Skip to main content

Windows Server 2022

3347 CVEs product

Monthly

CVE-2022-38004 Sep 13, 19:15 HIGH This Week

Windows Fax Service Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft Windows Server 2008 Windows Server 2012 Windows Server 2016 +6
NVD
CVSS 3.1
7.8
EPSS
1.1%
CVE-2022-37959 Sep 13, 19:15 MEDIUM This Month

Network Device Enrollment Service (NDES) Security Feature Bypass Vulnerability. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Authentication Bypass Microsoft Windows Server 2012 Windows Server 2016 Windows Server 2019 +1
NVD
CVSS 3.1
6.5
EPSS
1.8%
CVE-2022-37958 Sep 13, 19:15 HIGH This Week

SPNEGO Extended Negotiation (NEGOEX) Security Mechanism Remote Code Execution Vulnerability. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.

RCE Microsoft Windows Server 2008 Windows Server 2012 Windows Server 2016 +6
NVD
CVSS 3.1
8.1
EPSS
85.8%
CVE-2022-37957 Sep 13, 19:15 HIGH This Week

Windows Kernel Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Microsoft Windows Server 2016 Windows Server 2019 Windows Server 2022 +2
NVD
CVSS 3.1
7.8
EPSS
13.6%
CVE-2022-37956 Sep 13, 19:15 HIGH This Week

Windows Kernel Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Microsoft Windows Server 2008 Windows Server 2012 Windows Server 2016 +6
NVD
CVSS 3.1
7.8
EPSS
1.2%
CVE-2022-37955 Sep 13, 19:15 HIGH This Week

Windows Group Policy Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Microsoft Windows Server 2008 Windows Server 2012 Windows Server 2016 +6
NVD
CVSS 3.1
7.8
EPSS
1.9%
CVE-2022-37954 Sep 13, 19:15 HIGH This Week

DirectX Graphics Kernel Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Microsoft Windows Server 2019 Windows Server 2022 Windows 10 +1
NVD
CVSS 3.1
7.8
EPSS
44.9%
CVE-2022-35841 Sep 13, 19:15 HIGH This Week

Windows Enterprise App Management Service Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

RCE Microsoft Windows Server 2016 Windows Server 2019 Windows Server 2022 +2
NVD
CVSS 3.1
8.8
EPSS
2.6%
CVE-2022-35840 Sep 13, 19:15 HIGH This Week

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft Windows Server 2008 Windows Server 2012 Windows Server 2016 +6
NVD
CVSS 3.1
8.8
EPSS
1.8%
CVE-2022-35838 Sep 13, 19:15 HIGH This Week

HTTP V3 Denial of Service Vulnerability. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Microsoft Windows Server 2022 Windows 11
NVD
CVSS 3.1
7.5
EPSS
2.1%
CVE-2022-35837 Sep 13, 19:15 MEDIUM This Month

Windows Graphics Component Information Disclosure Vulnerability. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Microsoft Windows Server 2008 Windows Server 2012 Windows Server 2016 +6
NVD
CVSS 3.1
6.5
EPSS
2.0%
CVE-2022-35836 Sep 13, 19:15 HIGH This Week

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft Windows Server 2008 Windows Server 2012 Windows Server 2016 +7
NVD
CVSS 3.1
8.8
EPSS
1.8%
CVE-2022-35835 Sep 13, 19:15 HIGH This Week

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft Windows Server 2008 Windows Server 2012 Windows Server 2016 +7
NVD
CVSS 3.1
8.8
EPSS
1.8%
CVE-2022-35834 Sep 13, 19:15 HIGH This Week

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft Windows Server 2008 Windows Server 2012 Windows Server 2016 +6
NVD
CVSS 3.1
8.8
EPSS
1.8%
CVE-2022-35833 Sep 13, 19:15 HIGH This Week

Windows Secure Channel Denial of Service Vulnerability. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Microsoft Windows Server 2008 Windows Server 2012 Windows Server 2016 +6
NVD
CVSS 3.1
7.5
EPSS
2.5%
CVE-2022-35832 Sep 13, 19:15 MEDIUM This Month

Windows Event Tracing Denial of Service Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Denial Of Service Microsoft Windows Server 2008 Windows Server 2012 Windows Server 2016 +7
NVD
CVSS 3.1
5.5
EPSS
0.9%
CVE-2022-35831 Sep 13, 19:15 MEDIUM This Month

Windows Remote Access Connection Manager Information Disclosure Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Microsoft Windows Server 2012 Windows Server 2016 +6
NVD
CVSS 3.1
5.5
EPSS
0.7%
CVE-2022-35830 Sep 13, 19:15 HIGH This Week

Remote Procedure Call Runtime Remote Code Execution Vulnerability. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.

