Windows Server 2016

4507 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2022-30155 MEDIUM PATCH This Month

Windows Kernel Denial of Service Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity.

Denial Of Service Microsoft Windows 10 Windows 11 Windows 7 +7

NVD

CVSS 3.1

5.5

EPSS

4.7%

CVE-2022-30154 MEDIUM PATCH This Month

Microsoft File Server Shadow Copy Agent Service (RVSS) Elevation of Privilege Vulnerability. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable.

Microsoft Information Disclosure Windows 10 Windows Server 2012 Windows Server 2016 +2

NVD

CVSS 3.1

5.3

EPSS

1.5%

CVE-2022-30153 HIGH PATCH This Week

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

RCE Microsoft Windows 10 Windows 11 Windows 7 +7

NVD

CVSS 3.1

8.8

EPSS

2.3%

CVE-2022-30152 HIGH PATCH This Week

Windows Network Address Translation (NAT) Denial of Service Vulnerability. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Denial Of Service Microsoft Windows 10 Windows 11 Windows 7 +7

NVD

CVSS 3.1

7.5

EPSS

2.7%

CVE-2022-30151 HIGH PATCH This Week

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.0).

Microsoft Information Disclosure Windows 10 Windows 11 Windows 7 +7

NVD

CVSS 3.1

7.0

EPSS

0.5%

CVE-2022-30150 HIGH PATCH This Week

Windows Defender Remote Credential Guard Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable. This Improper Authentication vulnerability could allow attackers to bypass authentication mechanisms to gain unauthorized access.

Authentication Bypass Microsoft Windows 10 Windows 11 Windows Server 2016 +2

NVD

CVSS 3.1

7.5

EPSS

3.3%

CVE-2022-30149 HIGH PATCH This Week

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required.

RCE Microsoft Windows 10 Windows 11 Windows 7 +7

NVD

CVSS 3.1

7.5

EPSS

1.8%

CVE-2022-30148 MEDIUM PATCH This Month

Windows Desired State Configuration (DSC) Information Disclosure Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity.

Microsoft Information Disclosure Windows 10 Windows 11 Windows Server 2016 +2

NVD

CVSS 3.1

5.5

EPSS

1.2%

CVE-2022-30147 HIGH PATCH This Week

Windows Installer Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Microsoft Information Disclosure Windows 10 Windows 11 Windows 7 +7

NVD

CVSS 3.1

7.8

EPSS

4.5%

CVE-2022-30146 HIGH PATCH This Week

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required.

RCE Microsoft Windows 10 Windows 11 Windows 7 +7

NVD

CVSS 3.1

7.5

EPSS

1.8%

CVE-2022-30145 HIGH PATCH This Week

Windows Encrypting File System (EFS) Remote Code Execution Vulnerability. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable.

RCE Microsoft Windows 10 Windows 11 Windows Server 2016 +2

NVD

CVSS 3.1

7.5

EPSS

2.0%

CVE-2022-30143 HIGH PATCH This Week

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required.

RCE Microsoft Windows 10 Windows 11 Windows 7 +7

NVD

CVSS 3.1

7.5

EPSS

1.8%

CVE-2022-30142 HIGH PATCH This Week

Windows File History Remote Code Execution Vulnerability. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required.

RCE Microsoft Windows 10 Windows 11 Windows 7 +7

NVD

CVSS 3.1

7.5

EPSS

2.0%

CVE-2022-30141 HIGH PATCH This Week

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, no authentication required.

RCE Microsoft Windows 10 Windows 11 Windows 7 +7

NVD

CVSS 3.1

8.1

EPSS

2.3%

CVE-2022-30140 HIGH PATCH This Week

Windows iSCSI Discovery Service Remote Code Execution Vulnerability. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required.

RCE Microsoft Windows 10 Windows 11 Windows 7 +7

NVD

CVSS 3.1

7.5

EPSS

1.8%

CVE-2022-30139 HIGH PATCH This Week

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable.

RCE Microsoft Windows 10 Windows 11 Windows Server 2016 +2

NVD

CVSS 3.1

7.5

EPSS

2.1%

CVE-2022-30136 CRITICAL PATCH Act Now

Windows Network File System Remote Code Execution Vulnerability. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

RCE Microsoft Windows Server 2012 Windows Server 2016 Windows Server 2019

NVD

CVSS 3.1

9.8

EPSS

74.7%

CVE-2022-30131 HIGH PATCH This Week

Windows Container Isolation FS Filter Driver Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Microsoft Information Disclosure Windows Server 2016 Windows Server 2019 Windows Server 2022

NVD

CVSS 3.1

7.8

EPSS

0.8%

CVE-2022-30138 HIGH PATCH This Week

Windows Print Spooler Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Microsoft Information Disclosure Windows 10 Windows 11 Windows 7 +7

NVD

CVSS 3.1

7.8

EPSS

1.0%

CVE-2022-29151 HIGH PATCH This Week

Windows Cluster Shared Volume (CSV) Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.0).

Microsoft Information Disclosure Windows Server Windows Server 2012 Windows Server 2016 +2

NVD

CVSS 3.1

7.0

EPSS

0.6%

CVE-2022-29150 HIGH PATCH This Week

Windows Cluster Shared Volume (CSV) Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.0).

