Archive

9 February 2022

Vulnerabilities first published on this day (UTC), newest first.

← January 2022 2022 / February /9 March 2022 →

All Critical High Medium Low Exploited only Public exploit

276 results · Feed

High 8.8

CVE-2022-22005 EPSS 17%

Microsoft SharePoint Server Remote Code Execution Vulnerability

Microsoft SharePoint Server Remote Code Execution Vulnerability

Microsoft Microsoft SharePoint Server 2019 Microsoft SharePoint Enterprise Server 2016 Microsoft SharePoint Server Subscription Edition

Feb 9, 2022
High 7.8

CVE-2022-22004

Microsoft Office ClickToRun Remote Code Execution Vulnerability

Microsoft Office ClickToRun Remote Code Execution Vulnerability

Microsoft Microsoft 365 Apps for Enterprise Microsoft Office 2013 Click-to-Run (C2R)

Feb 9, 2022
High 7.8

CVE-2022-22003

Microsoft Office Graphics Remote Code Execution Vulnerability

Microsoft Office Graphics Remote Code Execution Vulnerability

Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC for Mac 2021

Feb 9, 2022
Medium 5.5

CVE-2022-22002

Windows User Account Profile Picture Denial of Service Vulnerability

Windows User Account Profile Picture Denial of Service Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Feb 9, 2022
High 7.8

CVE-2022-22001

Windows Remote Access Connection Manager Elevation of Privilege Vulnerability

Windows Remote Access Connection Manager Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Feb 9, 2022
High 7.8

CVE-2022-22000

Windows Common Log File System Driver Elevation of Privilege Vulnerability

Windows Common Log File System Driver Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Feb 9, 2022
High 7.8

CVE-2022-21999 Exploited · Ransomware Public exploit EPSS 41%

Windows Print Spooler Elevation of Privilege Vulnerability

Windows Print Spooler Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Feb 9, 2022
KEV Mar 25, 2022
Medium 5.5

CVE-2022-21998

Windows Common Log File System Driver Information Disclosure Vulnerability

Windows Common Log File System Driver Information Disclosure Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Feb 9, 2022
High 7.1

CVE-2022-21997

Windows Print Spooler Elevation of Privilege Vulnerability

Windows Print Spooler Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Feb 9, 2022
High 7.8

CVE-2022-21996

Win32k Elevation of Privilege Vulnerability

Win32k Elevation of Privilege Vulnerability

Microsoft Windows 11 version 21H2 Windows

Feb 9, 2022
High 7.9

CVE-2022-21995

Windows Hyper-V Remote Code Execution Vulnerability

Windows Hyper-V Remote Code Execution Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Feb 9, 2022
High 7.8

CVE-2022-21994

Windows DWM Core Library Elevation of Privilege Vulnerability

Windows DWM Core Library Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Feb 9, 2022
High 7.5

CVE-2022-21993 EPSS 44%

Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability

Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Feb 9, 2022
High 7.8

CVE-2022-21992

Windows Mobile Device Management Remote Code Execution Vulnerability

Windows Mobile Device Management Remote Code Execution Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Feb 9, 2022
High 8.1

CVE-2022-21991

Visual Studio Code Remote Development Extension Remote Code Execution Vulnerability

Visual Studio Code Remote Development Extension Remote Code Execution Vulnerability

Microsoft Visual Studio Code

Feb 9, 2022
High 7.8

CVE-2022-21989

Windows Kernel Elevation of Privilege Vulnerability

Windows Kernel Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Feb 9, 2022
High 7.8

CVE-2022-21988

Microsoft Office Visio Remote Code Execution Vulnerability

Microsoft Office Visio Remote Code Execution Vulnerability

Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office 2019

Feb 9, 2022
High 8.0

CVE-2022-21987

Microsoft SharePoint Server Spoofing Vulnerability

Microsoft SharePoint Server Spoofing Vulnerability

Microsoft Microsoft SharePoint Server 2019 Microsoft SharePoint Enterprise Server 2016 Microsoft SharePoint Server Subscription Edition

Feb 9, 2022
High 7.5

CVE-2022-21986

.NET Denial of Service Vulnerability

.NET Denial of Service Vulnerability

Microsoft Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10) .NET 6.0 Microsoft Visual Studio 2022 version 17.0 NuGet

Feb 9, 2022
Medium 5.5

CVE-2022-21985

Windows Remote Access Connection Manager Information Disclosure Vulnerability

Windows Remote Access Connection Manager Information Disclosure Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Feb 9, 2022
High 8.8

CVE-2022-21984

Windows DNS Server Remote Code Execution Vulnerability

Windows DNS Server Remote Code Execution Vulnerability

Microsoft Windows Server 2022 Windows 10 Version 21H2 Windows 11 version 21H2 Windows