RCE Microsoft Windows Server 2008 Windows Server 2012 Windows Server 2016 +2
NVD
CVSS 3.1
8.1
EPSS
1.4%
CVE-2022-35803 Sep 13, 19:15 HIGH This Week

Windows Common Log File System Driver Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Microsoft Windows Server 2008 Windows Server 2012 Windows Server 2016 +7
NVD
CVSS 3.1
7.8
EPSS
23.8%
CVE-2022-34734 Sep 13, 19:15 HIGH This Week

Microsoft ODBC Driver Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft Windows Server 2008 Windows Server 2012 Windows Server 2016 +7
NVD
CVSS 3.1
8.8
EPSS
2.2%
CVE-2022-34733 Sep 13, 19:15 HIGH This Week

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft Windows Server 2008 Windows Server 2012 Windows Server 2016 +7
NVD
CVSS 3.1
8.8
EPSS
1.8%
CVE-2022-34732 Sep 13, 19:15 HIGH This Week

Microsoft ODBC Driver Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft Windows Server 2008 Windows Server 2012 Windows Server 2016 +7
NVD
CVSS 3.1
8.8
EPSS
2.2%
CVE-2022-34731 Sep 13, 19:15 HIGH This Week

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft Windows Server 2008 Windows Server 2012 Windows Server 2016 +7
NVD
CVSS 3.1
8.8
EPSS
1.8%
CVE-2022-34730 Sep 13, 19:15 HIGH This Week

Microsoft ODBC Driver Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft Windows Server 2008 Windows Server 2012 Windows Server 2016 +7
NVD
CVSS 3.1
8.8
EPSS
2.2%
CVE-2022-34729 Sep 13, 19:15 HIGH This Week

Windows GDI Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Microsoft Windows Server 2008 Windows Server 2012 Windows Server 2016 +7
NVD
CVSS 3.1
7.8
EPSS
10.5%
CVE-2022-34728 Sep 13, 19:15 MEDIUM This Month

Windows Graphics Component Information Disclosure Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Microsoft Windows Server 2008 Windows Server 2012 Windows Server 2016 +7
NVD
CVSS 3.1
5.5
EPSS
3.7%
CVE-2022-34727 Sep 13, 19:15 HIGH This Week

Microsoft ODBC Driver Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft Windows Server 2008 Windows Server 2012 Windows Server 2016 +7
NVD
CVSS 3.1
8.8
EPSS
2.2%
CVE-2022-34726 Sep 13, 19:15 HIGH This Week

Microsoft ODBC Driver Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft Windows Server 2008 Windows Server 2012 Windows Server 2016 +7
NVD
CVSS 3.1
8.8
EPSS
2.2%
CVE-2022-34725 Sep 13, 19:15 HIGH This Week

Windows ALPC Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.0). No vendor patch available.

Information Disclosure Race Condition Microsoft Windows Server 2008 Windows Server 2012 +8
NVD
CVSS 3.1
7.0
EPSS
5.4%
CVE-2022-34724 Sep 13, 19:15 HIGH This Week

Windows DNS Server Denial of Service Vulnerability. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Microsoft Windows Server 2008 Windows Server 2012 Windows Server 2016 +2
NVD
CVSS 3.1
7.5
EPSS
3.2%
CVE-2022-34722 Sep 13, 19:15 CRITICAL Act Now

Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft Windows Server 2008 Windows Server 2012 Windows Server 2016 +7
NVD
CVSS 3.1
9.8
EPSS
2.4%
CVE-2022-34721 Sep 13, 19:15 CRITICAL Act Now

Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft Windows Server 2008 Windows Server 2012 Windows Server 2016 +7
NVD
CVSS 3.1
9.8
EPSS
75.7%
CVE-2022-34720 Sep 13, 19:15 HIGH This Week

Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Microsoft Windows Server 2008 Windows Server 2012 Windows Server 2016 +7
NVD
CVSS 3.1
7.5
EPSS
3.1%
CVE-2022-34719 Sep 13, 19:15 HIGH This Week

Windows Distributed File System (DFS) Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Microsoft Windows Server 2008 Windows Server 2012 Windows Server 2016 +7
NVD
CVSS 3.1
7.8
EPSS
1.0%
CVE-2022-34718 Sep 13, 19:15 CRITICAL Act Now

Windows TCP/IP Remote Code Execution Vulnerability. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft Windows Server 2008 Windows Server 2012 Windows Server 2016 +7
NVD
CVSS 3.1
9.8
EPSS
48.1%
CVE-2022-33679 Sep 13, 19:15 HIGH POC This Week

Windows Kerberos Elevation of Privilege Vulnerability. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, no authentication required. Public exploit code available and no vendor patch available.

Information Disclosure Microsoft Windows Server 2008 Windows Server 2012 Windows Server 2016 +2
NVD
CVSS 3.1
8.1
EPSS
8.1%
CVE-2022-33647 Sep 13, 19:15 HIGH This Week

Windows Kerberos Elevation of Privilege Vulnerability. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.