Microsoft Information Disclosure Windows Server Windows Server 2012 Windows Server 2016 +2

NVD

CVSS 3.1

7.0

EPSS

0.6%

CVE-2022-29141 HIGH PATCH This Week

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity.

RCE Microsoft Windows 10 Windows 11 Windows 7 +8

NVD

CVSS 3.1

8.8

EPSS

2.6%

CVE-2022-29140 MEDIUM PATCH This Month

Windows Print Spooler Information Disclosure Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity.

Microsoft Information Disclosure Windows 10 Windows 11 Windows Server +3

NVD

CVSS 3.1

5.5

EPSS

1.1%

CVE-2022-29139 HIGH PATCH This Week

RCE Microsoft Windows 10 Windows 11 Windows 7 +8

NVD

CVSS 3.1

8.8

EPSS

2.2%

CVE-2022-29138 HIGH PATCH This Week

Windows Clustered Shared Volume Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.0).

Microsoft Information Disclosure Windows Server Windows Server 2012 Windows Server 2016 +2

NVD

CVSS 3.1

7.0

EPSS

0.6%

CVE-2022-29137 HIGH PATCH This Week

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity.

RCE Microsoft Windows 10 Windows 11 Windows 7 +8

NVD

CVSS 3.1

8.8

EPSS

2.3%

CVE-2022-29135 HIGH PATCH This Week

Windows Cluster Shared Volume (CSV) Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.0).

Microsoft Information Disclosure Windows Server Windows Server 2012 Windows Server 2016 +2

NVD

CVSS 3.1

7.0

EPSS

0.7%

CVE-2022-29134 MEDIUM PATCH This Month

Windows Clustered Shared Volume Information Disclosure Vulnerability. Rated medium severity (CVSS 6.5), this vulnerability is low attack complexity.

Microsoft Information Disclosure Windows Server Windows Server 2012 Windows Server 2016 +2

NVD

CVSS 3.1

6.5

EPSS

0.8%

CVE-2022-29132 HIGH PATCH This Week

Windows Print Spooler Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Microsoft Information Disclosure Windows 10 Windows 11 Windows 7 +8

NVD

CVSS 3.1

7.8

EPSS

0.7%

CVE-2022-29131 HIGH PATCH This Week

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity.

RCE Microsoft Windows 10 Windows 11 Windows 7 +8

NVD

CVSS 3.1

8.8

EPSS

2.7%

CVE-2022-29130 CRITICAL PATCH Act Now

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

RCE Microsoft Windows 10 Windows 11 Windows 7 +8

NVD

CVSS 3.1

9.8

EPSS

3.7%

CVE-2022-29129 HIGH PATCH This Week

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity.

RCE Microsoft Windows 10 Windows 11 Windows 7 +8

NVD

CVSS 3.1

8.8

EPSS

2.7%

CVE-2022-29128 HIGH PATCH This Week

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity.

RCE Microsoft Windows 10 Windows 11 Windows 7 +8

NVD

CVSS 3.1

8.8

EPSS

2.7%

CVE-2022-29127 MEDIUM PATCH This Month

BitLocker Security Feature Bypass Vulnerability. Rated medium severity (CVSS 4.2), this vulnerability is no authentication required.

Authentication Bypass Windows 10 Windows 11 Windows 7 Windows 8 1 +7

NVD

CVSS 3.1

4.2

EPSS

0.8%

CVE-2022-29126 HIGH PATCH This Week

Tablet Windows User Interface Application Core Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.0).

Microsoft Information Disclosure Windows 10 Windows 11 Windows 8 1 +6

NVD

CVSS 3.1

7.0

EPSS

0.6%

CVE-2022-29125 HIGH PATCH This Week

Windows Push Notifications Apps Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.0).

Microsoft Information Disclosure Windows 10 Windows 11 Windows 8 1 +5

NVD

CVSS 3.1

7.0

EPSS

0.7%

CVE-2022-29123 MEDIUM PATCH This Month

Windows Clustered Shared Volume Information Disclosure Vulnerability. Rated medium severity (CVSS 6.5), this vulnerability is low attack complexity.

Microsoft Information Disclosure Windows Server Windows Server 2012 Windows Server 2016 +2

NVD

CVSS 3.1

6.5

EPSS

0.8%

CVE-2022-29122 MEDIUM PATCH This Month

Windows Clustered Shared Volume Information Disclosure Vulnerability. Rated medium severity (CVSS 6.5), this vulnerability is low attack complexity.

Microsoft Information Disclosure Windows Server Windows Server 2012 Windows Server 2016 +1

NVD

CVSS 3.1

6.5

EPSS

0.8%

CVE-2022-29121 MEDIUM PATCH This Month

Windows WLAN AutoConfig Service Denial of Service Vulnerability. Rated medium severity (CVSS 6.5), this vulnerability is no authentication required, low attack complexity.

Denial Of Service Microsoft Windows 10 Windows 11 Windows 7 +8

NVD

CVSS 3.1

6.5

EPSS

0.9%

CVE-2022-29120 MEDIUM PATCH This Month

Windows Clustered Shared Volume Information Disclosure Vulnerability. Rated medium severity (CVSS 6.5), this vulnerability is low attack complexity.

