|
Microsoft : Security Vulnerabilities (CVSS score between 6 and 8.99)
# |
CVE ID
|
CWE ID
|
# of Exploits
|
Vulnerability Type(s)
|
Publish Date
|
Update Date
|
Score
|
Gained Access Level
|
Access
|
Complexity
|
Authentication
|
Conf.
|
Integ.
|
Avail.
|
1 |
CVE-2022-26901 |
|
|
Exec Code |
2022-04-15 |
2022-04-26 |
6.8 |
None |
Remote |
Medium |
Not required |
Partial |
Partial |
Partial |
Microsoft Excel Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-24473. |
2 |
CVE-2022-26898 |
|
|
Exec Code |
2022-04-15 |
2022-04-26 |
6.5 |
None |
Remote |
Low |
??? |
Partial |
Partial |
Partial |
Azure Site Recovery Remote Code Execution Vulnerability. |
3 |
CVE-2022-26829 |
362 |
|
Exec Code |
2022-04-15 |
2022-04-18 |
8.5 |
None |
Remote |
Medium |
??? |
Complete |
Complete |
Complete |
Windows DNS Server Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-24536, CVE-2022-26811, CVE-2022-26812, CVE-2022-26813, CVE-2022-26814, CVE-2022-26815, CVE-2022-26817, CVE-2022-26818, CVE-2022-26819, CVE-2022-26820, CVE-2022-26821, CVE-2022-26822, CVE-2022-26823, CVE-2022-26824, CVE-2022-26825, CVE-2022-26826. |
4 |
CVE-2022-26827 |
362 |
|
|
2022-04-15 |
2022-04-25 |
6.9 |
None |
Local |
Medium |
Not required |
Complete |
Complete |
Complete |
Windows File Server Resource Management Service Elevation of Privilege Vulnerability. This CVE ID is unique from CVE-2022-26810. |
5 |
CVE-2022-26822 |
362 |
|
Exec Code |
2022-04-15 |
2022-04-18 |
8.5 |
None |
Remote |
Medium |
??? |
Complete |
Complete |
Complete |
Windows DNS Server Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-24536, CVE-2022-26811, CVE-2022-26812, CVE-2022-26813, CVE-2022-26814, CVE-2022-26815, CVE-2022-26817, CVE-2022-26818, CVE-2022-26819, CVE-2022-26820, CVE-2022-26821, CVE-2022-26823, CVE-2022-26824, CVE-2022-26825, CVE-2022-26826, CVE-2022-26829. |
6 |
CVE-2022-26821 |
362 |
|
Exec Code |
2022-04-15 |
2022-04-18 |
8.5 |
None |
Remote |
Medium |
??? |
Complete |
Complete |
Complete |
Windows DNS Server Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-24536, CVE-2022-26811, CVE-2022-26812, CVE-2022-26813, CVE-2022-26814, CVE-2022-26815, CVE-2022-26817, CVE-2022-26818, CVE-2022-26819, CVE-2022-26820, CVE-2022-26822, CVE-2022-26823, CVE-2022-26824, CVE-2022-26825, CVE-2022-26826, CVE-2022-26829. |
7 |
CVE-2022-26820 |
362 |
|
Exec Code |
2022-04-15 |
2022-04-18 |
8.5 |
None |
Remote |
Medium |
??? |
Complete |
Complete |
Complete |
Windows DNS Server Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-24536, CVE-2022-26811, CVE-2022-26812, CVE-2022-26813, CVE-2022-26814, CVE-2022-26815, CVE-2022-26817, CVE-2022-26818, CVE-2022-26819, CVE-2022-26821, CVE-2022-26822, CVE-2022-26823, CVE-2022-26824, CVE-2022-26825, CVE-2022-26826, CVE-2022-26829. |
8 |
CVE-2022-26819 |
362 |
|
Exec Code |
2022-04-15 |
2022-04-18 |
8.5 |
None |
Remote |
Medium |
??? |
Complete |
Complete |
Complete |
Windows DNS Server Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-24536, CVE-2022-26811, CVE-2022-26812, CVE-2022-26813, CVE-2022-26814, CVE-2022-26815, CVE-2022-26817, CVE-2022-26818, CVE-2022-26820, CVE-2022-26821, CVE-2022-26822, CVE-2022-26823, CVE-2022-26824, CVE-2022-26825, CVE-2022-26826, CVE-2022-26829. |
9 |
CVE-2022-26818 |
|
|
Exec Code |
2022-04-15 |
2022-04-18 |
8.5 |
None |
Remote |
Medium |
??? |
Complete |
Complete |
Complete |
Windows DNS Server Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-24536, CVE-2022-26811, CVE-2022-26812, CVE-2022-26813, CVE-2022-26814, CVE-2022-26815, CVE-2022-26817, CVE-2022-26819, CVE-2022-26820, CVE-2022-26821, CVE-2022-26822, CVE-2022-26823, CVE-2022-26824, CVE-2022-26825, CVE-2022-26826, CVE-2022-26829. |
