CVE-2022-26917

Windows Fax Compose Form Remote Code Execution Vulnerability

Windows Fax Compose Form Remote Code Execution Vulnerability

CVSS 3.1 · 7.8 High EPSS 2.1% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 Windows 10 1507 Windows 10 1607 and 19 more

CVE-2022-26916

Windows Fax Compose Form Remote Code Execution Vulnerability

Windows Fax Compose Form Remote Code Execution Vulnerability

CVSS 3.1 · 7.8 High EPSS 2.1% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 Windows 10 1507 Windows 10 1607 and 19 more

CVE-2022-24494

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

CVSS 3.1 · 7.8 High EPSS 1.9% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 Windows 10 1507 Windows 10 1607 and 19 more

CVE-2024-38081

.NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability

.NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability

CVSS 3.1 · 7.3 High EPSS 1.3% KEV · Not listed

Vendors

Microsoft

Products

.net .net Framework Visual Studio and 14 more

CVE-2022-24498

Windows iSCSI Target Service Information Disclosure Vulnerability

Windows iSCSI Target Service Information Disclosure Vulnerability

CVSS 3.1 · 6.5 Medium EPSS 2.6% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 Windows 10 1507 Windows 10 1607 and 19 more

CVE-2023-50387

bind9: KeyTrap - Extreme CPU consumption in DNSSEC validator

Certain DNSSEC aspects of the DNS protocol (in RFC 4033, 4034, 4035, 6840, and related RFCs) allow remote attackers to cause a denial of service (CPU consumption) via one or more DNSSEC responses, aka the "KeyTrap" issue. One of the concerns is that, when there is a zone with many DNSKEY and RRSIG records, the protocol specification implies that an algorithm must evaluate all combinations of DNSKEY and RRSIG records.

CVSS 3.1 · 7.5 High EPSS 100.0% KEV · Not listed

Vendors

Fedoraproject Isc Microsoft and 5 more

Products

Fedora Bind Windows Server 2008 and 15 more

CVE-2021-1647

Microsoft Defender Remote Code Execution Vulnerability

Microsoft Defender Remote Code Execution Vulnerability

CVSS 3.1 · 7.8 High EPSS 39.7% KEV · Listed

Vendors

Microsoft

Products

Security Essentials System Center Endpoint Protection Windows 10 1507 and 17 more

CVE-2021-31199

Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability

Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability

CVSS 3.1 · 5.2 Medium EPSS 3.0% KEV · Listed

Vendors

Microsoft

Products

Windows 10 1507 Windows 10 1607 Windows 10 1809 and 19 more

CVE-2021-31201

Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability

Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability

CVSS 3.1 · 5.2 Medium EPSS 2.6% KEV · Listed

Vendors

Microsoft

Products

Windows 10 1507 Windows 10 1607 Windows 10 1809 and 19 more

CVE-2022-41073

Windows Print Spooler Elevation of Privilege Vulnerability

Windows Print Spooler Elevation of Privilege Vulnerability

CVSS 3.1 · 7.8 High EPSS 2.6% KEV · Listed

Vendors

Microsoft

Products

Windows 10 1507 Windows 10 1607 Windows 10 1809 and 22 more

CVE-2022-24521

Windows Common Log File System Driver Elevation of Privilege Vulnerability

Windows Common Log File System Driver Elevation of Privilege Vulnerability

CVSS 3.1 · 7.8 High EPSS 7.1% KEV · Listed

Vendors

Microsoft

Products

Windows 10 1507 Windows 10 1607 Windows 10 1809 and 22 more

CVE-2022-26904

Windows User Profile Service Elevation of Privilege Vulnerability

Windows User Profile Service Elevation of Privilege Vulnerability

CVSS 3.1 · 7 High EPSS 16.9% KEV · Listed

Vendors

Microsoft

Products

Windows 10 1507 Windows 10 1607 Windows 10 1809 and 22 more

CVE-2022-26925

Windows LSA Spoofing Vulnerability

Windows LSA Spoofing Vulnerability

CVSS 3.1 · 8.1 High EPSS 10.5% KEV · Listed

Vendors

Microsoft

Products

Windows 10 1507 Windows 10 1607 Windows 10 1809 and 22 more

CVE-2022-34713

Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability

Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability

CVSS 3.1 · 7.8 High EPSS 67.8% KEV · Listed

Vendors

Microsoft

Products

Windows 10 1507 Windows 10 1607 Windows 10 1809 and 20 more

CVE-2022-21919

Windows User Profile Service Elevation of Privilege Vulnerability

Windows User Profile Service Elevation of Privilege Vulnerability

CVSS 3.1 · 7 High EPSS 2.6% KEV · Listed

Vendors

Microsoft

Products

Windows 10 1507 Windows 10 1607 Windows 10 1809 and 22 more

CVE-2022-21999

Windows Print Spooler Elevation of Privilege Vulnerability

Windows Print Spooler Elevation of Privilege Vulnerability

CVSS 3.1 · 7.8 High EPSS 41.0% KEV · Listed

Vendors

Microsoft

Products

Windows 10 1507 Windows 10 1607 Windows 10 1809 and 22 more

CVE-2022-22047

Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability

Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability

CVSS 3.1 · 7.8 High EPSS 18.3% KEV · Listed

Vendors

Microsoft

Products

Windows 10 1507 Windows 10 1607 Windows 10 1809 and 21 more

CVE-2022-22718

Windows Print Spooler Elevation of Privilege Vulnerability

Windows Print Spooler Elevation of Privilege Vulnerability

CVSS 3.1 · 7.8 High EPSS 18.5% KEV · Listed

Vendors

Microsoft

Products

Windows 10 1507 Windows 10 1607 Windows 10 1809 and 22 more

CVE-2021-43226

Windows Common Log File System Driver Elevation of Privilege Vulnerability

Windows Common Log File System Driver Elevation of Privilege Vulnerability

CVSS 3.1 · 7.8 High EPSS 3.3% KEV · Listed

Vendors

Microsoft

Products

Windows 10 1507 Windows 10 1607 Windows 10 1809 and 24 more

CVE-2021-40449

Win32k Elevation of Privilege Vulnerability

Win32k Elevation of Privilege Vulnerability

CVSS 3.1 · 7.8 High EPSS 81.9% KEV · Listed

Vendors

Microsoft

Products

Windows 10 1507 Windows 10 1607 Windows 10 1809 and 23 more