Microsoft Information Disclosure Windows Server Windows Server 2012 Windows Server 2016 +2

NVD

CVSS 3.1

6.5

EPSS

0.8%

CVE-2022-29115 HIGH PATCH This Week

Windows Fax Service Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

RCE Microsoft Windows 10 Windows 11 Windows 7 +7

NVD

CVSS 3.1

7.8

EPSS

2.2%

CVE-2022-29114 MEDIUM PATCH This Month

Windows Print Spooler Information Disclosure Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity.

Microsoft Information Disclosure Windows 10 Windows 11 Windows 8 1 +5

NVD

CVSS 3.1

5.5

EPSS

1.2%

CVE-2022-29112 MEDIUM PATCH This Month

Windows Graphics Component Information Disclosure Vulnerability. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Microsoft Information Disclosure Windows 10 Windows 11 Windows 7 +7

NVD

CVSS 3.1

6.5

EPSS

3.0%

CVE-2022-29106 HIGH PATCH This Week

Windows Hyper-V Shared Virtual Disk Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.0).

Microsoft Information Disclosure Windows 10 Windows Server 2016 Windows Server 2019 +1

NVD

CVSS 3.1

7.0

EPSS

0.5%

CVE-2022-29105 HIGH PATCH This Week

Microsoft Windows Media Foundation Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

RCE Microsoft Windows 10 Windows 11 Windows 7 +7

NVD

CVSS 3.1

7.8

EPSS

2.7%

CVE-2022-29104 HIGH PATCH This Week

Windows Print Spooler Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Microsoft Information Disclosure Windows 10 Windows 11 Windows 7 +7

NVD

CVSS 3.1

7.8

EPSS

12.1%

CVE-2022-29103 HIGH PATCH This Week

Windows Remote Access Connection Manager Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Microsoft Information Disclosure Windows 10 Windows 11 Windows 7 +7

NVD

CVSS 3.1

7.8

EPSS

0.6%

CVE-2022-29102 MEDIUM PATCH This Month

Windows Failover Cluster Information Disclosure Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity.

Microsoft Information Disclosure Windows Server Windows Server 2012 Windows Server 2016 +2

NVD

CVSS 3.1

5.5

EPSS

0.8%

CVE-2022-26939 HIGH PATCH This Week

Storage Spaces Direct Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.0).

Information Disclosure Windows Server Windows Server 2016 Windows Server 2019 Windows Server 2022

NVD

CVSS 3.1

7.0

EPSS

0.5%

CVE-2022-26938 HIGH PATCH This Week

Storage Spaces Direct Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.0).

Information Disclosure Windows Server Windows Server 2016 Windows Server 2019

NVD

CVSS 3.1

7.0

EPSS

0.7%

CVE-2022-26937 CRITICAL PATCH Act Now

Windows Network File System Remote Code Execution Vulnerability. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

RCE Microsoft Windows Server Windows Server 2008 Windows Server 2012 +3

NVD

CVSS 3.1

9.8

EPSS

76.8%

CVE-2022-26936 MEDIUM PATCH This Month

Windows Server Service Information Disclosure Vulnerability. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity.

Microsoft Information Disclosure Windows 10 Windows 11 Windows 7 +7

NVD

CVSS 3.1

6.5

EPSS

2.7%

CVE-2022-26935 MEDIUM PATCH This Month

Windows WLAN AutoConfig Service Information Disclosure Vulnerability. Rated medium severity (CVSS 6.5), this vulnerability is no authentication required, low attack complexity.

Microsoft Information Disclosure Windows 10 Windows 11 Windows 7 +7

NVD

CVSS 3.1

6.5

EPSS

1.0%

CVE-2022-26934 MEDIUM PATCH This Month

Windows Graphics Component Information Disclosure Vulnerability. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Epss exploitation probability 17.4%.

Microsoft Information Disclosure 365 Apps Office Office Long Term Servicing Channel +17

NVD VulDB

CVSS 3.1

6.5

EPSS

17.4%

CVE-2022-26933 MEDIUM PATCH This Month

Windows NTFS Information Disclosure Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity.

Microsoft Information Disclosure Windows 10 Windows 11 Windows 8 1 +5

NVD

CVSS 3.1

5.5

EPSS

0.8%

CVE-2022-26932 HIGH PATCH This Week

Storage Spaces Direct Elevation of Privilege Vulnerability. Rated high severity (CVSS 8.2), this vulnerability is low attack complexity.

Information Disclosure Windows Server Windows Server 2016 Windows Server 2019 Windows Server 2022

NVD

CVSS 3.1

8.2

EPSS

0.7%

CVE-2022-26931 HIGH PATCH This Week

Windows Kerberos Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable.

Microsoft Information Disclosure Windows 10 Windows 11 Windows 7 +7

NVD

CVSS 3.1

7.5

EPSS

2.4%

CVE-2022-26930 MEDIUM PATCH This Month

Windows Remote Access Connection Manager Information Disclosure Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity.

Microsoft Information Disclosure Windows 10 Windows 11 Windows 8 1 +5

NVD

CVSS 3.1

5.5

EPSS

0.8%

CVE-2022-26926 HIGH PATCH This Week

Windows Address Book Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

Authentication Bypass RCE Microsoft Windows 10 Windows 11 +8

NVD VulDB

CVSS 3.1

7.8

EPSS

2.0%

CVE-2022-26925 MEDIUM KEV PATCH THREAT This Month

Windows LSA Spoofing Vulnerability. Rated medium severity (CVSS 5.9), this vulnerability is remotely exploitable, no authentication required. This Missing Authentication for Critical Function vulnerability could allow attackers to access critical functionality without authentication.

