CVE-2022-21972

Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability

Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability

CVSS 3.1 · 8.1 High EPSS 79.3% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 Windows 10 1507 Windows 10 1607 and 20 more

CVE-2022-21965

Microsoft Teams Denial of Service Vulnerability

Microsoft Teams Denial of Service Vulnerability

CVSS 3.1 · 7.5 High EPSS 3.0% KEV · Not listed

Vendors

Microsoft

Products

Teams

CVE-2024-21834

Arkui has a type confusion vulnerability

in OpenHarmony v3.2.4 and prior versions allow a local attacker cause apps crash through type confusion.

CVSS 3.1 · 3.3 Low EPSS < 1% KEV · Not listed

Vendors

Openatom

Products

Openharmony

CVE-2024-22098

AVSession has a use after free vulnerability

in OpenHarmony v3.2.4 and prior versions allow a local attacker arbitrary code execution in any apps through use after free.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed

Vendors

Openatom

Products

Openharmony

CVE-2024-22177

Audio has an improper preservation of permissions vulnerability

in OpenHarmony v3.2.4 and prior versions allow a local attacker cause apps crash through get permission.

CVSS 3.1 · 3.3 Low EPSS < 1% KEV · Not listed

Vendors

Openatom

Products

Openharmony

CVE-2024-29086

Arkcompiler runtime has a stack overflow svulnerability

in OpenHarmony v3.2.4 and prior versions allow a local attacker cause DOS through stack overflow.

CVSS 3.1 · 3.3 Low EPSS < 1% KEV · Not listed

Vendors

Openatom

Products

Openharmony

CVE-2024-23808

Arkcompiler ets frontend has an out-of-bounds read vulnerability

in OpenHarmony v4.0.0 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through use after free or cause DOS through NULL pointer dereference.

CVSS 3.1 · 5.2 Medium EPSS < 1% KEV · Not listed

Vendors

Openatom

Products

Openharmony

CVE-2024-27217

MSDP has a use after free vulnerability

in OpenHarmony v4.0.0 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through use after free.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed

Vendors

Openatom

Products

Openharmony

CVE-2024-3757

Arkcompiler runtime has an integer overflow vulnerability

in OpenHarmony v4.0.0 and prior versions allow a local attacker cause service crash through integer overflow.

CVSS 3.1 · 3.3 Low EPSS < 1% KEV · Not listed

Vendors

Openatom

Products

Openharmony

CVE-2024-31078

Bluetooth Service has a use after free vulnerability

in OpenHarmony v4.0.0 and prior versions allow a local attacker cause service crash through NULL pointer dereference.

CVSS 3.1 · 3.3 Low EPSS < 1% KEV · Not listed

Vendors

Openatom

Products

Openharmony

CVE-2024-3758

Hmdfs has a heap buffer overflow vulnerability

in OpenHarmony v4.0.0 and prior versions allow a local attacker arbitrary code execution in TCB through heap buffer overflow.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed

Vendors

Openatom

Products

Openharmony

CVE-2024-3759

Hmdfs has a use after free vulnerability

in OpenHarmony v4.0.0 and prior versions allow a local attacker arbitrary code execution in TCB through use after free.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed

Vendors

Openatom

Products

Openharmony

CVE-2022-29144

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Edge Chromium

CVE-2022-26924

YARP Denial of Service Vulnerability

YARP Denial of Service Vulnerability

CVSS 3.1 · 7.5 High EPSS 3.5% KEV · Not listed

Vendors

Microsoft

Products

Yet Another Reverse Proxy

CVE-2022-26912

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

CVSS 3.1 · 8.3 High EPSS 1.8% KEV · Not listed

Vendors

Microsoft

Products

Edge Chromium

CVE-2022-26911

Skype for Business Information Disclosure Vulnerability

Skype for Business Information Disclosure Vulnerability

CVSS 3.1 · 6.5 Medium EPSS 3.6% KEV · Not listed

Vendors

Microsoft

Products

Lync Server Skype For Business Server

CVE-2022-26910

Skype for Business and Lync Spoofing Vulnerability

Skype for Business and Lync Spoofing Vulnerability

CVSS 3.1 · 5.3 Medium EPSS 2.5% KEV · Not listed

Vendors

Microsoft

Products

Skype For Business Server

CVE-2022-26909

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

CVSS 3.1 · 8.3 High EPSS 1.8% KEV · Not listed

Vendors

Microsoft

Products

Edge Chromium

CVE-2022-26908

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

CVSS 3.1 · 8.3 High EPSS 1.8% KEV · Not listed

Vendors

Microsoft

Products

Edge Chromium

CVE-2022-26900

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

CVSS 3.1 · 8.3 High EPSS 1.8% KEV · Not listed

Vendors

Microsoft

Products

Edge Chromium