2022-08-09 - CVE Archive

CVE-2022-34701 Aug 09, 20:15 HIGH This Week

Windows Secure Socket Tunneling Protocol (SSTP) Denial of Service Vulnerability. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Microsoft Windows Server 2008 Windows Server 2012 Windows Server 2016 +7

NVD

CVSS 3.1

7.5

EPSS

2.3%

CVE-2022-30194 Aug 09, 20:15 HIGH This Week

Windows WebBrowser Control Remote Code Execution Vulnerability. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable. No vendor patch available.

RCE Microsoft Code Injection Windows Server 2008 Windows Server 2012 +8

NVD

CVSS 3.1

7.5

EPSS

1.2%

CVE-2022-30144 Aug 09, 20:15 HIGH This Week

Windows Bluetooth Service Remote Code Execution Vulnerability. Rated high severity (CVSS 7.5), this vulnerability is no authentication required. No vendor patch available.

RCE Microsoft Windows 10 Windows 8 1 Windows Rt 8 1 +1

NVD

CVSS 3.1

7.5

EPSS

0.8%

CVE-2022-36125 Aug 09, 07:15 HIGH PATCH This Week

It is possible to crash (panic) an application by providing a corrupted data to be read.14.0 (previously known as avro-rs). Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Apache Avro

NVD

CVSS 3.1

7.5

EPSS

1.4%

CVE-2022-35724 Aug 09, 07:15 HIGH PATCH This Week

It is possible to provide data to be read that leads the reader to loop in cycles endlessly, consuming CPU.14.0 (previously known as avro-rs). Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Apache Information Disclosure Avro

NVD

CVSS 3.1

7.5

EPSS

1.6%

CVE-2022-35793 Aug 09, 20:15 HIGH This Week

Windows Print Spooler Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.3), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Microsoft Windows Server 2008 Windows Server 2012 Windows Server 2016 +7

NVD

CVSS 3.1

7.3

EPSS

9.1%

CVE-2022-33631 Aug 09, 20:15 HIGH This Week

Microsoft Excel Security Feature Bypass Vulnerability. Rated high severity (CVSS 7.3), this vulnerability is low attack complexity. No vendor patch available.

Authentication Bypass Microsoft 365 Apps Excel Office +1

NVD

CVSS 3.1

7.3

EPSS

0.8%

CVE-2022-35824 Aug 09, 20:15 HIGH This Week

Azure Site Recovery Remote Code Execution Vulnerability. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

RCE Microsoft Azure Site Recovery

NVD

CVSS 3.1

7.2

EPSS

1.9%

CVE-2022-35772 Aug 09, 20:15 HIGH This Week

Azure Site Recovery Remote Code Execution Vulnerability. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

RCE Microsoft Code Injection Azure Site Recovery Vmware To Azure

NVD

CVSS 3.1

7.2

EPSS

1.9%

CVE-2022-34690 Aug 09, 20:15 HIGH This Week

Windows Fax Service Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.1), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Microsoft Windows Server 2008 Windows Server 2012 Windows Server 2016 +7

NVD

CVSS 3.1

7.1

EPSS

0.5%

CVE-2022-33646 Aug 09, 20:15 HIGH This Week

Azure Batch Node Agent Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.0). No vendor patch available.

Privilege Escalation Microsoft Azure Batch

NVD

CVSS 3.1

7.0

EPSS

0.4%