Authentication Bypass Microsoft Windows 10 1507 Windows 10 1607 Windows 10 1809 +14

NVD

CVSS 3.1

5.9

EPSS

10.5%

CVE-2022-26923 HIGH POC KEV PATCH THREAT This Week

Active Directory Domain Services Elevation of Privilege Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity.

Information Disclosure Windows 10 1507 Windows 10 1607 Windows 10 1809 Windows 10 1909 +10

NVD GitHub

CVSS 3.1

8.8

EPSS

83.3%

CVE-2022-24466 MEDIUM PATCH This Month

Windows Hyper-V Security Feature Bypass Vulnerability. Rated medium severity (CVSS 4.1), this vulnerability is low attack complexity.

Authentication Bypass Microsoft Windows 10 Windows 11 Windows Server 2016 +2

NVD

CVSS 3.1

4.1

EPSS

0.7%

CVE-2022-23270 HIGH PATCH This Week

Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, no authentication required.

RCE Microsoft Windows 10 Windows 11 Windows 7 +6

NVD

CVSS 3.1

8.1

EPSS

73.1%

CVE-2022-22019 HIGH PATCH This Week

Remote Procedure Call Runtime Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

RCE Windows 10 Windows 11 Windows 7 Windows 8 1 +6

NVD

CVSS 3.1

8.8

EPSS

2.5%

CVE-2022-22016 HIGH PATCH This Week

Windows PlayToManager Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.0).

Microsoft Information Disclosure Windows 10 Windows 11 Windows Server +2

NVD

CVSS 3.1

7.0

EPSS

0.5%

CVE-2022-22015 MEDIUM PATCH This Month

Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity.

Microsoft Information Disclosure Remote Desktop Client Windows 10 Windows 11 +7

NVD

CVSS 3.1

6.5

EPSS

2.4%

CVE-2022-22014 HIGH PATCH This Week

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity.

RCE Microsoft Windows 10 Windows 11 Windows 7 +6

NVD

CVSS 3.1

8.8

EPSS

2.3%

CVE-2022-22013 HIGH PATCH This Week

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity.

RCE Microsoft Windows 10 Windows 11 Windows 7 +6

NVD

CVSS 3.1

8.8

EPSS

2.3%

CVE-2022-22012 CRITICAL PATCH Act Now

RCE Microsoft Windows 10 Windows 11 Windows 7 +6

NVD

CVSS 3.1

9.8

EPSS

3.9%

CVE-2022-22011 MEDIUM PATCH This Month

Windows Graphics Component Information Disclosure Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity.

Microsoft Information Disclosure Windows 10 Windows 7 Windows 8 1 +5

NVD

CVSS 3.1

5.5

EPSS

0.8%

CVE-2022-21972 HIGH PATCH This Week

Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, no authentication required.

RCE Microsoft Windows 10 Windows 11 Windows 7 +8

NVD

CVSS 3.1

8.1

EPSS

80.9%

CVE-2022-26920 MEDIUM This Month

Windows Graphics Component Information Disclosure Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Microsoft Information Disclosure Windows 10 Windows 11 Windows Server 2016 +2

NVD

CVSS 3.1

5.5

EPSS

0.8%

CVE-2022-26919 HIGH This Week

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.

RCE Microsoft Windows 10 Windows 11 Windows 7 +7

NVD

CVSS 3.1

8.1

EPSS

2.5%

CVE-2022-26918 HIGH This Week

Windows Fax Compose Form Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft Windows 10 Windows 11 Windows 7 +7

NVD

CVSS 3.1

7.8

EPSS

1.9%

CVE-2022-26917 HIGH This Week

Windows Fax Compose Form Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft Windows 10 Windows 11 Windows 7 +7

NVD

CVSS 3.1

7.8

EPSS

2.0%

CVE-2022-26916 HIGH This Week

Windows Fax Compose Form Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft Windows 10 Windows 11 Windows 7 +7

NVD

CVSS 3.1

7.8

EPSS

1.9%

CVE-2022-26915 HIGH This Week

Windows Secure Channel Denial of Service Vulnerability. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Microsoft Windows 10 Windows 11 Windows 7 +7

NVD

CVSS 3.1

7.5

EPSS

3.2%

CVE-2022-26914 HIGH This Week

Win32k Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Windows 10 Windows 11 Windows Server 2016 Windows Server 2019 +1

NVD

CVSS 3.1

7.8

EPSS

0.8%

CVE-2022-26904 HIGH POC KEV PATCH THREAT Act Now

Windows User Profile Service Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.0).

Race Condition Microsoft Information Disclosure Windows 10 1507 Windows 10 1607 +15

NVD

CVSS 3.1

7.0

EPSS

9.8%

CVE-2022-26903 HIGH This Week

Windows Graphics Component Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft Excel Excel Mobile Powerpoint +13

NVD

CVSS 3.1

7.8

EPSS

2.5%

CVE-2022-26831 HIGH This Week

Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Microsoft Windows 10 Windows 11 Windows 7 +7

NVD

CVSS 3.1

7.5

EPSS

3.0%

CVE-2022-26829 MEDIUM This Month

Windows DNS Server Remote Code Execution Vulnerability. Rated medium severity (CVSS 6.6), this vulnerability is remotely exploitable. No vendor patch available.