Information Disclosure Microsoft Windows Server 2008 Windows Server 2012 Windows Server 2016 +2
NVD
CVSS 3.1
8.1
EPSS
1.6%
CVE-2022-30200 Sep 13, 19:15 HIGH This Week

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft Windows Server 2008 Windows Server 2012 Windows Server 2016 +7
NVD
CVSS 3.1
7.8
EPSS
1.2%
CVE-2022-30196 Sep 13, 19:15 HIGH This Week

Windows Secure Channel Denial of Service Vulnerability. Rated high severity (CVSS 8.2), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Microsoft Windows Server 2019 Windows Server 2022 Windows 10 +1
NVD
CVSS 3.1
8.2
EPSS
1.6%
CVE-2022-30170 Sep 13, 19:15 HIGH This Week

Windows Credential Roaming Service Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.3), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Microsoft Windows Server 2008 Windows Server 2012 Windows Server 2016 +7
NVD
CVSS 3.1
7.3
EPSS
1.5%
CVE-2022-26928 Sep 13, 19:15 HIGH This Week

Windows Photo Import API Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.0). No vendor patch available.

Information Disclosure Race Condition Microsoft Windows Server 2016 Windows Server 2019 +3
NVD
CVSS 3.1
7.0
EPSS
0.7%
CVE-2022-34303 Aug 26, 18:15 MEDIUM This Month

A flaw was found in Eurosoft bootloaders before 2022-06-01. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. No vendor patch available.

RCE Microsoft Red Hat Enterprise Linux Windows Server 2012 +8
NVD
CVSS 3.1
6.7
EPSS
0.8%
CVE-2022-34302 Aug 26, 18:15 MEDIUM This Month

A flaw was found in New Horizon Datasys bootloaders before 2022-06-01. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. No vendor patch available.

RCE Microsoft Red Hat Enterprise Linux Windows Server 2012 +8
NVD
CVSS 3.1
6.7
EPSS
1.0%
CVE-2022-34301 Aug 26, 18:15 MEDIUM This Month

A flaw was found in CryptoPro Secure Disk bootloaders before 2022-06-01. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. No vendor patch available.

RCE Microsoft Red Hat Enterprise Linux Windows Server 2012 +8
NVD
CVSS 3.1
6.7
EPSS
0.9%
CVE-2022-35822 Aug 15, 21:15 HIGH This Week

Windows Defender Credential Guard Security Feature Bypass Vulnerability. Rated high severity (CVSS 7.1), this vulnerability is low attack complexity. No vendor patch available.

Authentication Bypass Microsoft Windows Server 2016 Windows Server 2019 Windows Server 2022 +2
NVD
CVSS 3.1
7.1
EPSS
0.8%
CVE-2022-34711 Aug 15, 21:15 HIGH This Week

Windows Defender Credential Guard Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Microsoft Windows Server 2016 Windows Server 2019 Windows Server 2022 +2
NVD
CVSS 3.1
7.8
EPSS
0.7%
CVE-2022-35820 Aug 09, 20:15 HIGH This Week

Windows Bluetooth Driver Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Microsoft Windows Server 2008 Windows Server 2012 Windows Server 2016 +7
NVD
CVSS 3.1
7.8
EPSS
0.5%
CVE-2022-35795 Aug 09, 20:15 HIGH This Week

Windows Error Reporting Service Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Microsoft Windows Server 2008 Windows Server 2012 Windows Server 2016 +7
NVD
CVSS 3.1
7.8
EPSS
0.6%
CVE-2022-35794 Aug 09, 20:15 HIGH This Week

Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.

RCE Microsoft Windows Server 2016 Windows Server 2019 Windows Server 2022 +2
NVD
CVSS 3.1
8.1
EPSS
1.5%
CVE-2022-35793 Aug 09, 20:15 HIGH This Week

Windows Print Spooler Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.3), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Microsoft Windows Server 2008 Windows Server 2012 Windows Server 2016 +7
NVD
CVSS 3.1
7.3
EPSS
9.1%
CVE-2022-35792 Aug 09, 20:15 HIGH This Week

Storage Spaces Direct Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Microsoft Windows Server 2016 Windows Server 2019 Windows Server 2022 +2
NVD
CVSS 3.1
7.8
EPSS
0.6%
CVE-2022-35771 Aug 09, 20:15 HIGH This Week

Windows Defender Credential Guard Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Microsoft Windows Server 2016 Windows Server 2019 Windows Server 2022 +2
NVD
CVSS 3.1
7.8
EPSS
0.7%
CVE-2022-35769 Aug 09, 20:15 HIGH This Week

Windows Point-to-Point Protocol (PPP) Denial of Service Vulnerability. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Microsoft Windows Server 2008 Windows Server 2012 Windows Server 2016 +7
NVD
CVSS 3.1
7.5
EPSS
1.9%
CVE-2022-35768 Aug 09, 20:15 HIGH This Week

Windows Kernel Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Microsoft Windows Server 2008 Windows Server 2012 Windows Server 2016 +7
NVD
CVSS 3.1
7.8
EPSS
0.9%
CVE-2022-35767 Aug 09, 20:15 HIGH This Week

Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.

