privilege Vulnerability

CVE-2022-44670

Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability

CVE-2022-44671

Windows Graphics Component Elevation of Privilege Vulnerability

CVE-2022-44673

Windows Client Server Run-Time Subsystem (CSRSS) Elevation of Privilege Vulnerability

CVE-2022-44674

Windows Bluetooth Driver Information Disclosure Vulnerability

CVE-2022-44675

Windows Bluetooth Driver Elevation of Privilege Vulnerability

CVE-2022-44676

Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability

CVE-2022-44677

Windows Projected File System Elevation of Privilege Vulnerability

CVE-2022-44678

Windows Print Spooler Elevation of Privilege Vulnerability

CVE-2022-44679

Windows Graphics Component Information Disclosure Vulnerability

CVE-2022-44680

Windows Graphics Component Elevation of Privilege Vulnerability

CVE-2022-44681

Windows Print Spooler Elevation of Privilege Vulnerability

CVE-2022-44682

Windows Hyper-V Denial of Service Vulnerability

CVE-2022-44683

Windows Kernel Elevation of Privilege Vulnerability

CVE-2022-44684

Windows Local Session Manager (LSM) Denial of Service Vulnerability

CVE-2022-44687

Raw Image Extension Remote Code Execution Vulnerability

CVE-2022-44688

Microsoft Edge (Chromium-based) Spoofing Vulnerability

CVE-2022-44689

Windows Subsystem for Linux (WSL2) Kernel Elevation of Privilege Vulnerability

CVE-2022-44690

Microsoft SharePoint Server Remote Code Execution Vulnerability

CVE-2022-44691

Microsoft Office OneNote Remote Code Execution Vulnerability

CVE-2022-44692

Microsoft Office Graphics Remote Code Execution Vulnerability

CVE-2022-44693

Microsoft SharePoint Server Remote Code Execution Vulnerability

CVE-2022-44694

Microsoft Office Visio Remote Code Execution Vulnerability

CVE-2022-44695

Microsoft Office Visio Remote Code Execution Vulnerability

CVE-2022-44696

Microsoft Office Visio Remote Code Execution Vulnerability

CVE-2022-44697

Windows Graphics Component Elevation of Privilege Vulnerability

CVE-2022-44698

Windows SmartScreen Security Feature Bypass Vulnerability

CVE-2022-44699

Azure Network Watcher Agent Security Feature Bypass Vulnerability

CVE-2022-44702

Windows Terminal Remote Code Execution Vulnerability

CVE-2022-44704

Microsoft Windows System Monitor (Sysmon) Elevation of Privilege Vulnerability

CVE-2022-44707

Windows Kernel Denial of Service Vulnerability

CVE-2022-44708

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

CVE-2022-44710

DirectX Graphics Kernel Elevation of Privilege Vulnerability

CVE-2022-44713

Microsoft Outlook for Mac Spoofing Vulnerability

CVE-2022-4510

A path traversal vulnerability was identified in ReFirm Labs binwalk from version 2.1.2b through 2.3.3 included. By crafting a malicious PFS filesystem file, an attacker can get binwalk's PFS extractor to extract files at arbitrary locations when binwalk is run in extraction mode (-e option). Remot...

CVE-2022-47211

Microsoft Office Graphics Remote Code Execution Vulnerability

CVE-2022-47212

Microsoft Office Graphics Remote Code Execution Vulnerability

CVE-2022-47213

Microsoft Office Graphics Remote Code Execution Vulnerability

CVE-2023-1017

An out-of-bounds write vulnerability exists in TPM2.0's Module Library allowing writing of a 2-byte data past the end of TPM2.0 command in the CryptParameterDecryption routine. An attacker who can successfully exploit this vulnerability can lead to denial of service (crashing the TPM chip/process o...

CVE-2023-1018

An out-of-bounds read vulnerability exists in TPM2.0's Module Library allowing a 2-byte read past the end of a TPM2.0 command in the CryptParameterDecryption routine. An attacker who can successfully exploit this vulnerability can read or access sensitive data stored in the TPM.

CVE-2023-20569

A side channel vulnerability on some of the AMD CPUs may allow an attacker to influence the return address prediction. This may result in speculative execution at an attacker-controlled address, potentially leading to information disclosure.

CVE-2023-20588

A division-by-zero error on some AMD processors can potentially return speculative data resulting in loss of confidentiality.

CVE-2023-21524

Windows Local Security Authority (LSA) Elevation of Privilege Vulnerability

CVE-2023-21525

Remote Procedure Call Runtime Denial of Service Vulnerability