Race Condition RCE Microsoft Windows Server 2008 Windows Server 2012 +3

NVD

CVSS 3.1

6.6

EPSS

1.8%

CVE-2022-26828 HIGH This Week

Windows Bluetooth Driver Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.0). No vendor patch available.

Race Condition Microsoft Information Disclosure Windows 10 Windows Server 2016 +2

NVD

CVSS 3.1

7.0

EPSS

0.3%

CVE-2022-26827 HIGH This Week

Windows File Server Resource Management Service Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.0). No vendor patch available.

Race Condition Microsoft Information Disclosure Windows 10 Windows 11 +8

NVD

CVSS 3.1

7.0

EPSS

0.4%

CVE-2022-26826 HIGH Act Now

Windows DNS Server Remote Code Execution Vulnerability. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. Epss exploitation probability 11.2% and no vendor patch available.

Command Injection Microsoft RCE Windows 10 Windows 11 +3

NVD VulDB

CVSS 3.1

7.2

EPSS

11.2%

CVE-2022-26825 HIGH This Week

Windows DNS Server Remote Code Execution Vulnerability. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

RCE Microsoft Windows Server 2016 Windows Server 2019 Windows Server 2022

NVD

CVSS 3.1

7.2

EPSS

3.4%

CVE-2022-26824 HIGH This Week

Windows DNS Server Remote Code Execution Vulnerability. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

RCE Microsoft Windows Server 2016 Windows Server 2019 Windows Server 2022

NVD

CVSS 3.1

7.2

EPSS

3.4%

CVE-2022-26823 HIGH This Week

Windows DNS Server Remote Code Execution Vulnerability. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

RCE Microsoft Windows Server 2016 Windows Server 2019 Windows Server 2022

NVD

CVSS 3.1

7.2

EPSS

3.4%

CVE-2022-26822 MEDIUM This Month

Windows DNS Server Remote Code Execution Vulnerability. Rated medium severity (CVSS 6.6), this vulnerability is remotely exploitable. No vendor patch available.

Race Condition RCE Microsoft Windows Server 2008 Windows Server 2012 +3

NVD

CVSS 3.1

6.6

EPSS

1.8%

CVE-2022-26821 MEDIUM This Month

Windows DNS Server Remote Code Execution Vulnerability. Rated medium severity (CVSS 6.6), this vulnerability is remotely exploitable. No vendor patch available.

Race Condition RCE Microsoft Windows Server 2008 Windows Server 2012 +3

NVD

CVSS 3.1

6.6

EPSS

1.8%

CVE-2022-30155

EPSS 5% CVSS 5.5

MEDIUM PATCH This Month

Windows Kernel Denial of Service Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity.

Denial Of Service Microsoft Windows 10 +9

NVD

CVE-2022-30154

EPSS 2% CVSS 5.3

MEDIUM PATCH This Month

Microsoft File Server Shadow Copy Agent Service (RVSS) Elevation of Privilege Vulnerability. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable.

Microsoft Information Disclosure Windows 10 +4

NVD

CVE-2022-30153

EPSS 2% CVSS 8.8

HIGH PATCH This Week

RCE Microsoft Windows 10 +9

NVD

CVE-2022-30152

EPSS 3% CVSS 7.5

HIGH PATCH This Week

Denial Of Service Microsoft Windows 10 +9

NVD

CVE-2022-30151

EPSS 1% CVSS 7.0

HIGH PATCH This Week

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.0).

Microsoft Information Disclosure Windows 10 +9

NVD

CVE-2022-30150

EPSS 3% CVSS 7.5

HIGH PATCH This Week

Authentication Bypass Microsoft Windows 10 +4

NVD

CVE-2022-30149

EPSS 2% CVSS 7.5

HIGH PATCH This Week

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required.

RCE Microsoft Windows 10 +9

NVD

CVE-2022-30148

EPSS 1% CVSS 5.5

MEDIUM PATCH This Month

Windows Desired State Configuration (DSC) Information Disclosure Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity.

Microsoft Information Disclosure Windows 10 +4

NVD

CVE-2022-30147

EPSS 5% CVSS 7.8

HIGH PATCH This Week

Windows Installer Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Microsoft Information Disclosure Windows 10 +9

NVD

CVE-2022-30146

EPSS 2% CVSS 7.5

HIGH PATCH This Week

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required.

RCE Microsoft Windows 10 +9

NVD

CVE-2022-30145

EPSS 2% CVSS 7.5

HIGH PATCH This Week

Windows Encrypting File System (EFS) Remote Code Execution Vulnerability. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable.

RCE Microsoft Windows 10 +4

NVD

CVE-2022-30143

EPSS 2% CVSS 7.5

HIGH PATCH This Week

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required.

RCE Microsoft Windows 10 +9

NVD

CVE-2022-30142

EPSS 2% CVSS 7.5

HIGH PATCH This Week

Windows File History Remote Code Execution Vulnerability. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required.

RCE Microsoft Windows 10 +9

NVD

CVE-2022-30141

EPSS 2% CVSS 8.1

HIGH PATCH This Week

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, no authentication required.

