CVE-2022-37978

Windows Active Directory Certificate Services Security Feature Bypass

Windows Active Directory Certificate Services Security Feature Bypass

CVSS 3.1 · 7.5 High EPSS 1.8% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 Windows 10 1507 Windows 10 1607 and 18 more

CVE-2022-37977

Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability

Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability

CVSS 3.1 · 6.5 Medium EPSS 2.3% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 Windows 10 1507 Windows 10 1607 and 18 more

CVE-2022-37976

Active Directory Certificate Services Elevation of Privilege Vulnerability

Active Directory Certificate Services Elevation of Privilege Vulnerability

CVSS 3.1 · 8.8 High EPSS 2.4% KEV · Not listed

Vendors

Microsoft

Products

Windows Server 2008 Windows Server 2008 R2 Windows Server 2008 Sp2 and 5 more

CVE-2022-37975

Windows Group Policy Elevation of Privilege Vulnerability

Windows Group Policy Elevation of Privilege Vulnerability

CVSS 3.1 · 8.8 High EPSS 1.9% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 Windows 10 1507 Windows 10 1607 and 18 more

CVE-2022-37974

Windows Mixed Reality Developer Tools Information Disclosure Vulnerability

Windows Mixed Reality Developer Tools Information Disclosure Vulnerability

CVSS 3.1 · 6.5 Medium EPSS 36.5% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 Windows 10 21h1 Windows 10 21h2 and 3 more

CVE-2022-37973

Windows Local Session Manager (LSM) Denial of Service Vulnerability

Windows Local Session Manager (LSM) Denial of Service Vulnerability

CVSS 3.1 · 7.7 High EPSS 3.8% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 Windows 10 20h2 Windows 10 21h1 and 5 more

CVE-2022-37971

Microsoft Windows Defender Elevation of Privilege Vulnerability

Microsoft Windows Defender Elevation of Privilege Vulnerability

CVSS 3.1 · 7.1 High EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Malware Protection Engine

CVE-2022-37970

Windows DWM Core Library Elevation of Privilege Vulnerability

Windows DWM Core Library Elevation of Privilege Vulnerability

CVSS 3.1 · 7.8 High EPSS 9.8% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 Windows 10 1809 Windows 10 20h2 and 7 more

CVE-2022-37968

Azure Arc-enabled Kubernetes cluster Connect Elevation of Privilege Vulnerability

Microsoft has identified a vulnerability affecting the cluster connect feature of Azure Arc-enabled Kubernetes clusters. This vulnerability could allow an unauthenticated user to elevate their privileges and potentially gain administrative control over the Kubernetes cluster. Additionally, because Azure Stack Edge allows customers to deploy Kubernetes workloads on their devices via Azure Arc, Azure Stack Edge devices are also vulnerable to this vulnerability.

CVSS 3.1 · 10 Critical EPSS 3.0% KEV · Not listed

Vendors

Microsoft

Products

Azure Arc-enabled Kubernetes Azure Stack Edge Edge

CVE-2022-37967

Windows Kerberos Elevation of Privilege Vulnerability

Windows Kerberos Elevation of Privilege Vulnerability

CVSS 3.1 · 7.2 High EPSS 4.8% KEV · Not listed

Vendors

Fedoraproject Microsoft Netapp and 1 more

Products

Fedora Windows Server 2008 Windows Server 2008 R2 and 9 more

CVE-2022-37966

Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability

Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability

CVSS 3.1 · 8.1 High EPSS 2.9% KEV · Not listed

Vendors

Fedoraproject Microsoft Netapp and 1 more

Products

Fedora Windows Server 2008 Windows Server 2008 R2 and 9 more

CVE-2022-37965

Windows Point-to-Point Tunneling Protocol Denial of Service Vulnerability

Windows Point-to-Point Tunneling Protocol Denial of Service Vulnerability

CVSS 3.1 · 5.9 Medium EPSS 1.9% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 Windows 10 1507 Windows 10 1607 and 14 more

CVE-2022-35829

Service Fabric Explorer Spoofing Vulnerability

Service Fabric Explorer Spoofing Vulnerability

CVSS 3.1 · 6.2 Medium EPSS 18.5% KEV · Not listed

Vendors

Microsoft

Products

Azure Service Fabric

CVE-2022-35770

Windows NTLM Spoofing Vulnerability

Windows NTLM Spoofing Vulnerability

CVSS 3.1 · 6.5 Medium EPSS 2.1% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 Windows 10 1507 Windows 10 1607 and 18 more

CVE-2022-34689

Windows CryptoAPI Spoofing Vulnerability

Windows CryptoAPI Spoofing Vulnerability

CVSS 3.1 · 7.5 High EPSS 38.1% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 Windows 10 1507 Windows 10 1607 and 17 more

CVE-2022-33645

Windows TCP/IP Driver Denial of Service Vulnerability

Windows TCP/IP Driver Denial of Service Vulnerability

CVSS 3.1 · 7.5 High EPSS 2.6% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 Windows 10 1507 Windows 10 1607 and 18 more

CVE-2022-33635

Windows GDI+ Remote Code Execution Vulnerability

Windows GDI+ Remote Code Execution Vulnerability

CVSS 3.1 · 7.8 High EPSS 1.1% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 Windows 10 1507 Windows 10 1607 and 18 more

CVE-2022-33634

Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability

Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability

CVSS 3.1 · 8.1 High EPSS 1.5% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 Windows 10 1507 Windows 10 1607 and 18 more

CVE-2022-30198

Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability

Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability

CVSS 3.1 · 8.1 High EPSS 1.5% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 Windows 10 1507 Windows 10 1607 and 17 more

CVE-2022-24504

Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability

Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability

CVSS 3.1 · 8.1 High EPSS 1.5% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 Windows 10 1507 Windows 10 1607 and 18 more