RCE Microsoft Code Injection Windows Server 2008 Windows Server 2012 +8
NVD
CVSS 3.1
8.1
EPSS
1.4%
CVE-2022-35766 Aug 09, 20:15 HIGH This Week

Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.

RCE Microsoft Code Injection Windows Server 2016 Windows Server 2019 +3
NVD
CVSS 3.1
8.1
EPSS
1.4%
CVE-2022-35765 Aug 09, 20:15 HIGH This Week

Storage Spaces Direct Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Microsoft Windows Server 2016 Windows Server 2019 Windows Server 2022 +1
NVD
CVSS 3.1
7.8
EPSS
0.4%
CVE-2022-35764 Aug 09, 20:15 HIGH This Week

Storage Spaces Direct Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Microsoft Windows Server 2016 Windows Server 2019 Windows Server 2022 +1
NVD
CVSS 3.1
7.8
EPSS
0.4%
CVE-2022-35763 Aug 09, 20:15 HIGH This Week

Storage Spaces Direct Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Microsoft Windows Server 2016 Windows Server 2019 Windows Server 2022 +1
NVD
CVSS 3.1
7.8
EPSS
0.4%
CVE-2022-35762 Aug 09, 20:15 HIGH This Week

Storage Spaces Direct Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Microsoft Windows Server 2016 Windows Server 2019 Windows Server 2022 +1
NVD
CVSS 3.1
7.8
EPSS
0.4%
CVE-2022-35761 Aug 09, 20:15 HIGH This Week

Windows Kernel Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Microsoft Windows Server 2016 Windows Server 2019 Windows Server 2022 +2
NVD
CVSS 3.1
7.8
EPSS
4.0%
CVE-2022-35760 Aug 09, 20:15 HIGH This Week

Microsoft ATA Port Driver Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Microsoft Windows Server 2008 Windows Server 2012 Windows Server 2016 +7
NVD
CVSS 3.1
7.8
EPSS
0.7%
CVE-2022-34715 Aug 09, 20:15 CRITICAL Act Now

Windows Network File System Remote Code Execution Vulnerability. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft Code Injection Windows Server 2022
NVD
CVSS 3.1
9.8
EPSS
80.1%
CVE-2022-34714 Aug 09, 20:15 HIGH This Week

Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.

RCE Microsoft Code Injection Windows Server 2008 Windows Server 2012 +8
NVD
CVSS 3.1
8.1
EPSS
1.6%
CVE-2022-34712 Aug 09, 20:15 MEDIUM This Month

Windows Defender Credential Guard Information Disclosure Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Microsoft Windows Server 2016 Windows Server 2022 Windows 10 +1
NVD
CVSS 3.1
5.5
EPSS
1.5%
CVE-2022-34710 Aug 09, 20:15 MEDIUM This Month

Windows Defender Credential Guard Information Disclosure Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Microsoft Windows Server 2016 Windows Server 2019 Windows Server 2022 +2
NVD
CVSS 3.1
5.5
EPSS
1.5%
CVE-2022-34709 Aug 09, 20:15 MEDIUM This Month

Windows Defender Credential Guard Security Feature Bypass Vulnerability. Rated medium severity (CVSS 6.0), this vulnerability is low attack complexity. No vendor patch available.

Authentication Bypass Memory Corruption Microsoft Windows Server 2016 Windows Server 2019 +3
NVD
CVSS 3.1
6.0
EPSS
1.2%
CVE-2022-34708 Aug 09, 20:15 MEDIUM This Month

Windows Kernel Information Disclosure Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Microsoft Windows Server 2008 Windows Server 2012 Windows Server 2016 +7
NVD
CVSS 3.1
5.5
EPSS
1.3%
CVE-2022-34707 Aug 09, 20:15 HIGH This Week

Windows Kernel Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Use After Free Memory Corruption Microsoft Windows Server 2008 +9
NVD
CVSS 3.1
7.8
EPSS
1.2%
CVE-2022-34706 Aug 09, 20:15 HIGH This Week

Windows Local Security Authority (LSA) Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Microsoft Windows Server 2008 Windows Server 2012 Windows Server 2016 +7
NVD
CVSS 3.1
7.8
EPSS
0.4%
CVE-2022-34705 Aug 09, 20:15 HIGH This Week

Windows Defender Credential Guard Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Use After Free Memory Corruption Microsoft Windows Server 2016 +4
NVD
CVSS 3.1
7.8
EPSS
0.8%
CVE-2022-34704 Aug 09, 20:15 MEDIUM This Month

Windows Defender Credential Guard Information Disclosure Vulnerability. Rated medium severity (CVSS 4.7). No vendor patch available.