RCE Microsoft Windows 10 +9

NVD

CVE-2022-30140

EPSS 2% CVSS 7.5

HIGH PATCH This Week

Windows iSCSI Discovery Service Remote Code Execution Vulnerability. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required.

RCE Microsoft Windows 10 +9

NVD

CVE-2022-30139

EPSS 2% CVSS 7.5

HIGH PATCH This Week

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable.

RCE Microsoft Windows 10 +4

NVD

CVE-2022-30136

EPSS 75% CVSS 9.8

CRITICAL PATCH Act Now

Windows Network File System Remote Code Execution Vulnerability. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

RCE Microsoft Windows Server 2012 +2

NVD

CVE-2022-30131

EPSS 1% CVSS 7.8

HIGH PATCH This Week

Windows Container Isolation FS Filter Driver Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Microsoft Information Disclosure Windows Server 2016 +2

NVD

CVE-2022-30138

EPSS 1% CVSS 7.8

HIGH PATCH This Week

Windows Print Spooler Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Microsoft Information Disclosure Windows 10 +9

NVD

CVE-2022-29151

EPSS 1% CVSS 7.0

HIGH PATCH This Week

Windows Cluster Shared Volume (CSV) Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.0).

Microsoft Information Disclosure Windows Server +4

NVD

CVE-2022-29150

EPSS 1% CVSS 7.0

HIGH PATCH This Week

Windows Cluster Shared Volume (CSV) Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.0).

Microsoft Information Disclosure Windows Server +4

NVD

CVE-2022-29141

EPSS 3% CVSS 8.8

HIGH PATCH This Week

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity.

RCE Microsoft Windows 10 +10

NVD

CVE-2022-29140

EPSS 1% CVSS 5.5

MEDIUM PATCH This Month

Windows Print Spooler Information Disclosure Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity.

Microsoft Information Disclosure Windows 10 +5

NVD

CVE-2022-29139

EPSS 2% CVSS 8.8

HIGH PATCH This Week

RCE Microsoft Windows 10 +10

NVD

CVE-2022-29138

EPSS 1% CVSS 7.0

HIGH PATCH This Week

Windows Clustered Shared Volume Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.0).

Microsoft Information Disclosure Windows Server +4

NVD

CVE-2022-29137

EPSS 2% CVSS 8.8

HIGH PATCH This Week

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity.

RCE Microsoft Windows 10 +10

NVD

CVE-2022-29135

EPSS 1% CVSS 7.0

HIGH PATCH This Week

Windows Cluster Shared Volume (CSV) Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.0).

Microsoft Information Disclosure Windows Server +4

NVD

CVE-2022-29134

EPSS 1% CVSS 6.5

MEDIUM PATCH This Month

Windows Clustered Shared Volume Information Disclosure Vulnerability. Rated medium severity (CVSS 6.5), this vulnerability is low attack complexity.

Microsoft Information Disclosure Windows Server +4

NVD

CVE-2022-29132

EPSS 1% CVSS 7.8

HIGH PATCH This Week

Windows Print Spooler Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Microsoft Information Disclosure Windows 10 +10

NVD

CVE-2022-29131

EPSS 3% CVSS 8.8

HIGH PATCH This Week

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity.

RCE Microsoft Windows 10 +10

NVD

CVE-2022-29130

EPSS 4% CVSS 9.8

CRITICAL PATCH Act Now

RCE Microsoft Windows 10 +10

NVD

CVE-2022-29129

EPSS 3% CVSS 8.8

HIGH PATCH This Week

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity.

RCE Microsoft Windows 10 +10

NVD

CVE-2022-29128

EPSS 3% CVSS 8.8

HIGH PATCH This Week

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity.

RCE Microsoft Windows 10 +10

NVD

CVE-2022-29127

EPSS 1% CVSS 4.2

MEDIUM PATCH This Month

BitLocker Security Feature Bypass Vulnerability. Rated medium severity (CVSS 4.2), this vulnerability is no authentication required.

Authentication Bypass Windows 10 Windows 11 +9

NVD

CVE-2022-29126

EPSS 1% CVSS 7.0

HIGH PATCH This Week

Tablet Windows User Interface Application Core Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.0).

Microsoft Information Disclosure Windows 10 +8

NVD

CVE-2022-29125

EPSS 1% CVSS 7.0

HIGH PATCH This Week

Windows Push Notifications Apps Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.0).

Microsoft Information Disclosure Windows 10 +7

NVD

CVE-2022-29123

EPSS 1% CVSS 6.5

MEDIUM PATCH This Month

Windows Clustered Shared Volume Information Disclosure Vulnerability. Rated medium severity (CVSS 6.5), this vulnerability is low attack complexity.

Microsoft Information Disclosure Windows Server +4

NVD

CVE-2022-29122

EPSS 1% CVSS 6.5

MEDIUM PATCH This Month

Windows Clustered Shared Volume Information Disclosure Vulnerability. Rated medium severity (CVSS 6.5), this vulnerability is low attack complexity.

Microsoft Information Disclosure Windows Server +3

NVD

CVE-2022-29121

EPSS 1% CVSS 6.5

MEDIUM PATCH This Month

Windows WLAN AutoConfig Service Denial of Service Vulnerability. Rated medium severity (CVSS 6.5), this vulnerability is no authentication required, low attack complexity.

