Skip to content
OpenAdvisories

Source

Microsoft Security Response Center

Source: https://msrc.microsoft.com/update-guide/

All Critical High Medium Low With exploited CVEs

8,900 results · Clear filters · Feed

  • High max 8.8
    MSRC-CVE-2022-29137 1 CVE

    Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 7.0
    MSRC-CVE-2022-29135 1 CVE

    Windows Cluster Shared Volume (CSV) Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 6.5
    MSRC-CVE-2022-29134 1 CVE

    Windows Clustered Shared Volume Information Disclosure Vulnerability

    Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 8.8
    MSRC-CVE-2022-29133 1 CVE

    Windows Kernel Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 7.8
    MSRC-CVE-2022-29132 1 CVE

    Windows Print Spooler Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

    Microsoft
  • High max 8.8
    MSRC-CVE-2022-29131 1 CVE

    Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 9.8
    MSRC-CVE-2022-29130 1 CVE

    Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 8.8
    MSRC-CVE-2022-29129 1 CVE

    Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 8.8
    MSRC-CVE-2022-29128 1 CVE

    Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 4.2
    MSRC-CVE-2022-29127 1 CVE

    BitLocker Security Feature Bypass Vulnerability

    Impact: Security Feature Bypass. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 7.0
    MSRC-CVE-2022-29126 1 CVE

    Tablet Windows User Interface Application Core Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 7.0
    MSRC-CVE-2022-29125 1 CVE

    Windows Push Notifications Apps Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 7.5
    MSRC-CVE-2022-29117 1 CVE

    .NET and Visual Studio Denial of Service Vulnerability

    Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 7.8
    MSRC-CVE-2022-29115 1 CVE

    Windows Fax Service Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 5.5
    MSRC-CVE-2022-29114 1 CVE

    Windows Print Spooler Information Disclosure Vulnerability

    Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

    Microsoft
  • High max 6.5
    MSRC-CVE-2022-29112 1 CVE

    Windows Graphics Component Information Disclosure Vulnerability

    Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 7.8
    MSRC-CVE-2022-29110 1 CVE

    Microsoft Excel Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 7.8
    MSRC-CVE-2022-29109 1 CVE

    Microsoft Excel Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 8.8
    MSRC-CVE-2022-29108 1 CVE

    Microsoft SharePoint Server Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation More Likely. Customer action: Required.

    Microsoft
  • High max 5.5
    MSRC-CVE-2022-29107 1 CVE

    Microsoft Office Security Feature Bypass Vulnerability

    Impact: Security Feature Bypass. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 7.0
    MSRC-CVE-2022-29106 1 CVE

    Windows Hyper-V Shared Virtual Disk Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 7.8
    MSRC-CVE-2022-29103 1 CVE

    Windows Remote Access Connection Manager Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 5.5
    MSRC-CVE-2022-29102 1 CVE

    Windows Failover Cluster Information Disclosure Vulnerability

    Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 7.0
    MSRC-CVE-2022-22016 1 CVE

    Windows PlayToManager Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 6.5
    MSRC-CVE-2022-22015 1 CVE

    Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability

    Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 8.8
    MSRC-CVE-2022-22014 1 CVE

    Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 8.8
    MSRC-CVE-2022-22013 1 CVE

    Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 9.8
    MSRC-CVE-2022-22012 1 CVE

    Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 5.5
    MSRC-CVE-2022-22011 1 CVE

    Windows Graphics Component Information Disclosure Vulnerability

    Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 6.5
    MSRC-CVE-2022-26940 1 CVE

    Remote Desktop Protocol Client Information Disclosure Vulnerability

    Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 7.0
    MSRC-CVE-2022-26939 1 CVE

    Storage Spaces Direct Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 7.0
    MSRC-CVE-2022-26938 1 CVE

    Storage Spaces Direct Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 6.5
    MSRC-CVE-2022-26936 1 CVE

    Windows Server Service Information Disclosure Vulnerability

    Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 6.5
    MSRC-CVE-2022-26935 1 CVE

    Windows WLAN AutoConfig Service Information Disclosure Vulnerability

    Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 5.5
    MSRC-CVE-2022-26933 1 CVE

    Windows NTFS Information Disclosure Vulnerability

    Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 8.2
    MSRC-CVE-2022-26932 1 CVE

    Storage Spaces Direct Elevation of Privilege Vulnerability

    Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 8.8
    MSRC-CVE-2022-26927 1 CVE

    Windows Graphics Component Remote Code Execution Vulnerability

    Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 8.1
    MSRC-CVE-2022-26925 1 CVE 1 exploited

    Windows LSA Spoofing Vulnerability

    Impact: Spoofing. Microsoft rating: Important. Exploited according to Microsoft, publicly disclosed before the fix — Exploitation Detected. Customer action: Required.

    Microsoft
  • High max 7.4
    MSRC-CVE-2022-26913 1 CVE

    Windows Authentication Information Disclosure Vulnerability

    Impact: Security Feature Bypass. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft
  • High max 4.1
    MSRC-CVE-2022-24466 1 CVE

    Windows Hyper-V Security Feature Bypass Vulnerability

    Impact: Security Feature Bypass. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

    Microsoft