CVE-2024-3758

Hmdfs has a heap buffer overflow vulnerability

in OpenHarmony v4.0.0 and prior versions allow a local attacker arbitrary code execution in TCB through heap buffer overflow.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed

Vendors

Openatom

Products

Openharmony

CVE-2024-3759

Hmdfs has a use after free vulnerability

in OpenHarmony v4.0.0 and prior versions allow a local attacker arbitrary code execution in TCB through use after free.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed

Vendors

Openatom

Products

Openharmony

CVE-2022-29144

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Edge Chromium

CVE-2022-26924

YARP Denial of Service Vulnerability

YARP Denial of Service Vulnerability

CVSS 3.1 · 7.5 High EPSS 3.5% KEV · Not listed

Vendors

Microsoft

Products

Yet Another Reverse Proxy

CVE-2022-26912

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

CVSS 3.1 · 8.3 High EPSS 1.8% KEV · Not listed

Vendors

Microsoft

Products

Edge Chromium

CVE-2022-26911

Skype for Business Information Disclosure Vulnerability

Skype for Business Information Disclosure Vulnerability

CVSS 3.1 · 6.5 Medium EPSS 3.6% KEV · Not listed

Vendors

Microsoft

Products

Lync Server Skype For Business Server

CVE-2022-26910

Skype for Business and Lync Spoofing Vulnerability

Skype for Business and Lync Spoofing Vulnerability

CVSS 3.1 · 5.3 Medium EPSS 2.5% KEV · Not listed

Vendors

Microsoft

Products

Skype For Business Server

CVE-2022-26909

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

CVSS 3.1 · 8.3 High EPSS 1.8% KEV · Not listed

Vendors

Microsoft

Products

Edge Chromium

CVE-2022-26908

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

CVSS 3.1 · 8.3 High EPSS 1.8% KEV · Not listed

Vendors

Microsoft

Products

Edge Chromium

CVE-2022-26900

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

CVSS 3.1 · 8.3 High EPSS 1.8% KEV · Not listed

Vendors

Microsoft

Products

Edge Chromium

CVE-2022-26907

Azure SDK for .NET Information Disclosure Vulnerability

Azure SDK for .NET Information Disclosure Vulnerability

CVSS 3.1 · 5.3 Medium EPSS 2.4% KEV · Not listed

Vendors

Microsoft

Products

Azure Sdk For .net

CVE-2022-26903

Windows Graphics Component Remote Code Execution Vulnerability

Windows Graphics Component Remote Code Execution Vulnerability

CVSS 3.1 · 7.8 High EPSS 2.7% KEV · Not listed

Vendors

Microsoft

Products

Excel Excel Mobile Powerpoint and 24 more

CVE-2022-24532

HEVC Video Extensions Remote Code Execution Vulnerability

HEVC Video Extensions Remote Code Execution Vulnerability

CVSS 3.1 · 7.8 High EPSS 2.7% KEV · Not listed

Vendors

Microsoft

Products

Hevc Video Extensions

CVE-2022-24543

Windows Upgrade Assistant Remote Code Execution Vulnerability

Windows Upgrade Assistant Remote Code Execution Vulnerability

CVSS 3.1 · 7.8 High EPSS 2.5% KEV · Not listed

Vendors

Microsoft

Products

Windows Upgrade Assistant

CVE-2022-26831

Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability

Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability

CVSS 3.1 · 7.5 High EPSS 3.3% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 Windows 10 1507 Windows 10 1607 and 19 more

CVE-2022-26830

DiskUsage.exe Remote Code Execution Vulnerability

DiskUsage.exe Remote Code Execution Vulnerability

CVSS 3.1 · 7.5 High EPSS 1.7% KEV · Not listed

Vendors

Microsoft

Products

Windows 11 Windows 11 21h2 Windows Server 2022

CVE-2022-26829

Windows DNS Server Remote Code Execution Vulnerability

Windows DNS Server Remote Code Execution Vulnerability

CVSS 3.1 · 6.6 Medium EPSS 1.9% KEV · Not listed

Vendors

Microsoft

Products

Windows Server 2008 Windows Server 2008 R2 Windows Server 2008 Sp2 and 6 more

CVE-2022-26828

Windows Bluetooth Driver Elevation of Privilege Vulnerability

Windows Bluetooth Driver Elevation of Privilege Vulnerability

CVSS 3.1 · 7 High EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 Windows 10 1809 Windows 10 1909 and 7 more

CVE-2022-26827

Windows File Server Resource Management Service Elevation of Privilege Vulnerability

Windows File Server Resource Management Service Elevation of Privilege Vulnerability

CVSS 3.1 · 7 High EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 Windows 10 1607 Windows 10 1809 and 16 more

CVE-2022-26825

Windows DNS Server Remote Code Execution Vulnerability

Windows DNS Server Remote Code Execution Vulnerability

CVSS 3.1 · 7.2 High EPSS 3.6% KEV · Not listed

Vendors

Microsoft

Products

Windows Server 2016 Windows Server 2019 Windows Server 2022 and 1 more