Denial Of Service Microsoft Windows 10 +10

NVD

CVE-2022-29120

EPSS 1% CVSS 6.5

MEDIUM PATCH This Month

Windows Clustered Shared Volume Information Disclosure Vulnerability. Rated medium severity (CVSS 6.5), this vulnerability is low attack complexity.

Microsoft Information Disclosure Windows Server +4

NVD

CVE-2022-29115

EPSS 2% CVSS 7.8

HIGH PATCH This Week

Windows Fax Service Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

RCE Microsoft Windows 10 +9

NVD

CVE-2022-29114

EPSS 1% CVSS 5.5

MEDIUM PATCH This Month

Windows Print Spooler Information Disclosure Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity.

Microsoft Information Disclosure Windows 10 +7

NVD

CVE-2022-29112

EPSS 3% CVSS 6.5

MEDIUM PATCH This Month

Windows Graphics Component Information Disclosure Vulnerability. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Microsoft Information Disclosure Windows 10 +9

NVD

CVE-2022-29106

EPSS 1% CVSS 7.0

HIGH PATCH This Week

Windows Hyper-V Shared Virtual Disk Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.0).

Microsoft Information Disclosure Windows 10 +3

NVD

CVE-2022-29105

EPSS 3% CVSS 7.8

HIGH PATCH This Week

Microsoft Windows Media Foundation Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

RCE Microsoft Windows 10 +9

NVD

CVE-2022-29104

EPSS 12% CVSS 7.8

HIGH PATCH This Week

Windows Print Spooler Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Microsoft Information Disclosure Windows 10 +9

NVD

CVE-2022-29103

EPSS 1% CVSS 7.8

HIGH PATCH This Week

Windows Remote Access Connection Manager Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Microsoft Information Disclosure Windows 10 +9

NVD

CVE-2022-29102

EPSS 1% CVSS 5.5

MEDIUM PATCH This Month

Windows Failover Cluster Information Disclosure Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity.

Microsoft Information Disclosure Windows Server +4

NVD

CVE-2022-26939

EPSS 1% CVSS 7.0

HIGH PATCH This Week

Storage Spaces Direct Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.0).

Information Disclosure Windows Server Windows Server 2016 +2

NVD

CVE-2022-26938

EPSS 1% CVSS 7.0

HIGH PATCH This Week

Storage Spaces Direct Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.0).

Information Disclosure Windows Server Windows Server 2016 +1

NVD

CVE-2022-26937

EPSS 77% CVSS 9.8

CRITICAL PATCH Act Now

Windows Network File System Remote Code Execution Vulnerability. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

RCE Microsoft Windows Server +5

NVD

CVE-2022-26936

EPSS 3% CVSS 6.5

MEDIUM PATCH This Month

Windows Server Service Information Disclosure Vulnerability. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity.

Microsoft Information Disclosure Windows 10 +9

NVD

CVE-2022-26935

EPSS 1% CVSS 6.5

MEDIUM PATCH This Month

Windows WLAN AutoConfig Service Information Disclosure Vulnerability. Rated medium severity (CVSS 6.5), this vulnerability is no authentication required, low attack complexity.

Microsoft Information Disclosure Windows 10 +9

NVD

CVE-2022-26934

EPSS 17% CVSS 6.5

MEDIUM PATCH This Month

Microsoft Information Disclosure 365 Apps +19

NVD VulDB

CVE-2022-26933

EPSS 1% CVSS 5.5

MEDIUM PATCH This Month

Windows NTFS Information Disclosure Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity.

Microsoft Information Disclosure Windows 10 +7

NVD

CVE-2022-26932

EPSS 1% CVSS 8.2

HIGH PATCH This Week

Storage Spaces Direct Elevation of Privilege Vulnerability. Rated high severity (CVSS 8.2), this vulnerability is low attack complexity.

Information Disclosure Windows Server Windows Server 2016 +2

NVD

CVE-2022-26931

EPSS 2% CVSS 7.5

HIGH PATCH This Week

Windows Kerberos Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable.

Microsoft Information Disclosure Windows 10 +9

NVD

CVE-2022-26930

EPSS 1% CVSS 5.5

MEDIUM PATCH This Month

Windows Remote Access Connection Manager Information Disclosure Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity.

Microsoft Information Disclosure Windows 10 +7

NVD

CVE-2022-26926

EPSS 2% CVSS 7.8

HIGH PATCH This Week

Windows Address Book Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

Authentication Bypass RCE Microsoft +10

NVD VulDB

CVE-2022-26925

EPSS 10% CVSS 5.9

MEDIUM KEV PATCH THREAT This Month

Authentication Bypass Microsoft Windows 10 1507 +16

NVD

CVE-2022-26923

EPSS 83% CVSS 8.8

HIGH POC KEV PATCH THREAT This Week

Active Directory Domain Services Elevation of Privilege Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity.

Information Disclosure Windows 10 1507 Windows 10 1607 +12

NVD GitHub

CVE-2022-24466

EPSS 1% CVSS 4.1

MEDIUM PATCH This Month

Windows Hyper-V Security Feature Bypass Vulnerability. Rated medium severity (CVSS 4.1), this vulnerability is low attack complexity.

Authentication Bypass Microsoft Windows 10 +4

NVD

CVE-2022-23270

EPSS 73% CVSS 8.1

HIGH PATCH This Week

Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, no authentication required.