Information Disclosure Microsoft Windows Server 2016 Windows Server 2019 Windows Server 2022 +2
NVD
CVSS 3.1
4.7
EPSS
1.2%
CVE-2022-34703 Aug 09, 20:15 HIGH This Week

Windows Partition Management Driver Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Microsoft Windows Server 2016 Windows Server 2019 Windows Server 2022 +2
NVD
CVSS 3.1
7.8
EPSS
0.6%
CVE-2022-34702 Aug 09, 20:15 HIGH This Week

Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.

RCE Race Condition Microsoft Windows Server 2008 Windows Server 2012 +8
NVD
CVSS 3.1
8.1
EPSS
1.0%
CVE-2022-34701 Aug 09, 20:15 HIGH This Week

Windows Secure Socket Tunneling Protocol (SSTP) Denial of Service Vulnerability. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Microsoft Windows Server 2008 Windows Server 2012 Windows Server 2016 +7
NVD
CVSS 3.1
7.5
EPSS
2.3%
CVE-2022-34699 Aug 09, 20:15 HIGH This Week

Windows Win32k Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Microsoft Windows Server 2016 Windows Server 2019 Windows Server 2022 +2
NVD
CVSS 3.1
7.8
EPSS
4.4%
CVE-2022-34696 Aug 09, 20:15 HIGH This Week

Windows Hyper-V Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8). No vendor patch available.

RCE Race Condition Microsoft Windows Server 2012 Windows Server 2016 +5
NVD
CVSS 3.1
7.8
EPSS
0.3%
CVE-2022-34691 Aug 09, 20:15 HIGH This Week

Active Directory Domain Services Elevation of Privilege Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Privilege Escalation Microsoft Windows Server 2008 Windows Server 2012 Windows Server 2016 +7
NVD
CVSS 3.1
8.8
EPSS
1.6%
CVE-2022-34690 Aug 09, 20:15 HIGH This Week

Windows Fax Service Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.1), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Microsoft Windows Server 2008 Windows Server 2012 Windows Server 2016 +7
NVD
CVSS 3.1
7.1
EPSS
0.5%
CVE-2022-33670 Aug 09, 20:15 HIGH This Week

Windows Partition Management Driver Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Microsoft Windows Server 2012 Windows Server 2016 Windows Server 2019 +5
NVD
CVSS 3.1
7.8
EPSS
0.5%
CVE-2022-30197 Aug 09, 20:15 MEDIUM This Month

Windows Kernel Information Disclosure Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Microsoft Windows Server 2016 Windows Server 2019 Windows Server 2022 +2
NVD
CVSS 3.1
5.5
EPSS
0.9%
CVE-2022-30194 Aug 09, 20:15 HIGH This Week

Windows WebBrowser Control Remote Code Execution Vulnerability. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable. No vendor patch available.

RCE Microsoft Code Injection Windows Server 2008 Windows Server 2012 +8
NVD
CVSS 3.1
7.5
EPSS
1.2%
CVE-2022-30133 Aug 09, 20:15 CRITICAL Act Now

Windows Point-to-Point Protocol (PPP) Remote Code Execution Vulnerability. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft Windows Server 2008 Windows Server 2012 Windows Server 2016 +6
NVD
CVSS 3.1
9.8
EPSS
2.2%
CVE-2022-30226 Jul 12, 23:15 HIGH This Week

Windows Print Spooler Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.1), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Microsoft Windows Server 2008 Windows Server 2012 Windows Server 2016 +7
NVD
CVSS 3.1
7.1
EPSS
0.7%
CVE-2022-30225 Jul 12, 23:15 HIGH This Week

Windows Media Player Network Sharing Service Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.1), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Microsoft Windows Server 2008 Windows Server 2012 Windows Server 2016 +7
NVD
CVSS 3.1
7.1
EPSS
0.6%
CVE-2022-30224 Jul 12, 23:15 HIGH This Week

Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.0). No vendor patch available.

Information Disclosure Microsoft Windows Server 2008 Windows Server 2012 Windows Server 2016 +7
NVD
CVSS 3.1
7.0
EPSS
0.5%
CVE-2022-30223 Jul 12, 23:15 MEDIUM This Month

Windows Hyper-V Information Disclosure Vulnerability. Rated medium severity (CVSS 5.7), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Microsoft Windows Server 2008 Windows Server 2012 Windows Server 2016 +6
NVD
CVSS 3.1
5.7
EPSS
0.8%
CVE-2022-30222 Jul 12, 23:15 HIGH This Week

Windows Shell Remote Code Execution Vulnerability. Rated high severity (CVSS 8.4), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft Windows Server 2016 Windows Server 2019 Windows Server 2022 +2
NVD
CVSS 3.1
8.4
EPSS
0.7%
CVE-2022-30221 Jul 12, 23:15 HIGH This Week

Windows Graphics Component Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft Windows Server 2008 Windows Server 2012 Windows Server 2016 +6
NVD
CVSS 3.1
8.8
EPSS
2.0%
CVE-2022-30220 Jul 12, 23:15 HIGH This Week

