Archive

9 February 2022

Vulnerabilities first published on this day (UTC), newest first.

← January 2022 2022 / February /9 March 2022 →

All Critical High Medium Low Exploited only Public exploit

74 results · Clear filters · Feed

High 7.8

CVE-2022-22709

VP9 Video Extensions Remote Code Execution Vulnerability

VP9 Video Extensions Remote Code Execution Vulnerability

Microsoft VP9 Video Extensions

Feb 9, 2022
High 8.8

CVE-2022-22005 EPSS 17%

Microsoft SharePoint Server Remote Code Execution Vulnerability

Microsoft SharePoint Server Remote Code Execution Vulnerability

Microsoft Microsoft SharePoint Server 2019 Microsoft SharePoint Enterprise Server 2016 Microsoft SharePoint Server Subscription Edition

Feb 9, 2022
High 7.8

CVE-2022-22004

Microsoft Office ClickToRun Remote Code Execution Vulnerability

Microsoft Office ClickToRun Remote Code Execution Vulnerability

Microsoft Microsoft 365 Apps for Enterprise Microsoft Office 2013 Click-to-Run (C2R)

Feb 9, 2022
High 7.8

CVE-2022-22003

Microsoft Office Graphics Remote Code Execution Vulnerability

Microsoft Office Graphics Remote Code Execution Vulnerability

Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC for Mac 2021

Feb 9, 2022
High 7.8

CVE-2022-22001

Windows Remote Access Connection Manager Elevation of Privilege Vulnerability

Windows Remote Access Connection Manager Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Feb 9, 2022
High 7.8

CVE-2022-22000

Windows Common Log File System Driver Elevation of Privilege Vulnerability

Windows Common Log File System Driver Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Feb 9, 2022
High 7.8

CVE-2022-21999 Exploited · Ransomware Public exploit EPSS 41%

Windows Print Spooler Elevation of Privilege Vulnerability

Windows Print Spooler Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Feb 9, 2022
KEV Mar 25, 2022
High 7.1

CVE-2022-21997

Windows Print Spooler Elevation of Privilege Vulnerability

Windows Print Spooler Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Feb 9, 2022
High 7.8

CVE-2022-21996

Win32k Elevation of Privilege Vulnerability

Win32k Elevation of Privilege Vulnerability

Microsoft Windows 11 version 21H2 Windows

Feb 9, 2022
High 7.9

CVE-2022-21995

Windows Hyper-V Remote Code Execution Vulnerability

Windows Hyper-V Remote Code Execution Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Feb 9, 2022
High 7.8

CVE-2022-21994

Windows DWM Core Library Elevation of Privilege Vulnerability

Windows DWM Core Library Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Feb 9, 2022
High 7.5

CVE-2022-21993 EPSS 44%

Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability

Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Feb 9, 2022
High 7.8

CVE-2022-21992

Windows Mobile Device Management Remote Code Execution Vulnerability

Windows Mobile Device Management Remote Code Execution Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Feb 9, 2022
High 8.1

CVE-2022-21991

Visual Studio Code Remote Development Extension Remote Code Execution Vulnerability

Visual Studio Code Remote Development Extension Remote Code Execution Vulnerability

Microsoft Visual Studio Code

Feb 9, 2022
High 7.8

CVE-2022-21989

Windows Kernel Elevation of Privilege Vulnerability

Windows Kernel Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Feb 9, 2022
High 7.8

CVE-2022-21988

Microsoft Office Visio Remote Code Execution Vulnerability

Microsoft Office Visio Remote Code Execution Vulnerability

Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office 2019

Feb 9, 2022
High 8.0

CVE-2022-21987

Microsoft SharePoint Server Spoofing Vulnerability

Microsoft SharePoint Server Spoofing Vulnerability

Microsoft Microsoft SharePoint Server 2019 Microsoft SharePoint Enterprise Server 2016 Microsoft SharePoint Server Subscription Edition

Feb 9, 2022
High 7.5

CVE-2022-21986

.NET Denial of Service Vulnerability

.NET Denial of Service Vulnerability

Microsoft Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10) .NET 6.0 Microsoft Visual Studio 2022 version 17.0 NuGet