10 |
CVE-2022-26817 |
362 |
|
Exec Code |
2022-04-15 |
2022-04-18 |
8.5 |
None |
Remote |
Medium |
??? |
Complete |
Complete |
Complete |
Windows DNS Server Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-24536, CVE-2022-26811, CVE-2022-26812, CVE-2022-26813, CVE-2022-26814, CVE-2022-26815, CVE-2022-26818, CVE-2022-26819, CVE-2022-26820, CVE-2022-26821, CVE-2022-26822, CVE-2022-26823, CVE-2022-26824, CVE-2022-26825, CVE-2022-26826, CVE-2022-26829. |
11 |
CVE-2022-26814 |
362 |
|
Exec Code |
2022-04-15 |
2022-04-18 |
8.5 |
None |
Remote |
Medium |
??? |
Complete |
Complete |
Complete |
Windows DNS Server Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-24536, CVE-2022-26811, CVE-2022-26812, CVE-2022-26813, CVE-2022-26815, CVE-2022-26817, CVE-2022-26818, CVE-2022-26819, CVE-2022-26820, CVE-2022-26821, CVE-2022-26822, CVE-2022-26823, CVE-2022-26824, CVE-2022-26825, CVE-2022-26826, CVE-2022-26829. |
12 |
CVE-2022-26803 |
269 |
|
|
2022-04-15 |
2022-04-18 |
7.2 |
None |
Local |
Low |
Not required |
Complete |
Complete |
Complete |
Windows Print Spooler Elevation of Privilege Vulnerability. This CVE ID is unique from CVE-2022-26786, CVE-2022-26787, CVE-2022-26789, CVE-2022-26790, CVE-2022-26791, CVE-2022-26792, CVE-2022-26793, CVE-2022-26794, CVE-2022-26795, CVE-2022-26796, CVE-2022-26797, CVE-2022-26798, CVE-2022-26801, CVE-2022-26802. |
13 |
CVE-2022-26798 |
269 |
|
|
2022-04-15 |
2022-04-19 |
7.2 |
None |
Local |
Low |
Not required |
Complete |
Complete |
Complete |
Windows Print Spooler Elevation of Privilege Vulnerability. This CVE ID is unique from CVE-2022-26786, CVE-2022-26787, CVE-2022-26789, CVE-2022-26790, CVE-2022-26791, CVE-2022-26792, CVE-2022-26793, CVE-2022-26794, CVE-2022-26795, CVE-2022-26796, CVE-2022-26797, CVE-2022-26801, CVE-2022-26802, CVE-2022-26803. |
14 |
CVE-2022-26783 |
|
|
|
2022-04-15 |
2022-04-25 |
6.8 |
None |
Remote |
Low |
??? |
Complete |
None |
None |
Windows Hyper-V Shared Virtual Hard Disks Information Disclosure Vulnerability. This CVE ID is unique from CVE-2022-24490, CVE-2022-24539, CVE-2022-26785. |
15 |
CVE-2022-24767 |
427 |
|
|
2022-04-12 |
2022-04-21 |
6.9 |
None |
Local |
Medium |
Not required |
Complete |
Complete |
Complete |
GitHub: Git for Windows' uninstaller vulnerable to DLL hijacking when run under the SYSTEM user account. |
16 |
CVE-2022-24550 |
269 |
|
|
2022-04-15 |
2022-04-25 |
7.2 |
None |
Local |
Low |
Not required |
Complete |
Complete |
Complete |
Windows Telephony Server Elevation of Privilege Vulnerability. |
17 |
CVE-2022-24543 |
|
|
Exec Code |
2022-04-15 |
2022-04-25 |
6.8 |
None |
Remote |
Medium |
Not required |
Partial |
Partial |
Partial |
Windows Upgrade Assistant Remote Code Execution Vulnerability. |
18 |
CVE-2022-24539 |
|
|
|
2022-04-15 |
2022-04-25 |
6.8 |
None |
Remote |
Low |
??? |
Complete |
None |
None |
Windows Hyper-V Shared Virtual Hard Disks Information Disclosure Vulnerability. This CVE ID is unique from CVE-2022-24490, CVE-2022-26783, CVE-2022-26785. |
19 |
CVE-2022-24537 |
362 |
|
Exec Code |
2022-04-15 |
2022-04-25 |
7.6 |
None |
Remote |
High |
Not required |
Complete |
Complete |
Complete |
Windows Hyper-V Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-22008, CVE-2022-22009, CVE-2022-23257. |
20 |
CVE-2022-24533 |
|
|
Exec Code |
2022-04-15 |
2022-04-19 |
8.5 |
None |
Remote |
Medium |
??? |
Complete |
Complete |
Complete |
Remote Desktop Protocol Remote Code Execution Vulnerability. |
21 |
CVE-2022-24528 |
|
|
Exec Code |
2022-04-15 |