Windows Common Log File System Driver Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Microsoft Windows Server 2008 Windows Server 2012 Windows Server 2016 +7
NVD
CVSS 3.1
7.8
EPSS
5.1%
EPSS 1% CVSS 7.8
HIGH This Week

Windows Fax Service Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft Windows Server 2008 +8
NVD
EPSS 2% CVSS 6.5
MEDIUM This Month

Network Device Enrollment Service (NDES) Security Feature Bypass Vulnerability. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Authentication Bypass Microsoft Windows Server 2012 +3
NVD
EPSS 86% CVSS 8.1
HIGH This Week

SPNEGO Extended Negotiation (NEGOEX) Security Mechanism Remote Code Execution Vulnerability. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.

RCE Microsoft Windows Server 2008 +8
NVD
EPSS 14% CVSS 7.8
HIGH This Week

Windows Kernel Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Microsoft Windows Server 2016 +4
NVD
EPSS 1% CVSS 7.8
HIGH This Week

Windows Kernel Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Microsoft Windows Server 2008 +8
NVD
EPSS 2% CVSS 7.8
HIGH This Week

Windows Group Policy Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Microsoft Windows Server 2008 +8
NVD
EPSS 45% CVSS 7.8
HIGH This Week

DirectX Graphics Kernel Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Microsoft Windows Server 2019 +3
NVD
EPSS 3% CVSS 8.8
HIGH This Week

Windows Enterprise App Management Service Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

RCE Microsoft Windows Server 2016 +4
NVD
EPSS 2% CVSS 8.8
HIGH This Week

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft Windows Server 2008 +8
NVD
EPSS 2% CVSS 7.5
HIGH This Week

HTTP V3 Denial of Service Vulnerability. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Microsoft Windows Server 2022 +1
NVD
EPSS 2% CVSS 6.5
MEDIUM This Month

Windows Graphics Component Information Disclosure Vulnerability. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Microsoft Windows Server 2008 +8
NVD
EPSS 2% CVSS 8.8
HIGH This Week

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft Windows Server 2008 +9
NVD
EPSS 2% CVSS 8.8
HIGH This Week

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft Windows Server 2008 +9
NVD
EPSS 2% CVSS 8.8
HIGH This Week

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft Windows Server 2008 +8
NVD
EPSS 2% CVSS 7.5
HIGH This Week

Windows Secure Channel Denial of Service Vulnerability. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Microsoft Windows Server 2008 +8
NVD
EPSS 1% CVSS 5.5
MEDIUM This Month

Windows Event Tracing Denial of Service Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Denial Of Service Microsoft Windows Server 2008 +9
NVD
EPSS 1% CVSS 5.5
MEDIUM This Month

Windows Remote Access Connection Manager Information Disclosure Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Microsoft +8
NVD
EPSS 1% CVSS 8.1
HIGH This Week

Remote Procedure Call Runtime Remote Code Execution Vulnerability. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.

RCE Microsoft Windows Server 2008 +4
NVD
EPSS 24% CVSS 7.8
HIGH This Week

Windows Common Log File System Driver Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Microsoft Windows Server 2008 +9
NVD
EPSS 2% CVSS 8.8
HIGH This Week

Microsoft ODBC Driver Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft Windows Server 2008 +9
NVD
EPSS 2% CVSS 8.8
HIGH This Week

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft Windows Server 2008 +9
NVD
EPSS 2% CVSS 8.8
HIGH This Week

Microsoft ODBC Driver Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft Windows Server 2008 +9
NVD
EPSS 2% CVSS 8.8
HIGH This Week

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft Windows Server 2008 +9
NVD
EPSS 2% CVSS 8.8
HIGH This Week

Microsoft ODBC Driver Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft Windows Server 2008 +9
NVD
EPSS 11% CVSS 7.8
HIGH This Week

Windows GDI Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Microsoft Windows Server 2008 +9
NVD
EPSS 4% CVSS 5.5
MEDIUM This Month

Windows Graphics Component Information Disclosure Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Microsoft Windows Server 2008 +9
NVD
EPSS 2% CVSS 8.8
HIGH This Week

Microsoft ODBC Driver Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft Windows Server 2008 +9
NVD
EPSS 2% CVSS 8.8
HIGH This Week

Microsoft ODBC Driver Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft Windows Server 2008 +9
NVD
EPSS 5% CVSS 7.0
HIGH This Week

Windows ALPC Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.0). No vendor patch available.

