Archive

9 March 2022

Vulnerabilities first published on this day (UTC), newest first.

← February 2022 2022 / March /9 April 2022 →

All Critical High Medium Low Exploited only Public exploit

62 results · Clear filters · Feed

High 8.8

CVE-2021-22783

A CWE-200: Information Exposure vulnerability exists which could allow a session hijack when the door panel is communic…

Schneider Electric Ritto Wiser Door ICS / OT

Mar 9, 2022
High 7.7

CVE-2022-24753

Code injection in Stripe CLI on windows

Stripe CLI is a command-line tool for the Stripe eCommerce platform. A vulnerability in Stripe CLI exists on Windows when certain commands are run in a directory where an attacker has planted files. The commands are `stripe login`, `stripe config -e`, `stripe…

stripe stripe-cli github.com/stripe/stripe-cli Go

Mar 9, 2022
High 7.2

CVE-2022-24734 Public exploit EPSS 78%

Remote code execution in mybb

MyBB is a free and open source forum software. In affected versions the Admin CP's Settings management module does not validate setting types correctly on insertion and update, making it possible to add settings of supported type `php` with PHP code, executed…

myBB Group mybb

Mar 9, 2022
High 8.1

CVE-2021-32025

An elevation of privilege vulnerability in the QNX Neutrino Kernel of affected versions of QNX Software Development Pla…

BlackBerry QNX Software Development Platform (SDP), QNX OS for Medical (QOSM), and QNX OS for Safety (QOS)

Mar 9, 2022
High 7.5

CVE-2022-0618

Denial of service via HTTP/2 HEADERS frames padding

A program using swift-nio-http2 is vulnerable to a denial of service attack, caused by a network peer sending a specially crafted HTTP/2 frame. This vulnerability is caused by a logical error when parsing a HTTP/2 HEADERS or HTTP/2 PUSH_PROMISE frame where th…

Swift Project SwiftNIO HTTP2 github.com/apple/swift-nio-http2 SwiftURL

Mar 9, 2022
High 8.9

CVE-2022-0715

A CWE-287: Improper Authentication vulnerability exists that could cause an attacker to arbitrarily change the behavior…

Schneider Electric SmartConnect APC Smart-UPS ICS / OT

Mar 9, 2022
High 7.0

CVE-2022-24525

Windows Update Stack Elevation of Privilege Vulnerability

Windows Update Stack Elevation of Privilege Vulnerability

Microsoft Windows 10 Version 21H2 Windows 11 version 21H2 Windows 10 Version 20H2 Windows

Mar 9, 2022
High 7.2

CVE-2022-24520

Azure Site Recovery Remote Code Execution Vulnerability

Azure Site Recovery Remote Code Execution Vulnerability

Microsoft Azure Site Recovery VMWare to Azure

Mar 9, 2022
High 7.2

CVE-2022-24517

Azure Site Recovery Remote Code Execution Vulnerability

Azure Site Recovery Remote Code Execution Vulnerability

Microsoft Azure Site Recovery VMWare to Azure

Mar 9, 2022
High 7.8

CVE-2022-24510

Microsoft Office Visio Remote Code Execution Vulnerability

Microsoft Office Visio Remote Code Execution Vulnerability

Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office 2019

Mar 9, 2022
High 7.8

CVE-2022-24509

Microsoft Office Visio Remote Code Execution Vulnerability

Microsoft Office Visio Remote Code Execution Vulnerability

Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office 2019

Mar 9, 2022
High 8.8

CVE-2022-24508

Win32 File Enumeration Remote Code Execution Vulnerability

Win32 File Enumeration Remote Code Execution Vulnerability

Microsoft Windows Server 2022 Windows 10 Version 21H2 Windows 11 version 21H2 Windows

Mar 9, 2022
High 7.8

CVE-2022-24507

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Mar 9, 2022
High 7.0

CVE-2022-24505

Windows ALPC Elevation of Privilege Vulnerability

Windows ALPC Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Mar 9, 2022
High 7.8