2022-04-21 |
6.8 |
None |
Remote |
Medium |
Not required |
Partial |
Partial |
Partial |
Remote Procedure Call Runtime Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-24492, CVE-2022-26809. |
22 |
CVE-2022-24520 |
|
|
Exec Code |
2022-03-09 |
2022-03-14 |
6.5 |
None |
Remote |
Low |
??? |
Partial |
Partial |
Partial |
Azure Site Recovery Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-24467, CVE-2022-24468, CVE-2022-24470, CVE-2022-24471, CVE-2022-24517. |
23 |
CVE-2022-24517 |
|
|
Exec Code |
2022-03-09 |
2022-03-14 |
6.5 |
None |
Remote |
Low |
??? |
Partial |
Partial |
Partial |
Azure Site Recovery Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-24467, CVE-2022-24468, CVE-2022-24470, CVE-2022-24471, CVE-2022-24520. |
24 |
CVE-2022-24512 |
|
|
Exec Code |
2022-03-09 |
2022-05-12 |
6.8 |
None |
Remote |
Medium |
Not required |
Partial |
Partial |
Partial |
.NET and Visual Studio Remote Code Execution Vulnerability. |
25 |
CVE-2022-24510 |
|
|
Exec Code |
2022-03-09 |
2022-03-16 |
6.8 |
None |
Remote |
Medium |
Not required |
Partial |
Partial |
Partial |
Microsoft Office Visio Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-24461, CVE-2022-24509. |
26 |
CVE-2022-24509 |
|
|
Exec Code |
2022-03-09 |
2022-03-16 |
6.8 |
None |
Remote |
Medium |
Not required |
Partial |
Partial |
Partial |
Microsoft Office Visio Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-24461, CVE-2022-24510. |
27 |
CVE-2022-24508 |
|
|
Exec Code |
2022-03-09 |
2022-03-16 |
6.5 |
None |
Remote |
Low |
??? |
Partial |
Partial |
Partial |
Windows SMBv3 Client/Server Remote Code Execution Vulnerability. |
28 |
CVE-2022-24501 |
|
|
Exec Code |
2022-03-09 |
2022-03-14 |
6.8 |
None |
Remote |
Medium |
Not required |
Partial |
Partial |
Partial |
VP9 Video Extensions Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-24451. |
29 |
CVE-2022-24500 |
|
|
Exec Code |
2022-04-15 |
2022-04-22 |
6.8 |
None |
Remote |
Medium |
Not required |
Partial |
Partial |
Partial |
Windows SMB Remote Code Execution Vulnerability. |
30 |
CVE-2022-24497 |
|
|
Exec Code |
2022-04-15 |
2022-04-22 |
7.5 |
None |
Remote |
Low |
Not required |
Partial |
Partial |
Partial |
Windows Network File System Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-24491. |
31 |
CVE-2022-24491 |
|
|
Exec Code |
2022-04-15 |
2022-04-22 |
7.5 |
None |
Remote |
Low |
Not required |
Partial |
Partial |
Partial |
Windows Network File System Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-24497. |
32 |
CVE-2022-24490 |
|
|
|
2022-04-15 |
2022-04-22 |
6.8 |
None |
Remote |
Low |
??? |
Complete |
None |
None |
Windows Hyper-V Shared Virtual Hard Disks Information Disclosure Vulnerability. This CVE ID is unique from CVE-2022-24539, CVE-2022-26783, CVE-2022-26785. |
33 |
CVE-2022-24487 |
|
|
Exec Code |
2022-04-15 |
2022-04-22 |
7.5 |
None |
Remote |
Low |
Not required |
Partial |
Partial |
Partial |
Windows Local Security Authority (LSA) Remote Code Execution Vulnerability. |
34 |
CVE-2022-24473 |
|
|
Exec Code |
2022-04-15 |
2022-04-22 |
6.8 |
None |
Remote |
Medium |
Not required |
Partial |
Partial |
Partial |
Microsoft Excel Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-26901. |
35 |
CVE-2022-24471 |
|
|
Exec Code |
2022-03-09 |
2022-03-14 |
6.5 |
None |
Remote |
Low |
??? |
Partial |
Partial |
Partial |
Azure Site Recovery Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-24467, CVE-2022-24468, CVE-2022-24470, CVE-2022-24517, CVE-2022-24520. |
36 |
CVE-2022-24470 |
|
|
Exec Code |
2022-03-09 |
2022-03-14 |
6.5 |
None |
Remote |
Low |
??? |
Partial |
Partial |