Information Disclosure Race Condition Microsoft +10
NVD
EPSS 3% CVSS 7.5
HIGH This Week

Windows DNS Server Denial of Service Vulnerability. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Microsoft Windows Server 2008 +4
NVD
EPSS 2% CVSS 9.8
CRITICAL Act Now

Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft Windows Server 2008 +9
NVD
EPSS 76% CVSS 9.8
CRITICAL Act Now

Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft Windows Server 2008 +9
NVD
EPSS 3% CVSS 7.5
HIGH This Week

Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Microsoft Windows Server 2008 +9
NVD
EPSS 1% CVSS 7.8
HIGH This Week

Windows Distributed File System (DFS) Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Microsoft Windows Server 2008 +9
NVD
EPSS 48% CVSS 9.8
CRITICAL Act Now

Windows TCP/IP Remote Code Execution Vulnerability. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft Windows Server 2008 +9
NVD
EPSS 8% CVSS 8.1
HIGH POC This Week

Windows Kerberos Elevation of Privilege Vulnerability. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, no authentication required. Public exploit code available and no vendor patch available.

Information Disclosure Microsoft Windows Server 2008 +4
NVD
EPSS 2% CVSS 8.1
HIGH This Week

Windows Kerberos Elevation of Privilege Vulnerability. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.

Information Disclosure Microsoft Windows Server 2008 +4
NVD
EPSS 1% CVSS 7.8
HIGH This Week

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft Windows Server 2008 +9
NVD
EPSS 2% CVSS 8.2
HIGH This Week

Windows Secure Channel Denial of Service Vulnerability. Rated high severity (CVSS 8.2), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Microsoft Windows Server 2019 +3
NVD
EPSS 1% CVSS 7.3
HIGH This Week

Windows Credential Roaming Service Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.3), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Microsoft Windows Server 2008 +9
NVD
EPSS 1% CVSS 7.0
HIGH This Week

Windows Photo Import API Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.0). No vendor patch available.

Information Disclosure Race Condition Microsoft +5
NVD
EPSS 1% CVSS 6.7
MEDIUM This Month

A flaw was found in Eurosoft bootloaders before 2022-06-01. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. No vendor patch available.

RCE Microsoft Red Hat +10
NVD
EPSS 1% CVSS 6.7
MEDIUM This Month

A flaw was found in New Horizon Datasys bootloaders before 2022-06-01. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. No vendor patch available.

RCE Microsoft Red Hat +10
NVD
EPSS 1% CVSS 6.7
MEDIUM This Month

A flaw was found in CryptoPro Secure Disk bootloaders before 2022-06-01. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. No vendor patch available.

RCE Microsoft Red Hat +10
NVD
EPSS 1% CVSS 7.1
HIGH This Week

Windows Defender Credential Guard Security Feature Bypass Vulnerability. Rated high severity (CVSS 7.1), this vulnerability is low attack complexity. No vendor patch available.

Authentication Bypass Microsoft Windows Server 2016 +4
NVD
EPSS 1% CVSS 7.8
HIGH This Week

Windows Defender Credential Guard Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Microsoft Windows Server 2016 +4
NVD
EPSS 1% CVSS 7.8
HIGH This Week

Windows Bluetooth Driver Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Microsoft Windows Server 2008 +9
NVD
EPSS 1% CVSS 7.8
HIGH This Week

Windows Error Reporting Service Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Microsoft Windows Server 2008 +9
NVD
EPSS 2% CVSS 8.1
HIGH This Week

Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.

RCE Microsoft Windows Server 2016 +4
NVD
EPSS 9% CVSS 7.3
HIGH This Week

Windows Print Spooler Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.3), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Microsoft Windows Server 2008 +9
NVD
EPSS 1% CVSS 7.8
HIGH This Week

Storage Spaces Direct Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Microsoft Windows Server 2016 +4
NVD
EPSS 1% CVSS 7.8
HIGH This Week

Windows Defender Credential Guard Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Microsoft Windows Server 2016 +4
NVD
EPSS 2% CVSS 7.5
HIGH This Week

Windows Point-to-Point Protocol (PPP) Denial of Service Vulnerability. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Microsoft Windows Server 2008 +9
NVD
EPSS 1% CVSS 7.8
HIGH This Week

Windows Kernel Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Microsoft Windows Server 2008 +9
NVD
EPSS 1% CVSS 8.1
HIGH This Week

Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.

RCE Microsoft Code Injection +10
NVD
EPSS 1% CVSS 8.1
HIGH This Week

Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.

RCE Microsoft Code Injection +5
NVD
EPSS 0% CVSS 7.8
HIGH This Week

Storage Spaces Direct Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Microsoft Windows Server 2016 +3
NVD
EPSS 0% CVSS 7.8
HIGH This Week

Storage Spaces Direct Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Microsoft Windows Server 2016 +3
NVD
EPSS 0% CVSS 7.8
HIGH This Week

Storage Spaces Direct Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Microsoft Windows Server 2016 +3
NVD
EPSS 0% CVSS 7.8
HIGH This Week

Storage Spaces Direct Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Microsoft Windows Server 2016 +3
NVD
EPSS 4% CVSS 7.8
HIGH This Week

Windows Kernel Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Microsoft Windows Server 2016 +4
NVD
EPSS 1% CVSS 7.8
HIGH This Week

Microsoft ATA Port Driver Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Microsoft Windows Server 2008 +9
NVD
EPSS 80% CVSS 9.8
CRITICAL Act Now

Windows Network File System Remote Code Execution Vulnerability. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft Code Injection +1
NVD
EPSS 2% CVSS 8.1
HIGH This Week

Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.