RCE Microsoft Windows 10 +8

NVD

CVE-2022-22019

EPSS 2% CVSS 8.8

HIGH PATCH This Week

Remote Procedure Call Runtime Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

RCE Windows 10 Windows 11 +8

NVD

CVE-2022-22016

EPSS 1% CVSS 7.0

HIGH PATCH This Week

Windows PlayToManager Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.0).

Microsoft Information Disclosure Windows 10 +4

NVD

CVE-2022-22015

EPSS 2% CVSS 6.5

MEDIUM PATCH This Month

Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity.

Microsoft Information Disclosure Remote Desktop Client +9

NVD

CVE-2022-22014

EPSS 2% CVSS 8.8

HIGH PATCH This Week

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity.

RCE Microsoft Windows 10 +8

NVD

CVE-2022-22013

EPSS 2% CVSS 8.8

HIGH PATCH This Week

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity.

RCE Microsoft Windows 10 +8

NVD

CVE-2022-22012

EPSS 4% CVSS 9.8

CRITICAL PATCH Act Now

RCE Microsoft Windows 10 +8

NVD

CVE-2022-22011

EPSS 1% CVSS 5.5

MEDIUM PATCH This Month

Windows Graphics Component Information Disclosure Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity.

Microsoft Information Disclosure Windows 10 +7

NVD

CVE-2022-21972

EPSS 81% CVSS 8.1

HIGH PATCH This Week

Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, no authentication required.

RCE Microsoft Windows 10 +10

NVD

CVE-2022-26920

EPSS 1% CVSS 5.5

MEDIUM This Month

Windows Graphics Component Information Disclosure Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Microsoft Information Disclosure Windows 10 +4

NVD

CVE-2022-26919

EPSS 2% CVSS 8.1

HIGH This Week

RCE Microsoft Windows 10 +9

NVD

CVE-2022-26918

EPSS 2% CVSS 7.8

HIGH This Week

Windows Fax Compose Form Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft Windows 10 +9

NVD

CVE-2022-26917

EPSS 2% CVSS 7.8

HIGH This Week

Windows Fax Compose Form Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft Windows 10 +9

NVD

CVE-2022-26916

EPSS 2% CVSS 7.8

HIGH This Week

Windows Fax Compose Form Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft Windows 10 +9

NVD

CVE-2022-26915

EPSS 3% CVSS 7.5

HIGH This Week

Denial Of Service Microsoft Windows 10 +9

NVD

CVE-2022-26914

EPSS 1% CVSS 7.8

HIGH This Week

Win32k Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Windows 10 Windows 11 +3

NVD

CVE-2022-26904

EPSS 10% CVSS 7.0

HIGH POC KEV PATCH THREAT Act Now

Windows User Profile Service Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.0).

Race Condition Microsoft Information Disclosure +17

NVD

CVE-2022-26903

EPSS 3% CVSS 7.8

HIGH This Week

Windows Graphics Component Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft Excel +15

NVD

CVE-2022-26831

EPSS 3% CVSS 7.5

HIGH This Week

Denial Of Service Microsoft Windows 10 +9

NVD

CVE-2022-26829

EPSS 2% CVSS 6.6

MEDIUM This Month

Windows DNS Server Remote Code Execution Vulnerability. Rated medium severity (CVSS 6.6), this vulnerability is remotely exploitable. No vendor patch available.

Race Condition RCE Microsoft +5

NVD

CVE-2022-26828

EPSS 0% CVSS 7.0

HIGH This Week

Windows Bluetooth Driver Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.0). No vendor patch available.

Race Condition Microsoft Information Disclosure +4

NVD

CVE-2022-26827

EPSS 0% CVSS 7.0

HIGH This Week

Windows File Server Resource Management Service Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.0). No vendor patch available.

Race Condition Microsoft Information Disclosure +10

NVD

CVE-2022-26826

EPSS 11% CVSS 7.2

HIGH Act Now

Command Injection Microsoft RCE +5

NVD VulDB

CVE-2022-26825

EPSS 3% CVSS 7.2

HIGH This Week

Windows DNS Server Remote Code Execution Vulnerability. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

RCE Microsoft Windows Server 2016 +2

NVD

CVE-2022-26824

EPSS 3% CVSS 7.2

HIGH This Week

Windows DNS Server Remote Code Execution Vulnerability. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

RCE Microsoft Windows Server 2016 +2

NVD

CVE-2022-26823

EPSS 3% CVSS 7.2

HIGH This Week

Windows DNS Server Remote Code Execution Vulnerability. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

RCE Microsoft Windows Server 2016 +2

NVD

CVE-2022-26822

EPSS 2% CVSS 6.6

MEDIUM This Month

Windows DNS Server Remote Code Execution Vulnerability. Rated medium severity (CVSS 6.6), this vulnerability is remotely exploitable. No vendor patch available.

Race Condition RCE Microsoft +5

NVD

CVE-2022-26821

EPSS 2% CVSS 6.6

MEDIUM This Month

Windows DNS Server Remote Code Execution Vulnerability. Rated medium severity (CVSS 6.6), this vulnerability is remotely exploitable. No vendor patch available.

Race Condition RCE Microsoft +5

NVD

Prev Page 24 of 51 Next