2022-05-10

CVE-2022-27167 May 10, 20:15 HIGH This Week

Privilege escalation vulnerability in Windows products of ESET, spol. Rated high severity (CVSS 7.1), this vulnerability is low attack complexity. No vendor patch available.

CVE-2022-29151 May 10, 21:15 HIGH PATCH This Week

Windows Cluster Shared Volume (CSV) Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.0).

CVE-2022-29150 May 10, 21:15 HIGH PATCH This Week

Windows Cluster Shared Volume (CSV) Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.0).

CVE-2022-29142 May 10, 21:15 HIGH PATCH This Week

Windows Kernel Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.0).

CVE-2022-29138 May 10, 21:15 HIGH PATCH This Week

Windows Clustered Shared Volume Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.0).

CVE-2022-29135 May 10, 21:15 HIGH PATCH This Week

Windows Cluster Shared Volume (CSV) Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.0).

CVE-2022-29126 May 10, 21:15 HIGH PATCH This Week

Tablet Windows User Interface Application Core Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.0).

CVE-2022-29125 May 10, 21:15 HIGH PATCH This Week

Windows Push Notifications Apps Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.0).

CVE-2022-29106 May 10, 21:15 HIGH PATCH This Week

Windows Hyper-V Shared Virtual Disk Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.0).

CVE-2022-26939 May 10, 21:15 HIGH PATCH This Week

Storage Spaces Direct Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.0).

CVE-2022-26938 May 10, 21:15 HIGH PATCH This Week

Storage Spaces Direct Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.0).

CVE-2022-23279 May 10, 21:15 HIGH PATCH This Week

Windows ALPC Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.0).

CVE-2022-22016 May 10, 21:15 HIGH PATCH This Week

Windows PlayToManager Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.0).

CVE-2022-20118 May 10, 21:15 HIGH This Week

In ion_ioctl and related functions of ion.c, there is a possible use after free due to a race condition. Rated high severity (CVSS 7.0). No vendor patch available.

CVE-2022-20007 May 10, 20:15 HIGH PATCH This Week

In startActivityForAttachedApplicationIfNeeded of RootWindowContainer.java, there is a possible way to overlay an app that believes it's still in the foreground, when it is not, due to a race. Rated high severity (CVSS 7.0), this vulnerability is no authentication required.

CVE-2022-20006 May 10, 20:15 HIGH This Week

In several functions of KeyguardServiceWrapper.java and related files,, there is a possible way to briefly view what's under the lockscreen due to a race condition. Rated high severity (CVSS 7.0). No vendor patch available.