Feb 9, 2022
High 7.8

CVE-2022-21981

Windows Common Log File System Driver Elevation of Privilege Vulnerability

Windows Common Log File System Driver Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Feb 9, 2022
High 7.8

CVE-2022-21974 Public exploit

Roaming Security Rights Management Services Remote Code Execution Vulnerability

Roaming Security Rights Management Services Remote Code Execution Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Feb 9, 2022
High 7.8

CVE-2022-21971 Exploited Public exploit EPSS 54%

Windows Runtime Remote Code Execution Vulnerability

Windows Runtime Remote Code Execution Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Feb 9, 2022
KEV Aug 18, 2022
Medium 4.3

CVE-2022-21968

Microsoft SharePoint Server Security Feature Bypass Vulnerability

Microsoft SharePoint Server Security Feature Bypass Vulnerability

Microsoft Microsoft SharePoint Server 2019 Microsoft SharePoint Enterprise Server 2016 Microsoft SharePoint Server Subscription Edition

Feb 9, 2022
High 7.5

CVE-2022-21965

Microsoft Teams Denial of Service Vulnerability

Microsoft Teams Denial of Service Vulnerability

Microsoft Microsoft Teams for Android Microsoft Teams for iOS Microsoft Teams Admin Center Android iOS

Feb 9, 2022
High 7.2

CVE-2022-21957

Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability

Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability

Microsoft Microsoft Dynamics 365 (on-premises) version 9.0 Microsoft Dynamics 365 (on-premises) version 9.1

Feb 9, 2022
High 7.8

CVE-2022-21927

HEVC Video Extensions Remote Code Execution Vulnerability

HEVC Video Extensions Remote Code Execution Vulnerability

Microsoft HEVC Video Extensions HEVC Video Extension

Feb 9, 2022
High 7.8

CVE-2022-21926

HEVC Video Extensions Remote Code Execution Vulnerability

HEVC Video Extensions Remote Code Execution Vulnerability

Microsoft HEVC Video Extensions HEVC Video Extension

Feb 9, 2022
High 7.8

CVE-2022-21844

HEVC Video Extensions Remote Code Execution Vulnerability

HEVC Video Extensions Remote Code Execution Vulnerability

Microsoft HEVC Video Extensions HEVC Video Extension

Feb 9, 2022
Unscored —

CVE-2021-44912

In XE 1.116, when uploading the Normal button, there is no restriction on the file suffix, which leads to any file uplo…

Feb 9, 2022
Unscored —

CVE-2021-44911

XE before 1.11.6 is vulnerable to Unrestricted file upload via modules/menu/menu.admin.controller.php. When uploading t…

Feb 9, 2022
Unscored —

DRUPAL-CONTRIB-2022-024

The Custom Breadcrumbs module provides a variety of options for customizing the breadcrumb trail. The module doesn't su…

drupal/custom_breadcrumbs Packagist

Feb 9, 2022
Unscored —

DRUPAL-CONTRIB-2022-023

This module enables you to manage and delete files. The module doesn't sufficiently protect unmanaged files from view u…

drupal/fancy_file_delete Packagist

Feb 9, 2022
Unscored —

CVE-2022-23312

A vulnerability has been identified in Spectrum Power 4 (All versions < V4.70 SP9 Security Patch 1). The integrated web…

Siemens Spectrum Power™ 4 ICS / OT

Feb 9, 2022
Unscored —

CVE-2022-23102 Scanner template

A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V2.0). Affected products contain an…

Siemens SINEMA Remote Connect Server ICS / OT

Feb 9, 2022
Unscored —

CVE-2021-46161

A vulnerability has been identified in Simcenter Femap V2020.2 (All versions), Simcenter Femap V2021.1 (All versions). …

Siemens Simcenter Femap V2020.2 Simcenter Femap V2021.1 ICS / OT

Feb 9, 2022
Unscored —

CVE-2021-46160

A vulnerability has been identified in Simcenter Femap V2020.2 (All versions), Simcenter Femap V2021.1 (All versions). …

Siemens Simcenter Femap V2021.1 Simcenter Femap V2020.2 ICS / OT

Feb 9, 2022
Unscored —

CVE-2021-46159

A vulnerability has been identified in Simcenter Femap V2020.2 (All versions), Simcenter Femap V2021.1 (All versions). …

Siemens Simcenter Femap V2020.2 Simcenter Femap V2021.1 ICS / OT

Feb 9, 2022
Unscored —

CVE-2021-46158

A vulnerability has been identified in Simcenter Femap V2020.2 (All versions), Simcenter Femap V2021.1 (All versions). …

Siemens Simcenter Femap V2021.1 Simcenter Femap V2020.2 ICS / OT

Feb 9, 2022