Partial |
Azure Site Recovery Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-24467, CVE-2022-24468, CVE-2022-24471, CVE-2022-24517, CVE-2022-24520. |
37 |
CVE-2022-24468 |
|
|
Exec Code |
2022-03-09 |
2022-03-14 |
6.5 |
None |
Remote |
Low |
??? |
Partial |
Partial |
Partial |
Azure Site Recovery Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-24467, CVE-2022-24470, CVE-2022-24471, CVE-2022-24517, CVE-2022-24520. |
38 |
CVE-2022-24467 |
|
|
Exec Code |
2022-03-09 |
2022-03-14 |
6.5 |
None |
Remote |
Low |
??? |
Partial |
Partial |
Partial |
Azure Site Recovery Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-24468, CVE-2022-24470, CVE-2022-24471, CVE-2022-24517, CVE-2022-24520. |
39 |
CVE-2022-24461 |
|
|
Exec Code |
2022-03-09 |
2022-03-14 |
6.8 |
None |
Remote |
Medium |
Not required |
Partial |
Partial |
Partial |
Microsoft Office Visio Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-24509, CVE-2022-24510. |
40 |
CVE-2022-24460 |
362 |
|
|
2022-03-09 |
2022-03-14 |
7.6 |
None |
Remote |
High |
Not required |
Complete |
Complete |
Complete |
Tablet Windows User Interface Application Elevation of Privilege Vulnerability. |
41 |
CVE-2022-24459 |
269 |
|
|
2022-03-09 |
2022-03-14 |
7.2 |
None |
Local |
Low |
Not required |
Complete |
Complete |
Complete |
Windows Fax and Scan Service Elevation of Privilege Vulnerability. |
42 |
CVE-2022-24457 |
787 |
|
Exec Code |
2022-03-09 |
2022-03-14 |
6.8 |
None |
Remote |
Medium |
Not required |
Partial |
Partial |
Partial |
HEIF Image Extensions Remote Code Execution Vulnerability. |
43 |
CVE-2022-24456 |
787 |
|
Exec Code |
2022-03-09 |
2022-03-14 |
6.8 |
None |
Remote |
Medium |
Not required |
Partial |
Partial |
Partial |
HEVC Video Extensions Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-22006, CVE-2022-22007, CVE-2022-23301, CVE-2022-24452, CVE-2022-24453. |
44 |
CVE-2022-24455 |
269 |
|
|
2022-03-09 |
2022-03-14 |
7.2 |
None |
Local |
Low |
Not required |
Complete |
Complete |
Complete |
Windows CD-ROM Driver Elevation of Privilege Vulnerability. |
45 |
CVE-2022-24454 |
269 |
|
|
2022-03-09 |
2022-03-14 |
7.2 |
None |
Local |
Low |
Not required |
Complete |
Complete |
Complete |
Windows Security Support Provider Interface Elevation of Privilege Vulnerability. |
46 |
CVE-2022-24453 |
787 |
|
Exec Code |
2022-03-09 |
2022-03-14 |
6.8 |
None |
Remote |
Medium |
Not required |
Partial |
Partial |
Partial |
HEVC Video Extensions Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-22006, CVE-2022-22007, CVE-2022-23301, CVE-2022-24452, CVE-2022-24456. |
47 |
CVE-2022-24452 |
|
|
Exec Code |
2022-03-09 |
2022-03-14 |
6.8 |
None |
Remote |
Medium |
Not required |
Partial |
Partial |
Partial |
HEVC Video Extensions Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-22006, CVE-2022-22007, CVE-2022-23301, CVE-2022-24453, CVE-2022-24456. |
48 |
CVE-2022-24451 |
|
|
Exec Code |
2022-03-09 |
2022-03-14 |
6.8 |
None |
Remote |
Medium |
Not required |
Partial |
Partial |
Partial |
VP9 Video Extensions Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-24501. |
49 |
CVE-2022-23301 |
|
|
Exec Code |
2022-03-09 |
2022-03-14 |
6.8 |
None |
Remote |
Medium |
Not required |
Partial |
Partial |
Partial |
HEVC Video Extensions Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-22006, CVE-2022-22007, CVE-2022-24452, CVE-2022-24453, CVE-2022-24456. |
50 |
CVE-2022-23300 |
|
|
Exec Code |
2022-03-09 |
2022-03-14 |
6.8 |
None |
Remote |
Medium |
Not required |
Partial |
Partial |
Partial |
Raw Image Extension Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-23295. |
|
|