Feb 9, 2022
High 8.8

CVE-2022-21984

Windows DNS Server Remote Code Execution Vulnerability

Windows DNS Server Remote Code Execution Vulnerability

Microsoft Windows Server 2022 Windows 10 Version 21H2 Windows 11 version 21H2 Windows

Feb 9, 2022
High 7.8

CVE-2022-21981

Windows Common Log File System Driver Elevation of Privilege Vulnerability

Windows Common Log File System Driver Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Feb 9, 2022
High 7.8

CVE-2022-21974 Public exploit

Roaming Security Rights Management Services Remote Code Execution Vulnerability

Roaming Security Rights Management Services Remote Code Execution Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Feb 9, 2022
High 7.8

CVE-2022-21971 Exploited Public exploit EPSS 54%

Windows Runtime Remote Code Execution Vulnerability

Windows Runtime Remote Code Execution Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Feb 9, 2022
KEV Aug 18, 2022
High 7.5

CVE-2022-21965

Microsoft Teams Denial of Service Vulnerability

Microsoft Teams Denial of Service Vulnerability

Microsoft Microsoft Teams for Android Microsoft Teams for iOS Microsoft Teams Admin Center Android iOS

Feb 9, 2022
High 7.2

CVE-2022-21957

Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability

Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability

Microsoft Microsoft Dynamics 365 (on-premises) version 9.1 Microsoft Dynamics 365 (on-premises) version 9.0

Feb 9, 2022
High 7.8

CVE-2022-21927

HEVC Video Extensions Remote Code Execution Vulnerability

HEVC Video Extensions Remote Code Execution Vulnerability

Microsoft HEVC Video Extensions HEVC Video Extension

Feb 9, 2022
High 7.8

CVE-2022-21926

HEVC Video Extensions Remote Code Execution Vulnerability

HEVC Video Extensions Remote Code Execution Vulnerability

Microsoft HEVC Video Extensions HEVC Video Extension

Feb 9, 2022
High 7.8

CVE-2022-21844

HEVC Video Extensions Remote Code Execution Vulnerability

HEVC Video Extensions Remote Code Execution Vulnerability

Microsoft HEVC Video Extensions HEVC Video Extension

Feb 9, 2022
High 7.5

CVE-2021-37205

A vulnerability has been identified in SIMATIC Drive Controller family (All versions >= V2.9.2 < V2.9.4), SIMATIC ET 20…

Siemens SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) SIMATIC S7-1200 CPU family (incl. SIPLUS variants) SIMATIC S7-1500 Software Controller ICS / OT

Feb 9, 2022
High 7.5

CVE-2021-37204

A vulnerability has been identified in SIMATIC Drive Controller family (All versions < V2.9.2), SIMATIC Drive Controlle…

Siemens SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants) SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) SIMATIC S7-1200 CPU family (incl. SIPLUS variants) ICS / OT

Feb 9, 2022
High 7.5

CVE-2021-37185

A vulnerability has been identified in SIMATIC Drive Controller family (All versions >= V2.9.2 < V2.9.4), SIMATIC ET 20…

Siemens SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) SIMATIC S7-1200 CPU family (incl. SIPLUS variants) SIMATIC S7-1500 Software Controller ICS / OT

Feb 9, 2022
High 7.8

CVE-2021-37852

LPE in ESET products for Windows

ESET products for Windows allows untrusted process to impersonate the client of a pipe, which can be leveraged by attacker to escalate privileges in the context of NT AUTHORITY\SYSTEM.

ESET ESET Endpoint Security for Windows ESET Mail Security for IBM Domino ESET Internet Security Windows

Feb 9, 2022
High 7.3

CVE-2022-0526

Cross-site Scripting (XSS) - Stored in chatwoot/chatwoot

Cross-site Scripting (XSS) - Stored in GitHub repository chatwoot/chatwoot prior to 2.2.0.

chatwoot chatwoot/chatwoot

Feb 9, 2022
High 8.4

CVE-2022-0525

Out-of-bounds Read in mruby/mruby

Out-of-bounds Read in Homebrew mruby prior to 3.2.

mruby mruby/mruby mruby Ubuntu

Feb 9, 2022
High 7.5

CVE-2022-0391

A flaw was found in Python, specifically within the urllib.parse module. This module helps break Uniform Resource Locat…

python3.4 python3.5 python2.7 python3.6 Debian Ubuntu Azure Linux

Feb 9, 2022