CVE-2022-35742

Microsoft Outlook Denial of Service Vulnerability

Microsoft Outlook Denial of Service Vulnerability

CVSS 3.1 · 7.5 High EPSS 22.3% KEV · Not listed

Vendors

Microsoft

Products

365 Apps Office Office Long Term Servicing Channel and 1 more

CVE-2022-34687

Azure RTOS GUIX Studio Remote Code Execution Vulnerability

Azure RTOS GUIX Studio Remote Code Execution Vulnerability

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Azure Real Time Operating System Guix Studio Azure Rtos Guix Studio

CVE-2022-34686

Azure RTOS GUIX Studio Information Disclosure Vulnerability

Azure RTOS GUIX Studio Information Disclosure Vulnerability

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Azure Real Time Operating System Guix Studio Azure Rtos Guix Studio

CVE-2022-34685

Azure RTOS GUIX Studio Information Disclosure Vulnerability

Azure RTOS GUIX Studio Information Disclosure Vulnerability

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Azure Real Time Operating System Guix Studio Azure Rtos Guix Studio

CVE-2022-33670

Windows Partition Management Driver Elevation of Privilege Vulnerability

Windows Partition Management Driver Elevation of Privilege Vulnerability

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 Windows 10 1507 Windows 10 1607 and 14 more

CVE-2022-33649

Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability

Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability

CVSS 3.1 · 9.6 Critical EPSS 2.4% KEV · Not listed

Vendors

Microsoft

Products

Edge Chromium

CVE-2022-33648

Microsoft Excel Remote Code Execution Vulnerability

Microsoft Excel Remote Code Execution Vulnerability

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Office Online Server

CVE-2022-33636

Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

CVSS 3.1 · 8.3 High EPSS 1.3% KEV · Not listed

Vendors

Microsoft

Products

Edge Chromium

CVE-2022-30144

Windows Bluetooth Service Remote Code Execution Vulnerability

Windows Bluetooth Service Remote Code Execution Vulnerability

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 Windows 10 1507 Windows 10 1607 and 8 more

CVE-2022-30133

Windows Point-to-Point Protocol (PPP) Remote Code Execution Vulnerability

Windows Point-to-Point Protocol (PPP) Remote Code Execution Vulnerability

CVSS 3.1 · 9.8 Critical EPSS 2.8% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 Windows 10 1507 Windows 10 1607 and 17 more

CVE-2023-3036

Out of Bounds Slice index in cfnts leads to remote panic

An unchecked read in NTP server in github.com/cloudflare/cfnts prior to commit 783490b https://github.com/cloudflare/cfnts/commit/783490b913f05e508a492cd7b02e3c4ec2297b71  enabled a remote attacker to trigger a panic by sending an NTSAuthenticator packet with extension length longer than the packet contents.

CVSS 3.1 · 8.6 High EPSS 2.2% KEV · Not listed

Vendors

Cloudflare

Products

Cfnts

CVE-2023-3040

Out of Bounds Access Leading to Undefined Behavior

A debug function in the lua-resty-json package, up to commit id 3ef9492bd3a44d9e51301d6adc3cd1789c8f534a (merged in PR #14) contained an out of bounds access bug that could have allowed an attacker to launch a DoS if the function was used to parse untrusted input data. It is important to note that because this debug function was only used in tests and demos, it was not exploitable in a normal environment.

CVSS 3.1 · 3.7 Low EPSS < 1% KEV · Not listed

Vendors

Cloudflare

Products

Lua-resty-json

CVE-2023-35145

jenkins-2-plugins: sonargraph-integration: Stored XSS vulnerability in Sonargraph Integration Plugin

Jenkins Sonargraph Integration Plugin 5.0.1 and earlier does not escape the file path and the project name for the Log file field form validation, resulting in a stored cross-site scripting vulnerability exploitable by attackers with Item/Configure permission.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed

Vendors

Jenkins

Products

Sonargraph Integration

CVE-2022-33680

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

CVSS 3.1 · 8.3 High EPSS 1.8% KEV · Not listed

Vendors

Microsoft

Products

Edge Chromium

CVE-2022-33639

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

CVSS 3.1 · 8.3 High EPSS 2.9% KEV · Not listed

Vendors

Microsoft

Products

Edge Chromium

CVE-2022-33638

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

CVSS 3.1 · 8.3 High EPSS 2.5% KEV · Not listed

Vendors

Microsoft

Products

Edge Chromium

CVE-2022-30193

AV1 Video Extension Remote Code Execution Vulnerability

AV1 Video Extension Remote Code Execution Vulnerability

CVSS 3.1 · 7.8 High EPSS 2.4% KEV · Not listed

Vendors

Microsoft

Products

Av1 Video Extension

CVE-2022-30192

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

CVSS 3.1 · 8.3 High EPSS 2.8% KEV · Not listed

Vendors

Microsoft

Products

Edge Chromium

CVE-2022-30189

Windows Autopilot Device Management and Enrollment Client Spoofing Vulnerability

Windows Autopilot Device Management and Enrollment Client Spoofing Vulnerability

CVSS 3.1 · 6.5 Medium EPSS 2.9% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 Windows 10 20h2 Windows 10 21h1 and 1 more

CVE-2022-30188

HEVC Video Extensions Remote Code Execution Vulnerability

HEVC Video Extensions Remote Code Execution Vulnerability

CVSS 3.1 · 7.8 High EPSS 2.7% KEV · Not listed

Vendors

Microsoft

Products

Hevc Video Extensions