CVE-2022-24501

VP9 Video Extensions Remote Code Execution Vulnerability

VP9 Video Extensions Remote Code Execution Vulnerability

Microsoft VP9 Video Extensions

Mar 9, 2022
High 7.2

CVE-2022-24471

Azure Site Recovery Remote Code Execution Vulnerability

Azure Site Recovery Remote Code Execution Vulnerability

Microsoft Azure Site Recovery VMWare to Azure

Mar 9, 2022
High 7.2

CVE-2022-24470

Azure Site Recovery Remote Code Execution Vulnerability

Azure Site Recovery Remote Code Execution Vulnerability

Microsoft Azure Site Recovery VMWare to Azure

Mar 9, 2022
High 8.1

CVE-2022-24469

Azure Site Recovery Elevation of Privilege Vulnerability

Azure Site Recovery Elevation of Privilege Vulnerability

Microsoft Azure Site Recovery VMWare to Azure

Mar 9, 2022
High 7.2

CVE-2022-24468

Azure Site Recovery Remote Code Execution Vulnerability

Azure Site Recovery Remote Code Execution Vulnerability

Microsoft Azure Site Recovery VMWare to Azure

Mar 9, 2022
High 7.2

CVE-2022-24467

Azure Site Recovery Remote Code Execution Vulnerability

Azure Site Recovery Remote Code Execution Vulnerability

Microsoft Azure Site Recovery VMWare to Azure

Mar 9, 2022
High 7.5

CVE-2022-24464

.NET and Visual Studio Denial of Service Vulnerability

.NET and Visual Studio Denial of Service Vulnerability

Microsoft Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10) .NET 6.0 Microsoft Visual Studio 2022 version 17.0 NuGet

Mar 9, 2022
High 7.8

CVE-2022-24461

Microsoft Office Visio Remote Code Execution Vulnerability

Microsoft Office Visio Remote Code Execution Vulnerability

Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office 2019

Mar 9, 2022
High 7.0

CVE-2022-24460

Tablet Windows User Interface Application Elevation of Privilege Vulnerability

Tablet Windows User Interface Application Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Mar 9, 2022
High 7.8

CVE-2022-24459

Windows Fax and Scan Service Elevation of Privilege Vulnerability

Windows Fax and Scan Service Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Mar 9, 2022
High 7.8

CVE-2022-24457

HEIF Image Extensions Remote Code Execution Vulnerability

HEIF Image Extensions Remote Code Execution Vulnerability

Microsoft HEIF Image Extension

Mar 9, 2022
High 7.8

CVE-2022-24456

HEVC Video Extensions Remote Code Execution Vulnerability

HEVC Video Extensions Remote Code Execution Vulnerability

Microsoft HEVC Video Extensions HEVC Video Extension

Mar 9, 2022
High 7.8

CVE-2022-24455

Windows CD-ROM Driver Elevation of Privilege Vulnerability

Windows CD-ROM Driver Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Mar 9, 2022
High 7.8

CVE-2022-24454

Windows Security Support Provider Interface Elevation of Privilege Vulnerability

Windows Security Support Provider Interface Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Mar 9, 2022
High 7.8

CVE-2022-24453

HEVC Video Extensions Remote Code Execution Vulnerability

HEVC Video Extensions Remote Code Execution Vulnerability

Microsoft HEVC Video Extensions HEVC Video Extension

Mar 9, 2022
High 7.8

CVE-2022-24452

HEVC Video Extensions Remote Code Execution Vulnerability

HEVC Video Extensions Remote Code Execution Vulnerability

Microsoft HEVC Video Extensions HEVC Video Extension

Mar 9, 2022
High 7.8

CVE-2022-24451

VP9 Video Extensions Remote Code Execution Vulnerability

VP9 Video Extensions Remote Code Execution Vulnerability

Microsoft VP9 Video Extensions

Mar 9, 2022
High 7.8

CVE-2022-23301

HEVC Video Extensions Remote Code Execution Vulnerability

HEVC Video Extensions Remote Code Execution Vulnerability

Microsoft HEVC Video Extensions HEVC Video Extension

Mar 9, 2022
High 7.8

CVE-2022-23300

Raw Image Extension Remote Code Execution Vulnerability

Raw Image Extension Remote Code Execution Vulnerability

Microsoft Raw Image Extension

Mar 9, 2022
High 7.8

CVE-2022-23299

Windows PDEV Elevation of Privilege Vulnerability

Windows PDEV Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Mar 9, 2022
High 7.0

CVE-2022-23298

Windows NT OS Kernel Elevation of Privilege Vulnerability

Windows NT OS Kernel Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Mar 9, 2022
High 7.8

CVE-2022-23296

Windows Installer Elevation of Privilege Vulnerability

Windows Installer Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Mar 9, 2022
High 7.8

CVE-2022-23295

Raw Image Extension Remote Code Execution Vulnerability

Raw Image Extension Remote Code Execution Vulnerability

Microsoft Raw Image Extension

Mar 9, 2022
High 8.8

CVE-2022-23294

Windows Event Tracing Remote Code Execution Vulnerability

Windows Event Tracing Remote Code Execution Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Mar 9, 2022
High 7.8

CVE-2022-23293

Windows Fast FAT File System Driver Elevation of Privilege Vulnerability

Windows Fast FAT File System Driver Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Mar 9, 2022
High 7.8

CVE-2022-23291

Windows DWM Core Library Elevation of Privilege Vulnerability

Windows DWM Core Library Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Mar 9, 2022