RCE Microsoft Code Injection +10
NVD
EPSS 1% CVSS 5.5
MEDIUM This Month

Windows Defender Credential Guard Information Disclosure Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Microsoft Windows Server 2016 +3
NVD
EPSS 1% CVSS 5.5
MEDIUM This Month

Windows Defender Credential Guard Information Disclosure Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Microsoft Windows Server 2016 +4
NVD
EPSS 1% CVSS 6.0
MEDIUM This Month

Windows Defender Credential Guard Security Feature Bypass Vulnerability. Rated medium severity (CVSS 6.0), this vulnerability is low attack complexity. No vendor patch available.

Authentication Bypass Memory Corruption Microsoft +5
NVD
EPSS 1% CVSS 5.5
MEDIUM This Month

Windows Kernel Information Disclosure Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Microsoft Windows Server 2008 +9
NVD
EPSS 1% CVSS 7.8
HIGH This Week

Windows Kernel Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Use After Free Memory Corruption +11
NVD
EPSS 0% CVSS 7.8
HIGH This Week

Windows Local Security Authority (LSA) Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Microsoft Windows Server 2008 +9
NVD
EPSS 1% CVSS 7.8
HIGH This Week

Windows Defender Credential Guard Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Use After Free Memory Corruption +6
NVD
EPSS 1% CVSS 4.7
MEDIUM This Month

Windows Defender Credential Guard Information Disclosure Vulnerability. Rated medium severity (CVSS 4.7). No vendor patch available.

Information Disclosure Microsoft Windows Server 2016 +4
NVD
EPSS 1% CVSS 7.8
HIGH This Week

Windows Partition Management Driver Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Microsoft Windows Server 2016 +4
NVD
EPSS 1% CVSS 8.1
HIGH This Week

Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.

RCE Race Condition Microsoft +10
NVD
EPSS 2% CVSS 7.5
HIGH This Week

Windows Secure Socket Tunneling Protocol (SSTP) Denial of Service Vulnerability. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Microsoft Windows Server 2008 +9
NVD
EPSS 4% CVSS 7.8
HIGH This Week

Windows Win32k Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Microsoft Windows Server 2016 +4
NVD
EPSS 0% CVSS 7.8
HIGH This Week

Windows Hyper-V Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8). No vendor patch available.

RCE Race Condition Microsoft +7
NVD
EPSS 2% CVSS 8.8
HIGH This Week

Active Directory Domain Services Elevation of Privilege Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Privilege Escalation Microsoft Windows Server 2008 +9
NVD
EPSS 1% CVSS 7.1
HIGH This Week

Windows Fax Service Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.1), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Microsoft Windows Server 2008 +9
NVD
EPSS 0% CVSS 7.8
HIGH This Week

Windows Partition Management Driver Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Microsoft Windows Server 2012 +7
NVD
EPSS 1% CVSS 5.5
MEDIUM This Month

Windows Kernel Information Disclosure Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Microsoft Windows Server 2016 +4
NVD
EPSS 1% CVSS 7.5
HIGH This Week

Windows WebBrowser Control Remote Code Execution Vulnerability. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable. No vendor patch available.

RCE Microsoft Code Injection +10
NVD
EPSS 2% CVSS 9.8
CRITICAL Act Now

Windows Point-to-Point Protocol (PPP) Remote Code Execution Vulnerability. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft Windows Server 2008 +8
NVD
EPSS 1% CVSS 7.1
HIGH This Week

Windows Print Spooler Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.1), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Microsoft Windows Server 2008 +9
NVD
EPSS 1% CVSS 7.1
HIGH This Week

Windows Media Player Network Sharing Service Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.1), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Microsoft Windows Server 2008 +9
NVD
EPSS 1% CVSS 7.0
HIGH This Week

Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.0). No vendor patch available.

Information Disclosure Microsoft Windows Server 2008 +9
NVD
EPSS 1% CVSS 5.7
MEDIUM This Month

Windows Hyper-V Information Disclosure Vulnerability. Rated medium severity (CVSS 5.7), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Microsoft Windows Server 2008 +8
NVD
EPSS 1% CVSS 8.4
HIGH This Week

Windows Shell Remote Code Execution Vulnerability. Rated high severity (CVSS 8.4), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft Windows Server 2016 +4
NVD
EPSS 2% CVSS 8.8
HIGH This Week

Windows Graphics Component Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft Windows Server 2008 +8
NVD
EPSS 5% CVSS 7.8
HIGH This Week

Windows Common Log File System Driver Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Microsoft Windows Server 2008 +9
NVD
Prev Page 34 of 38 Next

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy