April 2022 Security Updates Security Update secure@microsoft.com The Microsoft Security Response Center (MSRC) identifies, monitors, resolves, and responds to security incidents and Microsoft software security vulnerabilities. For more information, see http://www.microsoft.com/security/msrc. 2022-Apr 2022-Apr Final 1.0 92 2026-09-17T01:54:20 April 2022 Security Updates 2022-04-12T08:00:00 2026-09-17T01:54:20 <h2 id="updates-this-month">Updates this Month</h2> <p>This release consists of security updates for the following products, features and roles.</p> <ul> <li>.NET Framework</li> <li>Active Directory Domain Services</li> <li>Azure SDK</li> <li>Azure Site Recovery</li> <li>LDAP - Lightweight Directory Access Protocol</li> <li>Microsoft Bluetooth Driver</li> <li>Microsoft Dynamics</li> <li>Microsoft Edge (Chromium-based)</li> <li>Microsoft Graphics Component</li> <li>Microsoft Local Security Authority Server (lsasrv)</li> <li>Microsoft Office Excel</li> <li>Microsoft Office SharePoint</li> <li>Microsoft Windows ALPC</li> <li>Microsoft Windows Codecs Library</li> <li>Microsoft Windows Media Foundation</li> <li>Power BI</li> <li>Role: DNS Server</li> <li>Role: Windows Hyper-V</li> <li>Skype for Business</li> <li>Visual Studio</li> <li>Visual Studio Code</li> <li>Windows Ancillary Function Driver for WinSock</li> <li>Windows App Store</li> <li>Windows AppX Package Manager</li> <li>Windows Cluster Client Failover</li> <li>Windows Cluster Shared Volume (CSV)</li> <li>Windows Common Log File System Driver</li> <li>Windows Defender</li> <li>Windows DWM Core Library</li> <li>Windows Endpoint Configuration Manager</li> <li>Windows Fax Compose Form</li> <li>Windows Feedback Hub</li> <li>Windows File Explorer</li> <li>Windows File Server</li> <li>Windows Installer</li> <li>Windows iSCSI Target Service</li> <li>Windows Kerberos</li> <li>Windows Kernel</li> <li>Windows Local Security Authority Subsystem Service</li> <li>Windows Media</li> <li>Windows Network File System</li> <li>Windows PowerShell</li> <li>Windows Print Spooler Components</li> <li>Windows RDP</li> <li>Windows Remote Procedure Call Runtime</li> <li>Windows schannel</li> <li>Windows SMB</li> <li>Windows Telephony Server</li> <li>Windows Upgrade Assistant</li> <li>Windows User Profile Service</li> <li>Windows Win32K</li> <li>Windows Work Folder Service</li> <li>YARP reverse proxy</li> </ul> <p>Please note the following information regarding the security updates:</p> <h2 id="security-update-guide-blog-posts">Security Update Guide Blog Posts</h2> <table> <thead> <tr> <th>Date</th> <th>Blog Post</th> </tr> </thead> <tbody> <tr> <td>January 11, 2022</td> <td><a href="https://aka.ms/SUGNotificationProfile">Coming Soon: New Security Update Guide Notification System</a></td> </tr> <tr> <td>February 9, 2021</td> <td><a href="https://msrc-blog.microsoft.com/2021/02/09/continuing-to-listen-good-news-about-the-security-update-guide-api/">Continuing to Listen: Good News about the Security Update Guide API</a></td> </tr> <tr> <td>January 13, 2021</td> <td><a href="https://msrc-blog.microsoft.com/2021/01/13/security-update-guide-supports-cves-assigned-by-industry-partners/">Security Update Guide Supports CVEs Assigned by Industry Partners</a></td> </tr> <tr> <td>December 8, 2020</td> <td><a href="https://msrc-blog.microsoft.com/2020/12/08/security-update-guide-lets-keep-the-conversation-going/">Security Update Guide: Let’s keep the conversation going</a></td> </tr> <tr> <td>November 9, 2020</td> <td><a href="https://msrc-blog.microsoft.com/2020/11/09/vulnerability-descriptions-in-the-new-version-of-the-security-update-guide/">Vulnerability Descriptions in the New Version of the Security Update Guide</a></td> </tr> </tbody> </table> <h2 id="relevant-information">Relevant Information</h2> <ul> <li>The new Hotpatching feature is now generally available. Please see <a href="https://docs.microsoft.com/en-us/azure/automanage/automanage-hotpatch?WT.mc_id=modinfra-18529-thmaure">Hotpatching feature for Windows Server Azure Edition virtual machines (VMs)</a> for more information.</li> <li>Windows 10 updates are cumulative. The monthly security release includes all security fixes for vulnerabilities that affect Windows 10, in addition to non-security updates. The updates are available via the <a href="https://www.catalog.update.microsoft.com/Home.aspx">Microsoft Update Catalog</a>. For information on lifecycle and support dates for Windows 10 operating systems, please see <a href="https://docs.microsoft.com/en-us/lifecycle/faq/windows">Windows Lifecycle Facts Sheet</a>.</li> <li>Microsoft is improving Windows Release Notes. For more information, please see <a href="https://techcommunity.microsoft.com/t5/windows-it-pro-blog/what-s-next-for-windows-release-notes/ba-p/1754399">What's next for Windows release notes</a>.</li> <li>A list of the latest servicing stack updates for each operating system can be found in <a href="https://msrc.microsoft.com/update-guide/en-us/vulnerability/ADV990001">ADV990001</a>. This list will be updated whenever a new servicing stack update is released. It is important to install the latest servicing stack update.</li> <li>In addition to security changes for the vulnerabilities, updates include defense-in-depth updates to help improve security-related features.</li> <li>Customers running Windows 7, Windows Server 2008 R2, or Windows Server 2008 need to purchase the Extended Security Update to continue receiving security updates. See <a href="https://support.microsoft.com/en-us/topic/procedure-to-continue-receiving-security-updates-after-extended-support-ends-on-january-14-2020-48c59204-fe67-3f42-84fc-c3c3145ff28e">4522133</a> for more information.</li> </ul> <h2 id="faqs-mitigations-and-workarounds">FAQs, Mitigations, and Workarounds</h2> <p>The following CVEs have FAQs, Mitigations, or Workarounds. You can see these in more detail from the Vulnerabilities tab by selecting <strong>FAQs</strong>, <strong>Mitigations</strong> and <strong>Workarounds</strong> columns in the <strong>Edit Columns</strong> panel.</p> <ul> <li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-1125">CVE-2022-1125</a></li> <li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-1127">CVE-2022-1127</a></li> <li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-1128">CVE-2022-1128</a></li> <li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-1129">CVE-2022-1129</a></li> <li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-1130">CVE-2022-1130</a></li> <li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-1131">CVE-2022-1131</a></li> <li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-1133">CVE-2022-1133</a></li> <li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-1134">CVE-2022-1134</a></li> <li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-1135">CVE-2022-1135</a></li> <li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-1136">CVE-2022-1136</a></li> <li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-1137">CVE-2022-1137</a></li> <li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-1138">CVE-2022-1138</a></li> <li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-1139">CVE-2022-1139</a></li> <li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-1143">CVE-2022-1143</a></li> <li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-1145">CVE-2022-1145</a></li> <li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-1146">CVE-2022-1146</a></li> <li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-1232">CVE-2022-1232</a></li> <li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-21983">CVE-2022-21983</a></li> <li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-22008">CVE-2022-22008</a></li> <li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-22009">CVE-2022-22009</a></li> <li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-23257">CVE-2022-23257</a></li> <li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-23259">CVE-2022-23259</a></li> <li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-23268">CVE-2022-23268</a></li> <li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-23292">CVE-2022-23292</a></li> <li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-24472">CVE-2022-24472</a></li> <li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-24473">CVE-2022-24473</a></li> <li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-24475">CVE-2022-24475</a></li> <li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-24482">CVE-2022-24482</a></li> <li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-24483">CVE-2022-24483</a></li> <li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-24485">CVE-2022-24485</a></li> <li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-24487">CVE-2022-24487</a></li> <li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-24490">CVE-2022-24490</a></li> <li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-24491">CVE-2022-24491</a></li> <li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-24492">CVE-2022-24492</a></li> <li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-24493">CVE-2022-24493</a></li> <li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-24495">CVE-2022-24495</a></li> <li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-24497">CVE-2022-24497</a></li> <li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-24498">CVE-2022-24498</a></li> <li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-24500">CVE-2022-24500</a></li> <li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-24523">CVE-2022-24523</a></li> <li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-24527">CVE-2022-24527</a></li> <li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-24528">CVE-2022-24528</a></li> <li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-24532">CVE-2022-24532</a></li> <li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-24533">CVE-2022-24533</a></li> <li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-24534">CVE-2022-24534</a></li> <li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-24536">CVE-2022-24536</a></li> <li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-24537">CVE-2022-24537</a></li> <li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-24539">CVE-2022-24539</a></li> <li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-24540">CVE-2022-24540</a></li> <li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-24541">CVE-2022-24541</a></li> <li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-24543">CVE-2022-24543</a></li> <li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-24545">CVE-2022-24545</a></li> <li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-24765">CVE-2022-24765</a></li> <li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-24767">CVE-2022-24767</a></li> <li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-26783">CVE-2022-26783</a></li> <li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-26785">CVE-2022-26785</a></li> <li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-26807">CVE-2022-26807</a></li> <li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-26808">CVE-2022-26808</a></li> <li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-26809">CVE-2022-26809</a></li> <li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-26811">CVE-2022-26811</a></li> <li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-26812">CVE-2022-26812</a></li> <li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-26813">CVE-2022-26813</a></li> <li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-26814">CVE-2022-26814</a></li> <li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-26815">CVE-2022-26815</a></li> <li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-26816">CVE-2022-26816</a></li> <li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-26817">CVE-2022-26817</a></li> <li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-26818">CVE-2022-26818</a></li> <li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-26819">CVE-2022-26819</a></li> <li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-26820">CVE-2022-26820</a></li> <li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-26821">CVE-2022-26821</a></li> <li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-26822">CVE-2022-26822</a></li> <li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-26823">CVE-2022-26823</a></li> <li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-26824">CVE-2022-26824</a></li> <li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-26825">CVE-2022-26825</a></li> <li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-26826">CVE-2022-26826</a></li> <li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-26827">CVE-2022-26827</a></li> <li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-26828">CVE-2022-26828</a></li> <li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-26829">CVE-2022-26829</a></li> <li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-26830">CVE-2022-26830</a></li> <li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-26891">CVE-2022-26891</a></li> <li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-26894">CVE-2022-26894</a></li> <li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-26895">CVE-2022-26895</a></li> <li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-26896">CVE-2022-26896</a></li> <li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-26897">CVE-2022-26897</a></li> <li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-26898">CVE-2022-26898</a></li> <li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-26900">CVE-2022-26900</a></li> <li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-26901">CVE-2022-26901</a></li> <li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-26903">CVE-2022-26903</a></li> <li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-26904">CVE-2022-26904</a></li> <li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-26907">CVE-2022-26907</a></li> <li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-26908">CVE-2022-26908</a></li> <li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-26909">CVE-2022-26909</a></li> <li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-26910">CVE-2022-26910</a></li> <li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-26911">CVE-2022-26911</a></li> <li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-26912">CVE-2022-26912</a></li> <li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-26916">CVE-2022-26916</a></li> <li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-26917">CVE-2022-26917</a></li> <li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-26918">CVE-2022-26918</a></li> <li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-26919">CVE-2022-26919</a></li> <li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-26920">CVE-2022-26920</a></li> <li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-26924">CVE-2022-26924</a></li> </ul> <h2 id="known-issues">Known Issues</h2> <p>You can see these in more detail from the Deployments tab by selecting <strong>Known Issues</strong> column in the <strong>Edit Columns</strong> panel.</p> <p>For more information about Windows Known Issues, please see <a href="https://docs.microsoft.com/en-us/windows/release-information/windows-message-center">Windows message center</a> (links to currently-supported versions of Windows are in the left pane).</p> <table> <thead> <tr> <th>KB Article</th> <th>Applies To</th> </tr> </thead> <tbody> <tr> <td><a href="https://support.microsoft.com/help/5012591">5012591</a></td> <td>Windows 10, version 1909</td> </tr> <tr> <td><a href="https://support.microsoft.com/help/5012592">5012592</a></td> <td>Windows 11</td> </tr> <tr> <td><a href="https://support.microsoft.com/help/5012596">5012596</a></td> <td>Windows 10, version 1607, Windows Server 2016</td> </tr> <tr> <td><a href="https://support.microsoft.com/help/5012599">5012599</a></td> <td>Windows 10, version 20H2, Windows Server, version 20H2, Windows 10, version 21H1, Windows 10, version 21H2</td> </tr> <tr> <td><a href="https://support.microsoft.com/help/5012604">5012604</a></td> <td>Windows Server 2022</td> </tr> <tr> <td><a href="https://support.microsoft.com/help/5012626">5012626</a></td> <td>Windows 7, Windows Server 2008 R2 (Monthly Rollup)</td> </tr> <tr> <td><a href="https://support.microsoft.com/help/5012632">5012632</a></td> <td>Windows Server 2008 (Security-only update)</td> </tr> <tr> <td><a href="https://support.microsoft.com/help/5012639">5012639</a></td> <td>Windows 8.1, Windows Server 2012 R2 (Security-only update)</td> </tr> <tr> <td><a href="https://support.microsoft.com/help/5012647">5012647</a></td> <td>Windows 10, version 1809</td> </tr> <tr> <td><a href="https://support.microsoft.com/help/5012649">5012649</a></td> <td>Windows 7, Windows Server 2008 R2 (Security-only update)</td> </tr> <tr> <td><a href="https://support.microsoft.com/help/5012650">5012650</a></td> <td>Windows Server 2012 (Monthly Rollup)</td> </tr> <tr> <td><a href="https://support.microsoft.com/help/5012653">5012653</a></td> <td>Windows 10</td> </tr> <tr> <td><a href="https://support.microsoft.com/help/5012658">5012658</a></td> <td>Windows Server 2008 (Monthly Rollup)</td> </tr> <tr> <td><a href="https://support.microsoft.com/help/5012666">5012666</a></td> <td>Windows Server 2012 (Security-only update)</td> </tr> <tr> <td><a href="https://support.microsoft.com/help/5012670">5012670</a></td> <td>Windows 8.1, Windows Server 2012 R2 (Monthly Rollup)</td> </tr> <tr> <td><a href="https://support.microsoft.com/help/5002191">5002191</a></td> <td>SharePoint Server Subscription Edition</td> </tr> </tbody> </table> The information provided in the Microsoft Knowledge Base is provided "as is" without warranty of any kind. Microsoft disclaims all warranties, either express or implied, including the warranties of merchantability and fitness for a particular purpose. In no event shall Microsoft Corporation or its suppliers be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages, even if Microsoft Corporation or its suppliers have been advised of the possibility of such damages. Some states do not allow the exclusion or limitation of liability for consequential or incidental damages so the foregoing limitation may not apply. Windows 10 Version 1809 for 32-bit Systems Windows 10 Version 1809 for x64-based Systems Windows 10 Version 1809 for ARM64-based Systems Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1909 for 32-bit Systems Windows 10 Version 1909 for x64-based Systems Windows 10 Version 1909 for ARM64-based Systems Windows 10 Version 21H1 for x64-based Systems Windows 10 Version 21H1 for ARM64-based Systems Windows 10 Version 21H1 for 32-bit Systems Windows Server 2022 Windows Server 2022 (Server Core installation) Windows 10 Version 20H2 for 32-bit Systems Windows 10 Version 20H2 for ARM64-based Systems Windows Server, version 20H2 (Server Core Installation) Windows 11 version 21H2 for x64-based Systems Windows 11 version 21H2 for ARM64-based Systems Windows 10 Version 21H2 for 32-bit Systems Windows 10 Version 21H2 for ARM64-based Systems Windows 10 Version 21H2 for x64-based Systems Windows 10 for 32-bit Systems Windows 10 for x64-based Systems Windows 10 Version 1607 for 32-bit Systems Windows 10 Version 1607 for x64-based Systems Windows Server 2016 Windows Server 2016 (Server Core installation) Windows 8.1 for 32-bit systems Windows 8.1 for x64-based systems Windows RT 8.1 Windows 11 Version 22H2 for x64-based Systems Windows Upgrade Assistant HEVC Video Extension HEVC Video Extensions Windows 7 for 32-bit Systems Service Pack 1 Windows 7 for x64-based Systems Service Pack 1 Windows Server 2008 for 32-bit Systems Service Pack 2 Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation) Windows Server 2008 for x64-based Systems Service Pack 2 Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation) Windows Server 2008 R2 for x64-based Systems Service Pack 1 Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) Windows Server 2012 Windows Server 2012 (Server Core installation) Windows Server 2012 R2 Windows Server 2012 R2 (Server Core installation) Microsoft Dynamics 365 (on-premises) version 9.0 Microsoft Dynamics 365 (on-premises) version 9.1 Microsoft On-Premises Data Gateway Microsoft Edge (Chromium-based) Microsoft Malware Protection Engine Microsoft Endpoint Configuration Manager PowerShell 7.0 PowerShell 7.1 PowerShell 7.2 Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8) Microsoft Visual Studio 2022 version 17.1 Microsoft Visual Studio 2019 version 16.7 (includes 16.0 – 16.6) Microsoft Visual Studio 2019 version 16.9 (includes 16.0 - 16.8) Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10) Microsoft Visual Studio 2022 version 17.0 Visual Studio 2019 for Mac version 8.10 Visual Studio 2022 for Mac version 17.0 Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 1909 for x64-based Systems Microsoft .NET Framework 4.5.2 on Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.2 on Windows 8.1 for 32-bit systems Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.2 on Windows 7 for x64-based Systems Service Pack 1 Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.2 on Windows RT 8.1 Microsoft .NET Framework 4.8 on Windows Server 2012 Microsoft .NET Framework 4.8 on Windows Server 2012 R2 (Server Core installation) Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2012 Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2012 R2 Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.2 on Windows 8.1 for x64-based systems Microsoft .NET Framework 4.8 on Windows 8.1 for 32-bit systems Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.2 on Windows 7 for 32-bit Systems Service Pack 1 Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 1809 for 32-bit Systems Microsoft .NET Framework 3.5 AND 4.8 on Windows Server 2019 (Server Core installation) Microsoft .NET Framework 4.8 on Windows Server 2012 R2 Microsoft .NET Framework 4.5.2 on Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation) Microsoft .NET Framework 4.8 on Windows Server 2016 Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2012 R2 (Server Core installation) Microsoft .NET Framework 4.8 on Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) Microsoft .NET Framework 4.8 on Windows Server 2012 (Server Core installation) Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2012 (Server Core installation) Microsoft .NET Framework 4.8 on Windows 10 Version 1607 for x64-based Systems Microsoft .NET Framework 4.8 on Windows 7 for x64-based Systems Service Pack 1 Microsoft .NET Framework 4.8 on Windows RT 8.1 Microsoft .NET Framework 4.5.2 on Windows Server 2012 Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2008 R2 for x64-based Systems Service Pack 1 Microsoft .NET Framework 4.5.2 on Windows Server 2012 R2 Microsoft .NET Framework 4.5.2 on Windows Server 2012 (Server Core installation) Microsoft .NET Framework 4.5.2 on Windows Server 2008 R2 for x64-based Systems Service Pack 1 Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 1809 for x64-based Systems Microsoft .NET Framework 3.5 AND 4.8 on Windows Server 2022 Microsoft .NET Framework 4.8 on Windows 10 Version 1607 for 32-bit Systems Microsoft .NET Framework 4.5.2 on Windows Server 2008 for x64-based Systems Service Pack 2 Microsoft .NET Framework 4.8 on Windows Server 2016 (Server Core installation) Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) Microsoft .NET Framework 4.8 on Windows Server 2008 R2 for x64-based Systems Service Pack 1 Microsoft .NET Framework 3.5 AND 4.8 on Windows Server 2022 (Server Core installation) Microsoft .NET Framework 4.5.2 on Windows Server 2012 R2 (Server Core installation) Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 1909 for ARM64-based Systems Microsoft .NET Framework 3.5 AND 4.8 on Windows Server 2019 Microsoft .NET Framework 4.8 on Windows 8.1 for x64-based systems Microsoft .NET Framework 4.8 on Windows 7 for 32-bit Systems Service Pack 1 Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 1909 for 32-bit Systems Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 20H2 for 32-bit Systems Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 20H2 for ARM64-based Systems Microsoft .NET Framework 3.5 AND 4.8 on Windows Server, version 20H2 (Server Core Installation) Microsoft .NET Framework 3.5 AND 4.8 on Windows 11 version 21H2 for ARM64-based Systems Microsoft .NET Framework 3.5 AND 4.8 on Windows 11 version 21H2 for x64-based Systems Microsoft .NET Framework 3.5 AND 4.7.2 on Windows 10 Version 1809 for 32-bit Systems Microsoft .NET Framework 3.5 AND 4.7.2 on Windows 10 Version 1809 for x64-based Systems Microsoft .NET Framework 3.5 AND 4.7.2 on Windows 10 Version 1809 for ARM64-based Systems Microsoft .NET Framework 3.5 AND 4.7.2 on Windows Server 2019 Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 on Windows 10 Version 1607 for 32-bit Systems Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2016 Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2016 (Server Core installation) Microsoft .NET Framework 3.5 AND 4.7.2 on Windows Server 2019 (Server Core installation) Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 on Windows 10 Version 1607 for x64-based Systems Microsoft .NET Framework 4.6 on Windows Server 2008 for 32-bit Systems Service Pack 2 Microsoft .NET Framework 2.0 Service Pack 2 on Windows Server 2008 for 32-bit Systems Service Pack 2 Microsoft .NET Framework 4.6 on Windows Server 2008 for x64-based Systems Service Pack 2 Microsoft .NET Framework 3.0 Service Pack 2 on Windows Server 2008 for 32-bit Systems Service Pack 2 Microsoft .NET Framework 3.0 Service Pack 2 on Windows Server 2008 for x64-based Systems Service Pack 2 Microsoft .NET Framework 2.0 Service Pack 2 on Windows Server 2008 for x64-based Systems Service Pack 2 Microsoft .NET Framework 3.5 on Windows 8.1 for 32-bit systems Microsoft .NET Framework 3.5 on Windows 8.1 for x64-based systems Microsoft .NET Framework 3.5 on Windows Server 2012 (Server Core installation) Microsoft .NET Framework 3.5 on Windows Server 2012 Microsoft .NET Framework 3.5 on Windows Server 2012 R2 Microsoft .NET Framework 3.5 on Windows Server 2012 R2 (Server Core installation) Microsoft .NET Framework 3.5.1 on Windows 7 for 32-bit Systems Service Pack 1 Microsoft .NET Framework 3.5.1 on Windows 7 for x64-based Systems Service Pack 1 Microsoft .NET Framework 3.5.1 on Windows Server 2008 R2 for x64-based Systems Service Pack 1 Microsoft .NET Framework 3.5.1 on Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) Microsoft .NET Framework 4.5.2 on Windows 7 for 32-bit Systems Service Pack 1 Microsoft .NET Framework 4.5.2 on Windows 7 for x64-based Systems Service Pack 1 Microsoft .NET Framework 4.5.2 on Windows 8.1 for 32-bit systems Microsoft .NET Framework 4.5.2 on Windows RT 8.1 Microsoft .NET Framework 4.5.2 on Windows 8.1 for x64-based systems Microsoft .NET Framework 4.5.2 on Windows Server 2008 for 32-bit Systems Service Pack 2 Microsoft .NET Framework 4.5.2 on Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation) Microsoft .NET Framework 4.8 on Windows 10 Version 21H1 for x64-based Systems Microsoft .NET Framework 4.8 on Windows 10 Version 21H1 for ARM64-based Systems Microsoft .NET Framework 4.8 on Windows 10 Version 21H2 for ARM64-based Systems Microsoft .NET Framework 4.8 on Windows 10 Version 21H2 for 32-bit Systems Microsoft .NET Framework 4.8 on Windows 10 Version 21H2 for x64-based Systems Microsoft .NET Framework 4.8 on Windows 10 Version 21H1 for 32-bit Systems Visual Studio Code YARP 1.0 YARP 1.1RC Azure Site Recovery VMWare to Azure Azure SDK for .Net Microsoft Office 2019 for Mac Microsoft Office Online Server Microsoft 365 Apps for Enterprise for 32-bit Systems Microsoft 365 Apps for Enterprise for 64-bit Systems Microsoft Office LTSC for Mac 2021 Microsoft Office LTSC 2021 for 64-bit editions Microsoft Office LTSC 2021 for 32-bit editions Microsoft Excel 2016 (32-bit edition) Microsoft Excel 2016 (64-bit edition) Microsoft Office 2016 (32-bit edition) Microsoft Office 2016 (64-bit edition) Microsoft Excel 2013 RT Service Pack 1 Microsoft Excel 2013 Service Pack 1 (32-bit editions) Microsoft Excel 2013 Service Pack 1 (64-bit editions) Microsoft Office 2013 RT Service Pack 1 Microsoft Office 2013 Service Pack 1 (32-bit editions) Microsoft Office 2013 Service Pack 1 (64-bit editions) Microsoft Office Web Apps Server 2013 Service Pack 1 Microsoft Excel for Android Microsoft PowerPoint for Android Microsoft Word Mobile Microsoft Excel Mobile Microsoft PowerPoint Mobile Skype for Business Server 2015 CU12 Skype for Business Server 2019 CU6 Microsoft Lync Server 2013 CU10 Microsoft SharePoint Enterprise Server 2016 Microsoft SharePoint Server 2019 Microsoft SharePoint Server Subscription Edition Microsoft SharePoint Server 2016 Microsoft SharePoint Foundation 2013 Service Pack 1 Microsoft Word for Android CBL Mariner 1.0 x64 CBL Mariner 1.0 ARM CBL Mariner 2.0 x64 CBL Mariner 2.0 ARM Windows 7 for 32-bit Systems Service Pack 1 Windows 7 for x64-based Systems Service Pack 1 Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) Windows Server 2008 R2 for x64-based Systems Service Pack 1 Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation) Windows Server 2012 Windows Server 2012 (Server Core installation) Windows 8.1 for 32-bit systems Windows 8.1 for x64-based systems Windows Server 2012 R2 Windows RT 8.1 Windows Server 2012 R2 (Server Core installation) Microsoft Office 2013 Service Pack 1 (32-bit editions) Microsoft Office 2013 Service Pack 1 (64-bit editions) Microsoft Office 2013 RT Service Pack 1 Microsoft Office Web Apps Server 2013 Service Pack 1 Microsoft SharePoint Foundation 2013 Service Pack 1 Microsoft .NET Framework 4.5.2 on Windows 7 for 32-bit Systems Service Pack 1 Microsoft .NET Framework 4.5.2 on Windows 7 for x64-based Systems Service Pack 1 Microsoft .NET Framework 4.5.2 on Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) Microsoft .NET Framework 4.5.2 on Windows Server 2008 R2 for x64-based Systems Service Pack 1 Microsoft .NET Framework 4.5.2 on Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation) Microsoft .NET Framework 4.5.2 on Windows Server 2012 Microsoft .NET Framework 4.5.2 on Windows Server 2012 (Server Core installation) Microsoft .NET Framework 4.5.2 on Windows 8.1 for 32-bit systems Microsoft .NET Framework 4.5.2 on Windows 8.1 for x64-based systems Microsoft .NET Framework 4.5.2 on Windows Server 2012 R2 Microsoft .NET Framework 4.5.2 on Windows RT 8.1 Microsoft .NET Framework 4.5.2 on Windows Server 2012 R2 (Server Core installation) Microsoft .NET Framework 4.5.2 on Windows Server 2008 for 32-bit Systems Service Pack 2 Microsoft .NET Framework 4.5.2 on Windows Server 2008 for x64-based Systems Service Pack 2 Microsoft .NET Framework 4.5.2 on Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation) Microsoft Excel 2013 Service Pack 1 (32-bit editions) Microsoft Excel 2013 Service Pack 1 (64-bit editions) Microsoft Excel 2013 RT Service Pack 1 Microsoft .NET Framework 4.6 on Windows Server 2008 for 32-bit Systems Service Pack 2 Microsoft .NET Framework 4.6 on Windows Server 2008 for x64-based Systems Service Pack 2 Windows 10 for 32-bit Systems Windows 10 for x64-based Systems Microsoft Excel 2016 (32-bit edition) Microsoft Excel 2016 (64-bit edition) Microsoft Office 2016 (32-bit edition) Microsoft Office 2016 (64-bit edition) Windows Server 2016 Windows 10 Version 1607 for 32-bit Systems Windows 10 Version 1607 for x64-based Systems Windows Server 2016 (Server Core installation) Microsoft SharePoint Server 2016 Microsoft SharePoint Enterprise Server 2016 Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.2 on Windows 7 for 32-bit Systems Service Pack 1 Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.2 on Windows 7 for x64-based Systems Service Pack 1 Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2008 R2 for x64-based Systems Service Pack 1 Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2012 Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2012 (Server Core installation) Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.2 on Windows 8.1 for 32-bit systems Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.2 on Windows 8.1 for x64-based systems Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2012 R2 Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.2 on Windows RT 8.1 Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2012 R2 (Server Core installation) Windows 10 Version 1809 for 32-bit Systems Windows 10 Version 1809 for x64-based Systems Windows 10 Version 1809 for ARM64-based Systems Windows Server 2019 Windows Server 2019 (Server Core installation) Microsoft Office 2019 for Mac Microsoft SharePoint Server 2019 Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8) Microsoft Office Online Server Visual Studio Code Microsoft .NET Framework 4.8 on Windows 7 for 32-bit Systems Service Pack 1 Microsoft .NET Framework 4.8 on Windows 7 for x64-based Systems Service Pack 1 Microsoft .NET Framework 4.8 on Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) Microsoft .NET Framework 4.8 on Windows Server 2008 R2 for x64-based Systems Service Pack 1 Microsoft .NET Framework 4.8 on Windows Server 2012 Microsoft .NET Framework 4.8 on Windows Server 2012 (Server Core installation) Microsoft .NET Framework 4.8 on Windows 8.1 for 32-bit systems Microsoft .NET Framework 4.8 on Windows 8.1 for x64-based systems Microsoft .NET Framework 4.8 on Windows Server 2012 R2 Microsoft .NET Framework 4.8 on Windows RT 8.1 Microsoft .NET Framework 4.8 on Windows Server 2012 R2 (Server Core installation) Microsoft .NET Framework 4.8 on Windows Server 2016 Microsoft .NET Framework 4.8 on Windows 10 Version 1607 for 32-bit Systems Microsoft .NET Framework 4.8 on Windows 10 Version 1607 for x64-based Systems Microsoft .NET Framework 4.8 on Windows Server 2016 (Server Core installation) Microsoft .NET Framework 4.8 on Windows 10 Version 21H1 for x64-based Systems Microsoft .NET Framework 4.8 on Windows 10 Version 21H1 for ARM64-based Systems Microsoft .NET Framework 4.8 on Windows 10 Version 21H1 for 32-bit Systems Microsoft .NET Framework 4.8 on Windows 10 Version 21H2 for 32-bit Systems Microsoft .NET Framework 4.8 on Windows 10 Version 21H2 for ARM64-based Systems Microsoft .NET Framework 4.8 on Windows 10 Version 21H2 for x64-based Systems Microsoft Edge (Chromium-based) Microsoft Dynamics 365 (on-premises) version 9.0 Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 1809 for 32-bit Systems Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 1809 for x64-based Systems Microsoft .NET Framework 3.5 AND 4.8 on Windows Server 2019 Microsoft .NET Framework 3.5 AND 4.8 on Windows Server 2019 (Server Core installation) Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 1909 for 32-bit Systems Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 1909 for x64-based Systems Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 1909 for ARM64-based Systems Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 20H2 for 32-bit Systems Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 20H2 for ARM64-based Systems Microsoft .NET Framework 3.5 AND 4.8 on Windows Server, version 20H2 (Server Core Installation) Microsoft .NET Framework 3.5 AND 4.8 on Windows Server 2022 Microsoft .NET Framework 3.5 AND 4.8 on Windows Server 2022 (Server Core installation) Microsoft .NET Framework 3.5 AND 4.8 on Windows 11 version 21H2 for x64-based Systems Microsoft .NET Framework 3.5 AND 4.8 on Windows 11 version 21H2 for ARM64-based Systems Microsoft .NET Framework 3.5 AND 4.7.2 on Windows 10 Version 1809 for 32-bit Systems Microsoft .NET Framework 3.5 AND 4.7.2 on Windows 10 Version 1809 for x64-based Systems Microsoft .NET Framework 3.5 AND 4.7.2 on Windows 10 Version 1809 for ARM64-based Systems Microsoft .NET Framework 3.5 AND 4.7.2 on Windows Server 2019 Microsoft .NET Framework 3.5 AND 4.7.2 on Windows Server 2019 (Server Core installation) Windows 10 Version 1909 for 32-bit Systems Windows 10 Version 1909 for x64-based Systems Windows 10 Version 1909 for ARM64-based Systems Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2016 Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 on Windows 10 Version 1607 for 32-bit Systems Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 on Windows 10 Version 1607 for x64-based Systems Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2016 (Server Core installation) PowerShell 7.0 Microsoft 365 Apps for Enterprise for 32-bit Systems Microsoft 365 Apps for Enterprise for 64-bit Systems Microsoft Word for Android Microsoft Visual Studio 2019 version 16.7 (includes 16.0 – 16.6) Windows 10 Version 20H2 for 32-bit Systems Windows 10 Version 20H2 for ARM64-based Systems Windows Server, version 20H2 (Server Core Installation) HEVC Video Extensions Microsoft Visual Studio 2019 version 16.9 (includes 16.0 - 16.8) Microsoft Lync Server 2013 CU10 Windows 10 Version 21H1 for x64-based Systems Windows 10 Version 21H1 for ARM64-based Systems Windows 10 Version 21H1 for 32-bit Systems Visual Studio 2019 for Mac version 8.10 Microsoft Malware Protection Engine Microsoft Dynamics 365 (on-premises) version 9.1 Windows Server 2022 Windows Server 2022 (Server Core installation) PowerShell 7.1 Windows 11 version 21H2 for x64-based Systems Windows 11 version 21H2 for ARM64-based Systems Windows 10 Version 21H2 for 32-bit Systems Windows 10 Version 21H2 for ARM64-based Systems Windows 10 Version 21H2 for x64-based Systems Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10) Microsoft Office LTSC for Mac 2021 Microsoft Office LTSC 2021 for 64-bit editions Microsoft Office LTSC 2021 for 32-bit editions Microsoft SharePoint Server Subscription Edition Microsoft Visual Studio 2022 version 17.0 PowerShell 7.2 HEVC Video Extension Azure Site Recovery VMWare to Azure Microsoft Visual Studio 2022 version 17.1 Microsoft On-Premises Data Gateway Azure SDK for .Net Skype for Business Server 2015 CU12 Skype for Business Server 2019 CU6 Windows Upgrade Assistant Microsoft Endpoint Configuration Manager YARP 1.0 YARP 1.1RC Microsoft Excel for Android Microsoft PowerPoint for Android Microsoft Word Mobile Microsoft Excel Mobile Microsoft PowerPoint Mobile Visual Studio 2022 for Mac version 17.0 Windows 11 Version 22H2 for x64-based Systems CBL Mariner 1.0 x64 CBL Mariner 1.0 ARM CBL Mariner 2.0 x64 CBL Mariner 2.0 ARM cm1 python3 3.7.13-4 on CBL Mariner 1.0 cm1 python2 2.7.18-11 on CBL Mariner 1.0 cbl2 python3 3.9.13-5 on CBL Mariner 2.0 cm1 mariadb 10.3.36-1 on CBL Mariner 1.0 cbl2 kernel 5.15.160.1-1 on CBL Mariner 2.0 azl3 rust 1.75.0-1 on Azure Linux 3.0 cbl2 qt5-qtbase 5.15.9-1 on CBL Mariner 2.0 cm1 kernel 5.10.189.1-1 on CBL Mariner 1.0 azl3 giflib 5.2.1-7 on Azure Linux 3.0 cbl2 memcached 1.6.22-1 on CBL Mariner 2.0 azl3 gcc 13.2.0-7 on Azure Linux 3.0 cbl2 mutt 2.2.12-1 on CBL Mariner 2.0 cm1 kernel 5.10.111.1-1 on CBL Mariner 1.0 cm1 qemu-kvm 4.2.0-48 on CBL Mariner 1.0 azl3 qemu 6.2.0-18 on Azure Linux 3.0 cbl2 qemu 6.2.0-13 on CBL Mariner 2.0 cbl2 mariadb 10.6.9-1 on CBL Mariner 2.0 cm1 lua 5.3.5-9 on CBL Mariner 1.0 cm1 kernel 5.10.117.1-2 on CBL Mariner 1.0 cm1 mariadb 10.3.35-1 on CBL Mariner 1.0 cbl2 vim 8.2.4925-1 on CBL Mariner 2.0 cm1 mysql 8.0.29-1 on CBL Mariner 1.0 cbl2 mysql 8.0.29-1 on CBL Mariner 2.0 cm1 kernel 5.10.116.1-1 on CBL Mariner 1.0 cbl2 kernel 5.15.37.1-2 on CBL Mariner 2.0 cm1 redis 6.2.7-1 on CBL Mariner 1.0 cbl2 redis 6.2.7-1 on CBL Mariner 2.0 cm1 freetype 2.12.1-1 on CBL Mariner 1.0 cbl2 freetype 2.12.1-1 on CBL Mariner 2.0 cm1 freetype 2.11.1-2 on CBL Mariner 1.0 cbl2 freetype 2.11.1-2 on CBL Mariner 2.0 cm1 cifs-utils 6.8-6 on CBL Mariner 1.0 cbl2 cifs-utils 6.14-2 on CBL Mariner 2.0 cm1 golang 1.18.3-1 on CBL Mariner 1.0 cbl2 golang 1.18.3-1 on CBL Mariner 2.0 cm1 vim 8.2.4774-1 on CBL Mariner 1.0 cm1 golang 1.16.15-2 on CBL Mariner 1.0 cm1 ncurses 6.3-2 on CBL Mariner 1.0 cbl2 ncurses 6.3-2 on CBL Mariner 2.0 cm1 vim 8.2.4763-1 on CBL Mariner 1.0 cbl2 mariadb 10.6.8-1 on CBL Mariner 2.0 cm1 subversion 1.14.0-5 on CBL Mariner 1.0 cbl2 subversion 1.14.2-1 on CBL Mariner 2.0 cm1 rubygem-yajl-ruby 1.4.2-1 on CBL Mariner 1.0 cbl2 rubygem-yajl-ruby 1.3.1-2 on CBL Mariner 2.0 azl3 rubygem-yajl-ruby 1.4.3-1 on Azure Linux 3.0 cm1 python-twisted 20.3.0-3 on CBL Mariner 1.0 cbl2 python-twisted 22.10.0-1 on CBL Mariner 2.0 cbl2 lua 5.4.3-2 on CBL Mariner 2.0 azl3 ntopng 5.2.1-3 on Azure Linux 3.0 cbl2 kernel 5.15.41.1-1 on CBL Mariner 2.0 cm1 busybox 1.34.1-2 on CBL Mariner 1.0 cbl2 busybox 1.35.0-2 on CBL Mariner 2.0 azl3 busybox 1.36.1-3 on Azure Linux 3.0 cm1 qemu-kvm 4.2.0-41 on CBL Mariner 1.0 cbl2 qemu 6.2.0-4 on CBL Mariner 2.0 azl3 ntopng 5.2.1-5 on Azure Linux 3.0 azl3 memcached 1.6.27-3 on Azure Linux 3.0 azl3 giflib 5.2.1-10 on Azure Linux 3.0 cbl2 opensc 0.22.0-1 on CBL Mariner 2.0 azl3 lua 5.4.6-1 on Azure Linux 3.0 cbl2 podman 4.1.1-1 on CBL Mariner 2.0 cbl2 libtiff 4.4.0-1 on CBL Mariner 2.0 cbl2 e2fsprogs 1.46.5-3 on CBL Mariner 2.0 cbl2 pesign on CBL Mariner 2.0 azl3 ceph 18.2.2-8 on Azure Linux 3.0 azl3 rust 1.75.0-14 on Azure Linux 3.0 azl3 golang 1.23.9-1 on Azure Linux 3.0 azl3 rust 1.86.0-1 on Azure Linux 3.0 azl3 python-tensorboard 2.16.2-6 on Azure Linux 3.0 azl3 golang 1.24.3-1 on Azure Linux 3.0 cbl2 cri-o 1.21.7-3 on CBL Mariner 2.0 cbl2 cri-o 1.21.7-3 on CBL-Mariner 2.0 azl3 busybox 1.36.1-12 on Azure Linux 3.0 azl3 rubygem-yajl-ruby 1.4.1-1 on Azure Linux 3.0 azl3 glide 0.13.3-24 on Azure Linux 3.0 cbl2 ceph 16.2.10-10 on CBL Mariner 2.0 cbl2 ceph 16.2.10-11 on CBL Mariner 2.0 azl3 golang 1.27.0-1 on Azure Linux 3.0 azl3 golang 1.27.1-1 on Azure Linux 3.0 Microsoft .NET Framework 3.5 on Windows Server 2012 Microsoft .NET Framework 3.5 on Windows Server 2012 (Server Core installation) Microsoft .NET Framework 3.5 on Windows 8.1 for 32-bit systems Microsoft .NET Framework 3.5 on Windows 8.1 for x64-based systems Microsoft .NET Framework 3.5 on Windows Server 2012 R2 Microsoft .NET Framework 3.5 on Windows Server 2012 R2 (Server Core installation) Microsoft .NET Framework 3.0 Service Pack 2 on Windows Server 2008 for 32-bit Systems Service Pack 2 Microsoft .NET Framework 3.0 Service Pack 2 on Windows Server 2008 for x64-based Systems Service Pack 2 Microsoft .NET Framework 2.0 Service Pack 2 on Windows Server 2008 for 32-bit Systems Service Pack 2 Microsoft .NET Framework 2.0 Service Pack 2 on Windows Server 2008 for x64-based Systems Service Pack 2 Windows Server 2008 for 32-bit Systems Service Pack 2 Windows Server 2008 for x64-based Systems Service Pack 2 Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation) Microsoft .NET Framework 3.5.1 on Windows 7 for 32-bit Systems Service Pack 1 Microsoft .NET Framework 3.5.1 on Windows 7 for x64-based Systems Service Pack 1 Microsoft .NET Framework 3.5.1 on Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) Microsoft .NET Framework 3.5.1 on Windows Server 2008 R2 for x64-based Systems Service Pack 1 In Python (aka CPython) up to 3.10.8 the mailcap module does not add escape characters into commands discovered in the system mailcap file. This may allow attackers to inject shell commands into applications that call mailcap.findmatch with untrusted input (if they lack validation of user-provided filenames or arguments). The fix is also back-ported to 3.7 3.8 3.9 <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner mitre Yes CVE-2015-20107 Improper Neutralization of Special Elements used in a Command ('Command Injection') 16821-16820 16822-16820 16824-16823 16821-16820 16822-16820 16824-16823 Important 16821-16820 Important 16822-16820 Important 16824-16823 7.6 7.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L 16821-16820 7.6 7.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L 16822-16820 7.6 7.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L 16824-16823 CBL-Mariner Releases 16821-16820 No Security Update 3.7.13-4 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 16821-16820 CBL-Mariner Releases CBL-Mariner Releases 16822-16820 No Security Update 2.7.18-11 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 16822-16820 CBL-Mariner Releases CBL-Mariner Releases 16824-16823 No Security Update 3.9.13-5 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 16824-16823 CBL-Mariner Releases 1.0 2022-04-22T00:00:00 <p>Information published.</p> It was discovered that the update for the virt:rhel module in the RHSA-2020:4676 (https://access.redhat.com/errata/RHSA-2020:4676) erratum released as part of Red Hat Enterprise Linux 8.3 failed to include the fix for the qemu-kvm component issue CVE-2020-10756 which was previously corrected in virt:rhel/qemu-kvm via erratum RHSA-2020:4059 (https://access.redhat.com/errata/RHSA-2020:4059). CVE-2021-20295 was assigned to that Red Hat specific security regression. For more details about the original security issue CVE-2020-10756 refer to bug 1835986 or the CVE page: https://access.redhat.com/security/cve/CVE-2020-10756. <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner redhat Yes CVE-2021-20295 Out-of-bounds Read 18533-16820 18533-16820 Moderate 18533-16820 6.5 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N 18533-16820 CBL-Mariner Releases 18533-16820 No Security Update 4.2.0-48 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 18533-16820 CBL-Mariner Releases 1.0 2022-04-09T00:00:00 <p>Information published.</p> Apache Subversion SVN authz protected copyfrom paths regression <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner apache Yes CVE-2021-28544 Exposure of Sensitive Information to an Unauthorized Actor 18743-16820 18744-16823 18743-16820 18744-16823 Moderate 18743-16820 Moderate 18744-16823 4.3 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N 18743-16820 4.3 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N 18744-16823 CBL-Mariner Releases 18743-16820 No Security Update 1.14.0-5 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 18743-16820 CBL-Mariner Releases CBL-Mariner Releases 18744-16823 No Security Update 1.14.2-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 18744-16823 CBL-Mariner Releases 1.0 2022-04-21T00:00:00 <p>Information published.</p> An unauthorized access to the execution of the setuid file with capabilities flaw in the Linux kernel OverlayFS subsystem was found in the way user copying a capable file from a nosuid mount into another mount. A local user could use this flaw to escalate their privileges on the system. <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner redhat Yes CVE-2021-3847 Improper Preservation of Permissions 17936-16820 17292-16823 17936-16820 17292-16823 Important 17936-16820 Important 17292-16823 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 17936-16820 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 17292-16823 CBL-Mariner Releases 17936-16820 No Security Update 5.10.189.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17936-16820 CBL-Mariner Releases CBL-Mariner Releases 17292-16823 No Security Update 5.15.160.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17292-16823 CBL-Mariner Releases 1.2 2024-12-03T00:00:00 <p>Added kernel to CBL-Mariner 2.0</p> 1.0 2024-07-12T00:00:00 <p>Information published.</p> 1.1 2024-09-11T00:00:00 <p>Information published.</p> A flaw was found in the QXL display device emulation in QEMU. An integer overflow in the cursor_alloc() function can lead to the allocation of a small cursor object followed by a subsequent heap-based buffer overflow. This flaw allows a malicious privileged guest user to crash the QEMU process on the host or potentially execute arbitrary code within the context of the QEMU process. <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner redhat Yes CVE-2021-4206 Integer Overflow or Wraparound 18879-16820 18881-16823 18535-17084 18879-16820 18881-16823 18535-17084 Important 18879-16820 Important 18881-16823 Important 18535-17084 8.2 8.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H 18879-16820 8.2 8.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H 18881-16823 8.2 8.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H 18535-17084 CBL-Mariner Releases 18879-16820 No Security Update 4.2.0-41 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 18879-16820 CBL-Mariner Releases CBL-Mariner Releases 18881-16823 No Security Update 6.2.0-4 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 18881-16823 CBL-Mariner Releases CBL-Mariner Releases 18535-17084 No Security Update 6.2.0-18 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 18535-17084 CBL-Mariner Releases 1.0 2024-08-05T00:00:00 <p>Information published.</p> 1.1 2024-08-06T00:00:00 <p>Information published.</p> 1.2 2024-08-07T00:00:00 <p>Information published.</p> 1.3 2024-08-08T00:00:00 <p>Information published.</p> 1.4 2024-08-09T00:00:00 <p>Information published.</p> 1.5 2024-08-10T00:00:00 <p>Information published.</p> 1.6 2024-08-11T00:00:00 <p>Information published.</p> 1.7 2024-08-12T00:00:00 <p>Information published.</p> 1.8 2024-08-16T00:00:00 <p>Information published.</p> 1.9 2024-08-17T00:00:00 <p>Information published.</p> 2.0 2024-08-18T00:00:00 <p>Information published.</p> 2.1 2024-08-19T00:00:00 <p>Information published.</p> 2.2 2024-08-20T00:00:00 <p>Information published.</p> 2.3 2024-08-21T00:00:00 <p>Information published.</p> 2.4 2024-08-22T00:00:00 <p>Information published.</p> 2.5 2024-08-23T00:00:00 <p>Information published.</p> 2.6 2024-08-24T00:00:00 <p>Information published.</p> 2.7 2024-08-25T00:00:00 <p>Information published.</p> 2.8 2024-08-26T00:00:00 <p>Information published.</p> 2.9 2024-08-27T00:00:00 <p>Information published.</p> 3.0 2024-08-28T00:00:00 <p>Information published.</p> 3.1 2024-08-29T00:00:00 <p>Information published.</p> 3.2 2024-08-30T00:00:00 <p>Information published.</p> 3.3 2024-08-31T00:00:00 <p>Information published.</p> 3.4 2024-09-01T00:00:00 <p>Information published.</p> 3.5 2024-09-02T00:00:00 <p>Information published.</p> 3.6 2024-09-03T00:00:00 <p>Information published.</p> 3.7 2024-09-05T00:00:00 <p>Information published.</p> 3.8 2024-09-06T00:00:00 <p>Information published.</p> 3.9 2024-09-07T00:00:00 <p>Information published.</p> 4.0 2024-09-08T00:00:00 <p>Information published.</p> 4.1 2024-09-11T00:00:00 <p>Information published.</p> A flaw was found in the QXL display device emulation in QEMU. A double fetch of guest controlled values `cursor->header.width` and `cursor->header.height` can lead to the allocation of a small cursor object followed by a subsequent heap-based buffer overflow. A malicious privileged guest user could use this flaw to crash the QEMU process on the host or potentially execute arbitrary code within the context of the QEMU process. <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner redhat Yes CVE-2021-4207 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') 18533-16820 18612-16823 18535-17084 18533-16820 18612-16823 18535-17084 Important 18533-16820 Important 18612-16823 Important 18535-17084 8.2 8.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H 18533-16820 8.2 8.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H 18612-16823 8.2 8.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H 18535-17084 CBL-Mariner Releases 18533-16820 No Security Update 4.2.0-48 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 18533-16820 CBL-Mariner Releases CBL-Mariner Releases 18612-16823 No Security Update 6.2.0-13 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 18612-16823 CBL-Mariner Releases CBL-Mariner Releases 18535-17084 No Security Update 6.2.0-18 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 18535-17084 CBL-Mariner Releases 1.8 2024-08-16T00:00:00 <p>Information published.</p> 1.0 2024-08-05T00:00:00 <p>Information published.</p> 1.1 2024-08-06T00:00:00 <p>Information published.</p> 1.2 2024-08-07T00:00:00 <p>Information published.</p> 1.3 2024-08-08T00:00:00 <p>Information published.</p> 1.4 2024-08-09T00:00:00 <p>Information published.</p> 1.5 2024-08-10T00:00:00 <p>Information published.</p> 1.6 2024-08-11T00:00:00 <p>Information published.</p> 1.7 2024-08-12T00:00:00 <p>Information published.</p> 1.9 2024-08-17T00:00:00 <p>Information published.</p> 2.0 2024-08-18T00:00:00 <p>Information published.</p> 2.1 2024-08-19T00:00:00 <p>Information published.</p> 2.2 2024-08-20T00:00:00 <p>Information published.</p> 2.3 2024-08-21T00:00:00 <p>Information published.</p> 2.4 2024-08-22T00:00:00 <p>Information published.</p> 2.5 2024-08-23T00:00:00 <p>Information published.</p> 2.6 2024-08-24T00:00:00 <p>Information published.</p> 2.7 2024-08-25T00:00:00 <p>Information published.</p> 2.8 2024-08-26T00:00:00 <p>Information published.</p> 2.9 2024-08-27T00:00:00 <p>Information published.</p> 3.0 2024-08-28T00:00:00 <p>Information published.</p> 3.1 2024-08-29T00:00:00 <p>Information published.</p> 3.2 2024-08-30T00:00:00 <p>Information published.</p> 3.3 2024-08-31T00:00:00 <p>Information published.</p> 3.4 2024-09-01T00:00:00 <p>Information published.</p> 3.5 2024-09-02T00:00:00 <p>Information published.</p> 3.6 2024-09-03T00:00:00 <p>Information published.</p> 3.7 2024-09-05T00:00:00 <p>Information published.</p> 3.8 2024-09-06T00:00:00 <p>Information published.</p> 3.9 2024-09-07T00:00:00 <p>Information published.</p> 4.0 2024-09-08T00:00:00 <p>Information published.</p> 4.1 2024-09-11T00:00:00 <p>Information published.</p> A heap double free issue was found in Opensc before version 0.22.0 in sc_pkcs15_free_tokeninfo. <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner redhat Yes CVE-2021-42778 Double Free 19202-16823 19202-16823 Moderate 19202-16823 5.3 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L 19202-16823 CBL-Mariner Releases 19202-16823 No Security Update 0.22.0-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 19202-16823 CBL-Mariner Releases 1.0 2022-04-26T00:00:00 <p>Information published.</p> A heap use after free issue was found in Opensc before version 0.22.0 in sc_file_valid. <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner redhat Yes CVE-2021-42779 Use After Free 19202-16823 19202-16823 Moderate 19202-16823 5.3 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L 19202-16823 CBL-Mariner Releases 19202-16823 No Security Update 0.22.0-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 19202-16823 CBL-Mariner Releases 1.0 2022-04-26T00:00:00 <p>Information published.</p> A use after return issue was found in Opensc before version 0.22.0 in insert_pin function that could potentially crash programs using the library. <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner redhat Yes CVE-2021-42780 Unchecked Return Value 19202-16823 19202-16823 Moderate 19202-16823 5.3 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L 19202-16823 CBL-Mariner Releases 19202-16823 No Security Update 0.22.0-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 19202-16823 CBL-Mariner Releases 1.0 2022-04-26T00:00:00 <p>Information published.</p> Heap buffer overflow issues were found in Opensc before version 0.22.0 in pkcs15-oberthur.c that could potentially crash programs using the library. <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner redhat Yes CVE-2021-42781 Out-of-bounds Write 19202-16823 19202-16823 Moderate 19202-16823 5.3 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L 19202-16823 CBL-Mariner Releases 19202-16823 No Security Update 0.22.0-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 19202-16823 CBL-Mariner Releases 1.0 2022-04-26T00:00:00 <p>Information published.</p> Stack buffer overflow issues were found in Opensc before version 0.22.0 in various places that could potentially crash programs using the library. <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner redhat Yes CVE-2021-42782 Out-of-bounds Write 19202-16823 19202-16823 Moderate 19202-16823 5.3 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L 19202-16823 CBL-Mariner Releases 19202-16823 No Security Update 0.22.0-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 19202-16823 CBL-Mariner Releases 1.0 2022-04-26T00:00:00 <p>Information published.</p> A flaw was found in the Linux kernel in linux/net/netfilter/nf_tables_api.c of the netfilter subsystem. This flaw allows a local user to cause an out-of-bounds write issue. <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner redhat Yes CVE-2022-1015 Out-of-bounds Write 18719-16820 18720-16823 18719-16820 18720-16823 Moderate 18719-16820 Moderate 18720-16823 6.6 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H 18719-16820 6.6 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H 18720-16823 CBL-Mariner Releases 18719-16820 No Security Update - https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 18719-16820 CBL-Mariner Releases CBL-Mariner Releases 18720-16823 No Security Update 5.15.37.1-2 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 18720-16823 CBL-Mariner Releases 1.0 2022-05-12T00:00:00 <p>Information published.</p> A use-after-free flaw was found in the Linux kernel’s sound subsystem in the way a user triggers concurrent calls of PCM hw_params. The hw_free ioctls or similar race condition happens inside ALSA PCM for other ioctls. This flaw allows a local user to crash or potentially escalate their privileges on the system. <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner redhat Yes CVE-2022-1048 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') 18719-16820 18720-16823 18719-16820 18720-16823 Important 18719-16820 Important 18720-16823 7.0 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H 18719-16820 7.0 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H 18720-16823 CBL-Mariner Releases 18719-16820 No Security Update - https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 18719-16820 CBL-Mariner Releases CBL-Mariner Releases 18720-16823 No Security Update 5.15.37.1-2 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 18720-16823 CBL-Mariner Releases 1.0 2022-05-12T00:00:00 <p>Information published.</p> A use-after-free vulnerability was found in the Linux kernel in drivers/net/hamradio. This flaw allows a local attacker with a user privilege to cause a denial of service (DOS) when the mkiss or sixpack device is detached and reclaim resources early. <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner redhat Yes CVE-2022-1195 Use After Free 18719-16820 18720-16823 18719-16820 18720-16823 Moderate 18719-16820 Moderate 18720-16823 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 18719-16820 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 18720-16823 CBL-Mariner Releases 18719-16820 No Security Update - https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 18719-16820 CBL-Mariner Releases CBL-Mariner Releases 18720-16823 No Security Update 5.15.37.1-2 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 18720-16823 CBL-Mariner Releases 1.0 2022-05-12T00:00:00 <p>Information published.</p> NULL Pointer Dereference in mrb_vm_exec with super in mruby/mruby <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner @huntrdev Yes CVE-2022-1201 NULL Pointer Dereference 17735-17084 17735-17084 Moderate 17735-17084 7.1 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H 17735-17084 CBL-Mariner Releases 17735-17084 No Security Update 1.75.0-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17735-17084 CBL-Mariner Releases 1.0 2025-09-03T20:52:26 <p>Information published.</p> 1.1 2026-02-18T14:29:44 <p>Information published.</p> LibTIFF tiff2ps resource consumption <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner VulDB Yes CVE-2022-1210 Improper Resource Shutdown or Release 19487-16823 19487-16823 Moderate 19487-16823 6.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H 19487-16823 CBL-Mariner Releases 19487-16823 No Security Update 4.4.0-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 19487-16823 CBL-Mariner Releases 1.0 2022-04-12T00:00:00 <p>Information published.</p> A privilege escalation flaw was found in Podman. This flaw allows an attacker to publish a malicious image to a public registry. Once this image is downloaded by a potential victim the vulnerability is triggered after a user runs the 'podman top' command. This action gives the attacker access to the host filesystem leading to information disclosure or denial of service. <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner redhat Yes CVE-2022-1227 Improper Privilege Management 19477-16823 19477-16823 Important 19477-16823 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 19477-16823 CBL-Mariner Releases 19477-16823 No Security Update 4.1.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 19477-16823 CBL-Mariner Releases 1.0 2022-05-12T00:00:00 <p>Information published.</p> A NULL pointer dereference flaw was found in pesign's cms_set_pw_data() function of the cms_common.c file. The function fails to handle the NULL pwdata invocation from daemon.c, which leads to an explicit NULL dereference and crash on all attempts to daemonize pesign. <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner redhat Yes CVE-2022-1249 NULL Pointer Dereference 19650-16823 19650-16823 Low 19650-16823 3.3 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L 19650-16823 CBL-Mariner Releases 19650-16823 No Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 19650-16823 CBL-Mariner Releases 1.0 2025-10-01T23:11:13 <p>Information published.</p> An out-of-bounds read/write vulnerability was found in e2fsprogs 1.46.5. This issue leads to a segmentation fault and possibly arbitrary code execution via a specially crafted filesystem. <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner redhat Yes CVE-2022-1304 Out-of-bounds Read 19488-16823 19488-16823 Important 19488-16823 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 19488-16823 CBL-Mariner Releases 19488-16823 No Security Update 1.46.5-3 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 19488-16823 CBL-Mariner Releases 1.0 2022-04-22T00:00:00 <p>Information published.</p> Buffer Overflow in uudecoder in Mutt affecting all versions starting from 0.94.13 before 2.2.3 allows read past end of input line <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner GitLab Yes CVE-2022-1328 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') 18316-16823 18316-16823 Moderate 18316-16823 5.3 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N 18316-16823 CBL-Mariner Releases 18316-16823 No Security Update 2.2.12-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 18316-16823 CBL-Mariner Releases 1.0 2022-04-23T00:00:00 <p>Information published.</p> A vulnerability was found in the pfkey_register function in net/key/af_key.c in the Linux kernel. This flaw allows a local unprivileged user to gain access to kernel memory leading to a system crash or a leak of internal kernel information. <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner redhat Yes CVE-2022-1353 Exposure of Sensitive Information to an Unauthorized Actor 18719-16820 18720-16823 18719-16820 18720-16823 Important 18719-16820 Important 18720-16823 7.1 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H 18719-16820 7.1 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H 18720-16823 CBL-Mariner Releases 18719-16820 No Security Update - https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 18719-16820 CBL-Mariner Releases CBL-Mariner Releases 18720-16823 No Security Update 5.15.37.1-2 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 18720-16823 CBL-Mariner Releases 1.0 2022-05-12T00:00:00 <p>Information published.</p> global heap buffer overflow in skip_range in vim/vim <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner @huntrdev Yes CVE-2022-1381 Heap-based Buffer Overflow 18741-16820 18706-16823 18741-16820 18706-16823 Important 18741-16820 Important 18706-16823 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 18741-16820 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 18706-16823 CBL-Mariner Releases 18741-16820 No Security Update 8.2.4763-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 18741-16820 CBL-Mariner Releases CBL-Mariner Releases 18706-16823 No Security Update 8.2.4925-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 18706-16823 CBL-Mariner Releases 1.0 2022-04-27T00:00:00 <p>Information published.</p> Use of Out-of-range Pointer Offset in vim/vim <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner @huntrdev Yes CVE-2022-1420 Use of Out-of-range Pointer Offset 18737-16820 18706-16823 18737-16820 18706-16823 Moderate 18737-16820 Moderate 18706-16823 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H 18737-16820 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H 18706-16823 CBL-Mariner Releases 18737-16820 No Security Update 8.2.4774-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 18737-16820 CBL-Mariner Releases CBL-Mariner Releases 18706-16823 No Security Update 8.2.4925-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 18706-16823 CBL-Mariner Releases 1.0 2022-04-29T00:00:00 <p>Information published.</p> Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.28 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H). <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner oracle Yes CVE-2022-21412 18713-16820 18714-16823 18713-16820 18714-16823 Moderate 18713-16820 Moderate 18714-16823 4.9 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H 18713-16820 4.9 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H 18714-16823 CBL-Mariner Releases 18713-16820 18714-16823 No Security Update 8.0.29-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 18713-16820 18714-16823 CBL-Mariner Releases 1.0 2022-04-28T00:00:00 <p>Information published.</p> Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 5.7.37 and prior and 8.0.28 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H). <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner oracle Yes CVE-2022-21417 18713-16820 18714-16823 18713-16820 18714-16823 Moderate 18713-16820 Moderate 18714-16823 4.9 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H 18713-16820 4.9 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H 18714-16823 CBL-Mariner Releases 18713-16820 18714-16823 No Security Update 8.0.29-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 18713-16820 18714-16823 CBL-Mariner Releases 1.0 2022-04-28T00:00:00 <p>Information published.</p> Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). Supported versions that are affected are 8.0.28 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server as well as unauthorized update insert or delete access to some of MySQL Server accessible data. CVSS 3.1 Base Score 5.5 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H). <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner oracle Yes CVE-2022-21425 18713-16820 18714-16823 18713-16820 18714-16823 Moderate 18713-16820 Moderate 18714-16823 5.5 5.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H 18713-16820 5.5 5.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H 18714-16823 CBL-Mariner Releases 18713-16820 18714-16823 No Security Update 8.0.29-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 18713-16820 18714-16823 CBL-Mariner Releases 1.0 2022-04-28T00:00:00 <p>Information published.</p> Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: FTS). Supported versions that are affected are 5.7.37 and prior and 8.0.28 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H). <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner oracle Yes CVE-2022-21427 18704-16820 18713-16820 18714-16823 18704-16820 18713-16820 18714-16823 Moderate 18704-16820 Moderate 18713-16820 Moderate 18714-16823 4.9 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H 18704-16820 4.9 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H 18713-16820 4.9 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H 18714-16823 CBL-Mariner Releases 18704-16820 No Security Update 10.3.35-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 18704-16820 CBL-Mariner Releases CBL-Mariner Releases 18713-16820 18714-16823 No Security Update 8.0.29-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 18713-16820 18714-16823 CBL-Mariner Releases 1.0 2022-04-28T00:00:00 <p>Information published.</p> 1.1 2022-05-13T00:00:00 <p>Added mariadb to CBL-Mariner 1.0</p> Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). Supported versions that are affected are 5.7.37 and prior and 8.0.28 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.4 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H). <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner oracle Yes CVE-2022-21444 18713-16820 18714-16823 18713-16820 18714-16823 Moderate 18713-16820 Moderate 18714-16823 4.4 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H 18713-16820 4.4 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H 18714-16823 CBL-Mariner Releases 18713-16820 18714-16823 No Security Update 8.0.29-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 18713-16820 18714-16823 CBL-Mariner Releases 1.0 2022-04-29T00:00:00 <p>Information published.</p> Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 5.7.37 and prior and 8.0.28 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.4 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H). <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner oracle Yes CVE-2022-21451 18714-16823 18714-16823 Moderate 18714-16823 4.4 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H 18714-16823 CBL-Mariner Releases 18714-16823 No Security Update 8.0.29-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 18714-16823 CBL-Mariner Releases 1.0 2022-05-03T00:00:00 <p>Information published.</p> Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Group Replication Plugin). Supported versions that are affected are 5.7.37 and prior and 8.0.28 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H). <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner oracle Yes CVE-2022-21454 18713-16820 18714-16823 18713-16820 18714-16823 Moderate 18713-16820 Moderate 18714-16823 6.5 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 18713-16820 6.5 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 18714-16823 CBL-Mariner Releases 18713-16820 18714-16823 No Security Update 8.0.29-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 18713-16820 18714-16823 CBL-Mariner Releases 1.0 2022-04-28T00:00:00 <p>Information published.</p> Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Logging). Supported versions that are affected are 5.7.37 and prior and 8.0.28 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all MySQL Server accessible data. CVSS 3.1 Base Score 4.4 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N). <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner oracle Yes CVE-2022-21460 18713-16820 18714-16823 18713-16820 18714-16823 Moderate 18713-16820 Moderate 18714-16823 4.4 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N 18713-16820 4.4 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N 18714-16823 CBL-Mariner Releases 18713-16820 18714-16823 No Security Update 8.0.29-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 18713-16820 18714-16823 CBL-Mariner Releases 1.0 2022-04-28T00:00:00 <p>Information published.</p> Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.28 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server as well as unauthorized update insert or delete access to some of MySQL Server accessible data. CVSS 3.1 Base Score 5.5 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H). <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner oracle Yes CVE-2022-21478 18714-16823 18714-16823 Moderate 18714-16823 5.5 5.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H 18714-16823 CBL-Mariner Releases 18714-16823 No Security Update 8.0.29-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 18714-16823 CBL-Mariner Releases 1.0 2022-05-03T00:00:00 <p>Information published.</p> Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.28 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server and unauthorized read access to a subset of MySQL Server accessible data. CVSS 3.1 Base Score 5.5 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:H). <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner oracle Yes CVE-2022-21479 18714-16823 18714-16823 Moderate 18714-16823 5.5 5.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:H 18714-16823 CBL-Mariner Releases 18714-16823 No Security Update 8.0.29-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 18714-16823 CBL-Mariner Releases 1.0 2022-05-03T00:00:00 <p>Information published.</p> Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 8.0.28 and prior. Difficult to exploit vulnerability allows high privileged attacker with access to the physical communication segment attached to the hardware where the MySQL Cluster executes to compromise MySQL Cluster. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of MySQL Cluster. CVSS 3.1 Base Score 6.3 (Confidentiality Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H). <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner oracle Yes CVE-2022-21482 18714-16823 18714-16823 Moderate 18714-16823 6.3 6.3 CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H 18714-16823 CBL-Mariner Releases 18714-16823 No Security Update 8.0.29-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 18714-16823 CBL-Mariner Releases 1.0 2022-05-03T00:00:00 <p>Information published.</p> Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.4.35 and prior 7.5.25 and prior 7.6.21 and prior and 8.0.28 and prior. Difficult to exploit vulnerability allows high privileged attacker with access to the physical communication segment attached to the hardware where the MySQL Cluster executes to compromise MySQL Cluster. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of MySQL Cluster. CVSS 3.1 Base Score 6.3 (Confidentiality Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H). <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner oracle Yes CVE-2022-21483 18714-16823 18714-16823 Moderate 18714-16823 6.3 6.3 CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H 18714-16823 CBL-Mariner Releases 18714-16823 No Security Update 8.0.29-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 18714-16823 CBL-Mariner Releases 1.0 2022-05-03T00:00:00 <p>Information published.</p> Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.4.35 and prior 7.5.25 and prior 7.6.21 and prior and 8.0.28 and prior. Difficult to exploit vulnerability allows high privileged attacker with access to the physical communication segment attached to the hardware where the MySQL Cluster executes to compromise MySQL Cluster. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of MySQL Cluster accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of MySQL Cluster. CVSS 3.1 Base Score 2.9 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:U/C:L/I:N/A:L). <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner oracle Yes CVE-2022-21484 18714-16823 18714-16823 Low 18714-16823 2.9 2.9 CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:U/C:L/I:N/A:L 18714-16823 CBL-Mariner Releases 18714-16823 No Security Update 8.0.29-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 18714-16823 CBL-Mariner Releases 1.0 2022-05-03T00:00:00 <p>Information published.</p> Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.4.35 and prior 7.5.25 and prior 7.6.21 and prior and 8.0.28 and prior. Difficult to exploit vulnerability allows high privileged attacker with access to the physical communication segment attached to the hardware where the MySQL Cluster executes to compromise MySQL Cluster. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of MySQL Cluster accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of MySQL Cluster. CVSS 3.1 Base Score 2.9 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:U/C:L/I:N/A:L). <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner oracle Yes CVE-2022-21485 18714-16823 18714-16823 Low 18714-16823 2.9 2.9 CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:U/C:L/I:N/A:L 18714-16823 CBL-Mariner Releases 18714-16823 No Security Update 8.0.29-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 18714-16823 CBL-Mariner Releases 1.0 2022-05-03T00:00:00 <p>Information published.</p> Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.4.35 and prior 7.5.25 and prior 7.6.21 and prior and 8.0.28 and prior. Difficult to exploit vulnerability allows high privileged attacker with access to the physical communication segment attached to the hardware where the MySQL Cluster executes to compromise MySQL Cluster. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of MySQL Cluster accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of MySQL Cluster. CVSS 3.1 Base Score 2.9 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:U/C:L/I:N/A:L). <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner oracle Yes CVE-2022-21486 18714-16823 18714-16823 Low 18714-16823 2.9 2.9 CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:U/C:L/I:N/A:L 18714-16823 CBL-Mariner Releases 18714-16823 No Security Update 8.0.29-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 18714-16823 CBL-Mariner Releases 1.0 2022-05-04T00:00:00 <p>Information published.</p> Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.4.35 and prior 7.5.25 and prior 7.6.21 and prior and 8.0.28 and prior. Difficult to exploit vulnerability allows high privileged attacker with access to the physical communication segment attached to the hardware where the MySQL Cluster executes to compromise MySQL Cluster. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of MySQL Cluster. CVSS 3.1 Base Score 6.3 (Confidentiality Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H). <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner oracle Yes CVE-2022-21489 18713-16820 18714-16823 18713-16820 18714-16823 Moderate 18713-16820 Moderate 18714-16823 6.3 6.3 CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H 18713-16820 6.3 6.3 CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H 18714-16823 CBL-Mariner Releases 18713-16820 18714-16823 No Security Update 8.0.29-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 18713-16820 18714-16823 CBL-Mariner Releases 1.0 2022-04-29T00:00:00 <p>Information published.</p> Apache Subversion mod_dav_svn is vulnerable to memory corruption <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner apache Yes CVE-2022-24070 Use After Free 18743-16820 18744-16823 18743-16820 18744-16823 Important 18743-16820 Important 18744-16823 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 18743-16820 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 18744-16823 CBL-Mariner Releases 18743-16820 No Security Update 1.14.0-5 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 18743-16820 CBL-Mariner Releases CBL-Mariner Releases 18744-16823 No Security Update 1.14.2-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 18744-16823 CBL-Mariner Releases 1.0 2022-04-21T00:00:00 <p>Information published.</p> encoding/pem in Go before 1.17.9 and 1.18.x before 1.18.1 has a Decode stack overflow via a large amount of PEM data. <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner mitre Yes CVE-2022-24675 Uncontrolled Recursion 18738-16820 18736-16823 18738-16820 18736-16823 Important 18738-16820 Important 18736-16823 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 18738-16820 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 18736-16823 CBL-Mariner Releases 18738-16820 No Security Update 1.16.15-2 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 18738-16820 CBL-Mariner Releases CBL-Mariner Releases 18736-16823 No Security Update 1.18.3-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 18736-16823 CBL-Mariner Releases 1.0 2022-04-29T00:00:00 <p>Information published.</p> Lua scripts can be manipulated to overcome ACL rules in Redis <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner GitHub_M Yes CVE-2022-24735 Improper Control of Generation of Code (&#39;Code Injection&#39;) 18721-16820 18722-16823 20664-17086 18721-16820 18722-16823 20664-17086 Important 18721-16820 Important 18722-16823 Low 20664-17086 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 18721-16820 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 18722-16823 3.9 3.9 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N 20664-17086 CBL-Mariner Releases 18721-16820 18722-16823 No Security Update 6.2.7-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 18721-16820 18722-16823 CBL-Mariner Releases 3.0 2025-12-06T14:40:47 <p>Information published.</p> 5.0 2026-08-17T20:46:58 <p>Information published.</p> 1.0 2022-05-10T00:00:00 <p>Information published.</p> 1.1 2022-05-11T00:00:00 <p>Added redis to CBL-Mariner 1.0</p> 2.0 2025-12-03T01:01:20 <p>Information published.</p> 4.0 2025-12-09T01:36:44 <p>Information published.</p> A Malformed Lua script can crash Redis <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner GitHub_M Yes CVE-2022-24736 NULL Pointer Dereference 18721-16820 18722-16823 20664-17086 18721-16820 18722-16823 20664-17086 Moderate 18721-16820 Moderate 18722-16823 Low 20664-17086 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 18721-16820 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 18722-16823 3.3 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L 20664-17086 CBL-Mariner Releases 18721-16820 18722-16823 No Security Update 6.2.7-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 18721-16820 18722-16823 CBL-Mariner Releases 3.0 2025-12-06T14:40:52 <p>Information published.</p> 4.0 2025-12-09T01:36:49 <p>Information published.</p> 5.0 2026-08-17T21:22:58 <p>Information published.</p> 1.0 2022-05-10T00:00:00 <p>Information published.</p> 1.1 2022-05-11T00:00:00 <p>Added redis to CBL-Mariner 1.0</p> 2.0 2025-12-03T01:01:25 <p>Information published.</p> Buffer Overflow and Integer Overflow in yajl-ruby <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner GitHub_M Yes CVE-2022-24795 Heap-based Buffer Overflow 20075-17084 18745-16820 18746-16823 18747-17084 20075-17084 18745-16820 18746-16823 18747-17084 Important 20075-17084 Important 18745-16820 Important 18746-16823 Important 18747-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 20075-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 18745-16820 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 18746-16823 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 18747-17084 CBL-Mariner Releases 20075-17084 18747-17084 No Security Update 1.4.3-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 20075-17084 18747-17084 CBL-Mariner Releases CBL-Mariner Releases 18745-16820 No Security Update 1.4.2-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 18745-16820 CBL-Mariner Releases CBL-Mariner Releases 18746-16823 No Security Update 1.3.1-2 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 18746-16823 CBL-Mariner Releases 1.0 2022-04-19T00:00:00 <p>Information published.</p> 1.1 2022-08-17T00:00:00 <p>Added rubygem-yajl-ruby to CBL-Mariner 2.0</p> 1.2 2024-08-29T00:00:00 <p>Information published.</p> 1.3 2024-08-30T00:00:00 <p>Information published.</p> 1.4 2024-08-31T00:00:00 <p>Information published.</p> 1.5 2024-09-01T00:00:00 <p>Information published.</p> 1.6 2024-09-02T00:00:00 <p>Information published.</p> 1.7 2024-09-03T00:00:00 <p>Information published.</p> 1.8 2024-09-05T00:00:00 <p>Information published.</p> 1.9 2024-09-06T00:00:00 <p>Information published.</p> 2.0 2024-09-07T00:00:00 <p>Information published.</p> 2.1 2024-09-08T00:00:00 <p>Information published.</p> 2.2 2024-09-11T00:00:00 <p>Information published.</p> 2.3 2026-02-18T01:52:49 <p>Information published.</p> HTTP Request Smuggling in twisted.web <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner GitHub_M Yes CVE-2022-24801 Inconsistent Interpretation of HTTP Requests (&#39;HTTP Request/Response Smuggling&#39;) 18748-16820 18749-16823 18748-16820 18749-16823 Important 18748-16820 Important 18749-16823 8.1 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H 18748-16820 8.1 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H 18749-16823 CBL-Mariner Releases 18748-16820 No Security Update 20.3.0-3 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 18748-16820 CBL-Mariner Releases CBL-Mariner Releases 18749-16823 No Security Update 22.10.0-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 18749-16823 CBL-Mariner Releases 1.0 2022-04-16T00:00:00 <p>Information published.</p> PHP-Memcached v2.2.0 and below contains an improper NULL termination which allows attackers to execute CLRF injection. Note: Third parties have disputed this as not affecting PHP-Memcached directly. <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner mitre Yes CVE-2022-26635 18273-16823 18273-16823 Critical 18273-16823 9.8 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H 18273-16823 CBL-Mariner Releases 18273-16823 No Security Update 1.6.22-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 18273-16823 CBL-Mariner Releases 1.0 2022-04-19T00:00:00 <p>Information published.</p> In cifs-utils through 6.14 a stack-based buffer overflow when parsing the mount.cifs ip= command-line argument could lead to local attackers gaining root privileges. <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner mitre Yes CVE-2022-27239 Out-of-bounds Write 18733-16820 18734-16823 18733-16820 18734-16823 Important 18733-16820 Important 18734-16823 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 18733-16820 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 18734-16823 CBL-Mariner Releases 18733-16820 No Security Update 6.8-6 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 18733-16820 CBL-Mariner Releases CBL-Mariner Releases 18734-16823 No Security Update 6.14-2 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 18734-16823 CBL-Mariner Releases 1.0 2022-05-07T00:00:00 <p>Information published.</p> 1.1 2022-05-11T00:00:00 <p>Added cifs-utils to CBL-Mariner 1.0</p> MariaDB Server v10.6.5 and below was discovered to contain an use-after-free in the component Item_args::walk_arg which is exploited via specially crafted SQL statements. <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner mitre Yes CVE-2022-27376 Use After Free 18704-16820 18742-16823 18704-16820 18742-16823 Important 18704-16820 Important 18742-16823 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 18704-16820 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 18742-16823 CBL-Mariner Releases 18704-16820 No Security Update 10.3.35-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 18704-16820 CBL-Mariner Releases CBL-Mariner Releases 18742-16823 No Security Update 10.6.8-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 18742-16823 CBL-Mariner Releases 1.0 2022-04-20T00:00:00 <p>Information published.</p> 1.1 2022-05-14T00:00:00 <p>Added mariadb to CBL-Mariner 2.0</p> MariaDB Server v10.6.3 and below was discovered to contain an use-after-free in the component Item_func_in::cleanup() which is exploited via specially crafted SQL statements. <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner mitre Yes CVE-2022-27377 Use After Free 18704-16820 18742-16823 18704-16820 18742-16823 Important 18704-16820 Important 18742-16823 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 18704-16820 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 18742-16823 CBL-Mariner Releases 18704-16820 No Security Update 10.3.35-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 18704-16820 CBL-Mariner Releases CBL-Mariner Releases 18742-16823 No Security Update 10.6.8-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 18742-16823 CBL-Mariner Releases 1.0 2022-04-20T00:00:00 <p>Information published.</p> 1.1 2022-05-14T00:00:00 <p>Added mariadb to CBL-Mariner 2.0</p> An issue in the component Create_tmp_table::finalize of MariaDB Server v10.7 and below was discovered to allow attackers to cause a Denial of Service (DoS) via specially crafted SQL statements. <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner mitre Yes CVE-2022-27378 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') 18704-16820 18742-16823 18704-16820 18742-16823 Important 18704-16820 Important 18742-16823 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 18704-16820 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 18742-16823 CBL-Mariner Releases 18704-16820 No Security Update 10.3.35-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 18704-16820 CBL-Mariner Releases CBL-Mariner Releases 18742-16823 No Security Update 10.6.8-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 18742-16823 CBL-Mariner Releases 1.0 2022-04-21T00:00:00 <p>Information published.</p> An issue in the component Arg_comparator::compare_real_fixed of MariaDB Server v10.6.2 and below was discovered to allow attackers to cause a Denial of Service (DoS) via specially crafted SQL statements. <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner mitre Yes CVE-2022-27379 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') 18704-16820 18742-16823 18704-16820 18742-16823 Important 18704-16820 Important 18742-16823 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 18704-16820 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 18742-16823 CBL-Mariner Releases 18704-16820 No Security Update 10.3.35-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 18704-16820 CBL-Mariner Releases CBL-Mariner Releases 18742-16823 No Security Update 10.6.8-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 18742-16823 CBL-Mariner Releases 1.0 2022-04-21T00:00:00 <p>Information published.</p> 1.1 2022-05-14T00:00:00 <p>Added mariadb to CBL-Mariner 2.0</p> An issue in the component my_decimal::operator= of MariaDB Server v10.6.3 and below was discovered to allow attackers to cause a Denial of Service (DoS) via specially crafted SQL statements. <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner mitre Yes CVE-2022-27380 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') 18704-16820 18742-16823 18704-16820 18742-16823 Important 18704-16820 Important 18742-16823 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 18704-16820 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 18742-16823 CBL-Mariner Releases 18704-16820 No Security Update 10.3.35-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 18704-16820 CBL-Mariner Releases CBL-Mariner Releases 18742-16823 No Security Update 10.6.8-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 18742-16823 CBL-Mariner Releases 1.0 2022-04-20T00:00:00 <p>Information published.</p> 1.1 2022-05-14T00:00:00 <p>Added mariadb to CBL-Mariner 2.0</p> An issue in the component Field::set_default of MariaDB Server v10.6 and below was discovered to allow attackers to cause a Denial of Service (DoS) via specially crafted SQL statements. <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner mitre Yes CVE-2022-27381 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') 18704-16820 18742-16823 18704-16820 18742-16823 Important 18704-16820 Important 18742-16823 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 18704-16820 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 18742-16823 CBL-Mariner Releases 18704-16820 No Security Update 10.3.35-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 18704-16820 CBL-Mariner Releases CBL-Mariner Releases 18742-16823 No Security Update 10.6.8-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 18742-16823 CBL-Mariner Releases 1.0 2022-04-21T00:00:00 <p>Information published.</p> 1.1 2022-05-14T00:00:00 <p>Added mariadb to CBL-Mariner 2.0</p> MariaDB Server v10.7 and below was discovered to contain a segmentation fault via the component Item_field::used_tables/update_depend_map_for_order. <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner mitre Yes CVE-2022-27382 Reachable Assertion 16975-16820 18640-16823 16975-16820 18640-16823 Important 16975-16820 Important 18640-16823 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 16975-16820 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 18640-16823 CBL-Mariner Releases 16975-16820 No Security Update 10.3.36-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 16975-16820 CBL-Mariner Releases CBL-Mariner Releases 18640-16823 No Security Update 10.6.9-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 18640-16823 CBL-Mariner Releases 1.0 2022-04-21T00:00:00 <p>Information published.</p> MariaDB Server v10.6 and below was discovered to contain an use-after-free in the component my_strcasecmp_8bit which is exploited via specially crafted SQL statements. <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner mitre Yes CVE-2022-27383 Use After Free 18704-16820 18742-16823 18704-16820 18742-16823 Important 18704-16820 Important 18742-16823 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 18704-16820 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 18742-16823 CBL-Mariner Releases 18704-16820 No Security Update 10.3.35-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 18704-16820 CBL-Mariner Releases CBL-Mariner Releases 18742-16823 No Security Update 10.6.8-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 18742-16823 CBL-Mariner Releases 1.0 2022-04-21T00:00:00 <p>Information published.</p> 1.1 2022-05-14T00:00:00 <p>Added mariadb to CBL-Mariner 2.0</p> An issue in the component Item_subselect::init_expr_cache_tracker of MariaDB Server v10.6 and below was discovered to allow attackers to cause a Denial of Service (DoS) via specially crafted SQL statements. <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner mitre Yes CVE-2022-27384 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') 18704-16820 18742-16823 18704-16820 18742-16823 Important 18704-16820 Important 18742-16823 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 18704-16820 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 18742-16823 CBL-Mariner Releases 18704-16820 No Security Update 10.3.35-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 18704-16820 CBL-Mariner Releases CBL-Mariner Releases 18742-16823 No Security Update 10.6.8-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 18742-16823 CBL-Mariner Releases 1.0 2022-04-21T00:00:00 <p>Information published.</p> 1.1 2022-05-14T00:00:00 <p>Added mariadb to CBL-Mariner 2.0</p> An issue in the component Used_tables_and_const_cache::used_tables_and_const_cache_join of MariaDB Server v10.7 and below was discovered to allow attackers to cause a Denial of Service (DoS) via specially crafted SQL statements. <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner mitre Yes CVE-2022-27385 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') 18704-16820 18640-16823 18704-16820 18640-16823 Important 18704-16820 Important 18640-16823 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 18704-16820 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 18640-16823 CBL-Mariner Releases 18704-16820 No Security Update 10.3.35-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 18704-16820 CBL-Mariner Releases CBL-Mariner Releases 18640-16823 No Security Update 10.6.9-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 18640-16823 CBL-Mariner Releases 1.0 2022-04-21T00:00:00 <p>Information published.</p> MariaDB Server v10.7 and below was discovered to contain a segmentation fault via the component sql/sql_class.cc. <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner mitre Yes CVE-2022-27386 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') 18704-16820 18742-16823 18704-16820 18742-16823 Important 18704-16820 Important 18742-16823 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 18704-16820 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 18742-16823 CBL-Mariner Releases 18704-16820 No Security Update 10.3.35-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 18704-16820 CBL-Mariner Releases CBL-Mariner Releases 18742-16823 No Security Update 10.6.8-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 18742-16823 CBL-Mariner Releases 1.0 2022-04-21T00:00:00 <p>Information published.</p> MariaDB Server v10.7 and below was discovered to contain a global buffer overflow in the component decimal_bin_size which is exploited via specially crafted SQL statements. <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner mitre Yes CVE-2022-27387 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') 18704-16820 18742-16823 18704-16820 18742-16823 Important 18704-16820 Important 18742-16823 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 18704-16820 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 18742-16823 CBL-Mariner Releases 18704-16820 No Security Update 10.3.35-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 18704-16820 CBL-Mariner Releases CBL-Mariner Releases 18742-16823 No Security Update 10.6.8-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 18742-16823 CBL-Mariner Releases 1.0 2022-04-21T00:00:00 <p>Information published.</p> FreeType commit 1e2eb65048f75c64b68708efed6ce904c31f3b2f was discovered to contain a heap buffer overflow via the function sfnt_init_face. <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner mitre Yes CVE-2022-27404 Out-of-bounds Write 18731-16820 17908-16823 18732-16823 18731-16820 17908-16823 18732-16823 Critical 18731-16820 Critical 17908-16823 Critical 18732-16823 9.8 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H 18731-16820 9.8 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H 17908-16823 9.8 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H 18732-16823 CBL-Mariner Releases 18731-16820 18732-16823 No Security Update 2.11.1-2 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 18731-16820 18732-16823 CBL-Mariner Releases CBL-Mariner Releases 17908-16823 No Security Update 5.15.9-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17908-16823 CBL-Mariner Releases 1.0 2022-05-04T00:00:00 <p>Information published.</p> 1.1 2022-05-11T00:00:00 <p>Added freetype to CBL-Mariner 1.0</p> 1.2 2023-05-23T00:00:00 <p>Added qt5-qtbase to CBL-Mariner 2.0</p> FreeType commit 53dfdcd8198d2b3201a23c4bad9190519ba918db was discovered to contain a segmentation violation via the function FNT_Size_Request. <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner mitre Yes CVE-2022-27405 Out-of-bounds Read 18729-16820 18730-16823 18729-16820 18730-16823 Important 18729-16820 Important 18730-16823 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 18729-16820 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 18730-16823 CBL-Mariner Releases 18729-16820 18730-16823 No Security Update 2.12.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 18729-16820 18730-16823 CBL-Mariner Releases 1.0 2022-05-06T00:00:00 <p>Information published.</p> 1.1 2022-05-11T00:00:00 <p>Added freetype to CBL-Mariner 1.0</p> FreeType commit 22a0cccb4d9d002f33c1ba7a4b36812c7d4f46b5 was discovered to contain a segmentation violation via the function FT_Request_Size. <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner mitre Yes CVE-2022-27406 Out-of-bounds Read 18729-16820 17908-16823 18730-16823 18729-16820 17908-16823 18730-16823 Important 18729-16820 Important 17908-16823 Important 18730-16823 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 18729-16820 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 17908-16823 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 18730-16823 CBL-Mariner Releases 18729-16820 18730-16823 No Security Update 2.12.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 18729-16820 18730-16823 CBL-Mariner Releases CBL-Mariner Releases 17908-16823 No Security Update 5.15.9-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17908-16823 CBL-Mariner Releases 1.0 2022-05-06T00:00:00 <p>Information published.</p> 1.1 2022-05-11T00:00:00 <p>Added freetype to CBL-Mariner 1.0</p> 1.2 2023-05-23T00:00:00 <p>Added qt5-qtbase to CBL-Mariner 2.0</p> MariaDB Server v10.9 and below was discovered to contain a segmentation fault via the component sql/item_subselect.cc. <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner mitre Yes CVE-2022-27444 16975-16820 18640-16823 16975-16820 18640-16823 Important 16975-16820 Important 18640-16823 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 16975-16820 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 18640-16823 CBL-Mariner Releases 16975-16820 No Security Update 10.3.36-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 16975-16820 CBL-Mariner Releases CBL-Mariner Releases 18640-16823 No Security Update 10.6.9-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 18640-16823 CBL-Mariner Releases 1.0 2022-04-22T00:00:00 <p>Information published.</p> MariaDB Server v10.9 and below was discovered to contain a segmentation fault via the component sql/sql_window.cc. <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner mitre Yes CVE-2022-27445 18704-16820 18742-16823 18704-16820 18742-16823 Important 18704-16820 Important 18742-16823 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 18704-16820 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 18742-16823 CBL-Mariner Releases 18704-16820 No Security Update 10.3.35-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 18704-16820 CBL-Mariner Releases CBL-Mariner Releases 18742-16823 No Security Update 10.6.8-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 18742-16823 CBL-Mariner Releases 1.0 2022-04-22T00:00:00 <p>Information published.</p> MariaDB Server v10.9 and below was discovered to contain a segmentation fault via the component sql/item_cmpfunc.h. <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner mitre Yes CVE-2022-27446 16975-16820 18640-16823 16975-16820 18640-16823 Important 16975-16820 Important 18640-16823 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 16975-16820 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 18640-16823 CBL-Mariner Releases 16975-16820 No Security Update 10.3.36-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 16975-16820 CBL-Mariner Releases CBL-Mariner Releases 18640-16823 No Security Update 10.6.9-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 18640-16823 CBL-Mariner Releases 1.0 2022-04-22T00:00:00 <p>Information published.</p> MariaDB Server v10.9 and below was discovered to contain a use-after-free via the component Binary_string::free_buffer() at /sql/sql_string.h. <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner mitre Yes CVE-2022-27447 Use After Free 18704-16820 18742-16823 18704-16820 18742-16823 Important 18704-16820 Important 18742-16823 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 18704-16820 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 18742-16823 CBL-Mariner Releases 18704-16820 No Security Update 10.3.35-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 18704-16820 CBL-Mariner Releases CBL-Mariner Releases 18742-16823 No Security Update 10.6.8-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 18742-16823 CBL-Mariner Releases 1.0 2022-04-22T00:00:00 <p>Information published.</p> There is an Assertion failure in MariaDB Server v10.9 and below via 'node->pcur->rel_pos == BTR_PCUR_ON' at /row/row0mysql.cc. <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner mitre Yes CVE-2022-27448 Reachable Assertion 18704-16820 18742-16823 18704-16820 18742-16823 Important 18704-16820 Important 18742-16823 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 18704-16820 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 18742-16823 CBL-Mariner Releases 18704-16820 No Security Update 10.3.35-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 18704-16820 CBL-Mariner Releases CBL-Mariner Releases 18742-16823 No Security Update 10.6.8-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 18742-16823 CBL-Mariner Releases 1.0 2022-04-22T00:00:00 <p>Information published.</p> MariaDB Server v10.9 and below was discovered to contain a segmentation fault via the component sql/item_func.cc:148. <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner mitre Yes CVE-2022-27449 18704-16820 18742-16823 18704-16820 18742-16823 Important 18704-16820 Important 18742-16823 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 18704-16820 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 18742-16823 CBL-Mariner Releases 18704-16820 No Security Update 10.3.35-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 18704-16820 CBL-Mariner Releases CBL-Mariner Releases 18742-16823 No Security Update 10.6.8-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 18742-16823 CBL-Mariner Releases 1.0 2022-04-22T00:00:00 <p>Information published.</p> MariaDB Server v10.9 and below was discovered to contain a segmentation fault via the component sql/field_conv.cc. <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner mitre Yes CVE-2022-27451 16975-16820 18742-16823 16975-16820 18742-16823 Important 16975-16820 Important 18742-16823 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 16975-16820 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 18742-16823 CBL-Mariner Releases 16975-16820 No Security Update 10.3.36-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 16975-16820 CBL-Mariner Releases CBL-Mariner Releases 18742-16823 No Security Update 10.6.8-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 18742-16823 CBL-Mariner Releases 1.0 2022-04-22T00:00:00 <p>Information published.</p> MariaDB Server v10.9 and below was discovered to contain a segmentation fault via the component sql/item_cmpfunc.cc. <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner mitre Yes CVE-2022-27452 16975-16820 18640-16823 16975-16820 18640-16823 Important 16975-16820 Important 18640-16823 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 16975-16820 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 18640-16823 CBL-Mariner Releases 16975-16820 No Security Update 10.3.36-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 16975-16820 CBL-Mariner Releases CBL-Mariner Releases 18640-16823 No Security Update 10.6.9-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 18640-16823 CBL-Mariner Releases 1.0 2022-04-22T00:00:00 <p>Information published.</p> MariaDB Server v10.6.3 and below was discovered to contain an use-after-free in the component my_wildcmp_8bit_impl at /strings/ctype-simple.c. <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner mitre Yes CVE-2022-27455 Use After Free 16975-16820 16975-16820 Important 16975-16820 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 16975-16820 CBL-Mariner Releases 16975-16820 No Security Update 10.3.36-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 16975-16820 CBL-Mariner Releases 1.0 2022-04-22T00:00:00 <p>Information published.</p> MariaDB Server v10.6.3 and below was discovered to contain an use-after-free in the component VDec::VDec at /sql/sql_type.cc. <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner mitre Yes CVE-2022-27456 Use After Free 18704-16820 18742-16823 18704-16820 18742-16823 Important 18704-16820 Important 18742-16823 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 18704-16820 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 18742-16823 CBL-Mariner Releases 18704-16820 No Security Update 10.3.35-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 18704-16820 CBL-Mariner Releases CBL-Mariner Releases 18742-16823 No Security Update 10.6.8-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 18742-16823 CBL-Mariner Releases 1.0 2022-04-22T00:00:00 <p>Information published.</p> 1.1 2022-05-14T00:00:00 <p>Added mariadb to CBL-Mariner 2.0</p> MariaDB Server v10.6.3 and below was discovered to contain an use-after-free in the component my_mb_wc_latin1 at /strings/ctype-latin1.c. <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner mitre Yes CVE-2022-27457 Use After Free 16975-16820 18742-16823 16975-16820 18742-16823 Important 16975-16820 Important 18742-16823 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 16975-16820 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 18742-16823 CBL-Mariner Releases 16975-16820 No Security Update 10.3.36-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 16975-16820 CBL-Mariner Releases CBL-Mariner Releases 18742-16823 No Security Update 10.6.8-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 18742-16823 CBL-Mariner Releases 1.0 2022-04-22T00:00:00 <p>Information published.</p> Certificate.Verify in crypto/x509 in Go 1.18.x before 1.18.1 can be caused to panic on macOS when presented with certain malformed certificates. This allows a remote TLS server to cause a TLS client to panic. <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner mitre Yes CVE-2022-27536 Improper Certificate Validation 21778-17084 21778-17084 Important 21778-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21778-17084 1.0 2025-09-04T03:43:28 <p>Information published.</p> 3.0 2026-09-09T14:56:26 <p>Information published.</p> 1.1 2026-02-18T03:06:30 <p>Information published.</p> 2.0 2026-09-03T01:10:55 <p>Information published.</p> 4.0 2026-09-17T01:54:20 <p>Information published.</p> A flaw was found in Podman where containers were started incorrectly with non-empty default permissions. A vulnerability was found in Moby (Docker Engine) where containers were started incorrectly with non-empty inheritable Linux process capabilities. This flaw allows an attacker with access to programs with inheritable file capabilities to elevate those capabilities to the permitted set when execve(2) runs. <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner redhat Yes CVE-2022-27649 Incorrect Default Permissions 19477-16823 19839-17086 19839-21692 19477-16823 19839-17086 19839-21692 Important 19477-16823 Important 19839-17086 Important 19839-21692 7.5 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H 19477-16823 7.5 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H 19839-17086 7.5 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H 19839-21692 CBL-Mariner Releases 19477-16823 No Security Update 4.1.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 19477-16823 CBL-Mariner Releases CBL-Mariner Releases 19839-17086 19839-21692 No Security Update 1.22.3-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 19839-17086 19839-21692 CBL-Mariner Releases 1.2 2026-02-18T02:22:43 <p>Information published.</p> 2.0 2026-08-12T21:46:19 <p>Information published.</p> 1.0 2022-04-14T00:00:00 <p>Information published.</p> 1.1 2024-04-15T00:00:00 <p>Added cri-o to CBL-Mariner 2.0</p> A flaw was found in buildah where containers were incorrectly started with non-empty default permissions. A bug was found in Moby (Docker Engine) where containers were incorrectly started with non-empty inheritable Linux process capabilities enabling an attacker with access to programs with inheritable file capabilities to elevate those capabilities to the permitted set when execve(2) runs. This has the potential to impact confidentiality and integrity. <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner redhat Yes CVE-2022-27651 Incorrect Default Permissions 19839-17086 19839-21692 19839-17086 19839-21692 Moderate 19839-17086 Moderate 19839-21692 6.8 6.8 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N 19839-17086 6.8 6.8 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N 19839-21692 CBL-Mariner Releases 19839-17086 19839-21692 No Security Update 1.21.7-2 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 19839-17086 19839-21692 CBL-Mariner Releases 1.2 2026-02-18T02:24:18 <p>Information published.</p> 2.0 2026-08-12T21:48:05 <p>Information published.</p> 1.0 2022-12-02T00:00:00 <p>Information published.</p> 1.1 2024-04-15T00:00:00 <p>Added cri-o to CBL-Mariner 2.0</p> The generic P-256 feature in crypto/elliptic in Go before 1.17.9 and 1.18.x before 1.18.1 allows a panic via long scalar input. <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner mitre Yes CVE-2022-28327 18735-16820 18736-16823 18735-16820 18736-16823 Important 18735-16820 Important 18736-16823 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 18735-16820 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 18736-16823 CBL-Mariner Releases 18735-16820 18736-16823 No Security Update 1.18.3-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 18735-16820 18736-16823 CBL-Mariner Releases 1.0 2022-04-30T00:00:00 <p>Information published.</p> In the Linux kernel before 5.17.1 a refcount leak bug was found in net/llc/af_llc.c. <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner mitre Yes CVE-2022-28356 18454-16820 18720-16823 18454-16820 18720-16823 Moderate 18454-16820 Moderate 18720-16823 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 18454-16820 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 18720-16823 CBL-Mariner Releases 18454-16820 No Security Update - https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 18454-16820 CBL-Mariner Releases CBL-Mariner Releases 18720-16823 No Security Update 5.15.37.1-2 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 18720-16823 CBL-Mariner Releases 1.0 2022-04-10T00:00:00 <p>Information published.</p> usb_8dev_start_xmit in drivers/net/can/usb/usb_8dev.c in the Linux kernel through 5.17.1 has a double free. <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner mitre Yes CVE-2022-28388 Double Free 18454-16820 18720-16823 18454-16820 18720-16823 Moderate 18454-16820 Moderate 18720-16823 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 18454-16820 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 18720-16823 CBL-Mariner Releases 18454-16820 No Security Update - https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 18454-16820 CBL-Mariner Releases CBL-Mariner Releases 18720-16823 No Security Update 5.15.37.1-2 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 18720-16823 CBL-Mariner Releases 1.0 2022-04-10T00:00:00 <p>Information published.</p> mcba_usb_start_xmit in drivers/net/can/usb/mcba_usb.c in the Linux kernel through 5.17.1 has a double free. <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner mitre Yes CVE-2022-28389 Double Free 18454-16820 18720-16823 18454-16820 18720-16823 Moderate 18454-16820 Moderate 18720-16823 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 18454-16820 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 18720-16823 CBL-Mariner Releases 18454-16820 No Security Update - https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 18454-16820 CBL-Mariner Releases CBL-Mariner Releases 18720-16823 No Security Update 5.15.37.1-2 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 18720-16823 CBL-Mariner Releases 1.0 2022-04-10T00:00:00 <p>Information published.</p> ems_usb_start_xmit in drivers/net/can/usb/ems_usb.c in the Linux kernel through 5.17.1 has a double free. <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner mitre Yes CVE-2022-28390 Double Free 18454-16820 18720-16823 18454-16820 18720-16823 Important 18454-16820 Important 18720-16823 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 18454-16820 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 18720-16823 CBL-Mariner Releases 18454-16820 No Security Update - https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 18454-16820 CBL-Mariner Releases CBL-Mariner Releases 18720-16823 No Security Update 5.15.37.1-2 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 18720-16823 CBL-Mariner Releases 1.0 2022-04-10T00:00:00 <p>Information published.</p> BusyBox through 1.35.0 allows remote attackers to execute arbitrary code if netstat is used to print a DNS PTR record's value to a VT compatible terminal. Alternatively the attacker could choose to change the terminal's colors. <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner mitre Yes CVE-2022-28391 19943-17084 18753-16820 18754-16823 18755-17084 19943-17084 18753-16820 18754-16823 18755-17084 Important 19943-17084 Important 18753-16820 Important 18754-16823 Important 18755-17084 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 19943-17084 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 18753-16820 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 18754-16823 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 18755-17084 CBL-Mariner Releases 19943-17084 18755-17084 No Security Update 1.36.1-3 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 19943-17084 18755-17084 CBL-Mariner Releases CBL-Mariner Releases 18753-16820 No Security Update 1.34.1-2 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 18753-16820 CBL-Mariner Releases CBL-Mariner Releases 18754-16823 No Security Update 1.35.0-2 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 18754-16823 CBL-Mariner Releases 1.3 2026-02-18T01:29:33 <p>Information published.</p> 1.0 2022-04-13T00:00:00 <p>Information published.</p> 1.1 2022-04-14T00:00:00 <p>Added busybox to CBL-Mariner 1.0</p> 1.2 2024-06-30T07:00:00 <p>Information published.</p> There is a heap-buffer-overflow in GIFLIB 5.2.1 function DumpScreen2RGB() in gif2rgb.c:298:45. <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner mitre Yes CVE-2022-28506 Out-of-bounds Write 18249-17084 19085-17084 18249-17084 19085-17084 Moderate 18249-17084 Moderate 19085-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N 18249-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N 19085-17084 CBL-Mariner Releases 18249-17084 19085-17084 No Security Update 5.2.1-7 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 18249-17084 19085-17084 CBL-Mariner Releases 1.1 2024-11-09T00:00:00 <p>Added giflib to Azure Linux 3.0 Added giflib to CBL-Mariner 2.0</p> 1.2 2026-02-18T03:08:39 <p>Information published.</p> 1.0 2024-10-16T00:00:00 <p>Information published.</p> jbd2_journal_wait_updates in fs/jbd2/transaction.c in the Linux kernel before 5.17.1 has a use-after-free caused by a transaction_t race condition. <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner mitre Yes CVE-2022-28796 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') 18454-16820 18720-16823 18454-16820 18720-16823 Important 18454-16820 Important 18720-16823 7.0 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H 18454-16820 7.0 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H 18720-16823 CBL-Mariner Releases 18454-16820 No Security Update - https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 18454-16820 CBL-Mariner Releases CBL-Mariner Releases 18720-16823 No Security Update 5.15.37.1-2 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 18720-16823 CBL-Mariner Releases 1.0 2022-04-15T00:00:00 <p>Information published.</p> singlevar in lparser.c in Lua from (including) 5.4.0 up to (excluding) 5.4.4 lacks a certain luaK_exp2anyregup call leading to a heap-based buffer over-read that might affect a system that compiles untrusted Lua code. <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner mitre Yes CVE-2022-28805 Out-of-bounds Read 19082-17084 18676-16820 18750-16823 18751-17084 19082-17084 18676-16820 18750-16823 18751-17084 Critical 19082-17084 Critical 18676-16820 Critical 18750-16823 Critical 18751-17084 9.1 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H 19082-17084 9.1 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H 18676-16820 9.1 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H 18750-16823 9.1 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H 18751-17084 CBL-Mariner Releases 19082-17084 18751-17084 No Security Update 5.2.1-3 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 19082-17084 18751-17084 CBL-Mariner Releases CBL-Mariner Releases 18676-16820 No Security Update 5.3.5-9 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 18676-16820 CBL-Mariner Releases CBL-Mariner Releases 18750-16823 No Security Update 5.4.3-2 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 18750-16823 CBL-Mariner Releases 2.0 2026-08-12T21:05:33 <p>Information published.</p> 1.0 2022-04-15T00:00:00 <p>Information published.</p> 1.1 2024-06-30T07:00:00 <p>Information published.</p> 1.2 2026-02-18T01:02:18 <p>Information published.</p> The SUNRPC subsystem in the Linux kernel through 5.17.2 can call xs_xprt_free before ensuring that sockets are in the intended state. <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner mitre Yes CVE-2022-28893 Use After Free 18703-16820 18752-16823 18703-16820 18752-16823 Important 18703-16820 Important 18752-16823 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 18703-16820 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 18752-16823 CBL-Mariner Releases 18703-16820 18752-16823 No Security Update - https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 18703-16820 18752-16823 CBL-Mariner Releases 1.0 2022-04-15T00:00:00 <p>Information published.</p> drivers/infiniband/ulp/rtrs/rtrs-clt.c in the Linux kernel before 5.16.12 has a double free related to rtrs_clt_dev_release. <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner mitre Yes CVE-2022-29156 Double Free 18454-16820 18720-16823 18454-16820 18720-16823 Important 18454-16820 Important 18720-16823 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 18454-16820 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 18720-16823 CBL-Mariner Releases 18454-16820 No Security Update - https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 18454-16820 CBL-Mariner Releases CBL-Mariner Releases 18720-16823 No Security Update 5.15.37.1-2 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 18720-16823 CBL-Mariner Releases 1.0 2022-04-21T00:00:00 <p>Information published.</p> ncurses 6.3 before patch 20220416 has an out-of-bounds read and segmentation violation in convert_strings in tinfo/read_entry.c in the terminfo library. <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner mitre Yes CVE-2022-29458 Out-of-bounds Read 18739-16820 18740-16823 18739-16820 18740-16823 Important 18739-16820 Important 18740-16823 7.1 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H 18739-16820 7.1 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H 18740-16823 CBL-Mariner Releases 18739-16820 18740-16823 No Security Update 6.3-2 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 18739-16820 18740-16823 CBL-Mariner Releases 1.0 2022-04-28T00:00:00 <p>Information published.</p> In the Linux kernel before 5.17.3 fs/io_uring.c has a use-after-free due to a race condition in io_uring timeouts. This can be triggered by a local user who has no access to any user namespace; however the race condition perhaps can only be exploited infrequently. <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner mitre Yes CVE-2022-29582 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') 18719-16820 18720-16823 18719-16820 18720-16823 Important 18719-16820 Important 18720-16823 7.0 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H 18719-16820 7.0 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H 18720-16823 CBL-Mariner Releases 18719-16820 No Security Update - https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 18719-16820 CBL-Mariner Releases CBL-Mariner Releases 18720-16823 No Security Update 5.15.37.1-2 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 18720-16823 CBL-Mariner Releases 1.0 2022-05-06T00:00:00 <p>Information published.</p> 1.1 2022-05-11T00:00:00 <p>Added kernel to CBL-Mariner 1.0</p> cifs-utils through 6.14 with verbose logging can cause an information leak when a file contains = (equal sign) characters but is not a valid credentials file. <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner mitre Yes CVE-2022-29869 Insertion of Sensitive Information into Log File 18733-16820 18734-16823 18733-16820 18734-16823 Moderate 18733-16820 Moderate 18734-16823 5.3 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N 18733-16820 5.3 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N 18734-16823 CBL-Mariner Releases 18733-16820 No Security Update 6.8-6 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 18733-16820 CBL-Mariner Releases CBL-Mariner Releases 18734-16823 No Security Update 6.14-2 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 18734-16823 CBL-Mariner Releases 1.0 2022-05-07T00:00:00 <p>Information published.</p> 1.1 2022-05-11T00:00:00 <p>Added cifs-utils to CBL-Mariner 1.0</p> Command Injection <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner snyk Yes CVE-2022-21235 Improper Neutralization of Argument Delimiters in a Command (&#39;Argument Injection&#39;) 20278-17084 20278-17084 Critical 20278-17084 8.1 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H 20278-17084 1.0 2025-09-04T00:26:21 <p>Information published.</p> 1.1 2026-02-18T14:04:28 <p>Information published.</p> Use-After-Free in str_escape in mruby/mruby in mruby/mruby <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner @huntrdev Yes CVE-2022-1212 Use After Free 19671-17084 19686-17084 19671-17084 19686-17084 Critical 19671-17084 Critical 19686-17084 9.3 9.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:H 19671-17084 9.3 9.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:H 19686-17084 1.0 2025-09-03T22:20:21 <p>Information published.</p> 1.1 2026-02-18T14:45:15 <p>Information published.</p> Out-of-bounds Read in mrb_get_args in mruby/mruby <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner @huntrdev Yes CVE-2022-1276 Out-of-bounds Read 19671-17084 19686-17084 19671-17084 19686-17084 Critical 19671-17084 Critical 19686-17084 8.4 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H 19671-17084 8.4 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H 19686-17084 1.1 2026-02-18T01:48:27 <p>Information published.</p> 1.0 2025-09-03T21:23:36 <p>Information published.</p> heap-buffer-overflow in mrb_vm_exec in mruby/mruby in mruby/mruby <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner @huntrdev Yes CVE-2022-1286 Heap-based Buffer Overflow 19686-17084 19671-17084 19686-17084 19671-17084 Critical 19686-17084 Critical 19671-17084 5.9 5.9 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L 19686-17084 5.9 5.9 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L 19671-17084 1.0 2025-09-03T19:37:08 <p>Information published.</p> 1.1 2026-02-18T01:05:11 <p>Information published.</p> Win32 Stream Enumeration Remote Code Execution Vulnerability <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to take additional actions prior to exploitation to prepare the target environment.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>This vulnerability requires that a user with an affected version of Windows access a malicious server. An attacker would have to host a specially crafted server share or website. An attacker would have no way to force users to visit this specially crafted server share or website, but would have to convince them to visit the server share or website, typically by way of an enticement in an email or chat message.</p> Windows kernel32.dll Microsoft Yes CVE-2022-21983 11568 11569 11570 11571 11572 11712 11713 11714 11896 11897 11898 11923 11924 11801 11802 11803 11926 11927 11929 11930 11931 10729 10735 10852 10853 10816 10855 10047 10048 10481 10482 10484 9312 10287 9318 9344 10051 10049 10378 10379 10483 10543 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11570 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11712 Remote Code Execution 11713 Remote Code Execution 11714 Remote Code Execution 11896 Remote Code Execution 11897 Remote Code Execution 11898 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 11801 Remote Code Execution 11802 Remote Code Execution 11803 Remote Code Execution 11926 Remote Code Execution 11927 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 10729 Remote Code Execution 10735 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10047 Remote Code Execution 10048 Remote Code Execution 10481 Remote Code Execution 10482 Remote Code Execution 10484 Remote Code Execution 9312 Remote Code Execution 10287 Remote Code Execution 9318 Remote Code Execution 9344 Remote Code Execution 10051 Remote Code Execution 10049 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Important 11568 Important 11569 Important 11570 Important 11571 Important 11572 Important 11712 Important 11713 Important 11714 Important 11896 Important 11897 Important 11898 Important 11923 Important 11924 Important 11801 Important 11802 Important 11803 Important 11926 Important 11927 Important 11929 Important 11930 Important 11931 Important 10729 Important 10735 Important 10852 Important 10853 Important 10816 Important 10855 Important 10047 Important 10048 Important 10481 Important 10482 Important 10484 Important 9312 Important 10287 Important 9318 Important 9344 Important 10051 Important 10049 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11570 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11712 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11713 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11714 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11896 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11897 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11898 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11801 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11802 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11803 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11926 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11927 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10729 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10735 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10047 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10048 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10481 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10482 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10484 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9312 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10287 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9318 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9344 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10051 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10049 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5012647 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012647 5011503 11568 11569 11570 11571 11572 Yes Security Update 10.0.17763.2803 https://support.microsoft.com/help/5012647 11568 11569 11570 11571 11572 5012647 5012647 https://support.microsoft.com/help/5012647 11568 11569 11570 11571 11572 5012591 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012591 5011485 11712 11713 11714 Yes Security Update 10.0.18363.2212 https://support.microsoft.com/help/5012591 11712 11713 11714 5012591 5012591 https://support.microsoft.com/help/5012591 11712 11713 11714 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11896 11897 11898 11929 Yes Security Update 10.0.19043.1645 https://support.microsoft.com/help/5012599 11896 11897 11898 11929 5012599 5012599 https://support.microsoft.com/help/5012599 11896 11897 11898 11801 11802 11803 11929 11930 11931 5012604 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012604 5011497 11923 11924 Yes Security Update 10.0.20348.643 https://support.microsoft.com/help/5012604 11923 11924 5012604 5012604 https://support.microsoft.com/help/5012604 11923 11924 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11801 11802 11803 Yes Security Update 10.0.19042.1645 https://support.microsoft.com/help/5012599 11801 11802 11803 5012599 5012592 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012592 5011493 11926 11927 Yes Security Update 10.0.22000.613 https://support.microsoft.com/help/5012592 11926 11927 5012592 5012592 https://support.microsoft.com/help/5012592 11926 11927 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11930 11931 Yes Security Update 10.0.19044.1645 https://support.microsoft.com/help/5012599 11930 11931 5012599 5012653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012653 5011491 10729 10735 Yes Security Update 10.0.10240.19265 https://support.microsoft.com/help/5012653 10729 10735 5012653 5012653 https://support.microsoft.com/help/5012653 10729 10735 5012596 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012596 5011495 10852 10853 10816 10855 Yes Security Update 10.0.14393.5066 https://support.microsoft.com/help/5012596 10852 10853 10816 10855 5012596 5012596 https://support.microsoft.com/help/5012596 10852 10853 10816 10855 5012626 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012626 5011552 10047 10048 10051 10049 Yes Monthly Rollup 6.1.7601.25924 https://support.microsoft.com/help/5012626 10047 10048 10051 10049 5012626 5012626 https://support.microsoft.com/help/5012626 10047 10048 10051 10049 5012649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012649 10047 10048 10051 10049 Yes Security Only 6.1.7601.25924 https://support.microsoft.com/help/5012649 10047 10048 10051 10049 5012649 5012649 https://support.microsoft.com/help/5012649 10047 10048 10051 10049 5012670 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012670 5011564 10481 10482 10483 10543 Yes Monthly Rollup 6.3.9600.20337 https://support.microsoft.com/help/5012670 10481 10482 10483 10543 5012670 5012670 https://support.microsoft.com/help/5012670 10481 10482 10484 10483 10543 5012639 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012639 10481 10482 10483 10543 Yes Security Only 6.3.9600.20337 https://support.microsoft.com/help/5012639 10481 10482 10483 10543 5012639 5012639 https://support.microsoft.com/help/5012639 10481 10482 10483 10543 5012670 5011564 10484 Yes Monthly Rollup 6.3.9600.20337 https://support.microsoft.com/help/5012639 10484 5012670 5012658 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012658 5011534 9312 10287 9318 9344 Yes Monthly Rollup 6.0.6003.21446 https://support.microsoft.com/help/5012658 9312 10287 9318 9344 5012658 5012658 https://support.microsoft.com/help/5012658 9312 10287 9318 9344 5012632 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012632 9312 10287 9318 9344 Yes Security Only 6.0.6003.21446 https://support.microsoft.com/help/5012632 9312 10287 9318 9344 5012632 5012632 https://support.microsoft.com/help/5012632 9312 10287 9318 9344 5012650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012650 5011535 10378 10379 Yes Monthly Rollup 6.2.9200.23679 https://support.microsoft.com/help/5012650 10378 10379 5012650 5012650 https://support.microsoft.com/help/5012650 10378 10379 5012666 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012666 10378 10379 Yes Security Only 6.2.9200.23679 https://support.microsoft.com/help/5012666 10378 10379 5012666 5012666 https://support.microsoft.com/help/5012666 10378 10379 <p>Mitigation refers to a setting, common configuration, or general best-practice, existing in a default state, that could reduce the severity of exploitation of a vulnerability. The following mitigating factors may be helpful in your situation:</p> <p><strong>1. Block TCP port 445 at the enterprise perimeter firewall</strong></p> <p>TCP port 445 is used to initiate a connection with the affected component. Blocking this port at the network perimeter firewall will help protect systems that are behind that firewall from attempts to exploit this vulnerability. This can help protect networks from attacks that originate outside the enterprise perimeter. Blocking the affected ports at the enterprise perimeter is the best defense to help avoid Internet-based attacks. <strong>However, systems could still be vulnerable to attacks from within their enterprise perimeter.</strong></p> <p><strong>2. Follow Microsoft guidelines to secure SMB traffic</strong></p> <p><a href="https://docs.microsoft.com/windows-server/storage/file-server/smb-secure-traffic">Secure SMB Traffic in Windows Server</a>.</p> Yuki Chen with <a href="https://www.cyberkl.com/">Cyber KunLun</a> 1.0 2022-04-12T07:00:00 <p>Information published.</p> Windows Hyper-V Denial of Service Vulnerability <p><strong>According to the CVSS metric, a successful exploitation could lead to a scope change (S:C). What does this mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability could allow a Hyper-V guest to affect the functionality of the Hyper-V host.</p> Role: Windows Hyper-V Microsoft Yes CVE-2022-23268 11923 11924 11926 Denial of Service 11923 Denial of Service 11924 Denial of Service 11926 Important 11923 Important 11924 Important 11926 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 6.5 5.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C 11923 6.5 5.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C 11924 6.5 5.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C 11926 5012604 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012604 5011497 11923 11924 Yes Security Update 10.0.20348.643 https://support.microsoft.com/help/5012604 11923 11924 5012604 5012604 https://support.microsoft.com/help/5012604 11923 11924 5012592 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012592 5011493 11926 Yes Security Update 10.0.22000.613 https://support.microsoft.com/help/5012592 11926 5012592 5012592 https://support.microsoft.com/help/5012592 11926 <a href="https://twitter.com/rezer0dai">PETER HLAVATY</a> with Banana Mode 1.0 2022-04-12T08:00:00 <p>Information published.</p> Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An authenticated user could run a specially crafted trusted solution package to execute arbitrary SQL commands. From there the attacker could escalate and execute commands as db_owner within their Dynamics CRM database.</p> Microsoft Dynamics Microsoft Yes CVE-2022-23259 11664 11921 Remote Code Execution 11664 Remote Code Execution 11921 Critical 11664 Critical 11921 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11664 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11921 5012732 https://www.microsoft.com/en-us/download/details.aspx?id=104010 11664 Maybe Security Update 9.0.37.2 https://support.microsoft.com/help/5012732 11664 5012732 5012731 https://www.microsoft.com/en-us/download/details.aspx?id=104009 11921 Maybe Security Update 9.1.9.8 https://support.microsoft.com/help/5012731 11921 5012731 <a href="https://www.linkedin.com/in/fabian-schmidt-42-/">Fabian Schmidt</a> 1.0 2022-04-12T07:00:00 <p>Information published.</p> Microsoft Power BI Spoofing Vulnerability <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>The attack requires that multiple users try to use the gateway at the same time.</p> <p><strong>According to the CVSS, Scope is Changed. What is meant by scope change for this particular vulnerability?</strong></p> <p>A leaking impersonation session can lead to spoofing of another user account.</p> <p>An attacker with.... privileges could access the data of another tenant.</p> <p><strong>According to the CVSS metric, successful exploitation of this vulnerability could lead to some loss of confidentiality (C:L)? What does that mean for this vulnerability?</strong></p> <p>Information in the victim's browser associated with the vulnerable URL can be read by the malicious JavaScript code and sent to the attacker.</p> <p><strong>According to the CVSS metric, privileges required is low (PR:L). What does that mean for this vulnerability?</strong></p> <p>Any authenticated attacker could trigger this vulnerability. It does not require admin or other elevated privileges.</p> Power BI Microsoft Yes CVE-2022-23292 12022 Spoofing 12022 Important 12022 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 3.7 3.2 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C 12022 Release Notes https://powerbi.microsoft.com/en-us/blog/on-premises-data-gateway-march-2022-update-is-now-available/ 12022 Maybe Security Update 3000.118.2 https://powerbi.microsoft.com/en-us/blog/on-premises-data-gateway-march-2022-update-is-now-available/ 12022 Release Notes 1.0 2022-04-12T08:00:00 <p>Information published.</p> 1.1 2023-04-14T07:00:00 <p>Updated one or more CVSS scores for the affected products and added an FAQ explaining the vector string settings. This is an informational change only.</p> Windows Hyper-V Remote Code Execution Vulnerability <p><strong>According to the CVSS metric, the attack vector is local (AV:L). Why does the CVE title indicate that this is a remote code execution?</strong></p> <p>The word <strong>Remote</strong> in the title refers to the location of the attacker. This type of exploit is sometimes referred to as Arbitrary Code Execution (ACE). The attack itself is carried out locally.</p> <p>For example, when the score indicates that the <strong>Attack Vector</strong> is <strong>Local</strong> and <strong>User Interaction</strong> is <strong>Required</strong>, this could describe an exploit in which an attacker, through social engineering, convinces a victim to download and open a specially crafted file from a website which leads to a local attack on their computer.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> <p><strong>According to the CVSS metric, a successful exploitation could lead to a scope change (S:C). What does this mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability could allow a Hyper-V guest to affect the functionality of the Hyper-V host.</p> Role: Windows Hyper-V Microsoft Yes CVE-2022-22008 11569 11571 11572 11713 11896 11923 11924 11803 11926 11931 10735 10853 10816 10855 10482 10483 10543 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11713 Remote Code Execution 11896 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 11803 Remote Code Execution 11926 Remote Code Execution 11931 Remote Code Execution 10735 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10482 Remote Code Execution 10483 Remote Code Execution 10543 Critical 11569 Critical 11571 Critical 11572 Critical 11713 Critical 11896 Critical 11923 Critical 11924 Critical 11803 Critical 11926 Critical 11931 Critical 10735 Critical 10853 Critical 10816 Critical 10855 Critical 10482 Critical 10483 Critical 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11713 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11896 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11803 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11926 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10735 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10482 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5012647 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012647 5011503 11569 11571 11572 Yes Security Update 10.0.17763.2803 https://support.microsoft.com/help/5012647 11569 11571 11572 5012647 5012647 https://support.microsoft.com/help/5012647 11569 11571 11572 5012591 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012591 5011485 11713 Yes Security Update 10.0.18363.2212 https://support.microsoft.com/help/5012591 11713 5012591 5012591 https://support.microsoft.com/help/5012591 11713 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11896 Yes Security Update 10.0.19043.1645 https://support.microsoft.com/help/5012599 11896 5012599 5012599 https://support.microsoft.com/help/5012599 11896 11803 11931 5012604 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012604 5011497 11923 11924 Yes Security Update 10.0.20348.643 https://support.microsoft.com/help/5012604 11923 11924 5012604 5012604 https://support.microsoft.com/help/5012604 11923 11924 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11803 Yes Security Update 10.0.19042.1645 https://support.microsoft.com/help/5012599 11803 5012599 5012592 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012592 5011493 11926 Yes Security Update 10.0.22000.613 https://support.microsoft.com/help/5012592 11926 5012592 5012592 https://support.microsoft.com/help/5012592 11926 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11931 Yes Security Update 10.0.19044.1645 https://support.microsoft.com/help/5012599 11931 5012599 5012653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012653 5011491 10735 Yes Security Update 10.0.10240.19265 https://support.microsoft.com/help/5012653 10735 5012653 5012653 https://support.microsoft.com/help/5012653 10735 5012596 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012596 5011495 10853 10816 10855 Yes Security Update 10.0.14393.5066 https://support.microsoft.com/help/5012596 10853 10816 10855 5012596 5012596 https://support.microsoft.com/help/5012596 10853 10816 10855 5012670 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012670 5011564 10482 10483 10543 Yes Monthly Rollup 6.3.9600.20337 https://support.microsoft.com/help/5012670 10482 10483 10543 5012670 5012670 https://support.microsoft.com/help/5012670 10482 10483 10543 5012639 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012639 10482 10483 10543 Yes Security Only 6.3.9600.20337 https://support.microsoft.com/help/5012639 10482 10483 10543 5012639 5012639 https://support.microsoft.com/help/5012639 10482 10483 10543 <a href="https://twitter.com/rezer0dai">rezer0dai</a> with Independent Slavic Voyage 1.0 2022-04-12T07:00:00 <p>Information published.</p> Windows Hyper-V Remote Code Execution Vulnerability <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to take additional actions prior to exploitation to prepare the target environment.</p> <p><strong>According to the CVSS metric, the attack vector is local (AV:L). Why does the CVE title indicate that this is a remote code execution?</strong></p> <p>The word <strong>Remote</strong> in the title refers to the location of the attacker. This type of exploit is sometimes referred to as Arbitrary Code Execution (ACE). The attack itself is carried out locally.</p> <p>For example, when the score indicates that the <strong>Attack Vector</strong> is <strong>Local</strong> and <strong>User Interaction</strong> is <strong>Required</strong>, this could describe an exploit in which an attacker, through social engineering, convinces a victim to download and open a specially crafted file from a website which leads to a local attack on their computer.</p> <p><strong>According to the CVSS metric, a successful exploitation could lead to a scope change (S:C). What does this mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability could allow a Hyper-V guest to affect the functionality of the Hyper-V host.</p> Role: Windows Hyper-V Microsoft Yes CVE-2022-22009 11896 11923 11924 11803 11926 11931 Remote Code Execution 11896 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 11803 Remote Code Execution 11926 Remote Code Execution 11931 Important 11896 Important 11923 Important 11924 Important 11803 Important 11926 Important 11931 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11896 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11803 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11926 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11896 Yes Security Update 10.0.19043.1645 https://support.microsoft.com/help/5012599 11896 5012599 5012599 https://support.microsoft.com/help/5012599 11896 11803 11931 5012604 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012604 5011497 11923 11924 Yes Security Update 10.0.20348.643 https://support.microsoft.com/help/5012604 11923 11924 5012604 5012604 https://support.microsoft.com/help/5012604 11923 11924 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11803 Yes Security Update 10.0.19042.1645 https://support.microsoft.com/help/5012599 11803 5012599 5012592 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012592 5011493 11926 Yes Security Update 10.0.22000.613 https://support.microsoft.com/help/5012592 11926 5012592 5012592 https://support.microsoft.com/help/5012592 11926 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11931 Yes Security Update 10.0.19044.1645 https://support.microsoft.com/help/5012599 11931 5012599 <a href="https://twitter.com/rezer0dai">rezer0dai</a> with NoBananas NoBugzz 1.0 2022-04-12T07:00:00 <p>Information published.</p> Windows Hyper-V Remote Code Execution Vulnerability <p><strong>According to the CVSS metric, the attack vector is local (AV:L). Why does the CVE title indicate that this is a remote code execution?</strong></p> <p>The word <strong>Remote</strong> in the title refers to the location of the attacker. This type of exploit is sometimes referred to as Arbitrary Code Execution (ACE). The attack itself is carried out locally.</p> <p>For example, when the score indicates that the <strong>Attack Vector</strong> is <strong>Local</strong> and <strong>User Interaction</strong> is <strong>Required</strong>, this could describe an exploit in which an attacker, through social engineering, convinces a victim to download and open a specially crafted file from a website which leads to a local attack on their computer.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>To exploit this vulnerability, an attacker could run a specially crafted application on a Hyper-V guest that could cause the Hyper-V host operating system to execute arbitrary code.</p> <p><strong>According to the CVSS metric, a successful exploitation could lead to a scope change (S:C). What does this mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability could allow a Hyper-V guest to affect the functionality of the Hyper-V host.</p> Role: Windows Hyper-V Microsoft Yes CVE-2022-23257 12086 11896 11923 11924 11803 11926 11931 Remote Code Execution 12086 Remote Code Execution 11896 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 11803 Remote Code Execution 11926 Remote Code Execution 11931 Critical 12086 Critical 11896 Critical 11923 Critical 11924 Critical 11803 Critical 11926 Critical 11931 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12086 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11896 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11803 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11926 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 5023706 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5023706 5022845 12086 Yes Security Update 10.0.22621.1413 https://support.microsoft.com/help/5023706 12086 5023706 5023706 https://support.microsoft.com/help/5023706 12086 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11896 Yes Security Update 10.0.19043.1645 https://support.microsoft.com/help/5012599 11896 5012599 5012599 https://support.microsoft.com/help/5012599 11896 11803 11931 5012604 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012604 5011497 11923 11924 Yes Security Update 10.0.20348.643 https://support.microsoft.com/help/5012604 11923 11924 5012604 5012604 https://support.microsoft.com/help/5012604 11923 11924 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11803 Yes Security Update 10.0.19042.1645 https://support.microsoft.com/help/5012599 11803 5012599 5012592 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012592 5011493 11926 Yes Security Update 10.0.22000.613 https://support.microsoft.com/help/5012592 11926 5012592 5012592 https://support.microsoft.com/help/5012592 11926 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11931 Yes Security Update 10.0.19044.1645 https://support.microsoft.com/help/5012599 11931 5012599 <a href="https://twitter.com/australeo">Leo Adrien (@australeo)</a> <a href="https://twitter.com/rezer0dai">rezer0dai</a> with Capo di Frutti 1.0 2022-04-12T07:00:00 <p>Information published.</p> 2.0 2023-03-14T07:00:00 <p>In the Security Updates table, added Windows 11 Version 22H2 for x64-based Systems as this version of Windows is affected by this vulnerability. Microsoft strongly recommends that customers install the March 2023 updates to be fully protected from this vulnerability. Customers whose systems are configured to receive automatic updates do not need to take any further action.</p> Windows Common Log File System Driver Elevation of Privilege Vulnerability Windows Common Log File System Driver Microsoft Yes CVE-2022-24521 11568 11569 11570 11571 11572 11712 11713 11714 11896 11897 11898 11923 11924 11801 11802 11803 11926 11927 11929 11930 11931 10729 10735 10852 10853 10816 10855 10047 10048 10481 10482 10484 9312 10287 9318 9344 10051 10049 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11570 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11712 Elevation of Privilege 11713 Elevation of Privilege 11714 Elevation of Privilege 11896 Elevation of Privilege 11897 Elevation of Privilege 11898 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11801 Elevation of Privilege 11802 Elevation of Privilege 11803 Elevation of Privilege 11926 Elevation of Privilege 11927 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 10729 Elevation of Privilege 10735 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10047 Elevation of Privilege 10048 Elevation of Privilege 10481 Elevation of Privilege 10482 Elevation of Privilege 10484 Elevation of Privilege 9312 Elevation of Privilege 10287 Elevation of Privilege 9318 Elevation of Privilege 9344 Elevation of Privilege 10051 Elevation of Privilege 10049 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11570 Important 11571 Important 11572 Important 11712 Important 11713 Important 11714 Important 11896 Important 11897 Important 11898 Important 11923 Important 11924 Important 11801 Important 11802 Important 11803 Important 11926 Important 11927 Important 11929 Important 11930 Important 11931 Important 10729 Important 10735 Important 10852 Important 10853 Important 10816 Important 10855 Important 10047 Important 10048 Important 10481 Important 10482 Important 10484 Important 9312 Important 10287 Important 9318 Important 9344 Important 10051 Important 10049 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:Yes;Latest Software Release:Exploitation Detected;Older Software Release:Exploitation Detected 7.8 7.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 11568 7.8 7.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 11569 7.8 7.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 11570 7.8 7.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 11571 7.8 7.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 11572 7.8 7.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 11712 7.8 7.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 11713 7.8 7.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 11714 7.8 7.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 11896 7.8 7.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 11897 7.8 7.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 11898 7.8 7.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 11923 7.8 7.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 11924 7.8 7.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 11801 7.8 7.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 11802 7.8 7.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 11803 7.8 7.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 11926 7.8 7.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 11927 7.8 7.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 11929 7.8 7.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 11930 7.8 7.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 11931 7.8 7.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 10729 7.8 7.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 10735 7.8 7.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 10852 7.8 7.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 10853 7.8 7.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 10816 7.8 7.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 10855 7.8 7.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 10047 7.8 7.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 10048 7.8 7.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 10481 7.8 7.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 10482 7.8 7.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 10484 7.8 7.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 9312 7.8 7.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 10287 7.8 7.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 9318 7.8 7.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 9344 7.8 7.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 10051 7.8 7.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 10049 7.8 7.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 10378 7.8 7.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 10379 7.8 7.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 10483 7.8 7.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 10543 5012647 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012647 5011503 11568 11569 11570 11571 11572 Yes Security Update 10.0.17763.2803 https://support.microsoft.com/help/5012647 11568 11569 11570 11571 11572 5012647 5012647 https://support.microsoft.com/help/5012647 11568 11569 11570 11571 11572 5012591 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012591 5011485 11712 11713 11714 Yes Security Update 10.0.18363.2212 https://support.microsoft.com/help/5012591 11712 11713 11714 5012591 5012591 https://support.microsoft.com/help/5012591 11712 11713 11714 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11896 11897 11898 Yes Security Update 10.0.19043.1645 https://support.microsoft.com/help/5012599 11896 11897 11898 5012599 5012599 https://support.microsoft.com/help/5012599 11896 11897 11898 11801 11802 11803 11929 11930 11931 5012604 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012604 5011497 11923 11924 Yes Security Update 10.0.20348.643 https://support.microsoft.com/help/5012604 11923 11924 5012604 5012604 https://support.microsoft.com/help/5012604 11923 11924 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11801 11802 11803 Yes Security Update 10.0.19042.1645 https://support.microsoft.com/help/5012599 11801 11802 11803 5012599 5012592 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012592 5011493 11926 11927 Yes Security Update 10.0.22000.613 https://support.microsoft.com/help/5012592 11926 11927 5012592 5012592 https://support.microsoft.com/help/5012592 11926 11927 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11929 11930 11931 Yes Security Update 10.0.19044.1645 https://support.microsoft.com/help/5012599 11929 11930 11931 5012599 5012653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012653 5011491 10729 10735 Yes Security Update 10.0.10240.19265 https://support.microsoft.com/help/5012653 10729 10735 5012653 5012653 https://support.microsoft.com/help/5012653 10729 10735 5012596 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012596 5011495 10852 10853 10816 10855 Yes Security Update 10.0.14393.5066 https://support.microsoft.com/help/5012596 10852 10853 10816 10855 5012596 5012596 https://support.microsoft.com/help/5012596 10852 10853 10816 10855 5012626 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012626 5011552 10047 10048 10051 10049 Yes Monthly Rollup 6.1.7601.25924 https://support.microsoft.com/help/5012626 10047 10048 10051 10049 5012626 5012626 https://support.microsoft.com/help/5012626 10047 10048 10051 10049 5012649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012649 10047 10048 10051 10049 Yes Security Only 6.1.7601.25924 https://support.microsoft.com/help/5012649 10047 10048 10051 10049 5012649 5012649 https://support.microsoft.com/help/5012649 10047 10048 10051 10049 5012670 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012670 5011564 10481 10482 10483 10543 Yes Monthly Rollup 6.3.9600.20337 https://support.microsoft.com/help/5012670 10481 10482 10483 10543 5012670 5012670 https://support.microsoft.com/help/5012670 10481 10482 10484 10483 10543 5012639 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012639 10481 10482 10483 10543 Yes Security Only 6.3.9600.20337 https://support.microsoft.com/help/5012639 10481 10482 10483 10543 5012639 5012639 https://support.microsoft.com/help/5012639 10481 10482 10483 10543 5012670 5011564 10484 Yes Monthly Rollup 6.3.9600.20337 https://support.microsoft.com/help/5012639 10484 5012670 5012658 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012658 5011534 9312 10287 9318 9344 Yes Monthly Rollup 6.0.6003.21446 https://support.microsoft.com/help/5012658 9312 10287 9318 9344 5012658 5012658 https://support.microsoft.com/help/5012658 9312 10287 9318 9344 5012632 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012632 9312 10287 9318 9344 Yes Security Only 6.0.6003.21446 https://support.microsoft.com/help/5012632 9312 10287 9318 9344 5012632 5012632 https://support.microsoft.com/help/5012632 9312 10287 9318 9344 5012650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012650 5011535 10378 10379 Yes Monthly Rollup 6.2.9200.23679 https://support.microsoft.com/help/5012650 10378 10379 5012650 5012650 https://support.microsoft.com/help/5012650 10378 10379 5012666 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012666 10378 10379 Yes Security Only 6.2.9200.23679 https://support.microsoft.com/help/5012666 10378 10379 5012666 5012666 https://support.microsoft.com/help/5012666 10378 10379 Adam Podlosky and Amir Bazine of <a href="https://www.crowdstrike.com/">Crowdstrike</a> National Security Agency 1.0 2022-04-12T08:00:00 <p>Information published.</p> Windows Win32k Elevation of Privilege Vulnerability Windows Win32K Microsoft Yes CVE-2022-24474 11568 11569 11570 11571 11572 11712 11713 11714 11896 11897 11898 11923 11924 11801 11802 11803 11926 11927 11929 11930 11931 10729 10735 10852 10853 10816 10855 10047 10048 10481 10482 10484 9312 10287 9318 9344 10051 10049 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11570 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11712 Elevation of Privilege 11713 Elevation of Privilege 11714 Elevation of Privilege 11896 Elevation of Privilege 11897 Elevation of Privilege 11898 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11801 Elevation of Privilege 11802 Elevation of Privilege 11803 Elevation of Privilege 11926 Elevation of Privilege 11927 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 10729 Elevation of Privilege 10735 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10047 Elevation of Privilege 10048 Elevation of Privilege 10481 Elevation of Privilege 10482 Elevation of Privilege 10484 Elevation of Privilege 9312 Elevation of Privilege 10287 Elevation of Privilege 9318 Elevation of Privilege 9344 Elevation of Privilege 10051 Elevation of Privilege 10049 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11570 Important 11571 Important 11572 Important 11712 Important 11713 Important 11714 Important 11896 Important 11897 Important 11898 Important 11923 Important 11924 Important 11801 Important 11802 Important 11803 Important 11926 Important 11927 Important 11929 Important 11930 Important 11931 Important 10729 Important 10735 Important 10852 Important 10853 Important 10816 Important 10855 Important 10047 Important 10048 Important 10481 Important 10482 Important 10484 Important 9312 Important 10287 Important 9318 Important 9344 Important 10051 Important 10049 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation More Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11570 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11712 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11713 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11714 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11896 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11897 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11898 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11801 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11802 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11803 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11926 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11927 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10729 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10735 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10047 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10048 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10481 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10482 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10484 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9312 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10287 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9318 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9344 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10051 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10049 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5012647 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012647 5011503 11568 11569 11570 11571 11572 Yes Security Update 10.0.17763.2803 https://support.microsoft.com/help/5012647 11568 11569 11570 11571 11572 5012647 5012647 https://support.microsoft.com/help/5012647 11568 11569 11570 11571 11572 5012591 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012591 5011485 11712 11713 11714 Yes Security Update 10.0.18363.2212 https://support.microsoft.com/help/5012591 11712 11713 11714 5012591 5012591 https://support.microsoft.com/help/5012591 11712 11713 11714 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11896 11897 11898 Yes Security Update 10.0.19043.1645 https://support.microsoft.com/help/5012599 11896 11897 11898 5012599 5012599 https://support.microsoft.com/help/5012599 11896 11897 11898 11801 11802 11803 11929 11930 11931 5012604 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012604 5011497 11923 11924 Yes Security Update 10.0.20348.643 https://support.microsoft.com/help/5012604 11923 11924 5012604 5012604 https://support.microsoft.com/help/5012604 11923 11924 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11801 11802 11803 Yes Security Update 10.0.19042.1645 https://support.microsoft.com/help/5012599 11801 11802 11803 5012599 5012592 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012592 5011493 11926 11927 Yes Security Update 10.0.22000.613 https://support.microsoft.com/help/5012592 11926 11927 5012592 5012592 https://support.microsoft.com/help/5012592 11926 11927 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11929 11930 11931 Yes Security Update 10.0.19044.1645 https://support.microsoft.com/help/5012599 11929 11930 11931 5012599 5012653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012653 5011491 10729 10735 Yes Security Update 10.0.10240.19265 https://support.microsoft.com/help/5012653 10729 10735 5012653 5012653 https://support.microsoft.com/help/5012653 10729 10735 5012596 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012596 5011495 10852 10853 10816 10855 Yes Security Update 10.0.14393.5066 https://support.microsoft.com/help/5012596 10852 10853 10816 10855 5012596 5012596 https://support.microsoft.com/help/5012596 10852 10853 10816 10855 5012626 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012626 5011552 10047 10048 10051 10049 Yes Monthly Rollup 6.1.7601.25924 https://support.microsoft.com/help/5012626 10047 10048 10051 10049 5012626 5012626 https://support.microsoft.com/help/5012626 10047 10048 10051 10049 5012649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012649 10047 10048 10051 10049 Yes Security Only 6.1.7601.25924 https://support.microsoft.com/help/5012649 10047 10048 10051 10049 5012649 5012649 https://support.microsoft.com/help/5012649 10047 10048 10051 10049 5012670 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012670 5011564 10481 10482 10483 10543 Yes Monthly Rollup 6.3.9600.20337 https://support.microsoft.com/help/5012670 10481 10482 10483 10543 5012670 5012670 https://support.microsoft.com/help/5012670 10481 10482 10484 10483 10543 5012639 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012639 10481 10482 10483 10543 Yes Security Only 6.3.9600.20337 https://support.microsoft.com/help/5012639 10481 10482 10483 10543 5012639 5012639 https://support.microsoft.com/help/5012639 10481 10482 10483 10543 5012670 5011564 10484 Yes Monthly Rollup 6.3.9600.20337 https://support.microsoft.com/help/5012639 10484 5012670 5012658 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012658 5011534 9312 10287 9318 9344 Yes Monthly Rollup 6.0.6003.21446 https://support.microsoft.com/help/5012658 9312 10287 9318 9344 5012658 5012658 https://support.microsoft.com/help/5012658 9312 10287 9318 9344 5012632 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012632 9312 10287 9318 9344 Yes Security Only 6.0.6003.21446 https://support.microsoft.com/help/5012632 9312 10287 9318 9344 5012632 5012632 https://support.microsoft.com/help/5012632 9312 10287 9318 9344 5012650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012650 5011535 10378 10379 Yes Monthly Rollup 6.2.9200.23679 https://support.microsoft.com/help/5012650 10378 10379 5012650 5012650 https://support.microsoft.com/help/5012650 10378 10379 5012666 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012666 10378 10379 Yes Security Only 6.2.9200.23679 https://support.microsoft.com/help/5012666 10378 10379 5012666 5012666 https://support.microsoft.com/help/5012666 10378 10379 <a href="https://twitter.com/b2ahex">RyeLv(@b2ahex)</a> 1.0 2022-04-12T08:00:00 <p>Information published.</p> Microsoft Edge (Chromium-based) Spoofing Vulnerability <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>100.0.1185.29</td> <td>4/1/2022</td> <td>100.0.4896.60</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Microsoft Yes CVE-2022-24523 11655 Spoofing 11655 Moderate 11655 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 4.3 3.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:U/RL:O/RC:C 11655 Release Notes 11655 No Security Update 100.0.1185.29 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes <a href="https://hackerone.com/shadow2639">MOHIT RAJ</a> 1.0 2022-04-01T07:00:00 <p>Information published.</p> Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to take additional actions prior to exploitation to prepare the target environment.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>100.0.1185.29</td> <td>4/1/2022</td> <td>100.0.4896.60</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Microsoft Yes CVE-2022-24475 11655 Elevation of Privilege 11655 Important 11655 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 8.3 7.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11655 Release Notes 11655 No Security Update 100.0.1185.29 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes <a href="https://www.daviderceg.com/">David Erceg</a> 1.0 2022-04-01T07:00:00 <p>Information published.</p> Windows Cluster Shared Volume (CSV) Denial of Service Vulnerability Windows Cluster Shared Volume (CSV) Microsoft Yes CVE-2022-24484 11571 11572 11923 11924 11803 10816 10855 10378 10379 10483 10543 Denial of Service 11571 Denial of Service 11572 Denial of Service 11923 Denial of Service 11924 Denial of Service 11803 Denial of Service 10816 Denial of Service 10855 Denial of Service 10378 Denial of Service 10379 Denial of Service 10483 Denial of Service 10543 Important 11571 Important 11572 Important 11923 Important 11924 Important 11803 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11924 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11803 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10816 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10855 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10378 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10379 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10483 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10543 5012647 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012647 5011503 11571 11572 Yes Security Update 10.0.17763.2803 https://support.microsoft.com/help/5012647 11571 11572 5012647 5012647 https://support.microsoft.com/help/5012647 11571 11572 5012604 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012604 5011497 11923 11924 Yes Security Update 10.0.20348.643 https://support.microsoft.com/help/5012604 11923 11924 5012604 5012604 https://support.microsoft.com/help/5012604 11923 11924 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11803 Yes Security Update 10.0.19042.1645 https://support.microsoft.com/help/5012599 11803 5012599 5012599 https://support.microsoft.com/help/5012599 11803 5012596 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012596 5011495 10816 10855 Yes Security Update 10.0.14393.5066 https://support.microsoft.com/help/5012596 10816 10855 5012596 5012596 https://support.microsoft.com/help/5012596 10816 10855 5012650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012650 5011535 10378 10379 Yes Monthly Rollup 6.2.9200.23679 https://support.microsoft.com/help/5012650 10378 10379 5012650 5012650 https://support.microsoft.com/help/5012650 10378 10379 5012666 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012666 10378 10379 Yes Security Only 6.2.9200.23679 https://support.microsoft.com/help/5012666 10378 10379 5012666 5012666 https://support.microsoft.com/help/5012666 10378 10379 5012670 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012670 5011564 10483 10543 Yes Monthly Rollup 6.3.9600.20337 https://support.microsoft.com/help/5012670 10483 10543 5012670 5012670 https://support.microsoft.com/help/5012670 10483 10543 5012639 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012639 10483 10543 Yes Security Only 6.3.9600.20337 https://support.microsoft.com/help/5012639 10483 10543 5012639 5012639 https://support.microsoft.com/help/5012639 10483 10543 k0shl with Kunlun Lab 1.0 2022-04-12T08:00:00 <p>Information published.</p> Remote Desktop Protocol Remote Code Execution Vulnerability <p><strong>How would an attacker exploit this vulnerability?</strong></p> <p>An attacker would have to convince a targeted user to connect to a malicious RDP server. Upon connecting, the malicious server could read or tamper with clipboard contents and the victim's filesystem contents.</p> Windows RDP Microsoft Yes CVE-2022-24533 11568 11569 11570 11571 11572 11712 11713 11714 11896 11897 11898 11923 11924 11801 11802 11803 11926 11927 11929 11930 11931 10729 10735 10852 10853 10816 10855 10047 10048 10481 10482 10484 10051 10049 10378 10379 10483 10543 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11570 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11712 Remote Code Execution 11713 Remote Code Execution 11714 Remote Code Execution 11896 Remote Code Execution 11897 Remote Code Execution 11898 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 11801 Remote Code Execution 11802 Remote Code Execution 11803 Remote Code Execution 11926 Remote Code Execution 11927 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 10729 Remote Code Execution 10735 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10047 Remote Code Execution 10048 Remote Code Execution 10481 Remote Code Execution 10482 Remote Code Execution 10484 Remote Code Execution 10051 Remote Code Execution 10049 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Important 11568 Important 11569 Important 11570 Important 11571 Important 11572 Important 11712 Important 11713 Important 11714 Important 11896 Important 11897 Important 11898 Important 11923 Important 11924 Important 11801 Important 11802 Important 11803 Important 11926 Important 11927 Important 11929 Important 11930 Important 11931 Important 10729 Important 10735 Important 10852 Important 10853 Important 10816 Important 10855 Important 10047 Important 10048 Important 10481 Important 10482 Important 10484 Important 10051 Important 10049 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 8.0 7.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 8.0 7.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 8.0 7.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11570 8.0 7.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.0 7.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.0 7.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11712 8.0 7.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11713 8.0 7.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11714 8.0 7.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11896 8.0 7.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11897 8.0 7.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11898 8.0 7.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.0 7.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 8.0 7.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11801 8.0 7.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11802 8.0 7.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11803 8.0 7.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11926 8.0 7.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11927 8.0 7.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 8.0 7.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 8.0 7.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 8.0 7.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10729 8.0 7.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10735 8.0 7.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 8.0 7.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 8.0 7.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 8.0 7.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 8.0 7.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10047 8.0 7.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10048 8.0 7.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10481 8.0 7.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10482 8.0 7.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10484 8.0 7.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10051 8.0 7.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10049 8.0 7.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 8.0 7.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 8.0 7.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 8.0 7.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5012647 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012647 5011503 11568 11569 11570 11571 11572 Yes Security Update 10.0.17763.2803 https://support.microsoft.com/help/5012647 11568 11569 11570 11571 11572 5012647 5012647 https://support.microsoft.com/help/5012647 11568 11569 11570 11571 11572 5012591 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012591 5011485 11712 11713 11714 Yes Security Update 10.0.18363.2212 https://support.microsoft.com/help/5012591 11712 11713 11714 5012591 5012591 https://support.microsoft.com/help/5012591 11712 11713 11714 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11896 11897 11898 Yes Security Update 10.0.19043.1645 https://support.microsoft.com/help/5012599 11896 11897 11898 5012599 5012599 https://support.microsoft.com/help/5012599 11896 11897 11898 11801 11802 11803 11929 11930 11931 5012604 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012604 5011497 11923 11924 Yes Security Update 10.0.20348.643 https://support.microsoft.com/help/5012604 11923 11924 5012604 5012604 https://support.microsoft.com/help/5012604 11923 11924 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11801 11802 11803 Yes Security Update 10.0.19042.1645 https://support.microsoft.com/help/5012599 11801 11802 11803 5012599 5012592 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012592 5011493 11926 11927 Yes Security Update 10.0.22000.613 https://support.microsoft.com/help/5012592 11926 11927 5012592 5012592 https://support.microsoft.com/help/5012592 11926 11927 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11929 11930 11931 Yes Security Update 10.0.19044.1645 https://support.microsoft.com/help/5012599 11929 11930 11931 5012599 5012653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012653 5011491 10729 10735 Yes Security Update 10.0.10240.19265 https://support.microsoft.com/help/5012653 10729 10735 5012653 5012653 https://support.microsoft.com/help/5012653 10729 10735 5012596 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012596 5011495 10852 10853 10816 10855 Yes Security Update 10.0.14393.5066 https://support.microsoft.com/help/5012596 10852 10853 10816 10855 5012596 5012596 https://support.microsoft.com/help/5012596 10852 10853 10816 10855 5012626 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012626 5011552 10047 10048 10051 10049 Yes Monthly Rollup 6.1.7601.25924 https://support.microsoft.com/help/5012626 10047 10048 10051 10049 5012626 5012626 https://support.microsoft.com/help/5012626 10047 10048 10051 10049 5012649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012649 10047 10048 10051 10049 Yes Security Only 6.1.7601.25924 https://support.microsoft.com/help/5012649 10047 10048 10051 10049 5012649 5012649 https://support.microsoft.com/help/5012649 10047 10048 10051 10049 5012670 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012670 5011564 10481 10482 10483 10543 Yes Monthly Rollup 6.3.9600.20337 https://support.microsoft.com/help/5012670 10481 10482 10483 10543 5012670 5012670 https://support.microsoft.com/help/5012670 10481 10482 10484 10483 10543 5012639 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012639 10481 10482 10483 10543 Yes Security Only 6.3.9600.20337 https://support.microsoft.com/help/5012639 10481 10482 10483 10543 5012639 5012639 https://support.microsoft.com/help/5012639 10481 10482 10483 10543 5012670 5011564 10484 Yes Monthly Rollup 6.3.9600.20337 https://support.microsoft.com/help/5012639 10484 5012670 5012650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012650 5011535 10378 10379 Yes Monthly Rollup 6.2.9200.23679 https://support.microsoft.com/help/5012650 10378 10379 5012650 5012650 https://support.microsoft.com/help/5012650 10378 10379 5012666 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012666 10378 10379 Yes Security Only 6.2.9200.23679 https://support.microsoft.com/help/5012666 10378 10379 5012666 5012666 https://support.microsoft.com/help/5012666 10378 10379 <a href="https://github.com/gabriel-sztejnworcel">Gabriel Sztejnworcel</a> with <a href="https://labs.cyberark.com">CyberArk</a> 1.0 2022-04-12T08:00:00 <p>Information published.</p> Win32 File Enumeration Remote Code Execution Vulnerability <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to take additional actions prior to exploitation to prepare the target environment.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>This vulnerability requires that a user with an affected version of Windows access a malicious server. An attacker would have to host a specially crafted server share or website. An attacker would have no way to force users to visit this specially crafted server share or website, but would have to convince them to visit the server share or website, typically by way of an enticement in an email or chat message.</p> Windows kernel32.dll Microsoft Yes CVE-2022-24485 11568 11569 11570 11571 11572 11712 11713 11714 11896 11897 11898 11923 11924 11801 11802 11803 11926 11927 11929 11930 11931 10729 10735 10852 10853 10816 10855 10047 10048 10481 10482 10484 9312 10287 9318 9344 10051 10049 10378 10379 10483 10543 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11570 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11712 Remote Code Execution 11713 Remote Code Execution 11714 Remote Code Execution 11896 Remote Code Execution 11897 Remote Code Execution 11898 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 11801 Remote Code Execution 11802 Remote Code Execution 11803 Remote Code Execution 11926 Remote Code Execution 11927 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 10729 Remote Code Execution 10735 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10047 Remote Code Execution 10048 Remote Code Execution 10481 Remote Code Execution 10482 Remote Code Execution 10484 Remote Code Execution 9312 Remote Code Execution 10287 Remote Code Execution 9318 Remote Code Execution 9344 Remote Code Execution 10051 Remote Code Execution 10049 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Important 11568 Important 11569 Important 11570 Important 11571 Important 11572 Important 11712 Important 11713 Important 11714 Important 11896 Important 11897 Important 11898 Important 11923 Important 11924 Important 11801 Important 11802 Important 11803 Important 11926 Important 11927 Important 11929 Important 11930 Important 11931 Important 10729 Important 10735 Important 10852 Important 10853 Important 10816 Important 10855 Important 10047 Important 10048 Important 10481 Important 10482 Important 10484 Important 9312 Important 10287 Important 9318 Important 9344 Important 10051 Important 10049 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11570 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11712 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11713 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11714 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11896 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11897 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11898 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11801 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11802 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11803 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11926 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11927 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10729 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10735 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10047 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10048 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10481 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10482 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10484 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9312 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10287 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9318 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9344 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10051 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10049 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5012647 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012647 5011503 11568 11569 11570 11571 11572 Yes Security Update 10.0.17763.2803 https://support.microsoft.com/help/5012647 11568 11569 11570 11571 11572 5012647 5012647 https://support.microsoft.com/help/5012647 11568 11569 11570 11571 11572 5012591 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012591 5011485 11712 11713 11714 Yes Security Update 10.0.18363.2212 https://support.microsoft.com/help/5012591 11712 11713 11714 5012591 5012591 https://support.microsoft.com/help/5012591 11712 11713 11714 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11896 11897 11898 Yes Security Update 10.0.19043.1645 https://support.microsoft.com/help/5012599 11896 11897 11898 5012599 5012599 https://support.microsoft.com/help/5012599 11896 11897 11898 11801 11802 11803 11929 11930 11931 5012604 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012604 5011497 11923 11924 Yes Security Update 10.0.20348.643 https://support.microsoft.com/help/5012604 11923 11924 5012604 5012604 https://support.microsoft.com/help/5012604 11923 11924 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11801 11802 11803 Yes Security Update 10.0.19042.1645 https://support.microsoft.com/help/5012599 11801 11802 11803 5012599 5012592 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012592 5011493 11926 11927 Yes Security Update 10.0.22000.613 https://support.microsoft.com/help/5012592 11926 11927 5012592 5012592 https://support.microsoft.com/help/5012592 11926 11927 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11929 11930 11931 Yes Security Update 10.0.19044.1645 https://support.microsoft.com/help/5012599 11929 11930 11931 5012599 5012653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012653 5011491 10729 10735 Yes Security Update 10.0.10240.19265 https://support.microsoft.com/help/5012653 10729 10735 5012653 5012653 https://support.microsoft.com/help/5012653 10729 10735 5012596 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012596 5011495 10852 10853 10816 10855 Yes Security Update 10.0.14393.5066 https://support.microsoft.com/help/5012596 10852 10853 10816 10855 5012596 5012596 https://support.microsoft.com/help/5012596 10852 10853 10816 10855 5012626 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012626 5011552 10047 10048 10051 10049 Yes Monthly Rollup 6.1.7601.25924 https://support.microsoft.com/help/5012626 10047 10048 10051 10049 5012626 5012626 https://support.microsoft.com/help/5012626 10047 10048 10051 10049 5012649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012649 10047 10048 10051 10049 Yes Security Only 6.1.7601.25924 https://support.microsoft.com/help/5012649 10047 10048 10051 10049 5012649 5012649 https://support.microsoft.com/help/5012649 10047 10048 10051 10049 5012670 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012670 5011564 10481 10482 10483 10543 Yes Monthly Rollup 6.3.9600.20337 https://support.microsoft.com/help/5012670 10481 10482 10483 10543 5012670 5012670 https://support.microsoft.com/help/5012670 10481 10482 10484 10483 10543 5012639 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012639 10481 10482 10483 10543 Yes Security Only 6.3.9600.20337 https://support.microsoft.com/help/5012639 10481 10482 10483 10543 5012639 5012639 https://support.microsoft.com/help/5012639 10481 10482 10483 10543 5012670 5011564 10484 Yes Monthly Rollup 6.3.9600.20337 https://support.microsoft.com/help/5012639 10484 5012670 5012658 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012658 5011534 9312 10287 9318 9344 Yes Monthly Rollup 6.0.6003.21446 https://support.microsoft.com/help/5012658 9312 10287 9318 9344 5012658 5012658 https://support.microsoft.com/help/5012658 9312 10287 9318 9344 5012632 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012632 9312 10287 9318 9344 Yes Security Only 6.0.6003.21446 https://support.microsoft.com/help/5012632 9312 10287 9318 9344 5012632 5012632 https://support.microsoft.com/help/5012632 9312 10287 9318 9344 5012650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012650 5011535 10378 10379 Yes Monthly Rollup 6.2.9200.23679 https://support.microsoft.com/help/5012650 10378 10379 5012650 5012650 https://support.microsoft.com/help/5012650 10378 10379 5012666 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012666 10378 10379 Yes Security Only 6.2.9200.23679 https://support.microsoft.com/help/5012666 10378 10379 5012666 5012666 https://support.microsoft.com/help/5012666 10378 10379 <p>Mitigation refers to a setting, common configuration, or general best-practice, existing in a default state, that could reduce the severity of exploitation of a vulnerability. The following mitigating factors may be helpful in your situation:</p> <p><strong>1. Block TCP port 445 at the enterprise perimeter firewall</strong></p> <p>TCP port 445 is used to initiate a connection with the affected component. Blocking this port at the network perimeter firewall will help protect systems that are behind that firewall from attempts to exploit this vulnerability. This can help protect networks from attacks that originate outside the enterprise perimeter. Blocking the affected ports at the enterprise perimeter is the best defense to help avoid Internet-based attacks. <strong>However, systems could still be vulnerable to attacks from within their enterprise perimeter.</strong></p> <p><strong>2. Follow Microsoft guidelines to secure SMB traffic</strong></p> <p><a href="https://docs.microsoft.com/windows-server/storage/file-server/smb-secure-traffic">Secure SMB Traffic in Windows Server</a>.</p> Yuki Chen with <a href="https://www.cyberkl.com/">Cyber KunLun</a> 1.0 2022-04-12T08:00:00 <p>Information published.</p> Win32 Stream Enumeration Remote Code Execution Vulnerability <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to take additional actions prior to exploitation to prepare the target environment.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>This vulnerability requires that a user with an affected version of Windows access a malicious server. An attacker would have to host a specially crafted server share or website. An attacker would have no way to force users to visit this specially crafted server share or website, but would have to convince them to visit the server share or website, typically by way of an enticement in an email or chat message.</p> Windows kernel32.dll Microsoft Yes CVE-2022-24534 11568 11569 11570 11571 11572 11712 11713 11714 11896 11897 11898 11923 11924 11801 11802 11803 11926 11927 11929 11930 11931 10729 10735 10852 10853 10816 10855 10047 10048 10481 10482 10484 9312 10287 9318 9344 10051 10049 10378 10379 10483 10543 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11570 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11712 Remote Code Execution 11713 Remote Code Execution 11714 Remote Code Execution 11896 Remote Code Execution 11897 Remote Code Execution 11898 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 11801 Remote Code Execution 11802 Remote Code Execution 11803 Remote Code Execution 11926 Remote Code Execution 11927 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 10729 Remote Code Execution 10735 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10047 Remote Code Execution 10048 Remote Code Execution 10481 Remote Code Execution 10482 Remote Code Execution 10484 Remote Code Execution 9312 Remote Code Execution 10287 Remote Code Execution 9318 Remote Code Execution 9344 Remote Code Execution 10051 Remote Code Execution 10049 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Important 11568 Important 11569 Important 11570 Important 11571 Important 11572 Important 11712 Important 11713 Important 11714 Important 11896 Important 11897 Important 11898 Important 11923 Important 11924 Important 11801 Important 11802 Important 11803 Important 11926 Important 11927 Important 11929 Important 11930 Important 11931 Important 10729 Important 10735 Important 10852 Important 10853 Important 10816 Important 10855 Important 10047 Important 10048 Important 10481 Important 10482 Important 10484 Important 9312 Important 10287 Important 9318 Important 9344 Important 10051 Important 10049 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11570 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11712 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11713 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11714 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11896 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11897 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11898 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11801 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11802 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11803 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11926 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11927 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10729 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10735 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10047 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10048 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10481 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10482 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10484 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9312 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10287 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9318 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9344 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10051 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10049 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5012647 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012647 5011503 11568 11569 11570 11571 11572 Yes Security Update 10.0.17763.2803 https://support.microsoft.com/help/5012647 11568 11569 11570 11571 11572 5012647 5012647 https://support.microsoft.com/help/5012647 11568 11569 11570 11571 11572 5012591 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012591 5011485 11712 11713 11714 Yes Security Update 10.0.18363.2212 https://support.microsoft.com/help/5012591 11712 11713 11714 5012591 5012591 https://support.microsoft.com/help/5012591 11712 11713 11714 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11896 11897 11898 Yes Security Update 10.0.19043.1645 https://support.microsoft.com/help/5012599 11896 11897 11898 5012599 5012599 https://support.microsoft.com/help/5012599 11896 11897 11898 11801 11802 11803 11929 11930 11931 5012604 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012604 5011497 11923 11924 Yes Security Update 10.0.20348.643 https://support.microsoft.com/help/5012604 11923 11924 5012604 5012604 https://support.microsoft.com/help/5012604 11923 11924 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11801 11802 11803 Yes Security Update 10.0.19042.1645 https://support.microsoft.com/help/5012599 11801 11802 11803 5012599 5012592 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012592 5011493 11926 11927 Yes Security Update 10.0.22000.613 https://support.microsoft.com/help/5012592 11926 11927 5012592 5012592 https://support.microsoft.com/help/5012592 11926 11927 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11929 11930 11931 Yes Security Update 10.0.19044.1645 https://support.microsoft.com/help/5012599 11929 11930 11931 5012599 5012653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012653 5011491 10729 10735 Yes Security Update 10.0.10240.19265 https://support.microsoft.com/help/5012653 10729 10735 5012653 5012653 https://support.microsoft.com/help/5012653 10729 10735 5012596 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012596 5011495 10852 10853 10816 10855 Yes Security Update 10.0.14393.5066 https://support.microsoft.com/help/5012596 10852 10853 10816 10855 5012596 5012596 https://support.microsoft.com/help/5012596 10852 10853 10816 10855 5012626 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012626 5011552 10047 10048 10051 10049 Yes Monthly Rollup 6.1.7601.25924 https://support.microsoft.com/help/5012626 10047 10048 10051 10049 5012626 5012626 https://support.microsoft.com/help/5012626 10047 10048 10051 10049 5012649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012649 10047 10048 10051 10049 Yes Security Only 6.1.7601.25924 https://support.microsoft.com/help/5012649 10047 10048 10051 10049 5012649 5012649 https://support.microsoft.com/help/5012649 10047 10048 10051 10049 5012670 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012670 5011564 10481 10482 10483 10543 Yes Monthly Rollup 6.3.9600.20337 https://support.microsoft.com/help/5012670 10481 10482 10483 10543 5012670 5012670 https://support.microsoft.com/help/5012670 10481 10482 10484 10483 10543 5012639 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012639 10481 10482 10483 10543 Yes Security Only 6.3.9600.20337 https://support.microsoft.com/help/5012639 10481 10482 10483 10543 5012639 5012639 https://support.microsoft.com/help/5012639 10481 10482 10483 10543 5012670 5011564 10484 Yes Monthly Rollup 6.3.9600.20337 https://support.microsoft.com/help/5012639 10484 5012670 5012658 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012658 5011534 9312 10287 9318 9344 Yes Monthly Rollup 6.0.6003.21446 https://support.microsoft.com/help/5012658 9312 10287 9318 9344 5012658 5012658 https://support.microsoft.com/help/5012658 9312 10287 9318 9344 5012632 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012632 9312 10287 9318 9344 Yes Security Only 6.0.6003.21446 https://support.microsoft.com/help/5012632 9312 10287 9318 9344 5012632 5012632 https://support.microsoft.com/help/5012632 9312 10287 9318 9344 5012650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012650 5011535 10378 10379 Yes Monthly Rollup 6.2.9200.23679 https://support.microsoft.com/help/5012650 10378 10379 5012650 5012650 https://support.microsoft.com/help/5012650 10378 10379 5012666 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012666 10378 10379 Yes Security Only 6.2.9200.23679 https://support.microsoft.com/help/5012666 10378 10379 5012666 5012666 https://support.microsoft.com/help/5012666 10378 10379 <p>Mitigation refers to a setting, common configuration, or general best-practice, existing in a default state, that could reduce the severity of exploitation of a vulnerability. The following mitigating factors may be helpful in your situation:</p> <p><strong>1. Block TCP port 445 at the enterprise perimeter firewall</strong></p> <p>TCP port 445 is used to initiate a connection with the affected component. Blocking this port at the network perimeter firewall will help protect systems that are behind that firewall from attempts to exploit this vulnerability. This can help protect networks from attacks that originate outside the enterprise perimeter. Blocking the affected ports at the enterprise perimeter is the best defense to help avoid Internet-based attacks. <strong>However, systems could still be vulnerable to attacks from within their enterprise perimeter.</strong></p> <p><strong>2. Follow Microsoft guidelines to secure SMB traffic</strong></p> <p><a href="https://docs.microsoft.com/windows-server/storage/file-server/smb-secure-traffic">Secure SMB Traffic in Windows Server</a>.</p> Yuki Chen with <a href="https://www.cyberkl.com/">Cyber KunLun</a> 1.0 2022-04-12T08:00:00 <p>Information published.</p> Windows Kerberos Elevation of Privilege Vulnerability Windows Kerberos Microsoft Yes CVE-2022-24486 11568 11569 11570 11571 11572 11712 11713 11714 11896 11897 11898 11923 11924 11801 11802 11803 11926 11927 11929 11930 11931 10729 10735 10852 10853 10816 10855 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11570 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11712 Elevation of Privilege 11713 Elevation of Privilege 11714 Elevation of Privilege 11896 Elevation of Privilege 11897 Elevation of Privilege 11898 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11801 Elevation of Privilege 11802 Elevation of Privilege 11803 Elevation of Privilege 11926 Elevation of Privilege 11927 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 10729 Elevation of Privilege 10735 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Important 11568 Important 11569 Important 11570 Important 11571 Important 11572 Important 11712 Important 11713 Important 11714 Important 11896 Important 11897 Important 11898 Important 11923 Important 11924 Important 11801 Important 11802 Important 11803 Important 11926 Important 11927 Important 11929 Important 11930 Important 11931 Important 10729 Important 10735 Important 10852 Important 10853 Important 10816 Important 10855 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11570 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11712 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11713 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11714 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11896 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11897 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11898 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11801 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11802 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11803 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11926 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11927 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10729 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10735 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 5012647 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012647 5011503 11568 11569 11570 11571 11572 Yes Security Update 10.0.17763.2803 https://support.microsoft.com/help/5012647 11568 11569 11570 11571 11572 5012647 5012647 https://support.microsoft.com/help/5012647 11568 11569 11570 11571 11572 5012591 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012591 5011485 11712 11713 11714 Yes Security Update 10.0.18363.2212 https://support.microsoft.com/help/5012591 11712 11713 11714 5012591 5012591 https://support.microsoft.com/help/5012591 11712 11713 11714 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11896 11897 11898 Yes Security Update 10.0.19043.1645 https://support.microsoft.com/help/5012599 11896 11897 11898 5012599 5012599 https://support.microsoft.com/help/5012599 11896 11897 11898 11801 11802 11803 11929 11930 11931 5012604 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012604 5011497 11923 11924 Yes Security Update 10.0.20348.643 https://support.microsoft.com/help/5012604 11923 11924 5012604 5012604 https://support.microsoft.com/help/5012604 11923 11924 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11801 11802 11803 Yes Security Update 10.0.19042.1645 https://support.microsoft.com/help/5012599 11801 11802 11803 5012599 5012592 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012592 5011493 11926 11927 Yes Security Update 10.0.22000.613 https://support.microsoft.com/help/5012592 11926 11927 5012592 5012592 https://support.microsoft.com/help/5012592 11926 11927 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11929 11930 11931 Yes Security Update 10.0.19044.1645 https://support.microsoft.com/help/5012599 11929 11930 11931 5012599 5012653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012653 5011491 10729 10735 Yes Security Update 10.0.10240.19265 https://support.microsoft.com/help/5012653 10729 10735 5012653 5012653 https://support.microsoft.com/help/5012653 10729 10735 5012596 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012596 5011495 10852 10853 10816 10855 Yes Security Update 10.0.14393.5066 https://support.microsoft.com/help/5012596 10852 10853 10816 10855 5012596 5012596 https://support.microsoft.com/help/5012596 10852 10853 10816 10855 Microsoft Offensive Research & Security Engineering (MORSE) 1.0 2022-04-12T08:00:00 <p>Information published.</p> Windows Kerberos Elevation of Privilege Vulnerability Windows Kerberos Microsoft Yes CVE-2022-24544 11568 11569 11570 11571 11572 11712 11713 11714 11896 11897 11898 11923 11924 11801 11802 11803 11926 11927 11929 11930 11931 10729 10735 10852 10853 10816 10855 10047 10048 10481 10482 10484 9312 10287 9318 9344 10051 10049 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11570 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11712 Elevation of Privilege 11713 Elevation of Privilege 11714 Elevation of Privilege 11896 Elevation of Privilege 11897 Elevation of Privilege 11898 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11801 Elevation of Privilege 11802 Elevation of Privilege 11803 Elevation of Privilege 11926 Elevation of Privilege 11927 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 10729 Elevation of Privilege 10735 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10047 Elevation of Privilege 10048 Elevation of Privilege 10481 Elevation of Privilege 10482 Elevation of Privilege 10484 Elevation of Privilege 9312 Elevation of Privilege 10287 Elevation of Privilege 9318 Elevation of Privilege 9344 Elevation of Privilege 10051 Elevation of Privilege 10049 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11570 Important 11571 Important 11572 Important 11712 Important 11713 Important 11714 Important 11896 Important 11897 Important 11898 Important 11923 Important 11924 Important 11801 Important 11802 Important 11803 Important 11926 Important 11927 Important 11929 Important 11930 Important 11931 Important 10729 Important 10735 Important 10852 Important 10853 Important 10816 Important 10855 Important 10047 Important 10048 Important 10481 Important 10482 Important 10484 Important 9312 Important 10287 Important 9318 Important 9344 Important 10051 Important 10049 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11570 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11712 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11713 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11714 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11896 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11897 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11898 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11801 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11802 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11803 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11926 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11927 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10729 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10735 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10047 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10048 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10481 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10482 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10484 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9312 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10287 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9318 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9344 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10051 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10049 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5012647 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012647 5011503 11568 11569 11570 11571 11572 Yes Security Update 10.0.17763.2803 https://support.microsoft.com/help/5012647 11568 11569 11570 11571 11572 5012647 5012647 https://support.microsoft.com/help/5012647 11568 11569 11570 11571 11572 5012591 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012591 5011485 11712 11713 11714 Yes Security Update 10.0.18363.2212 https://support.microsoft.com/help/5012591 11712 11713 11714 5012591 5012591 https://support.microsoft.com/help/5012591 11712 11713 11714 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11896 11897 11898 Yes Security Update 10.0.19043.1645 https://support.microsoft.com/help/5012599 11896 11897 11898 5012599 5012599 https://support.microsoft.com/help/5012599 11896 11897 11898 11801 11802 11803 11929 11930 11931 5012604 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012604 5011497 11923 11924 Yes Security Update 10.0.20348.643 https://support.microsoft.com/help/5012604 11923 11924 5012604 5012604 https://support.microsoft.com/help/5012604 11923 11924 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11801 11802 11803 Yes Security Update 10.0.19042.1645 https://support.microsoft.com/help/5012599 11801 11802 11803 5012599 5012592 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012592 5011493 11926 11927 Yes Security Update 10.0.22000.613 https://support.microsoft.com/help/5012592 11926 11927 5012592 5012592 https://support.microsoft.com/help/5012592 11926 11927 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11929 11930 11931 Yes Security Update 10.0.19044.1645 https://support.microsoft.com/help/5012599 11929 11930 11931 5012599 5012653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012653 5011491 10729 10735 Yes Security Update 10.0.10240.19265 https://support.microsoft.com/help/5012653 10729 10735 5012653 5012653 https://support.microsoft.com/help/5012653 10729 10735 5012596 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012596 5011495 10852 10853 10816 10855 Yes Security Update 10.0.14393.5066 https://support.microsoft.com/help/5012596 10852 10853 10816 10855 5012596 5012596 https://support.microsoft.com/help/5012596 10852 10853 10816 10855 5012626 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012626 5011552 10047 10048 10051 10049 Yes Monthly Rollup 6.1.7601.25924 https://support.microsoft.com/help/5012626 10047 10048 10051 10049 5012626 5012626 https://support.microsoft.com/help/5012626 10047 10048 10051 10049 5012649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012649 10047 10048 10051 10049 Yes Security Only 6.1.7601.25924 https://support.microsoft.com/help/5012649 10047 10048 10051 10049 5012649 5012649 https://support.microsoft.com/help/5012649 10047 10048 10051 10049 5012670 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012670 5011564 10481 10482 10483 10543 Yes Monthly Rollup 6.3.9600.20337 https://support.microsoft.com/help/5012670 10481 10482 10483 10543 5012670 5012670 https://support.microsoft.com/help/5012670 10481 10482 10484 10483 10543 5012639 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012639 10481 10482 10483 10543 Yes Security Only 6.3.9600.20337 https://support.microsoft.com/help/5012639 10481 10482 10483 10543 5012639 5012639 https://support.microsoft.com/help/5012639 10481 10482 10483 10543 5012670 5011564 10484 Yes Monthly Rollup 6.3.9600.20337 https://support.microsoft.com/help/5012639 10484 5012670 5012658 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012658 5011534 9312 10287 9318 9344 Yes Monthly Rollup 6.0.6003.21446 https://support.microsoft.com/help/5012658 9312 10287 9318 9344 5012658 5012658 https://support.microsoft.com/help/5012658 9312 10287 9318 9344 5012632 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012632 9312 10287 9318 9344 Yes Security Only 6.0.6003.21446 https://support.microsoft.com/help/5012632 9312 10287 9318 9344 5012632 5012632 https://support.microsoft.com/help/5012632 9312 10287 9318 9344 5012650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012650 5011535 10378 10379 Yes Monthly Rollup 6.2.9200.23679 https://support.microsoft.com/help/5012650 10378 10379 5012650 5012650 https://support.microsoft.com/help/5012650 10378 10379 5012666 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012666 10378 10379 Yes Security Only 6.2.9200.23679 https://support.microsoft.com/help/5012666 10378 10379 5012666 5012666 https://support.microsoft.com/help/5012666 10378 10379 Microsoft Offensive Research & Security Engineering (MORSE) 1.0 2022-04-12T08:00:00 <p>Information published.</p> Windows Local Security Authority (LSA) Elevation of Privilege Vulnerability Windows Local Security Authority Subsystem Service (LSASS) Microsoft Yes CVE-2022-24496 11568 11569 11570 11571 11572 11712 11713 11714 11896 11897 11898 11923 11924 11801 11802 11803 11926 11927 11929 11930 11931 10852 10853 10816 10855 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11570 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11712 Elevation of Privilege 11713 Elevation of Privilege 11714 Elevation of Privilege 11896 Elevation of Privilege 11897 Elevation of Privilege 11898 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11801 Elevation of Privilege 11802 Elevation of Privilege 11803 Elevation of Privilege 11926 Elevation of Privilege 11927 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Important 11568 Important 11569 Important 11570 Important 11571 Important 11572 Important 11712 Important 11713 Important 11714 Important 11896 Important 11897 Important 11898 Important 11923 Important 11924 Important 11801 Important 11802 Important 11803 Important 11926 Important 11927 Important 11929 Important 11930 Important 11931 Important 10852 Important 10853 Important 10816 Important 10855 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11570 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11712 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11713 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11714 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11896 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11897 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11898 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11801 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11802 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11803 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11926 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11927 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 5012647 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012647 5011503 11568 11569 11570 11571 11572 Yes Security Update 10.0.17763.2803 https://support.microsoft.com/help/5012647 11568 11569 11570 11571 11572 5012647 5012647 https://support.microsoft.com/help/5012647 11568 11569 11570 11571 11572 5012591 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012591 5011485 11712 11713 11714 Yes Security Update 10.0.18363.2212 https://support.microsoft.com/help/5012591 11712 11713 11714 5012591 5012591 https://support.microsoft.com/help/5012591 11712 11713 11714 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11896 11897 11898 Yes Security Update 10.0.19043.1645 https://support.microsoft.com/help/5012599 11896 11897 11898 5012599 5012599 https://support.microsoft.com/help/5012599 11896 11897 11898 11801 11802 11803 11929 11930 11931 5012604 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012604 5011497 11923 11924 Yes Security Update 10.0.20348.643 https://support.microsoft.com/help/5012604 11923 11924 5012604 5012604 https://support.microsoft.com/help/5012604 11923 11924 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11801 11802 11803 Yes Security Update 10.0.19042.1645 https://support.microsoft.com/help/5012599 11801 11802 11803 5012599 5012592 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012592 5011493 11926 11927 Yes Security Update 10.0.22000.613 https://support.microsoft.com/help/5012592 11926 11927 5012592 5012592 https://support.microsoft.com/help/5012592 11926 11927 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11929 11930 11931 Yes Security Update 10.0.19044.1645 https://support.microsoft.com/help/5012599 11929 11930 11931 5012599 5012596 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012596 5011495 10852 10853 10816 10855 Yes Security Update 10.0.14393.5066 https://support.microsoft.com/help/5012596 10852 10853 10816 10855 5012596 5012596 https://support.microsoft.com/help/5012596 10852 10853 10816 10855 Microsoft Offensive Research & Security Engineering (MORSE) 1.0 2022-04-12T08:00:00 <p>Information published.</p> Windows Kerberos Remote Code Execution Vulnerability <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to gather information specific to the environment of the targeted component.</p> <p><strong>According to the CVSS metric, the attack vector is local (AV:L). Why does the CVE title indicate that this is a remote code execution?</strong></p> <p>The word <strong>Remote</strong> in the title refers to the location of the attacker. This type of exploit is sometimes referred to as Arbitrary Code Execution (ACE). The attack itself is carried out locally.</p> <p>For example, when the score indicates that the <strong>Attack Vector</strong> is <strong>Local</strong> and <strong>User Interaction</strong> is <strong>Required</strong>, this could describe an exploit in which an attacker, through social engineering, convinces a victim to download and open a specially crafted file from a website which leads to a local attack on their computer.</p> <p><strong>How do I know if my system is affected by this vulnerability?</strong></p> <p>For systems running Remote Desktop Connection, the server is secure by default. Systems are vulnerable when an administrator has enabled Restricted Admin or Windows Defender Remote Credential Guard on the remote host by using the Registry key setting (DWORD value named &quot;DisableRestrictedAdmin&quot;) as outlined in <a href="https://docs.microsoft.com/en-us/windows/security/identity-protection/remote-credential-guard">Protect Remote Desktop credentials with Windows Defender Remote Credential Guard</a>.</p> Windows Kerberos Microsoft Yes CVE-2022-24545 11568 11569 11570 11571 11572 11712 11713 11714 11896 11897 11898 11923 11924 11801 11802 11803 11926 11927 11929 11930 11931 10852 10853 10816 10855 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11570 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11712 Remote Code Execution 11713 Remote Code Execution 11714 Remote Code Execution 11896 Remote Code Execution 11897 Remote Code Execution 11898 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 11801 Remote Code Execution 11802 Remote Code Execution 11803 Remote Code Execution 11926 Remote Code Execution 11927 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Important 11568 Important 11569 Important 11570 Important 11571 Important 11572 Important 11712 Important 11713 Important 11714 Important 11896 Important 11897 Important 11898 Important 11923 Important 11924 Important 11801 Important 11802 Important 11803 Important 11926 Important 11927 Important 11929 Important 11930 Important 11931 Important 10852 Important 10853 Important 10816 Important 10855 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11570 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11712 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11713 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11714 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11896 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11897 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11898 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11801 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11802 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11803 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11926 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11927 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 5012647 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012647 5011503 11568 11569 11570 11571 11572 Yes Security Update 10.0.17763.2803 https://support.microsoft.com/help/5012647 11568 11569 11570 11571 11572 5012647 5012647 https://support.microsoft.com/help/5012647 11568 11569 11570 11571 11572 5012591 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012591 5011485 11712 11713 11714 Yes Security Update 10.0.18363.2212 https://support.microsoft.com/help/5012591 11712 11713 11714 5012591 5012591 https://support.microsoft.com/help/5012591 11712 11713 11714 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11896 11897 11898 Yes Security Update 10.0.19043.1645 https://support.microsoft.com/help/5012599 11896 11897 11898 5012599 5012599 https://support.microsoft.com/help/5012599 11896 11897 11898 11801 11802 11803 11929 11930 11931 5012604 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012604 5011497 11923 11924 Yes Security Update 10.0.20348.643 https://support.microsoft.com/help/5012604 11923 11924 5012604 5012604 https://support.microsoft.com/help/5012604 11923 11924 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11801 11802 11803 Yes Security Update 10.0.19042.1645 https://support.microsoft.com/help/5012599 11801 11802 11803 5012599 5012592 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012592 5011493 11926 11927 Yes Security Update 10.0.22000.613 https://support.microsoft.com/help/5012592 11926 11927 5012592 5012592 https://support.microsoft.com/help/5012592 11926 11927 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11929 11930 11931 Yes Security Update 10.0.19044.1645 https://support.microsoft.com/help/5012599 11929 11930 11931 5012599 5012596 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012596 5011495 10852 10853 10816 10855 Yes Security Update 10.0.14393.5066 https://support.microsoft.com/help/5012596 10852 10853 10816 10855 5012596 5012596 https://support.microsoft.com/help/5012596 10852 10853 10816 10855 James Forshaw of Google Project Zero Microsoft Offensive Research & Security Engineering (MORSE) 1.0 2022-04-12T08:00:00 <p>Information published.</p> Microsoft Defender Denial of Service Vulnerability <table> <thead> <tr> <th>References</th> <th>Identification</th> </tr> </thead> <tbody> <tr> <td>First version of the Microsoft Malware Protection Engine with this vulnerability addressed</td> <td>Version 1.1.19100.5</td> </tr> </tbody> </table> <p>See <a href="https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-antivirus/manage-updates-baselines-microsoft-defender-antivirus">Manage Updates Baselines Microsoft Defender Antivirus</a> for more information.</p> <p><strong>Microsoft Defender is disabled in my environment, why are vulnerability scanners showing that I am vulnerable to this issue?</strong></p> <p>Vulnerability scanners are looking for specific binaries and version numbers on devices. Microsoft Defender files are still on disk even when disabled. Systems that have disabled Microsoft Defender are not in an exploitable state.</p> <p><strong>Why is no action required to install this update?</strong></p> <p>In response to a constantly changing threat landscape, Microsoft frequently updates malware definitions and the Microsoft Malware Protection Engine. In order to be effective in helping protect against new and prevalent threats, antimalware software must be kept up to date with these updates in a timely manner.</p> <p>For enterprise deployments as well as end users, the default configuration in Microsoft antimalware software helps ensure that malware definitions and the Microsoft Malware Protection Engine are kept up to date automatically. Product documentation also recommends that products are configured for automatic updating.</p> <p>Best practices recommend that customers regularly verify whether software distribution, such as the automatic deployment of Microsoft Malware Protection Engine updates and malware definitions, is working as expected in their environment.</p> <p><strong>How often are the Microsoft Malware Protection Engine and malware definitions updated?</strong></p> <p>Microsoft typically releases an update for the Microsoft Malware Protection Engine once a month or as needed to protect against new threats. Microsoft also typically updates the malware definitions three times daily and can increase the frequency when needed.</p> <p>Depending on which Microsoft antimalware software is used and how it is configured, the software may search for engine and definition updates every day when connected to the Internet, up to multiple times daily. Customers can also choose to manually check for updates at any time.</p> <p><strong>What is the Microsoft Malware Protection Engine?</strong></p> <p>The Microsoft Malware Protection Engine, mpengine.dll, provides the scanning, detection, and cleaning capabilities for Microsoft antivirus and antispyware software.</p> <p><strong>Windows Defender uses the Microsoft Malware Protection Engine. On which products is Defender installed and active by default?</strong></p> <p>Defender runs on all supported version of Windows.</p> <p><strong>Are there other products that use the Microsoft Malware Protection Engine?</strong></p> <p>Yes, Microsoft System Center Endpoint Protection, Microsoft System Center 2012 R2 Endpoint Protection, Microsoft System Center 2012 Endpoint Protection and Microsoft Security Essentials.</p> <p><strong>Does this update contain any additional security-related changes to functionality?</strong></p> <p>Yes.  In addition to the changes that are listed for this vulnerability, this update includes defense-in-depth updates to help improve security-related features.</p> <h2 id="suggested-actions">Suggested Actions</h2> <p><strong>Verify that the update is installed</strong></p> <p>Customers should verify that the latest version of the Microsoft Malware Protection Engine and definition updates are being actively downloaded and installed for their Microsoft antimalware products.</p> <ol> <li>Open the Windows Security program. For example, type Security in the Search bar, and select the Windows Security program.</li> <li>In the navigation pane, select Virus &amp; threat protection.</li> <li>Under Virus &amp; threat protection updates in the main window, select Check for updates</li> <li>Select Check for updates again.</li> <li>In the navigation pane, select Settings, and then select About.</li> <li>Examine the Engine Version number. The update was successfully installed if the Malware Protection Engine version number or the signature package version number matches or exceeds the version number that you are trying to verify as installed.</li> </ol> Windows Defender Microsoft Yes CVE-2022-24548 11902 Denial of Service 11902 Important 11902 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11902 More Information 11902 No Security Update 1.1.19100.5 https://docs.microsoft.com/en-us/microsoft-365/security/defender-endpoint/manage-updates-baselines-microsoft-defender-antivirus?view=o365-worldwide 11902 More Information Daejin Lee, Seunghoe Kim, Donguk Kim of S2W Inc. 1.0 2022-04-12T08:00:00 <p>Information published.</p> Windows ALPC Elevation of Privilege Vulnerability <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows ALPC Microsoft Yes CVE-2022-24482 11568 11569 11570 11571 11572 11712 11713 11714 11896 11897 11898 11923 11924 11801 11802 11803 11926 11927 11929 11930 11931 10729 10735 10852 10853 10816 10855 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11570 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11712 Elevation of Privilege 11713 Elevation of Privilege 11714 Elevation of Privilege 11896 Elevation of Privilege 11897 Elevation of Privilege 11898 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11801 Elevation of Privilege 11802 Elevation of Privilege 11803 Elevation of Privilege 11926 Elevation of Privilege 11927 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 10729 Elevation of Privilege 10735 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Important 11568 Important 11569 Important 11570 Important 11571 Important 11572 Important 11712 Important 11713 Important 11714 Important 11896 Important 11897 Important 11898 Important 11923 Important 11924 Important 11801 Important 11802 Important 11803 Important 11926 Important 11927 Important 11929 Important 11930 Important 11931 Important 10729 Important 10735 Important 10852 Important 10853 Important 10816 Important 10855 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11570 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11712 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11713 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11714 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11896 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11897 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11898 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11801 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11802 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11803 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11926 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11927 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10729 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10735 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 5012647 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012647 5011503 11568 11569 11570 11571 11572 Yes Security Update 10.0.17763.2803 https://support.microsoft.com/help/5012647 11568 11569 11570 11571 11572 5012647 5012647 https://support.microsoft.com/help/5012647 11568 11569 11570 11571 11572 5012591 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012591 5011485 11712 11713 11714 Yes Security Update 10.0.18363.2212 https://support.microsoft.com/help/5012591 11712 11713 11714 5012591 5012591 https://support.microsoft.com/help/5012591 11712 11713 11714 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11896 11897 11898 Yes Security Update 10.0.19043.1645 https://support.microsoft.com/help/5012599 11896 11897 11898 5012599 5012599 https://support.microsoft.com/help/5012599 11896 11897 11898 11801 11802 11803 11929 11930 11931 5012604 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012604 5011497 11923 11924 Yes Security Update 10.0.20348.643 https://support.microsoft.com/help/5012604 11923 11924 5012604 5012604 https://support.microsoft.com/help/5012604 11923 11924 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11801 11802 11803 Yes Security Update 10.0.19042.1645 https://support.microsoft.com/help/5012599 11801 11802 11803 5012599 5012592 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012592 5011493 11926 11927 Yes Security Update 10.0.22000.613 https://support.microsoft.com/help/5012592 11926 11927 5012592 5012592 https://support.microsoft.com/help/5012592 11926 11927 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11929 11930 11931 Yes Security Update 10.0.19044.1645 https://support.microsoft.com/help/5012599 11929 11930 11931 5012599 5012653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012653 5011491 10729 10735 Yes Security Update 10.0.10240.19265 https://support.microsoft.com/help/5012653 10729 10735 5012653 5012653 https://support.microsoft.com/help/5012653 10729 10735 5012596 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012596 5011495 10852 10853 10816 10855 Yes Security Update 10.0.14393.5066 https://support.microsoft.com/help/5012596 10852 10853 10816 10855 5012596 5012596 https://support.microsoft.com/help/5012596 10852 10853 10816 10855 Jarvis_1oop 1.0 2022-04-05T07:00:00 <p>Information published.</p> Windows Installer Elevation of Privilege Vulnerability Windows Installer Microsoft Yes CVE-2022-24530 11568 11569 11570 11571 11572 11712 11713 11714 11896 11897 11898 11923 11924 11801 11802 11803 11926 11927 11929 11930 11931 10729 10735 10852 10853 10816 10855 10047 10048 10481 10482 10484 9312 10287 9318 9344 10051 10049 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11570 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11712 Elevation of Privilege 11713 Elevation of Privilege 11714 Elevation of Privilege 11896 Elevation of Privilege 11897 Elevation of Privilege 11898 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11801 Elevation of Privilege 11802 Elevation of Privilege 11803 Elevation of Privilege 11926 Elevation of Privilege 11927 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 10729 Elevation of Privilege 10735 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10047 Elevation of Privilege 10048 Elevation of Privilege 10481 Elevation of Privilege 10482 Elevation of Privilege 10484 Elevation of Privilege 9312 Elevation of Privilege 10287 Elevation of Privilege 9318 Elevation of Privilege 9344 Elevation of Privilege 10051 Elevation of Privilege 10049 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11570 Important 11571 Important 11572 Important 11712 Important 11713 Important 11714 Important 11896 Important 11897 Important 11898 Important 11923 Important 11924 Important 11801 Important 11802 Important 11803 Important 11926 Important 11927 Important 11929 Important 11930 Important 11931 Important 10729 Important 10735 Important 10852 Important 10853 Important 10816 Important 10855 Important 10047 Important 10048 Important 10481 Important 10482 Important 10484 Important 9312 Important 10287 Important 9318 Important 9344 Important 10051 Important 10049 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11570 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11712 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11713 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11714 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11896 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11897 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11898 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11801 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11802 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11803 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11926 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11927 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10729 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10735 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10047 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10048 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10481 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10482 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10484 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9312 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10287 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9318 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9344 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10051 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10049 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5012647 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012647 5011503 11568 11569 11570 11571 11572 Yes Security Update 10.0.17763.2803 https://support.microsoft.com/help/5012647 11568 11569 11570 11571 11572 5012647 5012647 https://support.microsoft.com/help/5012647 11568 11569 11570 11571 11572 5012591 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012591 5011485 11712 11713 11714 Yes Security Update 10.0.18363.2212 https://support.microsoft.com/help/5012591 11712 11713 11714 5012591 5012591 https://support.microsoft.com/help/5012591 11712 11713 11714 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11896 11897 11898 Yes Security Update 10.0.19043.1645 https://support.microsoft.com/help/5012599 11896 11897 11898 5012599 5012599 https://support.microsoft.com/help/5012599 11896 11897 11898 11801 11802 11803 11929 11930 11931 5012604 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012604 5011497 11923 11924 Yes Security Update 10.0.20348.643 https://support.microsoft.com/help/5012604 11923 11924 5012604 5012604 https://support.microsoft.com/help/5012604 11923 11924 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11801 11802 11803 Yes Security Update 10.0.19042.1645 https://support.microsoft.com/help/5012599 11801 11802 11803 5012599 5012592 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012592 5011493 11926 11927 Yes Security Update 10.0.22000.613 https://support.microsoft.com/help/5012592 11926 11927 5012592 5012592 https://support.microsoft.com/help/5012592 11926 11927 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11929 11930 11931 Yes Security Update 10.0.19044.1645 https://support.microsoft.com/help/5012599 11929 11930 11931 5012599 5012653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012653 5011491 10729 10735 Yes Security Update 10.0.10240.19265 https://support.microsoft.com/help/5012653 10729 10735 5012653 5012653 https://support.microsoft.com/help/5012653 10729 10735 5012596 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012596 5011495 10852 10853 10816 10855 Yes Security Update 10.0.14393.5066 https://support.microsoft.com/help/5012596 10852 10853 10816 10855 5012596 5012596 https://support.microsoft.com/help/5012596 10852 10853 10816 10855 5012626 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012626 5011552 10047 10048 10051 10049 Yes Monthly Rollup 6.1.7601.25924 https://support.microsoft.com/help/5012626 10047 10048 10051 10049 5012626 5012626 https://support.microsoft.com/help/5012626 10047 10048 10051 10049 5012649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012649 10047 10048 10051 10049 Yes Security Only 6.1.7601.25924 https://support.microsoft.com/help/5012649 10047 10048 10051 10049 5012649 5012649 https://support.microsoft.com/help/5012649 10047 10048 10051 10049 5012670 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012670 5011564 10481 10482 10483 10543 Yes Monthly Rollup 6.3.9600.20337 https://support.microsoft.com/help/5012670 10481 10482 10483 10543 5012670 5012670 https://support.microsoft.com/help/5012670 10481 10482 10484 10483 10543 5012639 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012639 10481 10482 10483 10543 Yes Security Only 6.3.9600.20337 https://support.microsoft.com/help/5012639 10481 10482 10483 10543 5012639 5012639 https://support.microsoft.com/help/5012639 10481 10482 10483 10543 5012670 5011564 10484 Yes Monthly Rollup 6.3.9600.20337 https://support.microsoft.com/help/5012639 10484 5012670 5012658 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012658 5011534 9312 10287 9318 9344 Yes Monthly Rollup 6.0.6003.21446 https://support.microsoft.com/help/5012658 9312 10287 9318 9344 5012658 5012658 https://support.microsoft.com/help/5012658 9312 10287 9318 9344 5012632 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012632 9312 10287 9318 9344 Yes Security Only 6.0.6003.21446 https://support.microsoft.com/help/5012632 9312 10287 9318 9344 5012632 5012632 https://support.microsoft.com/help/5012632 9312 10287 9318 9344 5012650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012650 5011535 10378 10379 Yes Monthly Rollup 6.2.9200.23679 https://support.microsoft.com/help/5012650 10378 10379 5012650 5012650 https://support.microsoft.com/help/5012650 10378 10379 5012666 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012666 10378 10379 Yes Security Only 6.2.9200.23679 https://support.microsoft.com/help/5012666 10378 10379 5012666 5012666 https://support.microsoft.com/help/5012666 10378 10379 1.0 2022-04-12T07:00:00 <p>Information published.</p> Windows Win32k Elevation of Privilege Vulnerability Windows Win32K Microsoft Yes CVE-2022-24542 11568 11569 11570 11571 11572 11712 11713 11714 11896 11897 11898 11923 11924 11801 11802 11803 11926 11927 11929 11930 11931 10729 10735 10852 10853 10816 10855 10047 10048 10481 10482 10484 9312 10287 9318 9344 10051 10049 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11570 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11712 Elevation of Privilege 11713 Elevation of Privilege 11714 Elevation of Privilege 11896 Elevation of Privilege 11897 Elevation of Privilege 11898 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11801 Elevation of Privilege 11802 Elevation of Privilege 11803 Elevation of Privilege 11926 Elevation of Privilege 11927 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 10729 Elevation of Privilege 10735 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10047 Elevation of Privilege 10048 Elevation of Privilege 10481 Elevation of Privilege 10482 Elevation of Privilege 10484 Elevation of Privilege 9312 Elevation of Privilege 10287 Elevation of Privilege 9318 Elevation of Privilege 9344 Elevation of Privilege 10051 Elevation of Privilege 10049 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11570 Important 11571 Important 11572 Important 11712 Important 11713 Important 11714 Important 11896 Important 11897 Important 11898 Important 11923 Important 11924 Important 11801 Important 11802 Important 11803 Important 11926 Important 11927 Important 11929 Important 11930 Important 11931 Important 10729 Important 10735 Important 10852 Important 10853 Important 10816 Important 10855 Important 10047 Important 10048 Important 10481 Important 10482 Important 10484 Important 9312 Important 10287 Important 9318 Important 9344 Important 10051 Important 10049 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation More Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11570 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11712 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11713 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11714 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11896 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11897 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11898 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11801 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11802 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11803 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11926 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11927 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10729 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10735 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10047 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10048 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10481 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10482 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10484 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9312 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10287 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9318 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9344 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10051 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10049 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5012647 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012647 5011503 11568 11569 11570 11571 11572 Yes Security Update 10.0.17763.2803 https://support.microsoft.com/help/5012647 11568 11569 11570 11571 11572 5012647 5012647 https://support.microsoft.com/help/5012647 11568 11569 11570 11571 11572 5012591 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012591 5011485 11712 11713 11714 Yes Security Update 10.0.18363.2212 https://support.microsoft.com/help/5012591 11712 11713 11714 5012591 5012591 https://support.microsoft.com/help/5012591 11712 11713 11714 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11896 11897 11898 Yes Security Update 10.0.19043.1645 https://support.microsoft.com/help/5012599 11896 11897 11898 5012599 5012599 https://support.microsoft.com/help/5012599 11896 11897 11898 11801 11802 11803 11929 11930 11931 5012604 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012604 5011497 11923 11924 Yes Security Update 10.0.20348.643 https://support.microsoft.com/help/5012604 11923 11924 5012604 5012604 https://support.microsoft.com/help/5012604 11923 11924 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11801 11802 11803 Yes Security Update 10.0.19042.1645 https://support.microsoft.com/help/5012599 11801 11802 11803 5012599 5012592 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012592 5011493 11926 11927 Yes Security Update 10.0.22000.613 https://support.microsoft.com/help/5012592 11926 11927 5012592 5012592 https://support.microsoft.com/help/5012592 11926 11927 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11929 11930 11931 Yes Security Update 10.0.19044.1645 https://support.microsoft.com/help/5012599 11929 11930 11931 5012599 5012653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012653 5011491 10729 10735 Yes Security Update 10.0.10240.19265 https://support.microsoft.com/help/5012653 10729 10735 5012653 5012653 https://support.microsoft.com/help/5012653 10729 10735 5012596 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012596 5011495 10852 10853 10816 10855 Yes Security Update 10.0.14393.5066 https://support.microsoft.com/help/5012596 10852 10853 10816 10855 5012596 5012596 https://support.microsoft.com/help/5012596 10852 10853 10816 10855 5012626 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012626 5011552 10047 10048 10051 10049 Yes Monthly Rollup 6.1.7601.25924 https://support.microsoft.com/help/5012626 10047 10048 10051 10049 5012626 5012626 https://support.microsoft.com/help/5012626 10047 10048 10051 10049 5012649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012649 10047 10048 10051 10049 Yes Security Only 6.1.7601.25924 https://support.microsoft.com/help/5012649 10047 10048 10051 10049 5012649 5012649 https://support.microsoft.com/help/5012649 10047 10048 10051 10049 5012670 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012670 5011564 10481 10482 10483 10543 Yes Monthly Rollup 6.3.9600.20337 https://support.microsoft.com/help/5012670 10481 10482 10483 10543 5012670 5012670 https://support.microsoft.com/help/5012670 10481 10482 10484 10483 10543 5012639 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012639 10481 10482 10483 10543 Yes Security Only 6.3.9600.20337 https://support.microsoft.com/help/5012639 10481 10482 10483 10543 5012639 5012639 https://support.microsoft.com/help/5012639 10481 10482 10483 10543 5012670 5011564 10484 Yes Monthly Rollup 6.3.9600.20337 https://support.microsoft.com/help/5012639 10484 5012670 5012658 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012658 5011534 9312 10287 9318 9344 Yes Monthly Rollup 6.0.6003.21446 https://support.microsoft.com/help/5012658 9312 10287 9318 9344 5012658 5012658 https://support.microsoft.com/help/5012658 9312 10287 9318 9344 5012632 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012632 9312 10287 9318 9344 Yes Security Only 6.0.6003.21446 https://support.microsoft.com/help/5012632 9312 10287 9318 9344 5012632 5012632 https://support.microsoft.com/help/5012632 9312 10287 9318 9344 5012650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012650 5011535 10378 10379 Yes Monthly Rollup 6.2.9200.23679 https://support.microsoft.com/help/5012650 10378 10379 5012650 5012650 https://support.microsoft.com/help/5012650 10378 10379 5012666 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012666 10378 10379 Yes Security Only 6.2.9200.23679 https://support.microsoft.com/help/5012666 10378 10379 5012666 5012666 https://support.microsoft.com/help/5012666 10378 10379 <a href="https://twitter.com/b2ahex">RyeLv (@b2ahex)</a> Marcin Wiazowski working with <a href="https://www.zerodayinitiative.com/">Trend Micro Zero Day Initiative</a> Marcin Wiazowski working with <a href="https://www.zerodayinitiative.com/">Trend Micro Zero Day Initiative</a> Marcin Wiazowski working with <a href="https://www.zerodayinitiative.com/">Trend Micro Zero Day Initiative</a> 1.0 2022-04-12T07:00:00 <p>Information published.</p> Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Windows Ancillary Function Driver for WinSock Microsoft Yes CVE-2022-24494 11568 11569 11570 11571 11572 11712 11713 11714 11896 11897 11898 11923 11924 11801 11802 11803 11926 11927 11929 11930 11931 10729 10735 10852 10853 10816 10855 10047 10048 10481 10482 10484 9312 10287 9318 9344 10051 10049 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11570 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11712 Elevation of Privilege 11713 Elevation of Privilege 11714 Elevation of Privilege 11896 Elevation of Privilege 11897 Elevation of Privilege 11898 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11801 Elevation of Privilege 11802 Elevation of Privilege 11803 Elevation of Privilege 11926 Elevation of Privilege 11927 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 10729 Elevation of Privilege 10735 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10047 Elevation of Privilege 10048 Elevation of Privilege 10481 Elevation of Privilege 10482 Elevation of Privilege 10484 Elevation of Privilege 9312 Elevation of Privilege 10287 Elevation of Privilege 9318 Elevation of Privilege 9344 Elevation of Privilege 10051 Elevation of Privilege 10049 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11570 Important 11571 Important 11572 Important 11712 Important 11713 Important 11714 Important 11896 Important 11897 Important 11898 Important 11923 Important 11924 Important 11801 Important 11802 Important 11803 Important 11926 Important 11927 Important 11929 Important 11930 Important 11931 Important 10729 Important 10735 Important 10852 Important 10853 Important 10816 Important 10855 Important 10047 Important 10048 Important 10481 Important 10482 Important 10484 Important 9312 Important 10287 Important 9318 Important 9344 Important 10051 Important 10049 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11570 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11712 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11713 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11714 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11896 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11897 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11898 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11801 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11802 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11803 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11926 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11927 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10729 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10735 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10047 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10048 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10481 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10482 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10484 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9312 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10287 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9318 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9344 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10051 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10049 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5012647 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012647 5011503 11568 11569 11570 11571 11572 Yes Security Update 10.0.17763.2803 https://support.microsoft.com/help/5012647 11568 11569 11570 11571 11572 5012647 5012647 https://support.microsoft.com/help/5012647 11568 11569 11570 11571 11572 5012591 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012591 5011485 11712 11713 11714 Yes Security Update 10.0.18363.2212 https://support.microsoft.com/help/5012591 11712 11713 11714 5012591 5012591 https://support.microsoft.com/help/5012591 11712 11713 11714 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11896 11897 11898 Yes Security Update 10.0.19043.1645 https://support.microsoft.com/help/5012599 11896 11897 11898 5012599 5012599 https://support.microsoft.com/help/5012599 11896 11897 11898 11801 11802 11803 11929 11930 11931 5012604 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012604 5011497 11923 11924 Yes Security Update 10.0.20348.643 https://support.microsoft.com/help/5012604 11923 11924 5012604 5012604 https://support.microsoft.com/help/5012604 11923 11924 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11801 11802 11803 Yes Security Update 10.0.19042.1645 https://support.microsoft.com/help/5012599 11801 11802 11803 5012599 5012592 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012592 5011493 11926 11927 Yes Security Update 10.0.22000.613 https://support.microsoft.com/help/5012592 11926 11927 5012592 5012592 https://support.microsoft.com/help/5012592 11926 11927 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11929 11930 11931 Yes Security Update 10.0.19044.1645 https://support.microsoft.com/help/5012599 11929 11930 11931 5012599 5012653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012653 5011491 10729 10735 Yes Security Update 10.0.10240.19265 https://support.microsoft.com/help/5012653 10729 10735 5012653 5012653 https://support.microsoft.com/help/5012653 10729 10735 5012596 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012596 5011495 10852 10853 10816 10855 Yes Security Update 10.0.14393.5066 https://support.microsoft.com/help/5012596 10852 10853 10816 10855 5012596 5012596 https://support.microsoft.com/help/5012596 10852 10853 10816 10855 5012626 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012626 5011552 10047 10048 10051 10049 Yes Monthly Rollup 6.1.7601.25924 https://support.microsoft.com/help/5012626 10047 10048 10051 10049 5012626 5012626 https://support.microsoft.com/help/5012626 10047 10048 10051 10049 5012649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012649 10047 10048 10051 10049 Yes Security Only 6.1.7601.25924 https://support.microsoft.com/help/5012649 10047 10048 10051 10049 5012649 5012649 https://support.microsoft.com/help/5012649 10047 10048 10051 10049 5012670 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012670 5011564 10481 10482 10483 10543 Yes Monthly Rollup 6.3.9600.20337 https://support.microsoft.com/help/5012670 10481 10482 10483 10543 5012670 5012670 https://support.microsoft.com/help/5012670 10481 10482 10484 10483 10543 5012639 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012639 10481 10482 10483 10543 Yes Security Only 6.3.9600.20337 https://support.microsoft.com/help/5012639 10481 10482 10483 10543 5012639 5012639 https://support.microsoft.com/help/5012639 10481 10482 10483 10543 5012670 5011564 10484 Yes Monthly Rollup 6.3.9600.20337 https://support.microsoft.com/help/5012639 10484 5012670 5012658 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012658 5011534 9312 10287 9318 9344 Yes Monthly Rollup 6.0.6003.21446 https://support.microsoft.com/help/5012658 9312 10287 9318 9344 5012658 5012658 https://support.microsoft.com/help/5012658 9312 10287 9318 9344 5012632 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012632 9312 10287 9318 9344 Yes Security Only 6.0.6003.21446 https://support.microsoft.com/help/5012632 9312 10287 9318 9344 5012632 5012632 https://support.microsoft.com/help/5012632 9312 10287 9318 9344 5012650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012650 5011535 10378 10379 Yes Monthly Rollup 6.2.9200.23679 https://support.microsoft.com/help/5012650 10378 10379 5012650 5012650 https://support.microsoft.com/help/5012650 10378 10379 5012666 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012666 10378 10379 Yes Security Only 6.2.9200.23679 https://support.microsoft.com/help/5012666 10378 10379 5012666 5012666 https://support.microsoft.com/help/5012666 10378 10379 Victor Portal with Deloitte Spain 1.0 2022-04-12T07:00:00 <p>Information published.</p> Windows Direct Show Remote Code Execution Vulnerability <p><strong>According to the CVSS metric, the attack vector is local (AV:L). Why does the CVE title indicate that this is a remote code execution?</strong></p> <p>The word <strong>Remote</strong> in the title refers to the location of the attacker. This type of exploit is sometimes referred to as Arbitrary Code Execution (ACE). The attack itself is carried out locally.</p> <p>For example, when the score indicates that the <strong>Attack Vector</strong> is <strong>Local</strong> and <strong>User Interaction</strong> is <strong>Required</strong>, this could describe an exploit in which an attacker, through social engineering, convinces a victim to download and open a specially crafted file from a website which leads to a local attack on their computer.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to gather information specific to the environment of the targeted component.</p> Microsoft Windows Media Foundation Microsoft Yes CVE-2022-24495 11568 11569 11570 11571 11572 11712 11713 11714 11896 11897 11898 11923 11924 11801 11802 11803 11926 11927 11929 11930 11931 10852 10853 10816 10855 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11570 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11712 Remote Code Execution 11713 Remote Code Execution 11714 Remote Code Execution 11896 Remote Code Execution 11897 Remote Code Execution 11898 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 11801 Remote Code Execution 11802 Remote Code Execution 11803 Remote Code Execution 11926 Remote Code Execution 11927 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Important 11568 Important 11569 Important 11570 Important 11571 Important 11572 Important 11712 Important 11713 Important 11714 Important 11896 Important 11897 Important 11898 Important 11923 Important 11924 Important 11801 Important 11802 Important 11803 Important 11926 Important 11927 Important 11929 Important 11930 Important 11931 Important 10852 Important 10853 Important 10816 Important 10855 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11570 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11712 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11713 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11714 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11896 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11897 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11898 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11801 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11802 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11803 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11926 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11927 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 5012647 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012647 5011503 11568 11569 11570 11571 11572 Yes Security Update 10.0.17763.2803 https://support.microsoft.com/help/5012647 11568 11569 11570 11571 11572 5012647 5012647 https://support.microsoft.com/help/5012647 11568 11569 11570 11571 11572 5012591 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012591 5011485 11712 11713 11714 Yes Security Update 10.0.18363.2212 https://support.microsoft.com/help/5012591 11712 11713 11714 5012591 5012591 https://support.microsoft.com/help/5012591 11712 11713 11714 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11896 11897 11898 Yes Security Update 10.0.19043.1645 https://support.microsoft.com/help/5012599 11896 11897 11898 5012599 5012599 https://support.microsoft.com/help/5012599 11896 11897 11898 11801 11802 11803 11929 11930 11931 5012604 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012604 5011497 11923 11924 Yes Security Update 10.0.20348.643 https://support.microsoft.com/help/5012604 11923 11924 5012604 5012604 https://support.microsoft.com/help/5012604 11923 11924 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11801 11802 11803 Yes Security Update 10.0.19042.1645 https://support.microsoft.com/help/5012599 11801 11802 11803 5012599 5012592 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012592 5011493 11926 11927 Yes Security Update 10.0.22000.613 https://support.microsoft.com/help/5012592 11926 11927 5012592 5012592 https://support.microsoft.com/help/5012592 11926 11927 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11929 11930 11931 Yes Security Update 10.0.19044.1645 https://support.microsoft.com/help/5012599 11929 11930 11931 5012599 5012596 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012596 5011495 10852 10853 10816 10855 Yes Security Update 10.0.14393.5066 https://support.microsoft.com/help/5012596 10852 10853 10816 10855 5012596 5012596 https://support.microsoft.com/help/5012596 10852 10853 10816 10855 <a href="https://twitter.com/4zure9">Azure Yang</a> with <a href="http://www.cyberkl.com/">Kunlun Lab</a> 1.0 2022-04-12T07:00:00 <p>Information published.</p> Windows DWM Core Library Elevation of Privilege Vulnerability Windows DWM Core Library Microsoft Yes CVE-2022-24546 11568 11569 11570 11571 11572 11712 11713 11714 11896 11897 11898 11923 11924 11801 11802 11803 11926 11927 11929 11930 11931 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11570 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11712 Elevation of Privilege 11713 Elevation of Privilege 11714 Elevation of Privilege 11896 Elevation of Privilege 11897 Elevation of Privilege 11898 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11801 Elevation of Privilege 11802 Elevation of Privilege 11803 Elevation of Privilege 11926 Elevation of Privilege 11927 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Important 11568 Important 11569 Important 11570 Important 11571 Important 11572 Important 11712 Important 11713 Important 11714 Important 11896 Important 11897 Important 11898 Important 11923 Important 11924 Important 11801 Important 11802 Important 11803 Important 11926 Important 11927 Important 11929 Important 11930 Important 11931 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation More Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11570 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11712 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11713 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11714 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11896 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11897 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11898 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11801 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11802 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11803 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11926 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11927 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 5012647 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012647 5011503 11568 11569 11570 11571 11572 Yes Security Update 10.0.17763.2803 https://support.microsoft.com/help/5012647 11568 11569 11570 11571 11572 5012647 5012647 https://support.microsoft.com/help/5012647 11568 11569 11570 11571 11572 5012591 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012591 5011485 11712 11713 11714 Yes Security Update 10.0.18363.2212 https://support.microsoft.com/help/5012591 11712 11713 11714 5012591 5012591 https://support.microsoft.com/help/5012591 11712 11713 11714 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11896 11897 11898 Yes Security Update 10.0.19043.1645 https://support.microsoft.com/help/5012599 11896 11897 11898 5012599 5012599 https://support.microsoft.com/help/5012599 11896 11897 11898 11801 11802 11803 11929 11930 11931 5012604 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012604 5011497 11923 11924 Yes Security Update 10.0.20348.643 https://support.microsoft.com/help/5012604 11923 11924 5012604 5012604 https://support.microsoft.com/help/5012604 11923 11924 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11801 11802 11803 Yes Security Update 10.0.19042.1645 https://support.microsoft.com/help/5012599 11801 11802 11803 5012599 5012592 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012592 5011493 11926 11927 Yes Security Update 10.0.22000.613 https://support.microsoft.com/help/5012592 11926 11927 5012592 5012592 https://support.microsoft.com/help/5012592 11926 11927 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11929 11930 11931 Yes Security Update 10.0.19044.1645 https://support.microsoft.com/help/5012599 11929 11930 11931 5012599 <a href="https://twitter.com/hillstone_lab">He YiSheng, Zhang WangJunJie, Li WenYue</a> with <a href="https://www.hillstonenet.com.cn/">Hillstone Network Security Research Institute</a> 1.0 2022-04-12T07:00:00 <p>Information published.</p> Windows AppX Package Manager Elevation of Privilege Vulnerability Windows AppX Package Manager Microsoft Yes CVE-2022-24549 11568 11569 11570 11571 11572 11712 11713 11714 11896 11897 11898 11923 11924 11801 11802 11803 11926 11927 11929 11930 11931 10729 10735 10852 10853 10816 10855 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11570 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11712 Elevation of Privilege 11713 Elevation of Privilege 11714 Elevation of Privilege 11896 Elevation of Privilege 11897 Elevation of Privilege 11898 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11801 Elevation of Privilege 11802 Elevation of Privilege 11803 Elevation of Privilege 11926 Elevation of Privilege 11927 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 10729 Elevation of Privilege 10735 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Important 11568 Important 11569 Important 11570 Important 11571 Important 11572 Important 11712 Important 11713 Important 11714 Important 11896 Important 11897 Important 11898 Important 11923 Important 11924 Important 11801 Important 11802 Important 11803 Important 11926 Important 11927 Important 11929 Important 11930 Important 11931 Important 10729 Important 10735 Important 10852 Important 10853 Important 10816 Important 10855 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11570 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11712 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11713 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11714 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11896 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11897 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11898 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11801 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11802 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11803 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11926 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11927 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10729 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10735 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 5012647 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012647 5011503 11568 11569 11570 11571 11572 Yes Security Update 10.0.17763.2803 https://support.microsoft.com/help/5012647 11568 11569 11570 11571 11572 5012647 5012647 https://support.microsoft.com/help/5012647 11568 11569 11570 11571 11572 5012591 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012591 5011485 11712 11713 11714 Yes Security Update 10.0.18363.2212 https://support.microsoft.com/help/5012591 11712 11713 11714 5012591 5012591 https://support.microsoft.com/help/5012591 11712 11713 11714 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11896 11897 11898 Yes Security Update 10.0.19043.1645 https://support.microsoft.com/help/5012599 11896 11897 11898 5012599 5012599 https://support.microsoft.com/help/5012599 11896 11897 11898 11801 11802 11803 11929 11930 11931 5012604 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012604 5011497 11923 11924 Yes Security Update 10.0.20348.643 https://support.microsoft.com/help/5012604 11923 11924 5012604 5012604 https://support.microsoft.com/help/5012604 11923 11924 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11801 11802 11803 Yes Security Update 10.0.19042.1645 https://support.microsoft.com/help/5012599 11801 11802 11803 5012599 5012592 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012592 5011493 11926 11927 Yes Security Update 10.0.22000.613 https://support.microsoft.com/help/5012592 11926 11927 5012592 5012592 https://support.microsoft.com/help/5012592 11926 11927 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11929 11930 11931 Yes Security Update 10.0.19044.1645 https://support.microsoft.com/help/5012599 11929 11930 11931 5012599 5012653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012653 5011491 10729 10735 Yes Security Update 10.0.10240.19265 https://support.microsoft.com/help/5012653 10729 10735 5012653 5012653 https://support.microsoft.com/help/5012653 10729 10735 5012596 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012596 5011495 10852 10853 10816 10855 Yes Security Update 10.0.14393.5066 https://support.microsoft.com/help/5012596 10852 10853 10816 10855 5012596 5012596 https://support.microsoft.com/help/5012596 10852 10853 10816 10855 AppModel Deployment (DXP) 1.0 2022-04-12T08:00:00 <p>Information published.</p> Windows SMB Remote Code Execution Vulnerability <p><strong>How could an attacker exploit the vulnerability?</strong></p> <p>For vulnerability to be exploited, a user would need to access a malicious SMB server to retrieve some data as part of an OS API call.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>This vulnerability requires that a user with an affected version of Windows access a malicious server. An attacker would have to host a specially crafted server share or website. An attacker would have no way to force users to visit this specially crafted server share or website, but would have to convince them to visit the server share or website, typically by way of an enticement in an email or chat message.</p> Windows SMB Microsoft Yes CVE-2022-24500 11568 11569 11570 11571 11572 11712 11713 11714 11896 11897 11898 11923 11924 11801 11802 11803 11926 11927 11929 11930 11931 10729 10735 10852 10853 10816 10855 10047 10048 10481 10482 10484 9312 10287 9318 9344 10051 10049 10378 10379 10483 10543 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11570 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11712 Remote Code Execution 11713 Remote Code Execution 11714 Remote Code Execution 11896 Remote Code Execution 11897 Remote Code Execution 11898 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 11801 Remote Code Execution 11802 Remote Code Execution 11803 Remote Code Execution 11926 Remote Code Execution 11927 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 10729 Remote Code Execution 10735 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10047 Remote Code Execution 10048 Remote Code Execution 10481 Remote Code Execution 10482 Remote Code Execution 10484 Remote Code Execution 9312 Remote Code Execution 10287 Remote Code Execution 9318 Remote Code Execution 9344 Remote Code Execution 10051 Remote Code Execution 10049 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Critical 11568 Critical 11569 Critical 11570 Critical 11571 Critical 11572 Critical 11712 Critical 11713 Critical 11714 Critical 11896 Critical 11897 Critical 11898 Critical 11923 Critical 11924 Critical 11801 Critical 11802 Critical 11803 Critical 11926 Critical 11927 Critical 11929 Critical 11930 Critical 11931 Critical 10729 Critical 10735 Critical 10852 Critical 10853 Critical 10816 Critical 10855 Critical 10047 Critical 10048 Critical 10481 Critical 10482 Critical 10484 Critical 9312 Critical 10287 Critical 9318 Critical 9344 Critical 10051 Critical 10049 Critical 10378 Critical 10379 Critical 10483 Critical 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11570 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11712 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11713 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11714 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11896 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11897 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11898 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11801 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11802 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11803 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11926 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11927 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10729 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10735 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10047 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10048 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10481 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10482 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10484 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9312 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10287 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9318 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9344 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10051 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10049 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5012647 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012647 5011503 11568 11569 11570 11571 11572 Yes Security Update 10.0.17763.2803 https://support.microsoft.com/help/5012647 11568 11569 11570 11571 11572 5012647 5012647 https://support.microsoft.com/help/5012647 11568 11569 11570 11571 11572 5012591 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012591 5011485 11712 11713 11714 Yes Security Update 10.0.18363.2212 https://support.microsoft.com/help/5012591 11712 11713 11714 5012591 5012591 https://support.microsoft.com/help/5012591 11712 11713 11714 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11896 11897 11898 Yes Security Update 10.0.19043.1645 https://support.microsoft.com/help/5012599 11896 11897 11898 5012599 5012599 https://support.microsoft.com/help/5012599 11896 11897 11898 11801 11802 11803 11929 11930 11931 5012604 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012604 5011497 11923 11924 Yes Security Update 10.0.20348.643 https://support.microsoft.com/help/5012604 11923 11924 5012604 5012604 https://support.microsoft.com/help/5012604 11923 11924 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11801 11802 11803 Yes Security Update 10.0.19042.1645 https://support.microsoft.com/help/5012599 11801 11802 11803 5012599 5012592 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012592 5011493 11926 11927 Yes Security Update 10.0.22000.613 https://support.microsoft.com/help/5012592 11926 11927 5012592 5012592 https://support.microsoft.com/help/5012592 11926 11927 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11929 11930 11931 Yes Security Update 10.0.19044.1645 https://support.microsoft.com/help/5012599 11929 11930 11931 5012599 5012653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012653 5011491 10729 10735 Yes Security Update 10.0.10240.19265 https://support.microsoft.com/help/5012653 10729 10735 5012653 5012653 https://support.microsoft.com/help/5012653 10729 10735 5012596 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012596 5011495 10852 10853 10816 10855 Yes Security Update 10.0.14393.5066 https://support.microsoft.com/help/5012596 10852 10853 10816 10855 5012596 5012596 https://support.microsoft.com/help/5012596 10852 10853 10816 10855 5012626 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012626 5011552 10047 10048 10051 10049 Yes Monthly Rollup 6.1.7601.25924 https://support.microsoft.com/help/5012626 10047 10048 10051 10049 5012626 5012626 https://support.microsoft.com/help/5012626 10047 10048 10051 10049 5012649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012649 10047 10048 10051 10049 Yes Security Only 6.1.7601.25924 https://support.microsoft.com/help/5012649 10047 10048 10051 10049 5012649 5012649 https://support.microsoft.com/help/5012649 10047 10048 10051 10049 5012670 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012670 5011564 10481 10482 10483 10543 Yes Monthly Rollup 6.3.9600.20337 https://support.microsoft.com/help/5012670 10481 10482 10483 10543 5012670 5012670 https://support.microsoft.com/help/5012670 10481 10482 10484 10483 10543 5012639 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012639 10481 10482 10483 10543 Yes Security Only 6.3.9600.20337 https://support.microsoft.com/help/5012639 10481 10482 10483 10543 5012639 5012639 https://support.microsoft.com/help/5012639 10481 10482 10483 10543 5012670 5011564 10484 Yes Monthly Rollup 6.3.9600.20337 https://support.microsoft.com/help/5012639 10484 5012670 5012658 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012658 5011534 9312 10287 9318 9344 Yes Monthly Rollup 6.0.6003.21446 https://support.microsoft.com/help/5012658 9312 10287 9318 9344 5012658 5012658 https://support.microsoft.com/help/5012658 9312 10287 9318 9344 5012632 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012632 9312 10287 9318 9344 Yes Security Only 6.0.6003.21446 https://support.microsoft.com/help/5012632 9312 10287 9318 9344 5012632 5012632 https://support.microsoft.com/help/5012632 9312 10287 9318 9344 5012650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012650 5011535 10378 10379 Yes Monthly Rollup 6.2.9200.23679 https://support.microsoft.com/help/5012650 10378 10379 5012650 5012650 https://support.microsoft.com/help/5012650 10378 10379 5012666 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012666 10378 10379 Yes Security Only 6.2.9200.23679 https://support.microsoft.com/help/5012666 10378 10379 5012666 5012666 https://support.microsoft.com/help/5012666 10378 10379 <p>Mitigation refers to a setting, common configuration, or general best-practice, existing in a default state, that could reduce the severity of exploitation of a vulnerability. The following mitigating factors may be helpful in your situation:</p> <p><strong>1. Block TCP port 445 at the enterprise perimeter firewall</strong></p> <p>TCP port 445 is used to initiate a connection with the affected component. Blocking this port at the network perimeter firewall will help protect systems that are behind that firewall from attempts to exploit this vulnerability. This can help protect networks from attacks that originate outside the enterprise perimeter. Blocking the affected ports at the enterprise perimeter is the best defense to help avoid Internet-based attacks. <strong>However, systems could still be vulnerable to attacks from within their enterprise perimeter.</strong></p> <p><strong>2. Follow Microsoft guidelines to secure SMB traffic</strong></p> <p><a href="https://docs.microsoft.com/windows-server/storage/file-server/smb-secure-traffic">Secure SMB Traffic in Windows Server</a>.</p> Yuki Chen with <a href="https://www.cyberkl.com/">Cyber KunLun</a> 1.0 2022-04-12T07:00:00 <p>Information published.</p> Windows iSCSI Target Service Information Disclosure Vulnerability <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>Exploiting this vulnerability could allow the disclosure of initialized or uninitialized memory in the process heap.</p> Windows iSCSI Target Service Microsoft Yes CVE-2022-24498 11568 11569 11570 11571 11572 11712 11713 11714 11896 11897 11898 11923 11924 11801 11802 11803 11926 11927 11929 11930 11931 10729 10735 10852 10853 10816 10855 10047 10048 10481 10482 10484 9312 10287 9318 9344 10051 10049 10378 10379 10483 10543 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11570 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11712 Information Disclosure 11713 Information Disclosure 11714 Information Disclosure 11896 Information Disclosure 11897 Information Disclosure 11898 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 11801 Information Disclosure 11802 Information Disclosure 11803 Information Disclosure 11926 Information Disclosure 11927 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 10729 Information Disclosure 10735 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 10047 Information Disclosure 10048 Information Disclosure 10481 Information Disclosure 10482 Information Disclosure 10484 Information Disclosure 9312 Information Disclosure 10287 Information Disclosure 9318 Information Disclosure 9344 Information Disclosure 10051 Information Disclosure 10049 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Important 11568 Important 11569 Important 11570 Important 11571 Important 11572 Important 11712 Important 11713 Important 11714 Important 11896 Important 11897 Important 11898 Important 11923 Important 11924 Important 11801 Important 11802 Important 11803 Important 11926 Important 11927 Important 11929 Important 11930 Important 11931 Important 10729 Important 10735 Important 10852 Important 10853 Important 10816 Important 10855 Important 10047 Important 10048 Important 10481 Important 10482 Important 10484 Important 9312 Important 10287 Important 9318 Important 9344 Important 10051 Important 10049 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11570 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11712 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11713 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11714 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11896 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11897 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11898 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11801 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11802 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11803 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11926 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11927 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10729 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10735 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10047 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10048 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10481 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10482 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10484 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 9312 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10287 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 9318 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 9344 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10051 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10049 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 5012647 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012647 5011503 11568 11569 11570 11571 11572 Yes Security Update 10.0.17763.2803 https://support.microsoft.com/help/5012647 11568 11569 11570 11571 11572 5012647 5012647 https://support.microsoft.com/help/5012647 11568 11569 11570 11571 11572 5012591 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012591 5011485 11712 11713 11714 Yes Security Update 10.0.18363.2212 https://support.microsoft.com/help/5012591 11712 11713 11714 5012591 5012591 https://support.microsoft.com/help/5012591 11712 11713 11714 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11896 11897 11898 Yes Security Update 10.0.19043.1645 https://support.microsoft.com/help/5012599 11896 11897 11898 5012599 5012599 https://support.microsoft.com/help/5012599 11896 11897 11898 11801 11802 11803 11929 11930 11931 5012604 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012604 5011497 11923 11924 Yes Security Update 10.0.20348.643 https://support.microsoft.com/help/5012604 11923 11924 5012604 5012604 https://support.microsoft.com/help/5012604 11923 11924 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11801 11802 11803 Yes Security Update 10.0.19042.1645 https://support.microsoft.com/help/5012599 11801 11802 11803 5012599 5012592 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012592 5011493 11926 11927 Yes Security Update 10.0.22000.613 https://support.microsoft.com/help/5012592 11926 11927 5012592 5012592 https://support.microsoft.com/help/5012592 11926 11927 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11929 11930 11931 Yes Security Update 10.0.19044.1645 https://support.microsoft.com/help/5012599 11929 11930 11931 5012599 5012653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012653 5011491 10729 10735 Yes Security Update 10.0.10240.19265 https://support.microsoft.com/help/5012653 10729 10735 5012653 5012653 https://support.microsoft.com/help/5012653 10729 10735 5012596 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012596 5011495 10852 10853 10816 10855 Yes Security Update 10.0.14393.5066 https://support.microsoft.com/help/5012596 10852 10853 10816 10855 5012596 5012596 https://support.microsoft.com/help/5012596 10852 10853 10816 10855 5012626 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012626 5011552 10047 10048 10051 10049 Yes Monthly Rollup 6.1.7601.25924 https://support.microsoft.com/help/5012626 10047 10048 10051 10049 5012626 5012626 https://support.microsoft.com/help/5012626 10047 10048 10051 10049 5012649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012649 10047 10048 10051 10049 Yes Security Only 6.1.7601.25924 https://support.microsoft.com/help/5012649 10047 10048 10051 10049 5012649 5012649 https://support.microsoft.com/help/5012649 10047 10048 10051 10049 5012670 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012670 5011564 10481 10482 10483 10543 Yes Monthly Rollup 6.3.9600.20337 https://support.microsoft.com/help/5012670 10481 10482 10483 10543 5012670 5012670 https://support.microsoft.com/help/5012670 10481 10482 10484 10483 10543 5012639 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012639 10481 10482 10483 10543 Yes Security Only 6.3.9600.20337 https://support.microsoft.com/help/5012639 10481 10482 10483 10543 5012639 5012639 https://support.microsoft.com/help/5012639 10481 10482 10483 10543 5012670 5011564 10484 Yes Monthly Rollup 6.3.9600.20337 https://support.microsoft.com/help/5012639 10484 5012670 5012658 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012658 5011534 9312 10287 9318 9344 Yes Monthly Rollup 6.0.6003.21446 https://support.microsoft.com/help/5012658 9312 10287 9318 9344 5012658 5012658 https://support.microsoft.com/help/5012658 9312 10287 9318 9344 5012632 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012632 9312 10287 9318 9344 Yes Security Only 6.0.6003.21446 https://support.microsoft.com/help/5012632 9312 10287 9318 9344 5012632 5012632 https://support.microsoft.com/help/5012632 9312 10287 9318 9344 5012650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012650 5011535 10378 10379 Yes Monthly Rollup 6.2.9200.23679 https://support.microsoft.com/help/5012650 10378 10379 5012650 5012650 https://support.microsoft.com/help/5012650 10378 10379 5012666 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012666 10378 10379 Yes Security Only 6.2.9200.23679 https://support.microsoft.com/help/5012666 10378 10379 5012666 5012666 https://support.microsoft.com/help/5012666 10378 10379 liubenjin with Codesafe Team of Legendsec at Qi&#39;anxin Group 1.0 2022-04-12T07:00:00 <p>Information published.</p> Windows Digital Media Receiver Elevation of Privilege Vulnerability Windows Media Microsoft Yes CVE-2022-24547 11568 11569 11570 11571 11572 11712 11713 11714 11896 11897 11898 11923 11924 11801 11802 11803 11926 11927 11929 11930 11931 10729 10735 10852 10853 10816 10855 10481 10482 10484 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11570 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11712 Elevation of Privilege 11713 Elevation of Privilege 11714 Elevation of Privilege 11896 Elevation of Privilege 11897 Elevation of Privilege 11898 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11801 Elevation of Privilege 11802 Elevation of Privilege 11803 Elevation of Privilege 11926 Elevation of Privilege 11927 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 10729 Elevation of Privilege 10735 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10481 Elevation of Privilege 10482 Elevation of Privilege 10484 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11570 Important 11571 Important 11572 Important 11712 Important 11713 Important 11714 Important 11896 Important 11897 Important 11898 Important 11923 Important 11924 Important 11801 Important 11802 Important 11803 Important 11926 Important 11927 Important 11929 Important 11930 Important 11931 Important 10729 Important 10735 Important 10852 Important 10853 Important 10816 Important 10855 Important 10481 Important 10482 Important 10484 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation More Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11570 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11712 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11713 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11714 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11896 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11897 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11898 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11801 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11802 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11803 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11926 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11927 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10729 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10735 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10481 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10482 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10484 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5012647 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012647 5011503 11568 11569 11570 11571 11572 Yes Security Update 10.0.17763.2803 https://support.microsoft.com/help/5012647 11568 11569 11570 11571 11572 5012647 5012647 https://support.microsoft.com/help/5012647 11568 11569 11570 11571 11572 5012591 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012591 5011485 11712 11713 11714 Yes Security Update 10.0.18363.2212 https://support.microsoft.com/help/5012591 11712 11713 11714 5012591 5012591 https://support.microsoft.com/help/5012591 11712 11713 11714 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11896 11897 11898 Yes Security Update 10.0.19043.1645 https://support.microsoft.com/help/5012599 11896 11897 11898 5012599 5012599 https://support.microsoft.com/help/5012599 11896 11897 11898 11801 11802 11803 11929 11930 11931 5012604 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012604 5011497 11923 11924 Yes Security Update 10.0.20348.643 https://support.microsoft.com/help/5012604 11923 11924 5012604 5012604 https://support.microsoft.com/help/5012604 11923 11924 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11801 11802 11803 Yes Security Update 10.0.19042.1645 https://support.microsoft.com/help/5012599 11801 11802 11803 5012599 5012592 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012592 5011493 11926 11927 Yes Security Update 10.0.22000.613 https://support.microsoft.com/help/5012592 11926 11927 5012592 5012592 https://support.microsoft.com/help/5012592 11926 11927 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11929 11930 11931 Yes Security Update 10.0.19044.1645 https://support.microsoft.com/help/5012599 11929 11930 11931 5012599 5012653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012653 5011491 10729 10735 Yes Security Update 10.0.10240.19265 https://support.microsoft.com/help/5012653 10729 10735 5012653 5012653 https://support.microsoft.com/help/5012653 10729 10735 5012596 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012596 5011495 10852 10853 10816 10855 Yes Security Update 10.0.14393.5066 https://support.microsoft.com/help/5012596 10852 10853 10816 10855 5012596 5012596 https://support.microsoft.com/help/5012596 10852 10853 10816 10855 5012670 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012670 5011564 10481 10482 10483 10543 Yes Monthly Rollup 6.3.9600.20337 https://support.microsoft.com/help/5012670 10481 10482 10483 10543 5012670 5012670 https://support.microsoft.com/help/5012670 10481 10482 10484 10483 10543 5012639 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012639 10481 10482 10483 10543 Yes Security Only 6.3.9600.20337 https://support.microsoft.com/help/5012639 10481 10482 10483 10543 5012639 5012639 https://support.microsoft.com/help/5012639 10481 10482 10483 10543 5012670 5011564 10484 Yes Monthly Rollup 6.3.9600.20337 https://support.microsoft.com/help/5012639 10484 5012670 5012650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012650 5011535 10378 10379 Yes Monthly Rollup 6.2.9200.23679 https://support.microsoft.com/help/5012650 10378 10379 5012650 5012650 https://support.microsoft.com/help/5012650 10378 10379 5012666 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012666 10378 10379 Yes Security Only 6.2.9200.23679 https://support.microsoft.com/help/5012666 10378 10379 5012666 5012666 https://support.microsoft.com/help/5012666 10378 10379 JIWO Technology Co., Ltd <a href="https://twitter.com/lxf02942370">Xuefeng Li</a> and <a href="https://twitter.com/edwardzpeng">Zhiniang Peng</a> with <a href="https://www.sangfor.com/">Sangfor</a> 1.0 2022-04-12T07:00:00 <p>Information published.</p> Windows Kernel Information Disclosure Vulnerability <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>Exploiting this vulnerability could allow the disclosure of certain kernel memory content.</p> Windows Kernel Microsoft Yes CVE-2022-24483 11568 11569 11570 11571 11572 11712 11713 11714 11896 11897 11898 11923 11924 11801 11802 11803 11926 11927 11929 11930 11931 10729 10735 10852 10853 10816 10855 10481 10482 10484 10378 10379 10483 10543 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11570 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11712 Information Disclosure 11713 Information Disclosure 11714 Information Disclosure 11896 Information Disclosure 11897 Information Disclosure 11898 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 11801 Information Disclosure 11802 Information Disclosure 11803 Information Disclosure 11926 Information Disclosure 11927 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 10729 Information Disclosure 10735 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 10481 Information Disclosure 10482 Information Disclosure 10484 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Important 11568 Important 11569 Important 11570 Important 11571 Important 11572 Important 11712 Important 11713 Important 11714 Important 11896 Important 11897 Important 11898 Important 11923 Important 11924 Important 11801 Important 11802 Important 11803 Important 11926 Important 11927 Important 11929 Important 11930 Important 11931 Important 10729 Important 10735 Important 10852 Important 10853 Important 10816 Important 10855 Important 10481 Important 10482 Important 10484 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11570 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11712 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11713 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11714 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11896 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11897 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11898 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11801 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11802 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11803 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11926 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11927 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10729 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10735 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10481 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10482 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10484 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 5012647 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012647 5011503 11568 11569 11570 11571 11572 Yes Security Update 10.0.17763.2803 https://support.microsoft.com/help/5012647 11568 11569 11570 11571 11572 5012647 5012647 https://support.microsoft.com/help/5012647 11568 11569 11570 11571 11572 5012591 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012591 5011485 11712 11713 11714 Yes Security Update 10.0.18363.2212 https://support.microsoft.com/help/5012591 11712 11713 11714 5012591 5012591 https://support.microsoft.com/help/5012591 11712 11713 11714 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11896 11897 11898 Yes Security Update 10.0.19043.1645 https://support.microsoft.com/help/5012599 11896 11897 11898 5012599 5012599 https://support.microsoft.com/help/5012599 11896 11897 11898 11801 11802 11803 11929 11930 11931 5012604 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012604 5011497 11923 11924 Yes Security Update 10.0.20348.643 https://support.microsoft.com/help/5012604 11923 11924 5012604 5012604 https://support.microsoft.com/help/5012604 11923 11924 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11801 11802 11803 Yes Security Update 10.0.19042.1645 https://support.microsoft.com/help/5012599 11801 11802 11803 5012599 5012592 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012592 5011493 11926 11927 Yes Security Update 10.0.22000.613 https://support.microsoft.com/help/5012592 11926 11927 5012592 5012592 https://support.microsoft.com/help/5012592 11926 11927 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11929 11930 11931 Yes Security Update 10.0.19044.1645 https://support.microsoft.com/help/5012599 11929 11930 11931 5012599 5012653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012653 5011491 10729 10735 Yes Security Update 10.0.10240.19265 https://support.microsoft.com/help/5012653 10729 10735 5012653 5012653 https://support.microsoft.com/help/5012653 10729 10735 5012596 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012596 5011495 10852 10853 10816 10855 Yes Security Update 10.0.14393.5066 https://support.microsoft.com/help/5012596 10852 10853 10816 10855 5012596 5012596 https://support.microsoft.com/help/5012596 10852 10853 10816 10855 5012670 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012670 5011564 10481 10482 10483 10543 Yes Monthly Rollup 6.3.9600.20337 https://support.microsoft.com/help/5012670 10481 10482 10483 10543 5012670 5012670 https://support.microsoft.com/help/5012670 10481 10482 10484 10483 10543 5012639 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012639 10481 10482 10483 10543 Yes Security Only 6.3.9600.20337 https://support.microsoft.com/help/5012639 10481 10482 10483 10543 5012639 5012639 https://support.microsoft.com/help/5012639 10481 10482 10483 10543 5012670 5011564 10484 Yes Monthly Rollup 6.3.9600.20337 https://support.microsoft.com/help/5012639 10484 5012670 5012650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012650 5011535 10378 10379 Yes Monthly Rollup 6.2.9200.23679 https://support.microsoft.com/help/5012650 10378 10379 5012650 5012650 https://support.microsoft.com/help/5012650 10378 10379 5012666 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012666 10378 10379 Yes Security Only 6.2.9200.23679 https://support.microsoft.com/help/5012666 10378 10379 5012666 5012666 https://support.microsoft.com/help/5012666 10378 10379 <a href="https://twitter.com/waleedassar">Walied Assar</a> 1.0 2022-04-12T07:00:00 <p>Information published.</p> Remote Procedure Call Runtime Remote Code Execution Vulnerability <p><strong>How could an attacker exploit the vulnerability?</strong></p> <p>To exploit this vulnerability, an attacker would need to trick a user into executing a specially crafted script which executes an RPC call to an RPC host. This could result in remote code execution on the server side with the same permissions as the RPC service.</p> Windows Remote Procedure Call Runtime Microsoft Yes CVE-2022-24528 11568 11569 11570 11571 11572 11712 11713 11714 11896 11897 11898 11923 11924 11801 11802 11803 11926 11927 11929 11930 11931 10729 10735 10852 10853 10816 10855 10047 10048 10481 10482 10484 9312 10287 9318 9344 10051 10049 10378 10379 10483 10543 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11570 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11712 Remote Code Execution 11713 Remote Code Execution 11714 Remote Code Execution 11896 Remote Code Execution 11897 Remote Code Execution 11898 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 11801 Remote Code Execution 11802 Remote Code Execution 11803 Remote Code Execution 11926 Remote Code Execution 11927 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 10729 Remote Code Execution 10735 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10047 Remote Code Execution 10048 Remote Code Execution 10481 Remote Code Execution 10482 Remote Code Execution 10484 Remote Code Execution 9312 Remote Code Execution 10287 Remote Code Execution 9318 Remote Code Execution 9344 Remote Code Execution 10051 Remote Code Execution 10049 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Important 11568 Important 11569 Important 11570 Important 11571 Important 11572 Important 11712 Important 11713 Important 11714 Important 11896 Important 11897 Important 11898 Important 11923 Important 11924 Important 11801 Important 11802 Important 11803 Important 11926 Important 11927 Important 11929 Important 11930 Important 11931 Important 10729 Important 10735 Important 10852 Important 10853 Important 10816 Important 10855 Important 10047 Important 10048 Important 10481 Important 10482 Important 10484 Important 9312 Important 10287 Important 9318 Important 9344 Important 10051 Important 10049 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11570 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11712 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11713 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11714 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11896 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11897 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11898 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11801 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11802 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11803 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11926 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11927 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10729 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10735 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10047 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10048 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10481 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10482 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10484 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9312 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10287 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9318 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9344 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10051 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10049 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5012647 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012647 5011503 11568 11569 11570 11571 11572 Yes Security Update 10.0.17763.2803 https://support.microsoft.com/help/5012647 11568 11569 11570 11571 11572 5012647 5012647 https://support.microsoft.com/help/5012647 11568 11569 11570 11571 11572 5012591 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012591 5011485 11712 11713 11714 Yes Security Update 10.0.18363.2212 https://support.microsoft.com/help/5012591 11712 11713 11714 5012591 5012591 https://support.microsoft.com/help/5012591 11712 11713 11714 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11896 11897 11898 Yes Security Update 10.0.19043.1645 https://support.microsoft.com/help/5012599 11896 11897 11898 5012599 5012599 https://support.microsoft.com/help/5012599 11896 11897 11898 11801 11802 11803 11929 11930 11931 5012604 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012604 5011497 11923 11924 Yes Security Update 10.0.20348.643 https://support.microsoft.com/help/5012604 11923 11924 5012604 5012604 https://support.microsoft.com/help/5012604 11923 11924 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11801 11802 11803 Yes Security Update 10.0.19042.1645 https://support.microsoft.com/help/5012599 11801 11802 11803 5012599 5012592 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012592 5011493 11926 11927 Yes Security Update 10.0.22000.613 https://support.microsoft.com/help/5012592 11926 11927 5012592 5012592 https://support.microsoft.com/help/5012592 11926 11927 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11929 11930 11931 Yes Security Update 10.0.19044.1645 https://support.microsoft.com/help/5012599 11929 11930 11931 5012599 5012653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012653 5011491 10729 10735 Yes Security Update 10.0.10240.19265 https://support.microsoft.com/help/5012653 10729 10735 5012653 5012653 https://support.microsoft.com/help/5012653 10729 10735 5012596 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012596 5011495 10852 10853 10816 10855 Yes Security Update 10.0.14393.5066 https://support.microsoft.com/help/5012596 10852 10853 10816 10855 5012596 5012596 https://support.microsoft.com/help/5012596 10852 10853 10816 10855 5012626 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012626 5011552 10047 10048 10051 10049 Yes Monthly Rollup 6.1.7601.25924 https://support.microsoft.com/help/5012626 10047 10048 10051 10049 5012626 5012626 https://support.microsoft.com/help/5012626 10047 10048 10051 10049 5012649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012649 10047 10048 10051 10049 Yes Security Only 6.1.7601.25924 https://support.microsoft.com/help/5012649 10047 10048 10051 10049 5012649 5012649 https://support.microsoft.com/help/5012649 10047 10048 10051 10049 5012670 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012670 5011564 10481 10482 10483 10543 Yes Monthly Rollup 6.3.9600.20337 https://support.microsoft.com/help/5012670 10481 10482 10483 10543 5012670 5012670 https://support.microsoft.com/help/5012670 10481 10482 10484 10483 10543 5012639 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012639 10481 10482 10483 10543 Yes Security Only 6.3.9600.20337 https://support.microsoft.com/help/5012639 10481 10482 10483 10543 5012639 5012639 https://support.microsoft.com/help/5012639 10481 10482 10483 10543 5012670 5011564 10484 Yes Monthly Rollup 6.3.9600.20337 https://support.microsoft.com/help/5012639 10484 5012670 5012658 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012658 5011534 9312 10287 9318 9344 Yes Monthly Rollup 6.0.6003.21446 https://support.microsoft.com/help/5012658 9312 10287 9318 9344 5012658 5012658 https://support.microsoft.com/help/5012658 9312 10287 9318 9344 5012632 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012632 9312 10287 9318 9344 Yes Security Only 6.0.6003.21446 https://support.microsoft.com/help/5012632 9312 10287 9318 9344 5012632 5012632 https://support.microsoft.com/help/5012632 9312 10287 9318 9344 5012650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012650 5011535 10378 10379 Yes Monthly Rollup 6.2.9200.23679 https://support.microsoft.com/help/5012650 10378 10379 5012650 5012650 https://support.microsoft.com/help/5012650 10378 10379 5012666 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012666 10378 10379 Yes Security Only 6.2.9200.23679 https://support.microsoft.com/help/5012666 10378 10379 5012666 5012666 https://support.microsoft.com/help/5012666 10378 10379 <a href="https://twitter.com/guhe120">Yuki Chen</a> with <a href="https://www.cyberkl.com/">Cyber KunLun</a> 1.0 2022-04-12T07:00:00 <p>Information published.</p> Windows Telephony Server Elevation of Privilege Vulnerability Windows Telephony Server Microsoft Yes CVE-2022-24550 11568 11569 11570 11571 11572 11712 11713 11714 11896 11897 11898 11923 11924 11801 11802 11803 11926 11927 11929 11930 11931 10729 10735 10852 10853 10816 10855 10481 10482 10484 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11570 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11712 Elevation of Privilege 11713 Elevation of Privilege 11714 Elevation of Privilege 11896 Elevation of Privilege 11897 Elevation of Privilege 11898 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11801 Elevation of Privilege 11802 Elevation of Privilege 11803 Elevation of Privilege 11926 Elevation of Privilege 11927 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 10729 Elevation of Privilege 10735 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10481 Elevation of Privilege 10482 Elevation of Privilege 10484 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11570 Important 11571 Important 11572 Important 11712 Important 11713 Important 11714 Important 11896 Important 11897 Important 11898 Important 11923 Important 11924 Important 11801 Important 11802 Important 11803 Important 11926 Important 11927 Important 11929 Important 11930 Important 11931 Important 10729 Important 10735 Important 10852 Important 10853 Important 10816 Important 10855 Important 10481 Important 10482 Important 10484 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11570 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11712 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11713 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11714 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11896 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11897 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11898 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11801 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11802 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11803 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11926 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11927 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10729 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10735 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10481 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10482 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10484 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5012647 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012647 5011503 11568 11569 11570 11571 11572 Yes Security Update 10.0.17763.2803 https://support.microsoft.com/help/5012647 11568 11569 11570 11571 11572 5012647 5012647 https://support.microsoft.com/help/5012647 11568 11569 11570 11571 11572 5012591 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012591 5011485 11712 11713 11714 Yes Security Update 10.0.18363.2212 https://support.microsoft.com/help/5012591 11712 11713 11714 5012591 5012591 https://support.microsoft.com/help/5012591 11712 11713 11714 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11896 11897 11898 Yes Security Update 10.0.19043.1645 https://support.microsoft.com/help/5012599 11896 11897 11898 5012599 5012599 https://support.microsoft.com/help/5012599 11896 11897 11898 11801 11802 11803 11929 11930 11931 5012604 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012604 5011497 11923 11924 Yes Security Update 10.0.20348.643 https://support.microsoft.com/help/5012604 11923 11924 5012604 5012604 https://support.microsoft.com/help/5012604 11923 11924 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11801 11802 11803 Yes Security Update 10.0.19042.1645 https://support.microsoft.com/help/5012599 11801 11802 11803 5012599 5012592 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012592 5011493 11926 11927 Yes Security Update 10.0.22000.613 https://support.microsoft.com/help/5012592 11926 11927 5012592 5012592 https://support.microsoft.com/help/5012592 11926 11927 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11929 11930 11931 Yes Security Update 10.0.19044.1645 https://support.microsoft.com/help/5012599 11929 11930 11931 5012599 5012653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012653 5011491 10729 10735 Yes Security Update 10.0.10240.19265 https://support.microsoft.com/help/5012653 10729 10735 5012653 5012653 https://support.microsoft.com/help/5012653 10729 10735 5012596 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012596 5011495 10852 10853 10816 10855 Yes Security Update 10.0.14393.5066 https://support.microsoft.com/help/5012596 10852 10853 10816 10855 5012596 5012596 https://support.microsoft.com/help/5012596 10852 10853 10816 10855 5012670 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012670 5011564 10481 10482 10483 10543 Yes Monthly Rollup 6.3.9600.20337 https://support.microsoft.com/help/5012670 10481 10482 10483 10543 5012670 5012670 https://support.microsoft.com/help/5012670 10481 10482 10484 10483 10543 5012639 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012639 10481 10482 10483 10543 Yes Security Only 6.3.9600.20337 https://support.microsoft.com/help/5012639 10481 10482 10483 10543 5012639 5012639 https://support.microsoft.com/help/5012639 10481 10482 10483 10543 5012670 5011564 10484 Yes Monthly Rollup 6.3.9600.20337 https://support.microsoft.com/help/5012639 10484 5012670 5012650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012650 5011535 10378 10379 Yes Monthly Rollup 6.2.9200.23679 https://support.microsoft.com/help/5012650 10378 10379 5012650 5012650 https://support.microsoft.com/help/5012650 10378 10379 5012666 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012666 10378 10379 Yes Security Only 6.2.9200.23679 https://support.microsoft.com/help/5012666 10378 10379 5012666 5012666 https://support.microsoft.com/help/5012666 10378 10379 Simon Zuckerbraun of Trend Micro Zero Day Initiative 1.0 2022-04-12T07:00:00 <p>Information published.</p> Windows Network File System Remote Code Execution Vulnerability <p><strong>I am running a supported version of Windows Server. Is my system vulnerable to this issue?</strong></p> <p>This vulnerability is only exploitable for systems that have the NFS role enabled. See <a href="https://docs.microsoft.com/en-us/windows-server/storage/nfs/nfs-overview">NFS Overview</a> for more information on this feature. More information on installing or uninstalling Roles or Role Services is available <a href="https://docs.microsoft.com/en-us/windows-server/administration/server-manager/install-or-uninstall-roles-role-services-or-features#install-roles-role-services-and-features-by-using-the-add-roles-and-features-wizard">here</a>.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An attacker could send a specially crafted NFS protocol network message to a vulnerable Windows machine, which could enable remote code execution.</p> Windows Network File System Microsoft Yes CVE-2022-24497 11568 11569 11570 11571 11572 11712 11713 11714 11896 11897 11898 11923 11924 11801 11802 11803 11926 11927 11929 11930 11931 10729 10735 10852 10853 10816 10855 10481 10482 10484 10378 10379 10483 10543 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11570 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11712 Remote Code Execution 11713 Remote Code Execution 11714 Remote Code Execution 11896 Remote Code Execution 11897 Remote Code Execution 11898 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 11801 Remote Code Execution 11802 Remote Code Execution 11803 Remote Code Execution 11926 Remote Code Execution 11927 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 10729 Remote Code Execution 10735 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10481 Remote Code Execution 10482 Remote Code Execution 10484 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Critical 11568 Critical 11569 Critical 11570 Critical 11571 Critical 11572 Critical 11712 Critical 11713 Critical 11714 Critical 11896 Critical 11897 Critical 11898 Critical 11923 Critical 11924 Critical 11801 Critical 11802 Critical 11803 Critical 11926 Critical 11927 Critical 11929 Critical 11930 Critical 11931 Critical 10729 Critical 10735 Critical 10852 Critical 10853 Critical 10816 Critical 10855 Critical 10481 Critical 10482 Critical 10484 Critical 10378 Critical 10379 Critical 10483 Critical 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation More Likely 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11570 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11712 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11713 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11714 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11896 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11897 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11898 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11801 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11802 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11803 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11926 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11927 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10729 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10735 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10481 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10482 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10484 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5012647 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012647 5011503 11568 11569 11570 11571 11572 Yes Security Update 10.0.17763.2803 https://support.microsoft.com/help/5012647 11568 11569 11570 11571 11572 5012647 5012647 https://support.microsoft.com/help/5012647 11568 11569 11570 11571 11572 5012591 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012591 5011485 11712 11713 11714 Yes Security Update 10.0.18363.2212 https://support.microsoft.com/help/5012591 11712 11713 11714 5012591 5012591 https://support.microsoft.com/help/5012591 11712 11713 11714 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11896 11897 11898 Yes Security Update 10.0.19043.1645 https://support.microsoft.com/help/5012599 11896 11897 11898 5012599 5012599 https://support.microsoft.com/help/5012599 11896 11897 11898 11801 11802 11803 11929 11930 11931 5012604 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012604 5011497 11923 11924 Yes Security Update 10.0.20348.643 https://support.microsoft.com/help/5012604 11923 11924 5012604 5012604 https://support.microsoft.com/help/5012604 11923 11924 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11801 11802 11803 Yes Security Update 10.0.19042.1645 https://support.microsoft.com/help/5012599 11801 11802 11803 5012599 5012592 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012592 5011493 11926 11927 Yes Security Update 10.0.22000.613 https://support.microsoft.com/help/5012592 11926 11927 5012592 5012592 https://support.microsoft.com/help/5012592 11926 11927 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11929 11930 11931 Yes Security Update 10.0.19044.1645 https://support.microsoft.com/help/5012599 11929 11930 11931 5012599 5012653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012653 5011491 10729 10735 Yes Security Update 10.0.10240.19265 https://support.microsoft.com/help/5012653 10729 10735 5012653 5012653 https://support.microsoft.com/help/5012653 10729 10735 5012596 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012596 5011495 10852 10853 10816 10855 Yes Security Update 10.0.14393.5066 https://support.microsoft.com/help/5012596 10852 10853 10816 10855 5012596 5012596 https://support.microsoft.com/help/5012596 10852 10853 10816 10855 5012670 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012670 5011564 10481 10482 10483 10543 Yes Monthly Rollup 6.3.9600.20337 https://support.microsoft.com/help/5012670 10481 10482 10483 10543 5012670 5012670 https://support.microsoft.com/help/5012670 10481 10482 10484 10483 10543 5012639 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012639 10481 10482 10483 10543 Yes Security Only 6.3.9600.20337 https://support.microsoft.com/help/5012639 10481 10482 10483 10543 5012639 5012639 https://support.microsoft.com/help/5012639 10481 10482 10483 10543 5012670 5011564 10484 Yes Monthly Rollup 6.3.9600.20337 https://support.microsoft.com/help/5012639 10484 5012670 5012650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012650 5011535 10378 10379 Yes Monthly Rollup 6.2.9200.23679 https://support.microsoft.com/help/5012650 10378 10379 5012650 5012650 https://support.microsoft.com/help/5012650 10378 10379 5012666 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012666 10378 10379 Yes Security Only 6.2.9200.23679 https://support.microsoft.com/help/5012666 10378 10379 5012666 5012666 https://support.microsoft.com/help/5012666 10378 10379 <a href="https://twitter.com/guhe120">Yuki Chen</a> with <a href="https://www.cyberkl.com/">Cyber KunLun</a> 1.0 2022-04-05T07:00:00 <p>Information published.</p> Windows Installer Elevation of Privilege Vulnerability Windows Installer Microsoft Yes CVE-2022-24499 11568 11569 11570 11571 11572 11712 11713 11714 11896 11897 11898 11923 11924 11801 11802 11803 11926 11927 11929 11930 11931 10729 10735 10852 10853 10816 10855 10047 10048 10481 10482 10484 9312 10287 9318 9344 10051 10049 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11570 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11712 Elevation of Privilege 11713 Elevation of Privilege 11714 Elevation of Privilege 11896 Elevation of Privilege 11897 Elevation of Privilege 11898 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11801 Elevation of Privilege 11802 Elevation of Privilege 11803 Elevation of Privilege 11926 Elevation of Privilege 11927 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 10729 Elevation of Privilege 10735 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10047 Elevation of Privilege 10048 Elevation of Privilege 10481 Elevation of Privilege 10482 Elevation of Privilege 10484 Elevation of Privilege 9312 Elevation of Privilege 10287 Elevation of Privilege 9318 Elevation of Privilege 9344 Elevation of Privilege 10051 Elevation of Privilege 10049 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11570 Important 11571 Important 11572 Important 11712 Important 11713 Important 11714 Important 11896 Important 11897 Important 11898 Important 11923 Important 11924 Important 11801 Important 11802 Important 11803 Important 11926 Important 11927 Important 11929 Important 11930 Important 11931 Important 10729 Important 10735 Important 10852 Important 10853 Important 10816 Important 10855 Important 10047 Important 10048 Important 10481 Important 10482 Important 10484 Important 9312 Important 10287 Important 9318 Important 9344 Important 10051 Important 10049 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11570 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11712 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11713 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11714 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11896 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11897 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11898 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11801 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11802 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11803 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11926 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11927 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10729 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10735 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10047 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10048 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10481 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10482 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10484 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9312 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10287 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9318 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9344 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10051 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10049 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5012647 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012647 5011503 11568 11569 11570 11571 11572 Yes Security Update 10.0.17763.2803 https://support.microsoft.com/help/5012647 11568 11569 11570 11571 11572 5012647 5012647 https://support.microsoft.com/help/5012647 11568 11569 11570 11571 11572 5012591 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012591 5011485 11712 11713 11714 Yes Security Update 10.0.18363.2212 https://support.microsoft.com/help/5012591 11712 11713 11714 5012591 5012591 https://support.microsoft.com/help/5012591 11712 11713 11714 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11896 11897 11898 Yes Security Update 10.0.19043.1645 https://support.microsoft.com/help/5012599 11896 11897 11898 5012599 5012599 https://support.microsoft.com/help/5012599 11896 11897 11898 11801 11802 11803 11929 11930 11931 5012604 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012604 5011497 11923 11924 Yes Security Update 10.0.20348.643 https://support.microsoft.com/help/5012604 11923 11924 5012604 5012604 https://support.microsoft.com/help/5012604 11923 11924 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11801 11802 11803 Yes Security Update 10.0.19042.1645 https://support.microsoft.com/help/5012599 11801 11802 11803 5012599 5012592 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012592 5011493 11926 11927 Yes Security Update 10.0.22000.613 https://support.microsoft.com/help/5012592 11926 11927 5012592 5012592 https://support.microsoft.com/help/5012592 11926 11927 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11929 11930 11931 Yes Security Update 10.0.19044.1645 https://support.microsoft.com/help/5012599 11929 11930 11931 5012599 5012653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012653 5011491 10729 10735 Yes Security Update 10.0.10240.19265 https://support.microsoft.com/help/5012653 10729 10735 5012653 5012653 https://support.microsoft.com/help/5012653 10729 10735 5012596 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012596 5011495 10852 10853 10816 10855 Yes Security Update 10.0.14393.5066 https://support.microsoft.com/help/5012596 10852 10853 10816 10855 5012596 5012596 https://support.microsoft.com/help/5012596 10852 10853 10816 10855 5012626 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012626 5011552 10047 10048 10051 10049 Yes Monthly Rollup 6.1.7601.25924 https://support.microsoft.com/help/5012626 10047 10048 10051 10049 5012626 5012626 https://support.microsoft.com/help/5012626 10047 10048 10051 10049 5012649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012649 10047 10048 10051 10049 Yes Security Only 6.1.7601.25924 https://support.microsoft.com/help/5012649 10047 10048 10051 10049 5012649 5012649 https://support.microsoft.com/help/5012649 10047 10048 10051 10049 5012670 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012670 5011564 10481 10482 10483 10543 Yes Monthly Rollup 6.3.9600.20337 https://support.microsoft.com/help/5012670 10481 10482 10483 10543 5012670 5012670 https://support.microsoft.com/help/5012670 10481 10482 10484 10483 10543 5012639 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012639 10481 10482 10483 10543 Yes Security Only 6.3.9600.20337 https://support.microsoft.com/help/5012639 10481 10482 10483 10543 5012639 5012639 https://support.microsoft.com/help/5012639 10481 10482 10483 10543 5012670 5011564 10484 Yes Monthly Rollup 6.3.9600.20337 https://support.microsoft.com/help/5012639 10484 5012670 5012658 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012658 5011534 9312 10287 9318 9344 Yes Monthly Rollup 6.0.6003.21446 https://support.microsoft.com/help/5012658 9312 10287 9318 9344 5012658 5012658 https://support.microsoft.com/help/5012658 9312 10287 9318 9344 5012632 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012632 9312 10287 9318 9344 Yes Security Only 6.0.6003.21446 https://support.microsoft.com/help/5012632 9312 10287 9318 9344 5012632 5012632 https://support.microsoft.com/help/5012632 9312 10287 9318 9344 5012650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012650 5011535 10378 10379 Yes Monthly Rollup 6.2.9200.23679 https://support.microsoft.com/help/5012650 10378 10379 5012650 5012650 https://support.microsoft.com/help/5012650 10378 10379 5012666 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012666 10378 10379 Yes Security Only 6.2.9200.23679 https://support.microsoft.com/help/5012666 10378 10379 5012666 5012666 https://support.microsoft.com/help/5012666 10378 10379 JeongOh Kyea of THEORI working with <a href="https://www.zerodayinitiative.com/">Trend Micro Zero Day Initiative</a> 1.0 2022-04-12T07:00:00 <p>Information published.</p> Windows Cluster Shared Volume (CSV) Denial of Service Vulnerability Windows Cluster Shared Volume (CSV) Microsoft Yes CVE-2022-26784 11571 11572 11923 11924 11803 10816 10855 10378 10379 10483 10543 Denial of Service 11571 Denial of Service 11572 Denial of Service 11923 Denial of Service 11924 Denial of Service 11803 Denial of Service 10816 Denial of Service 10855 Denial of Service 10378 Denial of Service 10379 Denial of Service 10483 Denial of Service 10543 Important 11571 Important 11572 Important 11923 Important 11924 Important 11803 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11571 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11572 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11923 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11924 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11803 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10816 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10855 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10378 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10379 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10483 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10543 5012647 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012647 5011503 11571 11572 Yes Security Update 10.0.17763.2803 https://support.microsoft.com/help/5012647 11571 11572 5012647 5012647 https://support.microsoft.com/help/5012647 11571 11572 5012604 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012604 5011497 11923 11924 Yes Security Update 10.0.20348.643 https://support.microsoft.com/help/5012604 11923 11924 5012604 5012604 https://support.microsoft.com/help/5012604 11923 11924 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11803 Yes Security Update 10.0.19042.1645 https://support.microsoft.com/help/5012599 11803 5012599 5012599 https://support.microsoft.com/help/5012599 11803 5012596 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012596 5011495 10816 10855 Yes Security Update 10.0.14393.5066 https://support.microsoft.com/help/5012596 10816 10855 5012596 5012596 https://support.microsoft.com/help/5012596 10816 10855 5012650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012650 5011535 10378 10379 Yes Monthly Rollup 6.2.9200.23679 https://support.microsoft.com/help/5012650 10378 10379 5012650 5012650 https://support.microsoft.com/help/5012650 10378 10379 5012666 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012666 10378 10379 Yes Security Only 6.2.9200.23679 https://support.microsoft.com/help/5012666 10378 10379 5012666 5012666 https://support.microsoft.com/help/5012666 10378 10379 5012670 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012670 5011564 10483 10543 Yes Monthly Rollup 6.3.9600.20337 https://support.microsoft.com/help/5012670 10483 10543 5012670 5012670 https://support.microsoft.com/help/5012670 10483 10543 5012639 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012639 10483 10543 Yes Security Only 6.3.9600.20337 https://support.microsoft.com/help/5012639 10483 10543 5012639 5012639 https://support.microsoft.com/help/5012639 10483 10543 k0shl with Kunlun Lab 1.0 2022-04-12T07:00:00 <p>Information published.</p> Windows Hyper-V Shared Virtual Hard Disks Information Disclosure Vulnerability <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>Exploiting this vulnerability could allow the disclosure of initialized or uninitialized memory in the process heap.</p> Role: Windows Hyper-V Microsoft Yes CVE-2022-26785 11571 11572 11923 11924 11803 10816 10855 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 11803 Information Disclosure 10816 Information Disclosure 10855 Important 11571 Important 11572 Important 11923 Important 11924 Important 11803 Important 10816 Important 10855 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11803 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 5012647 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012647 5011503 11571 11572 Yes Security Update 10.0.17763.2803 https://support.microsoft.com/help/5012647 11571 11572 5012647 5012647 https://support.microsoft.com/help/5012647 11571 11572 5012604 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012604 5011497 11923 11924 Yes Security Update 10.0.20348.643 https://support.microsoft.com/help/5012604 11923 11924 5012604 5012604 https://support.microsoft.com/help/5012604 11923 11924 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11803 Yes Security Update 10.0.19042.1645 https://support.microsoft.com/help/5012599 11803 5012599 5012599 https://support.microsoft.com/help/5012599 11803 5012596 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012596 5011495 10816 10855 Yes Security Update 10.0.14393.5066 https://support.microsoft.com/help/5012596 10816 10855 5012596 5012596 https://support.microsoft.com/help/5012596 10816 10855 k0shl with Kunlun Lab 1.0 2022-04-12T07:00:00 <p>Information published.</p> Windows Hyper-V Shared Virtual Hard Disks Information Disclosure Vulnerability <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>Exploiting this vulnerability could allow the disclosure of certain kernel memory content.</p> Role: Windows Hyper-V Microsoft Yes CVE-2022-26783 11571 11572 11923 11924 11803 10816 10855 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 11803 Information Disclosure 10816 Information Disclosure 10855 Important 11571 Important 11572 Important 11923 Important 11924 Important 11803 Important 10816 Important 10855 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11803 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 5012647 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012647 5011503 11571 11572 Yes Security Update 10.0.17763.2803 https://support.microsoft.com/help/5012647 11571 11572 5012647 5012647 https://support.microsoft.com/help/5012647 11571 11572 5012604 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012604 5011497 11923 11924 Yes Security Update 10.0.20348.643 https://support.microsoft.com/help/5012604 11923 11924 5012604 5012604 https://support.microsoft.com/help/5012604 11923 11924 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11803 Yes Security Update 10.0.19042.1645 https://support.microsoft.com/help/5012599 11803 5012599 5012599 https://support.microsoft.com/help/5012599 11803 5012596 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012596 5011495 10816 10855 Yes Security Update 10.0.14393.5066 https://support.microsoft.com/help/5012596 10816 10855 5012596 5012596 https://support.microsoft.com/help/5012596 10816 10855 k0shl with Kunlun Lab 1.0 2022-04-12T07:00:00 <p>Information published.</p> Windows Print Spooler Elevation of Privilege Vulnerability Windows Print Spooler Components Microsoft Yes CVE-2022-26786 11568 11569 11570 11571 11572 11712 11713 11714 11896 11897 11898 11923 11924 11801 11802 11803 11926 11927 11929 11930 11931 10729 10735 10852 10853 10816 10855 10481 10482 10484 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11570 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11712 Elevation of Privilege 11713 Elevation of Privilege 11714 Elevation of Privilege 11896 Elevation of Privilege 11897 Elevation of Privilege 11898 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11801 Elevation of Privilege 11802 Elevation of Privilege 11803 Elevation of Privilege 11926 Elevation of Privilege 11927 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 10729 Elevation of Privilege 10735 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10481 Elevation of Privilege 10482 Elevation of Privilege 10484 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11570 Important 11571 Important 11572 Important 11712 Important 11713 Important 11714 Important 11896 Important 11897 Important 11898 Important 11923 Important 11924 Important 11801 Important 11802 Important 11803 Important 11926 Important 11927 Important 11929 Important 11930 Important 11931 Important 10729 Important 10735 Important 10852 Important 10853 Important 10816 Important 10855 Important 10481 Important 10482 Important 10484 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11570 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11712 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11713 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11714 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11896 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11897 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11898 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11801 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11802 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11803 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11926 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11927 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10729 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10735 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10481 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10482 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10484 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5012647 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012647 5011503 11568 11569 11570 11571 11572 Yes Security Update 10.0.17763.2803 https://support.microsoft.com/help/5012647 11568 11569 11570 11571 11572 5012647 5012647 https://support.microsoft.com/help/5012647 11568 11569 11570 11571 11572 5012591 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012591 5011485 11712 11713 11714 Yes Security Update 10.0.18363.2212 https://support.microsoft.com/help/5012591 11712 11713 11714 5012591 5012591 https://support.microsoft.com/help/5012591 11712 11713 11714 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11896 11897 11898 Yes Security Update 10.0.19043.1645 https://support.microsoft.com/help/5012599 11896 11897 11898 5012599 5012599 https://support.microsoft.com/help/5012599 11896 11897 11898 11801 11802 11803 11929 11930 11931 5012604 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012604 5011497 11923 11924 Yes Security Update 10.0.20348.643 https://support.microsoft.com/help/5012604 11923 11924 5012604 5012604 https://support.microsoft.com/help/5012604 11923 11924 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11801 11802 11803 Yes Security Update 10.0.19042.1645 https://support.microsoft.com/help/5012599 11801 11802 11803 5012599 5012592 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012592 5011493 11926 11927 Yes Security Update 10.0.22000.613 https://support.microsoft.com/help/5012592 11926 11927 5012592 5012592 https://support.microsoft.com/help/5012592 11926 11927 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11929 11930 11931 Yes Security Update 10.0.19044.1645 https://support.microsoft.com/help/5012599 11929 11930 11931 5012599 5012653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012653 5011491 10729 10735 Yes Security Update 10.0.10240.19265 https://support.microsoft.com/help/5012653 10729 10735 5012653 5012653 https://support.microsoft.com/help/5012653 10729 10735 5012596 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012596 5011495 10852 10853 10816 10855 Yes Security Update 10.0.14393.5066 https://support.microsoft.com/help/5012596 10852 10853 10816 10855 5012596 5012596 https://support.microsoft.com/help/5012596 10852 10853 10816 10855 5012670 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012670 5011564 10481 10482 10483 10543 Yes Monthly Rollup 6.3.9600.20337 https://support.microsoft.com/help/5012670 10481 10482 10483 10543 5012670 5012670 https://support.microsoft.com/help/5012670 10481 10482 10484 10483 10543 5012639 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012639 10481 10482 10483 10543 Yes Security Only 6.3.9600.20337 https://support.microsoft.com/help/5012639 10481 10482 10483 10543 5012639 5012639 https://support.microsoft.com/help/5012639 10481 10482 10483 10543 5012670 5011564 10484 Yes Monthly Rollup 6.3.9600.20337 https://support.microsoft.com/help/5012639 10484 5012670 5012650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012650 5011535 10378 10379 Yes Monthly Rollup 6.2.9200.23679 https://support.microsoft.com/help/5012650 10378 10379 5012650 5012650 https://support.microsoft.com/help/5012650 10378 10379 5012666 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012666 10378 10379 Yes Security Only 6.2.9200.23679 https://support.microsoft.com/help/5012666 10378 10379 5012666 5012666 https://support.microsoft.com/help/5012666 10378 10379 Microsoft Offensive Research & Security Engineering (MORSE) 1.0 2022-04-12T08:00:00 <p>Information published.</p> Windows Print Spooler Elevation of Privilege Vulnerability Windows Print Spooler Components Microsoft Yes CVE-2022-26787 11568 11569 11570 11571 11572 11712 11713 11714 11896 11897 11898 11923 11924 11801 11802 11803 11926 11927 11929 11930 11931 10729 10735 10852 10853 10816 10855 10047 10048 10481 10482 10484 10051 10049 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11570 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11712 Elevation of Privilege 11713 Elevation of Privilege 11714 Elevation of Privilege 11896 Elevation of Privilege 11897 Elevation of Privilege 11898 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11801 Elevation of Privilege 11802 Elevation of Privilege 11803 Elevation of Privilege 11926 Elevation of Privilege 11927 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 10729 Elevation of Privilege 10735 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10047 Elevation of Privilege 10048 Elevation of Privilege 10481 Elevation of Privilege 10482 Elevation of Privilege 10484 Elevation of Privilege 10051 Elevation of Privilege 10049 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11570 Important 11571 Important 11572 Important 11712 Important 11713 Important 11714 Important 11896 Important 11897 Important 11898 Important 11923 Important 11924 Important 11801 Important 11802 Important 11803 Important 11926 Important 11927 Important 11929 Important 11930 Important 11931 Important 10729 Important 10735 Important 10852 Important 10853 Important 10816 Important 10855 Important 10047 Important 10048 Important 10481 Important 10482 Important 10484 Important 10051 Important 10049 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11570 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11712 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11713 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11714 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11896 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11897 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11898 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11801 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11802 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11803 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11926 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11927 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10729 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10735 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10047 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10048 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10481 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10482 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10484 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10051 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10049 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5012647 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012647 5011503 11568 11569 11570 11571 11572 Yes Security Update 10.0.17763.2803 https://support.microsoft.com/help/5012647 11568 11569 11570 11571 11572 5012647 5012647 https://support.microsoft.com/help/5012647 11568 11569 11570 11571 11572 5012591 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012591 5011485 11712 11713 11714 Yes Security Update 10.0.18363.2212 https://support.microsoft.com/help/5012591 11712 11713 11714 5012591 5012591 https://support.microsoft.com/help/5012591 11712 11713 11714 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11896 11897 11898 Yes Security Update 10.0.19043.1645 https://support.microsoft.com/help/5012599 11896 11897 11898 5012599 5012599 https://support.microsoft.com/help/5012599 11896 11897 11898 11801 11802 11803 11929 11930 11931 5012604 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012604 5011497 11923 11924 Yes Security Update 10.0.20348.643 https://support.microsoft.com/help/5012604 11923 11924 5012604 5012604 https://support.microsoft.com/help/5012604 11923 11924 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11801 11802 11803 Yes Security Update 10.0.19042.1645 https://support.microsoft.com/help/5012599 11801 11802 11803 5012599 5012592 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012592 5011493 11926 11927 Yes Security Update 10.0.22000.613 https://support.microsoft.com/help/5012592 11926 11927 5012592 5012592 https://support.microsoft.com/help/5012592 11926 11927 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11929 11930 11931 Yes Security Update 10.0.19044.1645 https://support.microsoft.com/help/5012599 11929 11930 11931 5012599 5012653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012653 5011491 10729 10735 Yes Security Update 10.0.10240.19265 https://support.microsoft.com/help/5012653 10729 10735 5012653 5012653 https://support.microsoft.com/help/5012653 10729 10735 5012596 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012596 5011495 10852 10853 10816 10855 Yes Security Update 10.0.14393.5066 https://support.microsoft.com/help/5012596 10852 10853 10816 10855 5012596 5012596 https://support.microsoft.com/help/5012596 10852 10853 10816 10855 5012626 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012626 5011552 10047 10048 10051 10049 Yes Monthly Rollup 6.1.7601.25924 https://support.microsoft.com/help/5012626 10047 10048 10051 10049 5012626 5012626 https://support.microsoft.com/help/5012626 10047 10048 10051 10049 5012649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012649 10047 10048 10051 10049 Yes Security Only 6.1.7601.25924 https://support.microsoft.com/help/5012649 10047 10048 10051 10049 5012649 5012649 https://support.microsoft.com/help/5012649 10047 10048 10051 10049 5012670 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012670 5011564 10481 10482 10483 10543 Yes Monthly Rollup 6.3.9600.20337 https://support.microsoft.com/help/5012670 10481 10482 10483 10543 5012670 5012670 https://support.microsoft.com/help/5012670 10481 10482 10484 10483 10543 5012639 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012639 10481 10482 10483 10543 Yes Security Only 6.3.9600.20337 https://support.microsoft.com/help/5012639 10481 10482 10483 10543 5012639 5012639 https://support.microsoft.com/help/5012639 10481 10482 10483 10543 5012670 5011564 10484 Yes Monthly Rollup 6.3.9600.20337 https://support.microsoft.com/help/5012639 10484 5012670 5012650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012650 5011535 10378 10379 Yes Monthly Rollup 6.2.9200.23679 https://support.microsoft.com/help/5012650 10378 10379 5012650 5012650 https://support.microsoft.com/help/5012650 10378 10379 5012666 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012666 10378 10379 Yes Security Only 6.2.9200.23679 https://support.microsoft.com/help/5012666 10378 10379 5012666 5012666 https://support.microsoft.com/help/5012666 10378 10379 Microsoft Offensive Research & Security Engineering (MORSE) 1.0 2022-04-12T08:00:00 <p>Information published.</p> PowerShell Elevation of Privilege Vulnerability Windows PowerShell Microsoft Yes CVE-2022-26788 11568 11569 11570 11571 11572 11712 11713 11714 11896 11897 11898 11923 11924 11801 11802 11803 11926 11927 11929 11930 11931 10729 10735 10852 10853 10816 10855 10481 10482 10484 10051 10049 10378 10379 10483 10543 11745 11925 11970 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11570 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11712 Elevation of Privilege 11713 Elevation of Privilege 11714 Elevation of Privilege 11896 Elevation of Privilege 11897 Elevation of Privilege 11898 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11801 Elevation of Privilege 11802 Elevation of Privilege 11803 Elevation of Privilege 11926 Elevation of Privilege 11927 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 10729 Elevation of Privilege 10735 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10481 Elevation of Privilege 10482 Elevation of Privilege 10484 Elevation of Privilege 10051 Elevation of Privilege 10049 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 11745 Elevation of Privilege 11925 Elevation of Privilege 11970 Important 11568 Important 11569 Important 11570 Important 11571 Important 11572 Important 11712 Important 11713 Important 11714 Important 11896 Important 11897 Important 11898 Important 11923 Important 11924 Important 11801 Important 11802 Important 11803 Important 11926 Important 11927 Important 11929 Important 11930 Important 11931 Important 10729 Important 10735 Important 10852 Important 10853 Important 10816 Important 10855 Important 10481 Important 10482 Important 10484 Important 10051 Important 10049 Important 10378 Important 10379 Important 10483 Important 10543 Important 11745 Important 11925 Important 11970 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11570 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11712 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11713 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11714 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11896 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11897 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11898 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11801 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11802 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11803 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11926 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11927 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10729 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10735 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10481 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10482 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10484 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10051 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10049 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11745 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11925 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11970 5012647 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012647 5011503 11568 11569 11570 11571 11572 Yes Security Update 10.0.17763.2803 https://support.microsoft.com/help/5012647 11568 11569 11570 11571 11572 5012647 5012647 https://support.microsoft.com/help/5012647 11568 11569 11570 11571 11572 5012591 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012591 5011485 11712 11713 11714 Yes Security Update 10.0.18363.2212 https://support.microsoft.com/help/5012591 11712 11713 11714 5012591 5012591 https://support.microsoft.com/help/5012591 11712 11713 11714 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11896 11897 11898 Yes Security Update 10.0.19043.1645 https://support.microsoft.com/help/5012599 11896 11897 11898 5012599 5012599 https://support.microsoft.com/help/5012599 11896 11897 11898 11801 11802 11803 11929 11930 11931 5012604 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012604 5011497 11923 11924 Yes Security Update 10.0.20348.643 https://support.microsoft.com/help/5012604 11923 11924 5012604 5012604 https://support.microsoft.com/help/5012604 11923 11924 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11801 11802 11803 Yes Security Update 10.0.19042.1645 https://support.microsoft.com/help/5012599 11801 11802 11803 5012599 5012592 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012592 5011493 11926 11927 Yes Security Update 10.0.22000.613 https://support.microsoft.com/help/5012592 11926 11927 5012592 5012592 https://support.microsoft.com/help/5012592 11926 11927 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11929 11930 11931 Yes Security Update 10.0.19044.1645 https://support.microsoft.com/help/5012599 11929 11930 11931 5012599 5012653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012653 5011491 10729 10735 Yes Security Update 10.0.10240.19265 https://support.microsoft.com/help/5012653 10729 10735 5012653 5012653 https://support.microsoft.com/help/5012653 10729 10735 5012596 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012596 5011495 10852 10853 10816 10855 Yes Security Update 10.0.14393.5066 https://support.microsoft.com/help/5012596 10852 10853 10816 10855 5012596 5012596 https://support.microsoft.com/help/5012596 10852 10853 10816 10855 5012670 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012670 5011564 10481 10482 10483 10543 Yes Monthly Rollup 6.3.9600.20337 https://support.microsoft.com/help/5012670 10481 10482 10483 10543 5012670 5012670 https://support.microsoft.com/help/5012670 10481 10482 10484 10483 10543 5012639 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012639 10481 10482 10483 10543 Yes Security Only 6.3.9600.20337 https://support.microsoft.com/help/5012639 10481 10482 10483 10543 5012639 5012639 https://support.microsoft.com/help/5012639 10481 10482 10483 10543 5012670 5011564 10484 Yes Monthly Rollup 6.3.9600.20337 https://support.microsoft.com/help/5012639 10484 5012670 5014012 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5014012 5012626 10051 10049 Yes Monthly Rollup 6.1.7601.25954 https://support.microsoft.com/help/5014012 10051 10049 5014012 5014012 https://support.microsoft.com/help/5014012 10051 10049 5013999 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5013999 10051 10049 Yes Security Only 6.1.7601.25954 https://support.microsoft.com/help/5013999 10051 10049 5013999 5013999 https://support.microsoft.com/help/5013999 10051 10049 5012650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012650 5011535 10378 10379 Yes Monthly Rollup 6.2.9200.23679 https://support.microsoft.com/help/5012650 10378 10379 5012650 5012650 https://support.microsoft.com/help/5012650 10378 10379 5012666 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012666 10378 10379 Yes Security Only 6.2.9200.23679 https://support.microsoft.com/help/5012666 10378 10379 5012666 5012666 https://support.microsoft.com/help/5012666 10378 10379 Release Notes https://github.com/PowerShell/PowerShell#get-powershell 11745 Maybe Security Update 7.0.10 https://github.com/PowerShell/Announcements/issues/31 11745 Release Notes Release Notes https://github.com/PowerShell/PowerShell#get-powershell 11925 Maybe Security Update 7.1.7 https://github.com/PowerShell/Announcements/issues/31 11925 Release Notes Release Notes https://github.com/PowerShell/PowerShell#get-powershell 11970 Maybe Security Update 7.2.3 https://github.com/PowerShell/Announcements/issues/31 11970 Release Notes <a href="https://twitter.com/zashraf1337">Zubair Ashraf</a> with <a href="https://crowdstrike.com/">Crowdstrike</a> <a href="https://www.linkedin.com/in/firoozakbari/">Firooz Akbari</a> of <a href="https://vmware.com/">VMware</a> <a href="https://www.linkedin.com/in/matteborg82/">Mattias Borg</a> and <a href="https://www.linkedin.com/in/stefanschorling/">Stefan Schörling</a> with <a href="https://www.onevinn.com/">Onevinn AB</a> 1.0 2022-04-12T08:00:00 <p>Information published.</p> 2.0 2022-04-27T07:00:00 <p>Revised the Security Updates table to include PowerShell 7.0, PowerShell 7.1, and PowerShell 7.2 because these versions of PowerShell 7 are affected by this vulnerability. See <a href="https://github.com/PowerShell/Announcements/issues/31">https://github.com/PowerShell/Announcements/issues/31</a> for more information.</p> 3.0 2022-05-10T07:00:00 <p>To comprehensively address CVE-2022-26788, Microsoft has released May 2022 security updates for supported editions of Windows 7 and Windows Server 2008 R2. Microsoft strongly recommends that customers enrolled in the Extended Security Update (ESU) program install the updates to be fully protected from the vulnerability.</p> Windows Print Spooler Elevation of Privilege Vulnerability Windows Print Spooler Components Microsoft Yes CVE-2022-26789 11568 11569 11570 11571 11572 11712 11713 11714 11896 11897 11898 11923 11924 11801 11802 11803 11926 11927 11929 11930 11931 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11570 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11712 Elevation of Privilege 11713 Elevation of Privilege 11714 Elevation of Privilege 11896 Elevation of Privilege 11897 Elevation of Privilege 11898 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11801 Elevation of Privilege 11802 Elevation of Privilege 11803 Elevation of Privilege 11926 Elevation of Privilege 11927 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Important 11568 Important 11569 Important 11570 Important 11571 Important 11572 Important 11712 Important 11713 Important 11714 Important 11896 Important 11897 Important 11898 Important 11923 Important 11924 Important 11801 Important 11802 Important 11803 Important 11926 Important 11927 Important 11929 Important 11930 Important 11931 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11570 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11712 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11713 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11714 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11896 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11897 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11898 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11801 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11802 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11803 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11926 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11927 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 5012647 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012647 5011503 11568 11569 11570 11571 11572 Yes Security Update 10.0.17763.2803 https://support.microsoft.com/help/5012647 11568 11569 11570 11571 11572 5012647 5012647 https://support.microsoft.com/help/5012647 11568 11569 11570 11571 11572 5012591 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012591 5011485 11712 11713 11714 Yes Security Update 10.0.18363.2212 https://support.microsoft.com/help/5012591 11712 11713 11714 5012591 5012591 https://support.microsoft.com/help/5012591 11712 11713 11714 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11896 11897 11898 Yes Security Update 10.0.19043.1645 https://support.microsoft.com/help/5012599 11896 11897 11898 5012599 5012599 https://support.microsoft.com/help/5012599 11896 11897 11898 11801 11802 11803 11929 11930 11931 5012604 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012604 5011497 11923 11924 Yes Security Update 10.0.20348.643 https://support.microsoft.com/help/5012604 11923 11924 5012604 5012604 https://support.microsoft.com/help/5012604 11923 11924 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11801 11802 11803 Yes Security Update 10.0.19042.1645 https://support.microsoft.com/help/5012599 11801 11802 11803 5012599 5012592 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012592 5011493 11926 11927 Yes Security Update 10.0.22000.613 https://support.microsoft.com/help/5012592 11926 11927 5012592 5012592 https://support.microsoft.com/help/5012592 11926 11927 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11929 11930 11931 Yes Security Update 10.0.19044.1645 https://support.microsoft.com/help/5012599 11929 11930 11931 5012599 Microsoft Offensive Research & Security Engineering (MORSE) 1.0 2022-04-12T08:00:00 <p>Information published.</p> Windows Print Spooler Elevation of Privilege Vulnerability Windows Print Spooler Components Microsoft Yes CVE-2022-26790 11568 11569 11570 11571 11572 11712 11713 11714 11896 11897 11898 11923 11924 11801 11802 11803 11926 11927 11929 11930 11931 10729 10735 10852 10853 10816 10855 10047 10048 10481 10482 10484 9312 10287 9318 9344 10051 10049 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11570 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11712 Elevation of Privilege 11713 Elevation of Privilege 11714 Elevation of Privilege 11896 Elevation of Privilege 11897 Elevation of Privilege 11898 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11801 Elevation of Privilege 11802 Elevation of Privilege 11803 Elevation of Privilege 11926 Elevation of Privilege 11927 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 10729 Elevation of Privilege 10735 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10047 Elevation of Privilege 10048 Elevation of Privilege 10481 Elevation of Privilege 10482 Elevation of Privilege 10484 Elevation of Privilege 9312 Elevation of Privilege 10287 Elevation of Privilege 9318 Elevation of Privilege 9344 Elevation of Privilege 10051 Elevation of Privilege 10049 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11570 Important 11571 Important 11572 Important 11712 Important 11713 Important 11714 Important 11896 Important 11897 Important 11898 Important 11923 Important 11924 Important 11801 Important 11802 Important 11803 Important 11926 Important 11927 Important 11929 Important 11930 Important 11931 Important 10729 Important 10735 Important 10852 Important 10853 Important 10816 Important 10855 Important 10047 Important 10048 Important 10481 Important 10482 Important 10484 Important 9312 Important 10287 Important 9318 Important 9344 Important 10051 Important 10049 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11570 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11712 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11713 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11714 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11896 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11897 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11898 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11801 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11802 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11803 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11926 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11927 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10729 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10735 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10047 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10048 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10481 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10482 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10484 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9312 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10287 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9318 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9344 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10051 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10049 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5012647 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012647 5011503 11568 11569 11570 11571 11572 Yes Security Update 10.0.17763.2803 https://support.microsoft.com/help/5012647 11568 11569 11570 11571 11572 5012647 5012647 https://support.microsoft.com/help/5012647 11568 11569 11570 11571 11572 5012591 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012591 5011485 11712 11713 11714 Yes Security Update 10.0.18363.2212 https://support.microsoft.com/help/5012591 11712 11713 11714 5012591 5012591 https://support.microsoft.com/help/5012591 11712 11713 11714 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11896 11897 11898 Yes Security Update 10.0.19043.1645 https://support.microsoft.com/help/5012599 11896 11897 11898 5012599 5012599 https://support.microsoft.com/help/5012599 11896 11897 11898 11801 11802 11803 11929 11930 11931 5012604 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012604 5011497 11923 11924 Yes Security Update 10.0.20348.643 https://support.microsoft.com/help/5012604 11923 11924 5012604 5012604 https://support.microsoft.com/help/5012604 11923 11924 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11801 11802 11803 Yes Security Update 10.0.19042.1645 https://support.microsoft.com/help/5012599 11801 11802 11803 5012599 5012592 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012592 5011493 11926 11927 Yes Security Update 10.0.22000.613 https://support.microsoft.com/help/5012592 11926 11927 5012592 5012592 https://support.microsoft.com/help/5012592 11926 11927 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11929 11930 11931 Yes Security Update 10.0.19044.1645 https://support.microsoft.com/help/5012599 11929 11930 11931 5012599 5012653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012653 5011491 10729 10735 Yes Security Update 10.0.10240.19265 https://support.microsoft.com/help/5012653 10729 10735 5012653 5012653 https://support.microsoft.com/help/5012653 10729 10735 5012596 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012596 5011495 10852 10853 10816 10855 Yes Security Update 10.0.14393.5066 https://support.microsoft.com/help/5012596 10852 10853 10816 10855 5012596 5012596 https://support.microsoft.com/help/5012596 10852 10853 10816 10855 5012626 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012626 5011552 10047 10048 10051 10049 Yes Monthly Rollup 6.1.7601.25924 https://support.microsoft.com/help/5012626 10047 10048 10051 10049 5012626 5012626 https://support.microsoft.com/help/5012626 10047 10048 10051 10049 5012649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012649 10047 10048 10051 10049 Yes Security Only 6.1.7601.25924 https://support.microsoft.com/help/5012649 10047 10048 10051 10049 5012649 5012649 https://support.microsoft.com/help/5012649 10047 10048 10051 10049 5012670 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012670 5011564 10481 10482 10483 10543 Yes Monthly Rollup 6.3.9600.20337 https://support.microsoft.com/help/5012670 10481 10482 10483 10543 5012670 5012670 https://support.microsoft.com/help/5012670 10481 10482 10484 10483 10543 5012639 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012639 10481 10482 10483 10543 Yes Security Only 6.3.9600.20337 https://support.microsoft.com/help/5012639 10481 10482 10483 10543 5012639 5012639 https://support.microsoft.com/help/5012639 10481 10482 10483 10543 5012670 5011564 10484 Yes Monthly Rollup 6.3.9600.20337 https://support.microsoft.com/help/5012639 10484 5012670 5012658 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012658 5011534 9312 10287 9318 9344 Yes Monthly Rollup 6.0.6003.21446 https://support.microsoft.com/help/5012658 9312 10287 9318 9344 5012658 5012658 https://support.microsoft.com/help/5012658 9312 10287 9318 9344 5012632 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012632 9312 10287 9318 9344 Yes Security Only 6.0.6003.21446 https://support.microsoft.com/help/5012632 9312 10287 9318 9344 5012632 5012632 https://support.microsoft.com/help/5012632 9312 10287 9318 9344 5012650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012650 5011535 10378 10379 Yes Monthly Rollup 6.2.9200.23679 https://support.microsoft.com/help/5012650 10378 10379 5012650 5012650 https://support.microsoft.com/help/5012650 10378 10379 5012666 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012666 10378 10379 Yes Security Only 6.2.9200.23679 https://support.microsoft.com/help/5012666 10378 10379 5012666 5012666 https://support.microsoft.com/help/5012666 10378 10379 Microsoft Offensive Research & Security Engineering (MORSE) 1.0 2022-04-12T08:00:00 <p>Information published.</p> Windows Print Spooler Elevation of Privilege Vulnerability Windows Print Spooler Components Microsoft Yes CVE-2022-26791 11896 11897 11898 11801 11802 11803 11929 11930 11931 Elevation of Privilege 11896 Elevation of Privilege 11897 Elevation of Privilege 11898 Elevation of Privilege 11801 Elevation of Privilege 11802 Elevation of Privilege 11803 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Important 11896 Important 11897 Important 11898 Important 11801 Important 11802 Important 11803 Important 11929 Important 11930 Important 11931 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11896 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11897 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11898 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11801 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11802 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11803 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11896 11897 11898 Yes Security Update 10.0.19043.1645 https://support.microsoft.com/help/5012599 11896 11897 11898 5012599 5012599 https://support.microsoft.com/help/5012599 11896 11897 11898 11801 11802 11803 11929 11930 11931 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11801 11802 11803 Yes Security Update 10.0.19042.1645 https://support.microsoft.com/help/5012599 11801 11802 11803 5012599 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11929 11930 11931 Yes Security Update 10.0.19044.1645 https://support.microsoft.com/help/5012599 11929 11930 11931 5012599 Microsoft Offensive Research & Security Engineering (MORSE) 1.0 2022-04-12T08:00:00 <p>Information published.</p> Windows Print Spooler Elevation of Privilege Vulnerability Windows Print Spooler Components Microsoft Yes CVE-2022-26792 11568 11569 11570 11571 11572 11712 11713 11714 11896 11897 11898 11923 11924 11801 11802 11803 11926 11927 11929 11930 11931 10729 10735 10852 10853 10816 10855 10047 10048 10481 10482 10484 9312 10287 9318 9344 10051 10049 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11570 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11712 Elevation of Privilege 11713 Elevation of Privilege 11714 Elevation of Privilege 11896 Elevation of Privilege 11897 Elevation of Privilege 11898 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11801 Elevation of Privilege 11802 Elevation of Privilege 11803 Elevation of Privilege 11926 Elevation of Privilege 11927 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 10729 Elevation of Privilege 10735 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10047 Elevation of Privilege 10048 Elevation of Privilege 10481 Elevation of Privilege 10482 Elevation of Privilege 10484 Elevation of Privilege 9312 Elevation of Privilege 10287 Elevation of Privilege 9318 Elevation of Privilege 9344 Elevation of Privilege 10051 Elevation of Privilege 10049 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11570 Important 11571 Important 11572 Important 11712 Important 11713 Important 11714 Important 11896 Important 11897 Important 11898 Important 11923 Important 11924 Important 11801 Important 11802 Important 11803 Important 11926 Important 11927 Important 11929 Important 11930 Important 11931 Important 10729 Important 10735 Important 10852 Important 10853 Important 10816 Important 10855 Important 10047 Important 10048 Important 10481 Important 10482 Important 10484 Important 9312 Important 10287 Important 9318 Important 9344 Important 10051 Important 10049 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11570 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11712 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11713 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11714 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11896 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11897 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11898 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11801 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11802 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11803 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11926 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11927 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10729 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10735 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10047 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10048 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10481 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10482 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10484 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9312 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10287 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9318 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9344 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10051 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10049 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5012647 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012647 5011503 11568 11569 11570 11571 11572 Yes Security Update 10.0.17763.2803 https://support.microsoft.com/help/5012647 11568 11569 11570 11571 11572 5012647 5012647 https://support.microsoft.com/help/5012647 11568 11569 11570 11571 11572 5012591 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012591 5011485 11712 11713 11714 Yes Security Update 10.0.18363.2212 https://support.microsoft.com/help/5012591 11712 11713 11714 5012591 5012591 https://support.microsoft.com/help/5012591 11712 11713 11714 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11896 11897 11898 Yes Security Update 10.0.19043.1645 https://support.microsoft.com/help/5012599 11896 11897 11898 5012599 5012599 https://support.microsoft.com/help/5012599 11896 11897 11898 11801 11802 11803 11929 11930 11931 5012604 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012604 5011497 11923 11924 Yes Security Update 10.0.20348.643 https://support.microsoft.com/help/5012604 11923 11924 5012604 5012604 https://support.microsoft.com/help/5012604 11923 11924 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11801 11802 11803 Yes Security Update 10.0.19042.1645 https://support.microsoft.com/help/5012599 11801 11802 11803 5012599 5012592 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012592 5011493 11926 11927 Yes Security Update 10.0.22000.613 https://support.microsoft.com/help/5012592 11926 11927 5012592 5012592 https://support.microsoft.com/help/5012592 11926 11927 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11929 11930 11931 Yes Security Update 10.0.19044.1645 https://support.microsoft.com/help/5012599 11929 11930 11931 5012599 5012653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012653 5011491 10729 10735 Yes Security Update 10.0.10240.19265 https://support.microsoft.com/help/5012653 10729 10735 5012653 5012653 https://support.microsoft.com/help/5012653 10729 10735 5012596 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012596 5011495 10852 10853 10816 10855 Yes Security Update 10.0.14393.5066 https://support.microsoft.com/help/5012596 10852 10853 10816 10855 5012596 5012596 https://support.microsoft.com/help/5012596 10852 10853 10816 10855 5012626 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012626 5011552 10047 10048 10051 10049 Yes Monthly Rollup 6.1.7601.25924 https://support.microsoft.com/help/5012626 10047 10048 10051 10049 5012626 5012626 https://support.microsoft.com/help/5012626 10047 10048 10051 10049 5012649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012649 10047 10048 10051 10049 Yes Security Only 6.1.7601.25924 https://support.microsoft.com/help/5012649 10047 10048 10051 10049 5012649 5012649 https://support.microsoft.com/help/5012649 10047 10048 10051 10049 5012670 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012670 5011564 10481 10482 10483 10543 Yes Monthly Rollup 6.3.9600.20337 https://support.microsoft.com/help/5012670 10481 10482 10483 10543 5012670 5012670 https://support.microsoft.com/help/5012670 10481 10482 10484 10483 10543 5012639 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012639 10481 10482 10483 10543 Yes Security Only 6.3.9600.20337 https://support.microsoft.com/help/5012639 10481 10482 10483 10543 5012639 5012639 https://support.microsoft.com/help/5012639 10481 10482 10483 10543 5012670 5011564 10484 Yes Monthly Rollup 6.3.9600.20337 https://support.microsoft.com/help/5012639 10484 5012670 5012658 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012658 5011534 9312 10287 9318 9344 Yes Monthly Rollup 6.0.6003.21446 https://support.microsoft.com/help/5012658 9312 10287 9318 9344 5012658 5012658 https://support.microsoft.com/help/5012658 9312 10287 9318 9344 5012632 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012632 9312 10287 9318 9344 Yes Security Only 6.0.6003.21446 https://support.microsoft.com/help/5012632 9312 10287 9318 9344 5012632 5012632 https://support.microsoft.com/help/5012632 9312 10287 9318 9344 5012650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012650 5011535 10378 10379 Yes Monthly Rollup 6.2.9200.23679 https://support.microsoft.com/help/5012650 10378 10379 5012650 5012650 https://support.microsoft.com/help/5012650 10378 10379 5012666 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012666 10378 10379 Yes Security Only 6.2.9200.23679 https://support.microsoft.com/help/5012666 10378 10379 5012666 5012666 https://support.microsoft.com/help/5012666 10378 10379 Microsoft Offensive Research & Security Engineering (MORSE) 1.0 2022-04-12T08:00:00 <p>Information published.</p> Windows Print Spooler Elevation of Privilege Vulnerability Windows Print Spooler Components Microsoft Yes CVE-2022-26793 11568 11569 11570 11571 11572 11712 11713 11714 11896 11897 11898 11923 11924 11801 11802 11803 11926 11927 11929 11930 11931 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11570 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11712 Elevation of Privilege 11713 Elevation of Privilege 11714 Elevation of Privilege 11896 Elevation of Privilege 11897 Elevation of Privilege 11898 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11801 Elevation of Privilege 11802 Elevation of Privilege 11803 Elevation of Privilege 11926 Elevation of Privilege 11927 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Important 11568 Important 11569 Important 11570 Important 11571 Important 11572 Important 11712 Important 11713 Important 11714 Important 11896 Important 11897 Important 11898 Important 11923 Important 11924 Important 11801 Important 11802 Important 11803 Important 11926 Important 11927 Important 11929 Important 11930 Important 11931 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11570 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11712 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11713 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11714 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11896 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11897 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11898 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11801 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11802 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11803 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11926 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11927 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 5012647 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012647 5011503 11568 11569 11570 11571 11572 Yes Security Update 10.0.17763.2803 https://support.microsoft.com/help/5012647 11568 11569 11570 11571 11572 5012647 5012647 https://support.microsoft.com/help/5012647 11568 11569 11570 11571 11572 5012591 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012591 5011485 11712 11713 11714 Yes Security Update 10.0.18363.2212 https://support.microsoft.com/help/5012591 11712 11713 11714 5012591 5012591 https://support.microsoft.com/help/5012591 11712 11713 11714 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11896 11897 11898 Yes Security Update 10.0.19043.1645 https://support.microsoft.com/help/5012599 11896 11897 11898 5012599 5012599 https://support.microsoft.com/help/5012599 11896 11897 11898 11801 11802 11803 11929 11930 11931 5012604 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012604 5011497 11923 11924 Yes Security Update 10.0.20348.643 https://support.microsoft.com/help/5012604 11923 11924 5012604 5012604 https://support.microsoft.com/help/5012604 11923 11924 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11801 11802 11803 Yes Security Update 10.0.19042.1645 https://support.microsoft.com/help/5012599 11801 11802 11803 5012599 5012592 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012592 5011493 11926 11927 Yes Security Update 10.0.22000.613 https://support.microsoft.com/help/5012592 11926 11927 5012592 5012592 https://support.microsoft.com/help/5012592 11926 11927 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11929 11930 11931 Yes Security Update 10.0.19044.1645 https://support.microsoft.com/help/5012599 11929 11930 11931 5012599 Microsoft Offensive Research & Security Engineering (MORSE) 1.0 2022-04-12T08:00:00 <p>Information published.</p> Windows Print Spooler Elevation of Privilege Vulnerability Windows Print Spooler Components Microsoft Yes CVE-2022-26794 11568 11569 11570 11571 11572 11712 11713 11714 11896 11897 11898 11923 11924 11801 11802 11803 11926 11927 11929 11930 11931 10729 10735 10852 10853 10816 10855 10047 10048 10481 10482 10484 9312 10287 9318 9344 10051 10049 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11570 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11712 Elevation of Privilege 11713 Elevation of Privilege 11714 Elevation of Privilege 11896 Elevation of Privilege 11897 Elevation of Privilege 11898 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11801 Elevation of Privilege 11802 Elevation of Privilege 11803 Elevation of Privilege 11926 Elevation of Privilege 11927 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 10729 Elevation of Privilege 10735 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10047 Elevation of Privilege 10048 Elevation of Privilege 10481 Elevation of Privilege 10482 Elevation of Privilege 10484 Elevation of Privilege 9312 Elevation of Privilege 10287 Elevation of Privilege 9318 Elevation of Privilege 9344 Elevation of Privilege 10051 Elevation of Privilege 10049 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11570 Important 11571 Important 11572 Important 11712 Important 11713 Important 11714 Important 11896 Important 11897 Important 11898 Important 11923 Important 11924 Important 11801 Important 11802 Important 11803 Important 11926 Important 11927 Important 11929 Important 11930 Important 11931 Important 10729 Important 10735 Important 10852 Important 10853 Important 10816 Important 10855 Important 10047 Important 10048 Important 10481 Important 10482 Important 10484 Important 9312 Important 10287 Important 9318 Important 9344 Important 10051 Important 10049 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11570 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11712 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11713 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11714 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11896 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11897 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11898 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11801 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11802 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11803 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11926 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11927 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10729 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10735 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10047 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10048 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10481 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10482 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10484 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9312 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10287 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9318 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9344 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10051 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10049 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5012647 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012647 5011503 11568 11569 11570 11571 11572 Yes Security Update 10.0.17763.2803 https://support.microsoft.com/help/5012647 11568 11569 11570 11571 11572 5012647 5012647 https://support.microsoft.com/help/5012647 11568 11569 11570 11571 11572 5012591 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012591 5011485 11712 11713 11714 Yes Security Update 10.0.18363.2212 https://support.microsoft.com/help/5012591 11712 11713 11714 5012591 5012591 https://support.microsoft.com/help/5012591 11712 11713 11714 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11896 11897 11898 Yes Security Update 10.0.19043.1645 https://support.microsoft.com/help/5012599 11896 11897 11898 5012599 5012599 https://support.microsoft.com/help/5012599 11896 11897 11898 11801 11802 11803 11929 11930 11931 5012604 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012604 5011497 11923 11924 Yes Security Update 10.0.20348.643 https://support.microsoft.com/help/5012604 11923 11924 5012604 5012604 https://support.microsoft.com/help/5012604 11923 11924 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11801 11802 11803 Yes Security Update 10.0.19042.1645 https://support.microsoft.com/help/5012599 11801 11802 11803 5012599 5012592 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012592 5011493 11926 11927 Yes Security Update 10.0.22000.613 https://support.microsoft.com/help/5012592 11926 11927 5012592 5012592 https://support.microsoft.com/help/5012592 11926 11927 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11929 11930 11931 Yes Security Update 10.0.19044.1645 https://support.microsoft.com/help/5012599 11929 11930 11931 5012599 5012653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012653 5011491 10729 10735 Yes Security Update 10.0.10240.19265 https://support.microsoft.com/help/5012653 10729 10735 5012653 5012653 https://support.microsoft.com/help/5012653 10729 10735 5012596 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012596 5011495 10852 10853 10816 10855 Yes Security Update 10.0.14393.5066 https://support.microsoft.com/help/5012596 10852 10853 10816 10855 5012596 5012596 https://support.microsoft.com/help/5012596 10852 10853 10816 10855 5012626 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012626 5011552 10047 10048 10051 10049 Yes Monthly Rollup 6.1.7601.25924 https://support.microsoft.com/help/5012626 10047 10048 10051 10049 5012626 5012626 https://support.microsoft.com/help/5012626 10047 10048 10051 10049 5012649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012649 10047 10048 10051 10049 Yes Security Only 6.1.7601.25924 https://support.microsoft.com/help/5012649 10047 10048 10051 10049 5012649 5012649 https://support.microsoft.com/help/5012649 10047 10048 10051 10049 5012670 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012670 5011564 10481 10482 10483 10543 Yes Monthly Rollup 6.3.9600.20337 https://support.microsoft.com/help/5012670 10481 10482 10483 10543 5012670 5012670 https://support.microsoft.com/help/5012670 10481 10482 10484 10483 10543 5012639 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012639 10481 10482 10483 10543 Yes Security Only 6.3.9600.20337 https://support.microsoft.com/help/5012639 10481 10482 10483 10543 5012639 5012639 https://support.microsoft.com/help/5012639 10481 10482 10483 10543 5012670 5011564 10484 Yes Monthly Rollup 6.3.9600.20337 https://support.microsoft.com/help/5012639 10484 5012670 5012658 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012658 5011534 9312 10287 9318 9344 Yes Monthly Rollup 6.0.6003.21446 https://support.microsoft.com/help/5012658 9312 10287 9318 9344 5012658 5012658 https://support.microsoft.com/help/5012658 9312 10287 9318 9344 5012632 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012632 9312 10287 9318 9344 Yes Security Only 6.0.6003.21446 https://support.microsoft.com/help/5012632 9312 10287 9318 9344 5012632 5012632 https://support.microsoft.com/help/5012632 9312 10287 9318 9344 5012650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012650 5011535 10378 10379 Yes Monthly Rollup 6.2.9200.23679 https://support.microsoft.com/help/5012650 10378 10379 5012650 5012650 https://support.microsoft.com/help/5012650 10378 10379 5012666 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012666 10378 10379 Yes Security Only 6.2.9200.23679 https://support.microsoft.com/help/5012666 10378 10379 5012666 5012666 https://support.microsoft.com/help/5012666 10378 10379 Microsoft Offensive Research & Security Engineering (MORSE) 1.0 2022-04-12T08:00:00 <p>Information published.</p> Windows Print Spooler Elevation of Privilege Vulnerability Windows Print Spooler Components Microsoft Yes CVE-2022-26795 11568 11569 11570 11571 11572 11712 11713 11714 11896 11897 11898 11923 11924 11801 11802 11803 11926 11927 11929 11930 11931 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11570 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11712 Elevation of Privilege 11713 Elevation of Privilege 11714 Elevation of Privilege 11896 Elevation of Privilege 11897 Elevation of Privilege 11898 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11801 Elevation of Privilege 11802 Elevation of Privilege 11803 Elevation of Privilege 11926 Elevation of Privilege 11927 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Important 11568 Important 11569 Important 11570 Important 11571 Important 11572 Important 11712 Important 11713 Important 11714 Important 11896 Important 11897 Important 11898 Important 11923 Important 11924 Important 11801 Important 11802 Important 11803 Important 11926 Important 11927 Important 11929 Important 11930 Important 11931 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11570 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11712 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11713 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11714 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11896 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11897 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11898 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11801 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11802 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11803 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11926 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11927 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 5012647 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012647 5011503 11568 11569 11570 11571 11572 Yes Security Update 10.0.17763.2803 https://support.microsoft.com/help/5012647 11568 11569 11570 11571 11572 5012647 5012647 https://support.microsoft.com/help/5012647 11568 11569 11570 11571 11572 5012591 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012591 5011485 11712 11713 11714 Yes Security Update 10.0.18363.2212 https://support.microsoft.com/help/5012591 11712 11713 11714 5012591 5012591 https://support.microsoft.com/help/5012591 11712 11713 11714 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11896 11897 11898 Yes Security Update 10.0.19043.1645 https://support.microsoft.com/help/5012599 11896 11897 11898 5012599 5012599 https://support.microsoft.com/help/5012599 11896 11897 11898 11801 11802 11803 11929 11930 11931 5012604 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012604 5011497 11923 11924 Yes Security Update 10.0.20348.643 https://support.microsoft.com/help/5012604 11923 11924 5012604 5012604 https://support.microsoft.com/help/5012604 11923 11924 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11801 11802 11803 Yes Security Update 10.0.19042.1645 https://support.microsoft.com/help/5012599 11801 11802 11803 5012599 5012592 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012592 5011493 11926 11927 Yes Security Update 10.0.22000.613 https://support.microsoft.com/help/5012592 11926 11927 5012592 5012592 https://support.microsoft.com/help/5012592 11926 11927 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11929 11930 11931 Yes Security Update 10.0.19044.1645 https://support.microsoft.com/help/5012599 11929 11930 11931 5012599 Microsoft Offensive Research & Security Engineering (MORSE) 1.0 2022-04-12T08:00:00 <p>Information published.</p> Windows Print Spooler Elevation of Privilege Vulnerability Windows Print Spooler Components Microsoft Yes CVE-2022-26796 11568 11569 11570 11571 11572 11712 11713 11714 11896 11897 11898 11923 11924 11801 11802 11803 11926 11927 11929 11930 11931 10729 10735 10852 10853 10816 10855 10047 10048 10481 10482 10484 9312 10287 9318 9344 10051 10049 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11570 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11712 Elevation of Privilege 11713 Elevation of Privilege 11714 Elevation of Privilege 11896 Elevation of Privilege 11897 Elevation of Privilege 11898 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11801 Elevation of Privilege 11802 Elevation of Privilege 11803 Elevation of Privilege 11926 Elevation of Privilege 11927 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 10729 Elevation of Privilege 10735 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10047 Elevation of Privilege 10048 Elevation of Privilege 10481 Elevation of Privilege 10482 Elevation of Privilege 10484 Elevation of Privilege 9312 Elevation of Privilege 10287 Elevation of Privilege 9318 Elevation of Privilege 9344 Elevation of Privilege 10051 Elevation of Privilege 10049 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11570 Important 11571 Important 11572 Important 11712 Important 11713 Important 11714 Important 11896 Important 11897 Important 11898 Important 11923 Important 11924 Important 11801 Important 11802 Important 11803 Important 11926 Important 11927 Important 11929 Important 11930 Important 11931 Important 10729 Important 10735 Important 10852 Important 10853 Important 10816 Important 10855 Important 10047 Important 10048 Important 10481 Important 10482 Important 10484 Important 9312 Important 10287 Important 9318 Important 9344 Important 10051 Important 10049 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11570 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11712 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11713 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11714 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11896 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11897 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11898 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11801 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11802 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11803 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11926 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11927 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10729 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10735 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10047 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10048 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10481 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10482 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10484 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9312 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10287 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9318 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9344 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10051 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10049 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5012647 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012647 5011503 11568 11569 11570 11571 11572 Yes Security Update 10.0.17763.2803 https://support.microsoft.com/help/5012647 11568 11569 11570 11571 11572 5012647 5012647 https://support.microsoft.com/help/5012647 11568 11569 11570 11571 11572 5012591 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012591 5011485 11712 11713 11714 Yes Security Update 10.0.18363.2212 https://support.microsoft.com/help/5012591 11712 11713 11714 5012591 5012591 https://support.microsoft.com/help/5012591 11712 11713 11714 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11896 11897 11898 Yes Security Update 10.0.19043.1645 https://support.microsoft.com/help/5012599 11896 11897 11898 5012599 5012599 https://support.microsoft.com/help/5012599 11896 11897 11898 11801 11802 11803 11929 11930 11931 5012604 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012604 5011497 11923 11924 Yes Security Update 10.0.20348.643 https://support.microsoft.com/help/5012604 11923 11924 5012604 5012604 https://support.microsoft.com/help/5012604 11923 11924 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11801 11802 11803 Yes Security Update 10.0.19042.1645 https://support.microsoft.com/help/5012599 11801 11802 11803 5012599 5012592 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012592 5011493 11926 11927 Yes Security Update 10.0.22000.613 https://support.microsoft.com/help/5012592 11926 11927 5012592 5012592 https://support.microsoft.com/help/5012592 11926 11927 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11929 11930 11931 Yes Security Update 10.0.19044.1645 https://support.microsoft.com/help/5012599 11929 11930 11931 5012599 5012653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012653 5011491 10729 10735 Yes Security Update 10.0.10240.19265 https://support.microsoft.com/help/5012653 10729 10735 5012653 5012653 https://support.microsoft.com/help/5012653 10729 10735 5012596 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012596 5011495 10852 10853 10816 10855 Yes Security Update 10.0.14393.5066 https://support.microsoft.com/help/5012596 10852 10853 10816 10855 5012596 5012596 https://support.microsoft.com/help/5012596 10852 10853 10816 10855 5012626 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012626 5011552 10047 10048 10051 10049 Yes Monthly Rollup 6.1.7601.25924 https://support.microsoft.com/help/5012626 10047 10048 10051 10049 5012626 5012626 https://support.microsoft.com/help/5012626 10047 10048 10051 10049 5012649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012649 10047 10048 10051 10049 Yes Security Only 6.1.7601.25924 https://support.microsoft.com/help/5012649 10047 10048 10051 10049 5012649 5012649 https://support.microsoft.com/help/5012649 10047 10048 10051 10049 5012670 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012670 5011564 10481 10482 10483 10543 Yes Monthly Rollup 6.3.9600.20337 https://support.microsoft.com/help/5012670 10481 10482 10483 10543 5012670 5012670 https://support.microsoft.com/help/5012670 10481 10482 10484 10483 10543 5012639 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012639 10481 10482 10483 10543 Yes Security Only 6.3.9600.20337 https://support.microsoft.com/help/5012639 10481 10482 10483 10543 5012639 5012639 https://support.microsoft.com/help/5012639 10481 10482 10483 10543 5012670 5011564 10484 Yes Monthly Rollup 6.3.9600.20337 https://support.microsoft.com/help/5012639 10484 5012670 5012658 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012658 5011534 9312 10287 9318 9344 Yes Monthly Rollup 6.0.6003.21446 https://support.microsoft.com/help/5012658 9312 10287 9318 9344 5012658 5012658 https://support.microsoft.com/help/5012658 9312 10287 9318 9344 5012632 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012632 9312 10287 9318 9344 Yes Security Only 6.0.6003.21446 https://support.microsoft.com/help/5012632 9312 10287 9318 9344 5012632 5012632 https://support.microsoft.com/help/5012632 9312 10287 9318 9344 5012650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012650 5011535 10378 10379 Yes Monthly Rollup 6.2.9200.23679 https://support.microsoft.com/help/5012650 10378 10379 5012650 5012650 https://support.microsoft.com/help/5012650 10378 10379 5012666 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012666 10378 10379 Yes Security Only 6.2.9200.23679 https://support.microsoft.com/help/5012666 10378 10379 5012666 5012666 https://support.microsoft.com/help/5012666 10378 10379 Microsoft Offensive Research & Security Engineering (MORSE) 1.0 2022-04-12T08:00:00 <p>Information published.</p> Windows Print Spooler Elevation of Privilege Vulnerability Windows Print Spooler Components Microsoft Yes CVE-2022-26797 11568 11569 11570 11571 11572 11712 11713 11714 11896 11897 11898 11923 11924 11801 11802 11803 11926 11927 11929 11930 11931 10729 10735 10852 10853 10816 10855 10047 10048 10481 10482 10484 9312 10287 9318 9344 10051 10049 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11570 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11712 Elevation of Privilege 11713 Elevation of Privilege 11714 Elevation of Privilege 11896 Elevation of Privilege 11897 Elevation of Privilege 11898 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11801 Elevation of Privilege 11802 Elevation of Privilege 11803 Elevation of Privilege 11926 Elevation of Privilege 11927 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 10729 Elevation of Privilege 10735 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10047 Elevation of Privilege 10048 Elevation of Privilege 10481 Elevation of Privilege 10482 Elevation of Privilege 10484 Elevation of Privilege 9312 Elevation of Privilege 10287 Elevation of Privilege 9318 Elevation of Privilege 9344 Elevation of Privilege 10051 Elevation of Privilege 10049 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11570 Important 11571 Important 11572 Important 11712 Important 11713 Important 11714 Important 11896 Important 11897 Important 11898 Important 11923 Important 11924 Important 11801 Important 11802 Important 11803 Important 11926 Important 11927 Important 11929 Important 11930 Important 11931 Important 10729 Important 10735 Important 10852 Important 10853 Important 10816 Important 10855 Important 10047 Important 10048 Important 10481 Important 10482 Important 10484 Important 9312 Important 10287 Important 9318 Important 9344 Important 10051 Important 10049 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11570 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11712 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11713 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11714 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11896 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11897 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11898 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11801 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11802 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11803 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11926 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11927 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10729 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10735 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10047 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10048 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10481 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10482 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10484 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9312 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10287 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9318 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9344 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10051 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10049 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5012647 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012647 5011503 11568 11569 11570 11571 11572 Yes Security Update 10.0.17763.2803 https://support.microsoft.com/help/5012647 11568 11569 11570 11571 11572 5012647 5012647 https://support.microsoft.com/help/5012647 11568 11569 11570 11571 11572 5012591 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012591 5011485 11712 11713 11714 Yes Security Update 10.0.18363.2212 https://support.microsoft.com/help/5012591 11712 11713 11714 5012591 5012591 https://support.microsoft.com/help/5012591 11712 11713 11714 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11896 11897 11898 Yes Security Update 10.0.19043.1645 https://support.microsoft.com/help/5012599 11896 11897 11898 5012599 5012599 https://support.microsoft.com/help/5012599 11896 11897 11898 11801 11802 11803 11929 11930 11931 5012604 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012604 5011497 11923 11924 Yes Security Update 10.0.20348.643 https://support.microsoft.com/help/5012604 11923 11924 5012604 5012604 https://support.microsoft.com/help/5012604 11923 11924 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11801 11802 11803 Yes Security Update 10.0.19042.1645 https://support.microsoft.com/help/5012599 11801 11802 11803 5012599 5012592 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012592 5011493 11926 11927 Yes Security Update 10.0.22000.613 https://support.microsoft.com/help/5012592 11926 11927 5012592 5012592 https://support.microsoft.com/help/5012592 11926 11927 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11929 11930 11931 Yes Security Update 10.0.19044.1645 https://support.microsoft.com/help/5012599 11929 11930 11931 5012599 5012653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012653 5011491 10729 10735 Yes Security Update 10.0.10240.19265 https://support.microsoft.com/help/5012653 10729 10735 5012653 5012653 https://support.microsoft.com/help/5012653 10729 10735 5012596 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012596 5011495 10852 10853 10816 10855 Yes Security Update 10.0.14393.5066 https://support.microsoft.com/help/5012596 10852 10853 10816 10855 5012596 5012596 https://support.microsoft.com/help/5012596 10852 10853 10816 10855 5012626 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012626 5011552 10047 10048 10051 10049 Yes Monthly Rollup 6.1.7601.25924 https://support.microsoft.com/help/5012626 10047 10048 10051 10049 5012626 5012626 https://support.microsoft.com/help/5012626 10047 10048 10051 10049 5012649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012649 10047 10048 10051 10049 Yes Security Only 6.1.7601.25924 https://support.microsoft.com/help/5012649 10047 10048 10051 10049 5012649 5012649 https://support.microsoft.com/help/5012649 10047 10048 10051 10049 5012670 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012670 5011564 10481 10482 10483 10543 Yes Monthly Rollup 6.3.9600.20337 https://support.microsoft.com/help/5012670 10481 10482 10483 10543 5012670 5012670 https://support.microsoft.com/help/5012670 10481 10482 10484 10483 10543 5012639 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012639 10481 10482 10483 10543 Yes Security Only 6.3.9600.20337 https://support.microsoft.com/help/5012639 10481 10482 10483 10543 5012639 5012639 https://support.microsoft.com/help/5012639 10481 10482 10483 10543 5012670 5011564 10484 Yes Monthly Rollup 6.3.9600.20337 https://support.microsoft.com/help/5012639 10484 5012670 5012658 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012658 5011534 9312 10287 9318 9344 Yes Monthly Rollup 6.0.6003.21446 https://support.microsoft.com/help/5012658 9312 10287 9318 9344 5012658 5012658 https://support.microsoft.com/help/5012658 9312 10287 9318 9344 5012632 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012632 9312 10287 9318 9344 Yes Security Only 6.0.6003.21446 https://support.microsoft.com/help/5012632 9312 10287 9318 9344 5012632 5012632 https://support.microsoft.com/help/5012632 9312 10287 9318 9344 5012650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012650 5011535 10378 10379 Yes Monthly Rollup 6.2.9200.23679 https://support.microsoft.com/help/5012650 10378 10379 5012650 5012650 https://support.microsoft.com/help/5012650 10378 10379 5012666 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012666 10378 10379 Yes Security Only 6.2.9200.23679 https://support.microsoft.com/help/5012666 10378 10379 5012666 5012666 https://support.microsoft.com/help/5012666 10378 10379 Microsoft Offensive Research & Security Engineering (MORSE) 1.0 2022-04-12T08:00:00 <p>Information published.</p> Windows Print Spooler Elevation of Privilege Vulnerability Windows Print Spooler Components Microsoft Yes CVE-2022-26798 11568 11569 11570 11571 11572 11712 11713 11714 11896 11897 11898 11923 11924 11801 11802 11803 11926 11927 11929 11930 11931 10729 10735 10852 10853 10816 10855 10047 10048 10481 10482 10484 9312 10287 9318 9344 10051 10049 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11570 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11712 Elevation of Privilege 11713 Elevation of Privilege 11714 Elevation of Privilege 11896 Elevation of Privilege 11897 Elevation of Privilege 11898 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11801 Elevation of Privilege 11802 Elevation of Privilege 11803 Elevation of Privilege 11926 Elevation of Privilege 11927 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 10729 Elevation of Privilege 10735 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10047 Elevation of Privilege 10048 Elevation of Privilege 10481 Elevation of Privilege 10482 Elevation of Privilege 10484 Elevation of Privilege 9312 Elevation of Privilege 10287 Elevation of Privilege 9318 Elevation of Privilege 9344 Elevation of Privilege 10051 Elevation of Privilege 10049 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11570 Important 11571 Important 11572 Important 11712 Important 11713 Important 11714 Important 11896 Important 11897 Important 11898 Important 11923 Important 11924 Important 11801 Important 11802 Important 11803 Important 11926 Important 11927 Important 11929 Important 11930 Important 11931 Important 10729 Important 10735 Important 10852 Important 10853 Important 10816 Important 10855 Important 10047 Important 10048 Important 10481 Important 10482 Important 10484 Important 9312 Important 10287 Important 9318 Important 9344 Important 10051 Important 10049 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11570 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11712 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11713 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11714 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11896 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11897 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11898 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11801 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11802 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11803 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11926 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11927 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10729 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10735 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10047 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10048 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10481 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10482 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10484 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9312 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10287 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9318 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9344 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10051 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10049 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5012647 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012647 5011503 11568 11569 11570 11571 11572 Yes Security Update 10.0.17763.2803 https://support.microsoft.com/help/5012647 11568 11569 11570 11571 11572 5012647 5012647 https://support.microsoft.com/help/5012647 11568 11569 11570 11571 11572 5012591 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012591 5011485 11712 11713 11714 Yes Security Update 10.0.18363.2212 https://support.microsoft.com/help/5012591 11712 11713 11714 5012591 5012591 https://support.microsoft.com/help/5012591 11712 11713 11714 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11896 11897 11898 Yes Security Update 10.0.19043.1645 https://support.microsoft.com/help/5012599 11896 11897 11898 5012599 5012599 https://support.microsoft.com/help/5012599 11896 11897 11898 11801 11802 11803 11929 11930 11931 5012604 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012604 5011497 11923 11924 Yes Security Update 10.0.20348.643 https://support.microsoft.com/help/5012604 11923 11924 5012604 5012604 https://support.microsoft.com/help/5012604 11923 11924 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11801 11802 11803 Yes Security Update 10.0.19042.1645 https://support.microsoft.com/help/5012599 11801 11802 11803 5012599 5012592 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012592 5011493 11926 11927 Yes Security Update 10.0.22000.613 https://support.microsoft.com/help/5012592 11926 11927 5012592 5012592 https://support.microsoft.com/help/5012592 11926 11927 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11929 11930 11931 Yes Security Update 10.0.19044.1645 https://support.microsoft.com/help/5012599 11929 11930 11931 5012599 5012653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012653 5011491 10729 10735 Yes Security Update 10.0.10240.19265 https://support.microsoft.com/help/5012653 10729 10735 5012653 5012653 https://support.microsoft.com/help/5012653 10729 10735 5012596 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012596 5011495 10852 10853 10816 10855 Yes Security Update 10.0.14393.5066 https://support.microsoft.com/help/5012596 10852 10853 10816 10855 5012596 5012596 https://support.microsoft.com/help/5012596 10852 10853 10816 10855 5012626 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012626 5011552 10047 10048 10051 10049 Yes Monthly Rollup 6.1.7601.25924 https://support.microsoft.com/help/5012626 10047 10048 10051 10049 5012626 5012626 https://support.microsoft.com/help/5012626 10047 10048 10051 10049 5012649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012649 10047 10048 10051 10049 Yes Security Only 6.1.7601.25924 https://support.microsoft.com/help/5012649 10047 10048 10051 10049 5012649 5012649 https://support.microsoft.com/help/5012649 10047 10048 10051 10049 5012670 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012670 5011564 10481 10482 10483 10543 Yes Monthly Rollup 6.3.9600.20337 https://support.microsoft.com/help/5012670 10481 10482 10483 10543 5012670 5012670 https://support.microsoft.com/help/5012670 10481 10482 10484 10483 10543 5012639 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012639 10481 10482 10483 10543 Yes Security Only 6.3.9600.20337 https://support.microsoft.com/help/5012639 10481 10482 10483 10543 5012639 5012639 https://support.microsoft.com/help/5012639 10481 10482 10483 10543 5012670 5011564 10484 Yes Monthly Rollup 6.3.9600.20337 https://support.microsoft.com/help/5012639 10484 5012670 5012658 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012658 5011534 9312 10287 9318 9344 Yes Monthly Rollup 6.0.6003.21446 https://support.microsoft.com/help/5012658 9312 10287 9318 9344 5012658 5012658 https://support.microsoft.com/help/5012658 9312 10287 9318 9344 5012632 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012632 9312 10287 9318 9344 Yes Security Only 6.0.6003.21446 https://support.microsoft.com/help/5012632 9312 10287 9318 9344 5012632 5012632 https://support.microsoft.com/help/5012632 9312 10287 9318 9344 5012650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012650 5011535 10378 10379 Yes Monthly Rollup 6.2.9200.23679 https://support.microsoft.com/help/5012650 10378 10379 5012650 5012650 https://support.microsoft.com/help/5012650 10378 10379 5012666 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012666 10378 10379 Yes Security Only 6.2.9200.23679 https://support.microsoft.com/help/5012666 10378 10379 5012666 5012666 https://support.microsoft.com/help/5012666 10378 10379 Microsoft Offensive Research & Security Engineering (MORSE) 1.0 2022-04-12T08:00:00 <p>Information published.</p> Windows DNS Server Remote Code Execution Vulnerability <p><strong>According to the CVSS metric, privileges required is high (PR:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires the attacker or targeted user to have specific elevated privileges. As is best practice, regular validation and audits of administrative groups should be conducted.</p> Role: DNS Server Microsoft Yes CVE-2022-26811 11571 11572 11923 11924 11803 10816 10855 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 11803 Remote Code Execution 10816 Remote Code Execution 10855 Important 11571 Important 11572 Important 11923 Important 11924 Important 11803 Important 10816 Important 10855 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11803 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 5012647 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012647 5011503 11571 11572 Yes Security Update 10.0.17763.2803 https://support.microsoft.com/help/5012647 11571 11572 5012647 5012647 https://support.microsoft.com/help/5012647 11571 11572 5012604 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012604 5011497 11923 11924 Yes Security Update 10.0.20348.643 https://support.microsoft.com/help/5012604 11923 11924 5012604 5012604 https://support.microsoft.com/help/5012604 11923 11924 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11803 Yes Security Update 10.0.19042.1645 https://support.microsoft.com/help/5012599 11803 5012599 5012599 https://support.microsoft.com/help/5012599 11803 5012596 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012596 5011495 10816 10855 Yes Security Update 10.0.14393.5066 https://support.microsoft.com/help/5012596 10816 10855 5012596 5012596 https://support.microsoft.com/help/5012596 10816 10855 <a href="https://twitter.com/guhe120">Yuki Chen</a> 1.0 2022-04-12T08:00:00 <p>Information published.</p> Windows DNS Server Remote Code Execution Vulnerability <p><strong>According to the CVSS metric, privileges required is high (PR:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires the attacker or targeted user to have specific elevated privileges. As is best practice, regular validation and audits of administrative groups should be conducted.</p> Role: DNS Server Microsoft Yes CVE-2022-26812 11571 11572 11923 11924 11803 10816 10855 9312 10287 9318 9344 10051 10049 10378 10379 10483 10543 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 11803 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 9312 Remote Code Execution 10287 Remote Code Execution 9318 Remote Code Execution 9344 Remote Code Execution 10051 Remote Code Execution 10049 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Important 11571 Important 11572 Important 11923 Important 11924 Important 11803 Important 10816 Important 10855 Important 9312 Important 10287 Important 9318 Important 9344 Important 10051 Important 10049 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 7.2 6.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 11571 7.2 6.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 11572 7.2 6.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 11923 7.2 6.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 11924 7.2 6.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 11803 7.2 6.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10816 7.2 6.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10855 7.2 6.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 9312 7.2 6.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10287 7.2 6.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 9318 7.2 6.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 9344 7.2 6.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10051 7.2 6.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10049 7.2 6.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10378 7.2 6.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10379 7.2 6.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10483 7.2 6.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10543 5012647 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012647 5011503 11571 11572 Yes Security Update 10.0.17763.2803 https://support.microsoft.com/help/5012647 11571 11572 5012647 5012647 https://support.microsoft.com/help/5012647 11571 11572 5012604 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012604 5011497 11923 11924 Yes Security Update 10.0.20348.643 https://support.microsoft.com/help/5012604 11923 11924 5012604 5012604 https://support.microsoft.com/help/5012604 11923 11924 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11803 Yes Security Update 10.0.19042.1645 https://support.microsoft.com/help/5012599 11803 5012599 5012599 https://support.microsoft.com/help/5012599 11803 5012596 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012596 5011495 10816 10855 Yes Security Update 10.0.14393.5066 https://support.microsoft.com/help/5012596 10816 10855 5012596 5012596 https://support.microsoft.com/help/5012596 10816 10855 5012658 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012658 5011534 9312 10287 9318 9344 Yes Monthly Rollup 6.0.6003.21446 https://support.microsoft.com/help/5012658 9312 10287 9318 9344 5012658 5012658 https://support.microsoft.com/help/5012658 9312 10287 9318 9344 5012632 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012632 9312 10287 9318 9344 Yes Security Only 6.0.6003.21446 https://support.microsoft.com/help/5012632 9312 10287 9318 9344 5012632 5012632 https://support.microsoft.com/help/5012632 9312 10287 9318 9344 5012626 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012626 5011552 10051 10049 Yes Monthly Rollup 6.1.7601.25924 https://support.microsoft.com/help/5012626 10051 10049 5012626 5012626 https://support.microsoft.com/help/5012626 10051 10049 5012649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012649 10051 10049 Yes Security Only 6.1.7601.25924 https://support.microsoft.com/help/5012649 10051 10049 5012649 5012649 https://support.microsoft.com/help/5012649 10051 10049 5012650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012650 5011535 10378 10379 Yes Monthly Rollup 6.2.9200.23679 https://support.microsoft.com/help/5012650 10378 10379 5012650 5012650 https://support.microsoft.com/help/5012650 10378 10379 5012666 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012666 10378 10379 Yes Security Only 6.2.9200.23679 https://support.microsoft.com/help/5012666 10378 10379 5012666 5012666 https://support.microsoft.com/help/5012666 10378 10379 5012670 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012670 5011564 10483 10543 Yes Monthly Rollup 6.3.9600.20337 https://support.microsoft.com/help/5012670 10483 10543 5012670 5012670 https://support.microsoft.com/help/5012670 10483 10543 5012639 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012639 10483 10543 Yes Security Only 6.3.9600.20337 https://support.microsoft.com/help/5012639 10483 10543 5012639 5012639 https://support.microsoft.com/help/5012639 10483 10543 <a href="https://twitter.com/guhe120">Yuki Chen</a> 1.0 2022-04-12T08:00:00 <p>Information published.</p> Windows DNS Server Remote Code Execution Vulnerability <p><strong>According to the CVSS metric, privileges required is high (PR:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires the attacker or targeted user to have specific elevated privileges. As is best practice, regular validation and audits of administrative groups should be conducted.</p> Role: DNS Server Microsoft Yes CVE-2022-26813 11571 11572 11923 11924 11803 10816 10855 9312 10287 9318 9344 10051 10049 10378 10379 10483 10543 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 11803 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 9312 Remote Code Execution 10287 Remote Code Execution 9318 Remote Code Execution 9344 Remote Code Execution 10051 Remote Code Execution 10049 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Important 11571 Important 11572 Important 11923 Important 11924 Important 11803 Important 10816 Important 10855 Important 9312 Important 10287 Important 9318 Important 9344 Important 10051 Important 10049 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11803 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9312 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10287 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9318 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9344 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10051 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10049 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5012647 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012647 5011503 11571 11572 Yes Security Update 10.0.17763.2803 https://support.microsoft.com/help/5012647 11571 11572 5012647 5012647 https://support.microsoft.com/help/5012647 11571 11572 5012604 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012604 5011497 11923 11924 Yes Security Update 10.0.20348.643 https://support.microsoft.com/help/5012604 11923 11924 5012604 5012604 https://support.microsoft.com/help/5012604 11923 11924 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11803 Yes Security Update 10.0.19042.1645 https://support.microsoft.com/help/5012599 11803 5012599 5012599 https://support.microsoft.com/help/5012599 11803 5012596 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012596 5011495 10816 10855 Yes Security Update 10.0.14393.5066 https://support.microsoft.com/help/5012596 10816 10855 5012596 5012596 https://support.microsoft.com/help/5012596 10816 10855 5012658 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012658 5011534 9312 10287 9318 9344 Yes Monthly Rollup 6.0.6003.21446 https://support.microsoft.com/help/5012658 9312 10287 9318 9344 5012658 5012658 https://support.microsoft.com/help/5012658 9312 10287 9318 9344 5012632 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012632 9312 10287 9318 9344 Yes Security Only 6.0.6003.21446 https://support.microsoft.com/help/5012632 9312 10287 9318 9344 5012632 5012632 https://support.microsoft.com/help/5012632 9312 10287 9318 9344 5012626 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012626 5011552 10051 10049 Yes Monthly Rollup 6.1.7601.25924 https://support.microsoft.com/help/5012626 10051 10049 5012626 5012626 https://support.microsoft.com/help/5012626 10051 10049 5012649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012649 10051 10049 Yes Security Only 6.1.7601.25924 https://support.microsoft.com/help/5012649 10051 10049 5012649 5012649 https://support.microsoft.com/help/5012649 10051 10049 5012650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012650 5011535 10378 10379 Yes Monthly Rollup 6.2.9200.23679 https://support.microsoft.com/help/5012650 10378 10379 5012650 5012650 https://support.microsoft.com/help/5012650 10378 10379 5012666 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012666 10378 10379 Yes Security Only 6.2.9200.23679 https://support.microsoft.com/help/5012666 10378 10379 5012666 5012666 https://support.microsoft.com/help/5012666 10378 10379 5012670 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012670 5011564 10483 10543 Yes Monthly Rollup 6.3.9600.20337 https://support.microsoft.com/help/5012670 10483 10543 5012670 5012670 https://support.microsoft.com/help/5012670 10483 10543 5012639 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012639 10483 10543 Yes Security Only 6.3.9600.20337 https://support.microsoft.com/help/5012639 10483 10543 5012639 5012639 https://support.microsoft.com/help/5012639 10483 10543 <a href="https://twitter.com/guhe120">Yuki Chen</a> 1.0 2022-04-12T08:00:00 <p>Information published.</p> Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to take additional actions prior to exploitation to prepare the target environment.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>100.0.1185.29</td> <td>4/1/2022</td> <td>100.0.4896.60</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Microsoft Yes CVE-2022-26891 11655 Elevation of Privilege 11655 Important 11655 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 8.3 7.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11655 Release Notes 11655 No Security Update 100.0.1185.29 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes <a href="https://www.daviderceg.com/">David Erceg</a> 1.0 2022-04-01T07:00:00 <p>Information published.</p> Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to take additional actions prior to exploitation to prepare the target environment.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>100.0.1185.29</td> <td>4/1/2022</td> <td>100.0.4896.60</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Microsoft Yes CVE-2022-26894 11655 Elevation of Privilege 11655 Important 11655 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 8.3 7.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11655 Release Notes 11655 No Security Update 100.0.1185.29 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes <a href="https://www.daviderceg.com/">David Erceg</a> 1.0 2022-04-01T07:00:00 <p>Information published.</p> Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to take additional actions prior to exploitation to prepare the target environment.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>100.0.1185.29</td> <td>4/1/2022</td> <td>100.0.4896.60</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Microsoft Yes CVE-2022-26895 11655 Elevation of Privilege 11655 Important 11655 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 8.3 7.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11655 Release Notes 11655 No Security Update 100.0.1185.29 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes <a href="https://www.daviderceg.com/">David Erceg</a> 1.0 2022-04-01T07:00:00 <p>Information published.</p> Azure Site Recovery Information Disclosure Vulnerability <p><strong>According to the CVSS metric, privileges required is high (PR:H). What privileges does an attacker require to exploit this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to compromise admin credentials to one of the VMs associated with the configuration server.</p> <p><strong>What is Azure Site Recovery?</strong></p> <p>Azure Site Recovery helps ensure business continuity by keeping business apps and workloads running during outages. It is a service but also has a few on-premise components. Please visit this link for more details: <a href="https://docs.microsoft.com/en-us/azure/site-recovery/site-recovery-overview">About Azure Site Recovery - Azure Site Recovery</a></p> <p><strong>To what scenario does this vulnerability apply?</strong></p> <p>This vulnerability applies to a VMWare-to-Azure scenario. Please visit this link for more details: VMware VM disaster recovery architecture in <a href="https://docs.microsoft.com/en-us/azure/site-recovery/vmware-azure-architecture">Azure Site Recovery - Classic - Azure Site Recovery</a>.</p> <p><strong>What can I do to protect myself from this vulnerability?</strong></p> <p>You can follow the steps <a href="https://aka.ms/upgrade-to-9.49">here</a> to update to version 9.49.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>This vulnerability could allow disclosure of accounts and user table data, including encrypted credentials.</p> Azure Site Recovery Microsoft Yes CVE-2022-26896 12018 Information Disclosure 12018 Important 12018 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 4.9 4.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12018 Update Information https://aka.ms/upgrade-to-9.49 12018 Maybe Security Update 9.49 https://support.microsoft.com/topic/update-rollup-62-for-azure-site-recovery-e7aff36f-b6ad-4705-901c-f662c00c402b 12018 Update Information <a href="https://twitter.com/kwsecu">William S&#246;derberg</a> with <a href="https://www.f-secure.com/">F-Secure</a> 1.0 2022-04-12T08:00:00 <p>Information published.</p> 2.0 2022-07-12T07:00:00 <p>To comprehensively address this vulnerability, customers should install version 6.49 of Azure Site Recover VMWare to Azure.</p> Azure Site Recovery Information Disclosure Vulnerability <p><strong>What is Azure Site Recovery?</strong></p> <p>Azure Site Recovery helps ensure business continuity by keeping business apps and workloads running during outages. It is a service but also has a few on-premise components. Please visit this link for more details: <a href="https://docs.microsoft.com/en-us/azure/site-recovery/site-recovery-overview">About Azure Site Recovery - Azure Site Recovery</a></p> <p><strong>To what scenario does this vulnerability apply?</strong></p> <p>This vulnerability applies to a VMWare-to-Azure scenario. Please visit this link for more details: VMware VM disaster recovery architecture in <a href="https://docs.microsoft.com/en-us/azure/site-recovery/vmware-azure-architecture">Azure Site Recovery - Classic - Azure Site Recovery</a>.</p> <p><strong>What can I do to protect myself from this vulnerability?</strong> You can follow the steps <a href="https://support.microsoft.com/en-us/topic/update-rollup-61-for-azure-site-recovery-kb5012960-a1cc029b-03ad-446f-9365-a00b41025d39">here</a> to update to version 9.48.</p> <p><strong>According to the CVSS metric, privileges required is high (PR:H). What privileges does an attacker require to exploit this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to compromise admin credentials to one of the VMs associated with the configuration server.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>This vulnerability could allow disclosure of accounts and user table data, including encrypted credentials.</p> Azure Site Recovery Microsoft Yes CVE-2022-26897 12018 Information Disclosure 12018 Important 12018 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 4.9 4.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12018 Release Notes https://support.microsoft.com/en-us/topic/update-rollup-61-for-azure-site-recovery-kb5012960-a1cc029b-03ad-446f-9365-a00b41025d39 12018 Maybe Security Update 9.48 https://support.microsoft.com/en-us/topic/update-rollup-61-for-azure-site-recovery-kb5012960-a1cc029b-03ad-446f-9365-a00b41025d39 12018 Release Notes <a href="https://twitter.com/kwsecu">William S&#246;derberg</a> with <a href="https://www.f-secure.com/">F-Secure</a> 1.0 2022-04-12T08:00:00 <p>Information published.</p> Azure Site Recovery Remote Code Execution Vulnerability <p><strong>What is Azure Site Recovery?</strong></p> <p>Azure Site Recovery helps ensure business continuity by keeping business apps and workloads running during outages. It is a service but also has a few on-premise components. Please visit this link for more details: <a href="https://docs.microsoft.com/en-us/azure/site-recovery/site-recovery-overview">About Azure Site Recovery - Azure Site Recovery</a></p> <p><strong>To what scenario does this vulnerability apply?</strong></p> <p>This vulnerability applies to a VMWare-to-Azure scenario. Please visit this link for more details: VMware VM disaster recovery architecture in <a href="https://docs.microsoft.com/en-us/azure/site-recovery/vmware-azure-architecture">Azure Site Recovery - Classic - Azure Site Recovery</a>.</p> <p><strong>What can I do to protect myself from this vulnerability?</strong> You can follow the steps <a href="https://support.microsoft.com/en-us/topic/update-rollup-61-for-azure-site-recovery-kb5012960-a1cc029b-03ad-446f-9365-a00b41025d39">here</a> to update to version 9.48.</p> <p><strong>According to the CVSS metric, privileges required is high (PR:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to compromise admin credentials to the replication appliance, configuration server, or one of the VMs associated with the configuration server.</p> Azure Site Recovery Microsoft Yes CVE-2022-26898 12018 Remote Code Execution 12018 Important 12018 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12018 Release Notes https://support.microsoft.com/en-us/topic/update-rollup-61-for-azure-site-recovery-kb5012960-a1cc029b-03ad-446f-9365-a00b41025d39 12018 Maybe Security Update 9.48 https://support.microsoft.com/en-us/topic/update-rollup-61-for-azure-site-recovery-kb5012960-a1cc029b-03ad-446f-9365-a00b41025d39 12018 Release Notes William S&#246;derberg with <a href="https://www.f-secure.com/">F-Secure</a> Pasi Saarinen with <a href="https://www.f-secure.com/">F-Secure</a> 1.0 2022-04-12T08:00:00 <p>Information published.</p> Microsoft Excel Remote Code Execution Vulnerability <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>According to the CVSS metric, the attack vector is local (AV:L). Why does the CVE title indicate that this is a remote code execution?</strong></p> <p>The word <strong>Remote</strong> in the title refers to the location of the attacker. This type of exploit is sometimes referred to as Arbitrary Code Execution (ACE). The attack itself is carried out locally.</p> <p>For example, when the score indicates that the <strong>Attack Vector</strong> is <strong>Local</strong> and <strong>User Interaction</strong> is <strong>Required</strong>, this could describe an exploit in which an attacker, through social engineering, convinces a victim to download and open a specially crafted file from a website which leads to a local attack on their computer.</p> Microsoft Office Excel Microsoft Yes CVE-2022-26901 11575 11605 11762 11763 11951 11952 11953 10739 10740 10753 10754 10656 10654 10655 10603 10601 10602 10611 Remote Code Execution 11575 Remote Code Execution 11605 Remote Code Execution 11762 Remote Code Execution 11763 Remote Code Execution 11951 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 10739 Remote Code Execution 10740 Remote Code Execution 10753 Remote Code Execution 10754 Remote Code Execution 10656 Remote Code Execution 10654 Remote Code Execution 10655 Remote Code Execution 10603 Remote Code Execution 10601 Remote Code Execution 10602 Remote Code Execution 10611 Important 11575 Important 11605 Important 11762 Important 11763 Important 11951 Important 11952 Important 11953 Important 10739 Important 10740 Important 10753 Important 10754 Important 10656 Important 10654 Important 10655 Important 10603 Important 10601 Important 10602 Important 10611 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11575 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11605 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10739 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10740 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10753 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10754 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10656 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10654 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10655 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10603 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10601 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10602 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10611 Release Notes https://go.microsoft.com/fwlink/p/?linkid=831049 11575 11951 Maybe Security Update 16.60.22041000 https://go.microsoft.com/fwlink/p/?linkid=831049 11575 11951 Release Notes 5002162 https://www.microsoft.com/download/details.aspx?familyid=83e1cb4f-11e5-4bc4-9104-28e32d2d41e9 5002133 11605 Maybe Security Update 16.0.10385.20001 https://support.microsoft.com/kb/5002162 11605 5002162 Click to Run 11762 11763 11952 11953 No Security Update https://aka.ms/OfficeSecurityReleases https://docs.microsoft.com/en-us/officeupdates/office365-proplus-security-updates 11762 11763 11952 11953 Click to Run 5002177 https://www.microsoft.com/download/details.aspx?familyid=39408f5e-9b0d-460f-b45b-8800c9ce5da6 5002137 10739 Maybe Security Update 16.0.5305.1000 https://support.microsoft.com/kb/5002177 10739 5002177 5002177 https://www.microsoft.com/download/details.aspx?familyid=6f090d56-7be1-481c-b269-48e9cc67410a 5002137 10740 Maybe Security Update 16.0.5305.1000 https://support.microsoft.com/kb/5002177 10740 5002177 5002143 https://www.microsoft.com/download/details.aspx?familyid=e7bd3695-c95b-438e-bb6e-e02af54e95a7 5002060 10753 Maybe Security Update 16.0.5305.1000 https://support.microsoft.com/kb/5002143 10753 5002143 5002143 https://www.microsoft.com/download/details.aspx?familyid=128a4047-a1e0-4d6b-b661-94211fa18e29 5002060 10754 Maybe Security Update 16.0.5305.1000 https://support.microsoft.com/kb/5002143 10754 5002143 5002175 5002156 10656 Maybe Security Update 15.0.5441.1000 https://support.microsoft.com/kb/5002156 10656 5002175 5002175 https://www.microsoft.com/download/details.aspx?familyid=7564d875-e305-45c1-bbb6-20410e769724 5002156 10654 Maybe Security Update 15.0.5441.1000 https://support.microsoft.com/kb/5002175 10654 5002175 5002175 https://www.microsoft.com/download/details.aspx?familyid=0216b47a-41c3-4f1c-92a0-a34caff1bd7a 5002156 10655 Maybe Security Update 15.0.5441.1000 https://support.microsoft.com/kb/5002175 10655 5002175 5002148 5002064 10603 Maybe Security Update 15.0.5441.1000 https://support.microsoft.com/kb/5002148 10603 5002148 5002148 https://www.microsoft.com/download/details.aspx?familyid=da2c2476-950f-4b3a-8e5c-d549a74f8721 5002064 10601 Maybe Security Update 15.0.5441.1000 https://support.microsoft.com/kb/5002148 10601 5002148 5002148 https://www.microsoft.com/download/details.aspx?familyid=1755810a-893f-4627-b4ef-54687f8d8896 5002064 10602 Maybe Security Update 15.0.5441.1000 https://support.microsoft.com/kb/5002148 10602 5002148 5002169 https://www.microsoft.com/download/details.aspx?familyid=fa04234c-2714-48e2-bd3c-0436d278dae8 5002149 10611 Maybe Security Update 15.0.5441.1000 https://support.microsoft.com/kb/5002169 10611 5002169 kdot working with <a href="https://www.zerodayinitiative.com/">Trend Micro Zero Day Initiative</a> 1.0 2022-04-12T07:00:00 <p>Information published.</p> Windows User Profile Service Elevation of Privilege Vulnerability <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows User Profile Service Microsoft Yes CVE-2022-26904 11568 11569 11570 11571 11572 11712 11713 11714 11896 11897 11898 11923 11924 11801 11802 11803 11926 11927 11929 11930 11931 10729 10735 10852 10853 10816 10855 10047 10048 10481 10482 10484 9312 10287 9318 9344 10051 10049 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11570 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11712 Elevation of Privilege 11713 Elevation of Privilege 11714 Elevation of Privilege 11896 Elevation of Privilege 11897 Elevation of Privilege 11898 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11801 Elevation of Privilege 11802 Elevation of Privilege 11803 Elevation of Privilege 11926 Elevation of Privilege 11927 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 10729 Elevation of Privilege 10735 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10047 Elevation of Privilege 10048 Elevation of Privilege 10481 Elevation of Privilege 10482 Elevation of Privilege 10484 Elevation of Privilege 9312 Elevation of Privilege 10287 Elevation of Privilege 9318 Elevation of Privilege 9344 Elevation of Privilege 10051 Elevation of Privilege 10049 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11570 Important 11571 Important 11572 Important 11712 Important 11713 Important 11714 Important 11896 Important 11897 Important 11898 Important 11923 Important 11924 Important 11801 Important 11802 Important 11803 Important 11926 Important 11927 Important 11929 Important 11930 Important 11931 Important 10729 Important 10735 Important 10852 Important 10853 Important 10816 Important 10855 Important 10047 Important 10048 Important 10481 Important 10482 Important 10484 Important 9312 Important 10287 Important 9318 Important 9344 Important 10051 Important 10049 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:Yes;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation More Likely 7.0 6.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 11568 7.0 6.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 11569 7.0 6.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 11570 7.0 6.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 11571 7.0 6.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 11572 7.0 6.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 11712 7.0 6.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 11713 7.0 6.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 11714 7.0 6.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 11896 7.0 6.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 11897 7.0 6.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 11898 7.0 6.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 11923 7.0 6.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 11924 7.0 6.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 11801 7.0 6.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 11802 7.0 6.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 11803 7.0 6.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 11926 7.0 6.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 11927 7.0 6.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 11929 7.0 6.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 11930 7.0 6.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 11931 7.0 6.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 10729 7.0 6.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 10735 7.0 6.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 10852 7.0 6.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 10853 7.0 6.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 10816 7.0 6.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 10855 7.0 6.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 10047 7.0 6.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 10048 7.0 6.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 10481 7.0 6.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 10482 7.0 6.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 10484 7.0 6.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 9312 7.0 6.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 10287 7.0 6.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 9318 7.0 6.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 9344 7.0 6.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 10051 7.0 6.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 10049 7.0 6.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 10378 7.0 6.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 10379 7.0 6.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 10483 7.0 6.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 10543 5012647 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012647 5011503 11568 11569 11570 11571 11572 Yes Security Update 10.0.17763.2803 https://support.microsoft.com/help/5012647 11568 11569 11570 11571 11572 5012647 5012647 https://support.microsoft.com/help/5012647 11568 11569 11570 11571 11572 5012591 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012591 5011485 11712 11713 11714 Yes Security Update 10.0.18363.2212 https://support.microsoft.com/help/5012591 11712 11713 11714 5012591 5012591 https://support.microsoft.com/help/5012591 11712 11713 11714 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11896 11897 11898 Yes Security Update 10.0.19043.1645 https://support.microsoft.com/help/5012599 11896 11897 11898 5012599 5012599 https://support.microsoft.com/help/5012599 11896 11897 11898 11801 11802 11803 11929 11930 11931 5012604 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012604 5011497 11923 11924 Yes Security Update 10.0.20348.643 https://support.microsoft.com/help/5012604 11923 11924 5012604 5012604 https://support.microsoft.com/help/5012604 11923 11924 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11801 11802 11803 Yes Security Update 10.0.19042.1645 https://support.microsoft.com/help/5012599 11801 11802 11803 5012599 5012592 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012592 5011493 11926 11927 Yes Security Update 10.0.22000.613 https://support.microsoft.com/help/5012592 11926 11927 5012592 5012592 https://support.microsoft.com/help/5012592 11926 11927 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11929 11930 11931 Yes Security Update 10.0.19044.1645 https://support.microsoft.com/help/5012599 11929 11930 11931 5012599 5012653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012653 5011491 10729 10735 Yes Security Update 10.0.10240.19265 https://support.microsoft.com/help/5012653 10729 10735 5012653 5012653 https://support.microsoft.com/help/5012653 10729 10735 5012596 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012596 5011495 10852 10853 10816 10855 Yes Security Update 10.0.14393.5066 https://support.microsoft.com/help/5012596 10852 10853 10816 10855 5012596 5012596 https://support.microsoft.com/help/5012596 10852 10853 10816 10855 5012626 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012626 5011552 10047 10048 10051 10049 Yes Monthly Rollup 6.1.7601.25924 https://support.microsoft.com/help/5012626 10047 10048 10051 10049 5012626 5012626 https://support.microsoft.com/help/5012626 10047 10048 10051 10049 5012649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012649 10047 10048 10051 10049 Yes Security Only 6.1.7601.25924 https://support.microsoft.com/help/5012649 10047 10048 10051 10049 5012649 5012649 https://support.microsoft.com/help/5012649 10047 10048 10051 10049 5012670 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012670 5011564 10481 10482 10483 10543 Yes Monthly Rollup 6.3.9600.20337 https://support.microsoft.com/help/5012670 10481 10482 10483 10543 5012670 5012670 https://support.microsoft.com/help/5012670 10481 10482 10484 10483 10543 5012639 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012639 10481 10482 10483 10543 Yes Security Only 6.3.9600.20337 https://support.microsoft.com/help/5012639 10481 10482 10483 10543 5012639 5012639 https://support.microsoft.com/help/5012639 10481 10482 10483 10543 5012670 5011564 10484 Yes Monthly Rollup 6.3.9600.20337 https://support.microsoft.com/help/5012639 10484 5012670 5012658 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012658 5011534 9312 10287 9318 9344 Yes Monthly Rollup 6.0.6003.21446 https://support.microsoft.com/help/5012658 9312 10287 9318 9344 5012658 5012658 https://support.microsoft.com/help/5012658 9312 10287 9318 9344 5012632 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012632 9312 10287 9318 9344 Yes Security Only 6.0.6003.21446 https://support.microsoft.com/help/5012632 9312 10287 9318 9344 5012632 5012632 https://support.microsoft.com/help/5012632 9312 10287 9318 9344 5012650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012650 5011535 10378 10379 Yes Monthly Rollup 6.2.9200.23679 https://support.microsoft.com/help/5012650 10378 10379 5012650 5012650 https://support.microsoft.com/help/5012650 10378 10379 5012666 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012666 10378 10379 Yes Security Only 6.2.9200.23679 https://support.microsoft.com/help/5012666 10378 10379 5012666 5012666 https://support.microsoft.com/help/5012666 10378 10379 KLINIX5 1.0 2022-04-12T08:00:00 <p>Information published.</p> GitHub: Uncontrolled search for the Git directory in Git for Windows <p><strong>Why is this GitHub CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Git for Windows software which is consumed by Microsoft Visual Studio. It is being documented in the Security Update Guide to announce that the latest builds of Visual Studio are no longer vulnerable. Please see <a href="https://msrc-blog.microsoft.com/2021/01/13/security-update-guide-supports-cves-assigned-by-industry-partners/">Security Update Guide Supports CVEs Assigned by Industry Partners</a> for more information.</p> Visual Studio GitHub Yes CVE-2022-24765 11600 12020 11785 11872 11935 11969 Elevation of Privilege 11600 Elevation of Privilege 12020 Elevation of Privilege 11785 Elevation of Privilege 11872 Elevation of Privilege 11935 Elevation of Privilege 11969 Important 11600 Important 12020 Important 11785 Important 11872 Important 11935 Important 11969 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely Release Notes http://aka.ms/vs/15/release/latest 11600 Maybe Security Update 15.9.46 https://docs.microsoft.com/en-us/visualstudio/releasenotes/vs2017-relnotes 11600 Release Notes Release Notes https://my.visualstudio.com/Downloads?q=Visual Studio 2022 version 17.1 12020 Maybe Security Update 17.1.4 https://docs.microsoft.com/en-us/visualstudio/releases/2022/release-notes 12020 Release Notes Release Notes https://my.visualstudio.com/Downloads?q=Visual Studio 2019 version 16.7 11785 Maybe Security Update 16.7.27 https://docs.microsoft.com/en-us/visualstudio/releases/2019/release-notes-v16.7 11785 Release Notes Release Notes https://my.visualstudio.com/Downloads?q=Visual Studio 2019 version 16.9 11872 Maybe Security Update 16.9.19 https://docs.microsoft.com/en-us/visualstudio/releases/2019/release-notes-v16.9 11872 Release Notes Release Notes https://my.visualstudio.com/Downloads?q=Visual Studio 2019 version 16.11 11935 Maybe Security Update 16.11.12 https://docs.microsoft.com/en-us/visualstudio/releases/2019/release-notes-v16.11 11935 Release Notes Release Notes https://my.visualstudio.com/Downloads?q=Visual Studio 2022 version 17.0 11969 Maybe Security Update 17.0.8 https://docs.microsoft.com/en-us/visualstudio/releases/2022/release-notes 11969 Release Notes 1.0 2022-04-12T07:00:00 <p>Information published.</p> GitHub: Git for Windows' uninstaller vulnerable to DLL hijacking when run under the SYSTEM user account <p><strong>Why is this GitHub CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Git for Windows software which is consumed by Microsoft Visual Studio. It is being documented in the Security Update Guide to announce that the latest builds of Visual Studio are no longer vulnerable. Please see <a href="https://msrc-blog.microsoft.com/2021/01/13/security-update-guide-supports-cves-assigned-by-industry-partners/">Security Update Guide Supports CVEs Assigned by Industry Partners</a> for more information.</p> Visual Studio Github Yes CVE-2022-24767 11600 12020 11785 11872 11935 11969 Elevation of Privilege 11600 Elevation of Privilege 12020 Elevation of Privilege 11785 Elevation of Privilege 11872 Elevation of Privilege 11935 Elevation of Privilege 11969 Important 11600 Important 12020 Important 11785 Important 11872 Important 11935 Important 11969 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely Release Notes http://aka.ms/vs/15/release/latest 11600 Maybe Security Update 15.9.46 https://docs.microsoft.com/en-us/visualstudio/releasenotes/vs2017-relnotes 11600 Release Notes Release Notes https://my.visualstudio.com/Downloads?q=Visual Studio 2022 version 17.1 12020 Maybe Security Update 17.1.4 https://docs.microsoft.com/en-us/visualstudio/releases/2022/release-notes 12020 Release Notes Release Notes https://my.visualstudio.com/Downloads?q=Visual Studio 2019 version 16.7 11785 Maybe Security Update 16.7.27 https://docs.microsoft.com/en-us/visualstudio/releases/2019/release-notes-v16.7 11785 Release Notes Release Notes https://my.visualstudio.com/Downloads?q=Visual Studio 2019 version 16.9 11872 Maybe Security Update 16.9.19 https://docs.microsoft.com/en-us/visualstudio/releases/2019/release-notes-v16.9 11872 Release Notes Release Notes https://my.visualstudio.com/Downloads?q=Visual Studio 2019 version 16.11 11935 Maybe Security Update 16.11.12 https://docs.microsoft.com/en-us/visualstudio/releases/2019/release-notes-v16.11 11935 Release Notes Release Notes https://my.visualstudio.com/Downloads?q=Visual Studio 2022 version 17.0 11969 Maybe Security Update 17.0.8 https://docs.microsoft.com/en-us/visualstudio/releases/2022/release-notes 11969 Release Notes 1.0 2022-04-12T07:00:00 <p>Information published.</p> Microsoft Excel Remote Code Execution Vulnerability <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>According to the CVSS metric, the attack vector is local (AV:L). Why does the CVE title indicate that this is a remote code execution?</strong></p> <p>The word <strong>Remote</strong> in the title refers to the location of the attacker. This type of exploit is sometimes referred to as Arbitrary Code Execution (ACE). The attack itself is carried out locally.</p> <p>For example, when the score indicates that the <strong>Attack Vector</strong> is <strong>Local</strong> and <strong>User Interaction</strong> is <strong>Required</strong>, this could describe an exploit in which an attacker, through social engineering, convinces a victim to download and open a specially crafted file from a website which leads to a local attack on their computer.</p> Microsoft Office Excel Microsoft Yes CVE-2022-24473 11575 11762 11763 11951 11952 11953 Remote Code Execution 11575 Remote Code Execution 11762 Remote Code Execution 11763 Remote Code Execution 11951 Remote Code Execution 11952 Remote Code Execution 11953 Important 11575 Important 11762 Important 11763 Important 11951 Important 11952 Important 11953 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11575 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 Release Notes https://go.microsoft.com/fwlink/p/?linkid=831049 11575 11951 Maybe Security Update 16.60.22041000 https://go.microsoft.com/fwlink/p/?linkid=831049 11575 11951 Release Notes Click to Run 11762 11763 11952 11953 No Security Update https://aka.ms/OfficeSecurityReleases https://docs.microsoft.com/en-us/officeupdates/office365-proplus-security-updates 11762 11763 11952 11953 Click to Run Anonymous Finder 1.0 2022-04-12T07:00:00 <p>Information published.</p> Win32k Elevation of Privilege Vulnerability Windows Win32K Microsoft Yes CVE-2022-26914 11568 11569 11570 11571 11572 11712 11713 11714 11896 11897 11898 11923 11924 11801 11802 11803 11926 11927 11929 11930 11931 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11570 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11712 Elevation of Privilege 11713 Elevation of Privilege 11714 Elevation of Privilege 11896 Elevation of Privilege 11897 Elevation of Privilege 11898 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11801 Elevation of Privilege 11802 Elevation of Privilege 11803 Elevation of Privilege 11926 Elevation of Privilege 11927 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Important 11568 Important 11569 Important 11570 Important 11571 Important 11572 Important 11712 Important 11713 Important 11714 Important 11896 Important 11897 Important 11898 Important 11923 Important 11924 Important 11801 Important 11802 Important 11803 Important 11926 Important 11927 Important 11929 Important 11930 Important 11931 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation More Likely 7.8 7.0 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 11568 7.8 7.0 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 11569 7.8 7.0 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 11570 7.8 7.0 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 11571 7.8 7.0 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 11572 7.8 7.0 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 11712 7.8 7.0 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 11713 7.8 7.0 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 11714 7.8 7.0 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 11896 7.8 7.0 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 11897 7.8 7.0 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 11898 7.8 7.0 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 11923 7.8 7.0 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 11924 7.8 7.0 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 11801 7.8 7.0 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 11802 7.8 7.0 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 11803 7.8 7.0 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 11926 7.8 7.0 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 11927 7.8 7.0 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 11929 7.8 7.0 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 11930 7.8 7.0 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 11931 5012647 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012647 5011503 11568 11569 11570 11571 11572 Yes Security Update 10.0.17763.2803 https://support.microsoft.com/help/5012647 11568 11569 11570 11571 11572 5012647 5012647 https://support.microsoft.com/help/5012647 11568 11569 11570 11571 11572 5012591 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012591 5011485 11712 11713 11714 Yes Security Update 10.0.18363.2212 https://support.microsoft.com/help/5012591 11712 11713 11714 5012591 5012591 https://support.microsoft.com/help/5012591 11712 11713 11714 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11896 11897 11898 11929 Yes Security Update 10.0.19043.1645 https://support.microsoft.com/help/5012599 11896 11897 11898 11929 5012599 5012599 https://support.microsoft.com/help/5012599 11896 11897 11898 11801 11802 11803 11929 11930 11931 5012604 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012604 5011497 11923 11924 Yes Security Update 10.0.20348.643 https://support.microsoft.com/help/5012604 11923 11924 5012604 5012604 https://support.microsoft.com/help/5012604 11923 11924 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11801 11802 11803 Yes Security Update 10.0.19042.1645 https://support.microsoft.com/help/5012599 11801 11802 11803 5012599 5012592 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012592 5011493 11926 11927 Yes Security Update 10.0.22000.613 https://support.microsoft.com/help/5012592 11926 11927 5012592 5012592 https://support.microsoft.com/help/5012592 11926 11927 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11930 11931 Yes Security Update 10.0.19044.1645 https://support.microsoft.com/help/5012599 11930 11931 5012599 Anonymous 1.0 2022-04-12T08:00:00 <p>Information published.</p> Windows Secure Channel Denial of Service Vulnerability Windows SChannel Microsoft Yes CVE-2022-26915 11568 11569 11570 11571 11572 11712 11713 11714 11896 11897 11898 11923 11924 11801 11802 11803 11926 11927 11929 11930 11931 10729 10735 10852 10853 10816 10855 10047 10048 10481 10482 10484 9312 10287 9318 9344 10051 10049 10378 10379 10483 10543 Denial of Service 11568 Denial of Service 11569 Denial of Service 11570 Denial of Service 11571 Denial of Service 11572 Denial of Service 11712 Denial of Service 11713 Denial of Service 11714 Denial of Service 11896 Denial of Service 11897 Denial of Service 11898 Denial of Service 11923 Denial of Service 11924 Denial of Service 11801 Denial of Service 11802 Denial of Service 11803 Denial of Service 11926 Denial of Service 11927 Denial of Service 11929 Denial of Service 11930 Denial of Service 11931 Denial of Service 10729 Denial of Service 10735 Denial of Service 10852 Denial of Service 10853 Denial of Service 10816 Denial of Service 10855 Denial of Service 10047 Denial of Service 10048 Denial of Service 10481 Denial of Service 10482 Denial of Service 10484 Denial of Service 9312 Denial of Service 10287 Denial of Service 9318 Denial of Service 9344 Denial of Service 10051 Denial of Service 10049 Denial of Service 10378 Denial of Service 10379 Denial of Service 10483 Denial of Service 10543 Important 11568 Important 11569 Important 11570 Important 11571 Important 11572 Important 11712 Important 11713 Important 11714 Important 11896 Important 11897 Important 11898 Important 11923 Important 11924 Important 11801 Important 11802 Important 11803 Important 11926 Important 11927 Important 11929 Important 11930 Important 11931 Important 10729 Important 10735 Important 10852 Important 10853 Important 10816 Important 10855 Important 10047 Important 10048 Important 10481 Important 10482 Important 10484 Important 9312 Important 10287 Important 9318 Important 9344 Important 10051 Important 10049 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11568 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11569 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11570 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11571 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11572 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11712 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11713 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11714 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11896 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11897 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11898 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11923 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11924 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11801 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11802 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11803 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11926 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11927 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11929 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11930 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11931 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10729 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10735 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10852 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10853 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10816 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10855 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10047 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10048 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10481 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10482 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10484 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 9312 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10287 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 9318 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 9344 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10051 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10049 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10378 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10379 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10483 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10543 5012647 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012647 5011503 11568 11569 11570 11571 11572 Yes Security Update 10.0.17763.2803 https://support.microsoft.com/help/5012647 11568 11569 11570 11571 11572 5012647 5012647 https://support.microsoft.com/help/5012647 11568 11569 11570 11571 11572 5012591 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012591 5011485 11712 11713 11714 Yes Security Update 10.0.18363.2212 https://support.microsoft.com/help/5012591 11712 11713 11714 5012591 5012591 https://support.microsoft.com/help/5012591 11712 11713 11714 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11896 11897 11898 11929 Yes Security Update 10.0.19043.1645 https://support.microsoft.com/help/5012599 11896 11897 11898 11929 5012599 5012599 https://support.microsoft.com/help/5012599 11896 11897 11898 11801 11802 11803 11929 11930 11931 5012604 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012604 5011497 11923 11924 Yes Security Update 10.0.20348.643 https://support.microsoft.com/help/5012604 11923 11924 5012604 5012604 https://support.microsoft.com/help/5012604 11923 11924 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11801 11802 11803 Yes Security Update 10.0.19042.1645 https://support.microsoft.com/help/5012599 11801 11802 11803 5012599 5012592 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012592 5011493 11926 11927 Yes Security Update 10.0.22000.613 https://support.microsoft.com/help/5012592 11926 11927 5012592 5012592 https://support.microsoft.com/help/5012592 11926 11927 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11930 11931 Yes Security Update 10.0.19044.1645 https://support.microsoft.com/help/5012599 11930 11931 5012599 5012653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012653 5011491 10729 10735 Yes Security Update 10.0.10240.19265 https://support.microsoft.com/help/5012653 10729 10735 5012653 5012653 https://support.microsoft.com/help/5012653 10729 10735 5012596 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012596 5011495 10852 10853 10816 10855 Yes Security Update 10.0.14393.5066 https://support.microsoft.com/help/5012596 10852 10853 10816 10855 5012596 5012596 https://support.microsoft.com/help/5012596 10852 10853 10816 10855 5012626 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012626 5011552 10047 10048 10051 10049 Yes Monthly Rollup 6.1.7601.25924 https://support.microsoft.com/help/5012626 10047 10048 10051 10049 5012626 5012626 https://support.microsoft.com/help/5012626 10047 10048 10051 10049 5012649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012649 10047 10048 10051 10049 Yes Security Only 6.1.7601.25924 https://support.microsoft.com/help/5012649 10047 10048 10051 10049 5012649 5012649 https://support.microsoft.com/help/5012649 10047 10048 10051 10049 5012670 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012670 5011564 10481 10482 10483 10543 Yes Monthly Rollup 6.3.9600.20337 https://support.microsoft.com/help/5012670 10481 10482 10483 10543 5012670 5012670 https://support.microsoft.com/help/5012670 10481 10482 10484 10483 10543 5012639 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012639 10481 10482 10483 10543 Yes Security Only 6.3.9600.20337 https://support.microsoft.com/help/5012639 10481 10482 10483 10543 5012639 5012639 https://support.microsoft.com/help/5012639 10481 10482 10483 10543 5012670 5011564 10484 Yes Monthly Rollup 6.3.9600.20337 https://support.microsoft.com/help/5012639 10484 5012670 5012658 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012658 5011534 9312 10287 9318 9344 Yes Monthly Rollup 6.0.6003.21446 https://support.microsoft.com/help/5012658 9312 10287 9318 9344 5012658 5012658 https://support.microsoft.com/help/5012658 9312 10287 9318 9344 5012632 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012632 9312 10287 9318 9344 Yes Security Only 6.0.6003.21446 https://support.microsoft.com/help/5012632 9312 10287 9318 9344 5012632 5012632 https://support.microsoft.com/help/5012632 9312 10287 9318 9344 5012650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012650 5011535 10378 10379 Yes Monthly Rollup 6.2.9200.23679 https://support.microsoft.com/help/5012650 10378 10379 5012650 5012650 https://support.microsoft.com/help/5012650 10378 10379 5012666 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012666 10378 10379 Yes Security Only 6.2.9200.23679 https://support.microsoft.com/help/5012666 10378 10379 5012666 5012666 https://support.microsoft.com/help/5012666 10378 10379 <a href=https://www.youtube.com/watch?v=0AhPC_dHkHo>Polar Bear</a> 1.0 2022-04-12T08:00:00 <p>Information published.</p> 1.1 2022-05-11T07:00:00 <p>Affected software updated with new package information.</p> Windows Fax Compose Form Remote Code Execution Vulnerability <p><strong>According to the CVSS metric, the attack vector is local (AV:L). Why does the CVE title indicate that this is a remote code execution?</strong></p> <p>The word <strong>Remote</strong> in the title refers to the location of the attacker. This type of exploit is sometimes referred to as Arbitrary Code Execution (ACE). The attack itself is carried out locally.</p> <p>For example, when the score indicates that the <strong>Attack Vector</strong> is <strong>Local</strong> and <strong>User Interaction</strong> is <strong>Required</strong>, this could describe an exploit in which an attacker, through social engineering, convinces a victim to download and open a specially crafted file from a website which leads to a local attack on their computer.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>Exploitation of the vulnerability requires that a user import a specially crafted contact record and then send it a FAX.</p> <p><strong>In what scenarios is my computer vulnerable?</strong></p> <p>For Windows 11 and Windows 10 the FAX service is not installed by default. For the vulnerability to be exploitable, the Windows Fax and Scan feature needs to be enabled, and the Fax service needs to be running. Systems that do not have the Fax service running are not vulnerable.</p> <p><strong>How can I verify whether the Fax service is running?</strong></p> <ol> <li>Hold the <strong>Windows key</strong> and press <strong>R</strong> on your keyboard. This will open the Run dialog.</li> <li>Type <em>services.msc</em> and press <strong>Enter</strong> to open the Services window.</li> <li>Scroll through the list and locate the <strong>Fax</strong> service. <ul> <li>If the Fax service is not listed, Windows Fax and Scan is not enabled and the system is not vulnerable.</li> <li>If the Fax service is listed but the status is not <em>Running</em>, then the system is not vulnerable at the time, but could be targeted if the service was started. The update should be installed as soon as possible or the Fax service should be removed if not needed.</li> </ul> </li> </ol> Windows Fax Compose Form Microsoft Yes CVE-2022-26916 11568 11569 11570 11571 11572 11712 11713 11714 11896 11897 11898 11923 11924 11801 11802 11803 11926 11927 11929 11930 11931 10729 10735 10852 10853 10816 10855 10047 10048 10481 10482 10484 9312 10287 9318 9344 10051 10049 10378 10379 10483 10543 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11570 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11712 Remote Code Execution 11713 Remote Code Execution 11714 Remote Code Execution 11896 Remote Code Execution 11897 Remote Code Execution 11898 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 11801 Remote Code Execution 11802 Remote Code Execution 11803 Remote Code Execution 11926 Remote Code Execution 11927 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 10729 Remote Code Execution 10735 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10047 Remote Code Execution 10048 Remote Code Execution 10481 Remote Code Execution 10482 Remote Code Execution 10484 Remote Code Execution 9312 Remote Code Execution 10287 Remote Code Execution 9318 Remote Code Execution 9344 Remote Code Execution 10051 Remote Code Execution 10049 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Important 11568 Important 11569 Important 11570 Important 11571 Important 11572 Important 11712 Important 11713 Important 11714 Important 11896 Important 11897 Important 11898 Important 11923 Important 11924 Important 11801 Important 11802 Important 11803 Important 11926 Important 11927 Important 11929 Important 11930 Important 11931 Important 10729 Important 10735 Important 10852 Important 10853 Important 10816 Important 10855 Important 10047 Important 10048 Important 10481 Important 10482 Important 10484 Important 9312 Important 10287 Important 9318 Important 9344 Important 10051 Important 10049 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11570 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11712 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11713 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11714 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11896 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11897 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11898 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11801 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11802 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11803 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11926 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11927 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10729 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10735 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10047 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10048 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10481 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10482 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10484 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9312 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10287 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9318 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9344 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10051 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10049 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5012647 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012647 5011503 11568 11569 11570 11571 11572 Yes Security Update 10.0.17763.2803 https://support.microsoft.com/help/5012647 11568 11569 11570 11571 11572 5012647 5012647 https://support.microsoft.com/help/5012647 11568 11569 11570 11571 11572 5012591 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012591 5011485 11712 11713 11714 Yes Security Update 10.0.18363.2212 https://support.microsoft.com/help/5012591 11712 11713 11714 5012591 5012591 https://support.microsoft.com/help/5012591 11712 11713 11714 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11896 11897 11898 11929 Yes Security Update 10.0.19043.1645 https://support.microsoft.com/help/5012599 11896 11897 11898 11929 5012599 5012599 https://support.microsoft.com/help/5012599 11896 11897 11898 11801 11802 11803 11929 11930 11931 5012604 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012604 5011497 11923 11924 Yes Security Update 10.0.20348.643 https://support.microsoft.com/help/5012604 11923 11924 5012604 5012604 https://support.microsoft.com/help/5012604 11923 11924 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11801 11802 11803 Yes Security Update 10.0.19042.1645 https://support.microsoft.com/help/5012599 11801 11802 11803 5012599 5012592 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012592 5011493 11926 11927 Yes Security Update 10.0.22000.613 https://support.microsoft.com/help/5012592 11926 11927 5012592 5012592 https://support.microsoft.com/help/5012592 11926 11927 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11930 11931 Yes Security Update 10.0.19044.1645 https://support.microsoft.com/help/5012599 11930 11931 5012599 5012653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012653 5011491 10729 10735 Yes Security Update 10.0.10240.19265 https://support.microsoft.com/help/5012653 10729 10735 5012653 5012653 https://support.microsoft.com/help/5012653 10729 10735 5012596 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012596 5011495 10852 10853 10816 10855 Yes Security Update 10.0.14393.5066 https://support.microsoft.com/help/5012596 10852 10853 10816 10855 5012596 5012596 https://support.microsoft.com/help/5012596 10852 10853 10816 10855 5012626 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012626 5011552 10047 10048 10051 10049 Yes Monthly Rollup 6.1.7601.25924 https://support.microsoft.com/help/5012626 10047 10048 10051 10049 5012626 5012626 https://support.microsoft.com/help/5012626 10047 10048 10051 10049 5012649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012649 10047 10048 10051 10049 Yes Security Only 6.1.7601.25924 https://support.microsoft.com/help/5012649 10047 10048 10051 10049 5012649 5012649 https://support.microsoft.com/help/5012649 10047 10048 10051 10049 5012670 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012670 5011564 10481 10482 10483 10543 Yes Monthly Rollup 6.3.9600.20337 https://support.microsoft.com/help/5012670 10481 10482 10483 10543 5012670 5012670 https://support.microsoft.com/help/5012670 10481 10482 10484 10483 10543 5012639 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012639 10481 10482 10483 10543 Yes Security Only 6.3.9600.20337 https://support.microsoft.com/help/5012639 10481 10482 10483 10543 5012639 5012639 https://support.microsoft.com/help/5012639 10481 10482 10483 10543 5012670 5011564 10484 Yes Monthly Rollup 6.3.9600.20337 https://support.microsoft.com/help/5012639 10484 5012670 5012658 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012658 5011534 9312 10287 9318 9344 Yes Monthly Rollup 6.0.6003.21446 https://support.microsoft.com/help/5012658 9312 10287 9318 9344 5012658 5012658 https://support.microsoft.com/help/5012658 9312 10287 9318 9344 5012632 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012632 9312 10287 9318 9344 Yes Security Only 6.0.6003.21446 https://support.microsoft.com/help/5012632 9312 10287 9318 9344 5012632 5012632 https://support.microsoft.com/help/5012632 9312 10287 9318 9344 5012650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012650 5011535 10378 10379 Yes Monthly Rollup 6.2.9200.23679 https://support.microsoft.com/help/5012650 10378 10379 5012650 5012650 https://support.microsoft.com/help/5012650 10378 10379 5012666 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012666 10378 10379 Yes Security Only 6.2.9200.23679 https://support.microsoft.com/help/5012666 10378 10379 5012666 5012666 https://support.microsoft.com/help/5012666 10378 10379 <a href="www.cse-cst.gc.ca">Communications Security Establishment</a> 1.0 2022-04-12T08:00:00 <p>Information published.</p> 1.1 2022-08-31T07:00:00 <p>Updated acknowledgment. This is an informational change only.</p> Windows Fax Compose Form Remote Code Execution Vulnerability <p><strong>According to the CVSS metric, the attack vector is local (AV:L). Why does the CVE title indicate that this is a remote code execution?</strong></p> <p>The word <strong>Remote</strong> in the title refers to the location of the attacker. This type of exploit is sometimes referred to as Arbitrary Code Execution (ACE). The attack itself is carried out locally.</p> <p>For example, when the score indicates that the <strong>Attack Vector</strong> is <strong>Local</strong> and <strong>User Interaction</strong> is <strong>Required</strong>, this could describe an exploit in which an attacker, through social engineering, convinces a victim to download and open a specially crafted file from a website which leads to a local attack on their computer.</p> <p><strong>In what scenarios is my computer vulnerable?</strong></p> <p>For Windows 11 and Windows 10 the FAX service is not installed by default. For the vulnerability to be exploitable, the Windows Fax and Scan feature needs to be enabled, and the Fax service needs to be running. Systems that do not have the Fax service running are not vulnerable.</p> <p><strong>How can I verify whether the Fax service is running?</strong></p> <ol> <li>Hold the <strong>Windows key</strong> and press <strong>R</strong> on your keyboard. This will open the Run dialog.</li> <li>Type <em>services.msc</em> and press <strong>Enter</strong> to open the Services window.</li> <li>Scroll through the list and locate the <strong>Fax</strong> service. <ul> <li>If the Fax service is not listed, Windows Fax and Scan is not enabled and the system is not vulnerable.</li> <li>If the Fax service is listed but the status is not <em>Running</em>, then the system is not vulnerable at the time, but could be targeted if the service was started. The update should be installed as soon as possible or the Fax service should be removed if not needed.</li> </ul> </li> </ol> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>Exploitation of the vulnerability requires that a user import a specially crafted contact record and then send it a FAX.</p> Windows Fax Compose Form Microsoft Yes CVE-2022-26917 11568 11569 11570 11571 11572 11712 11713 11714 11896 11897 11898 11923 11924 11801 11802 11803 11926 11927 11929 11930 11931 10729 10735 10852 10853 10816 10855 10047 10048 10481 10482 10484 9312 10287 9318 9344 10051 10049 10378 10379 10483 10543 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11570 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11712 Remote Code Execution 11713 Remote Code Execution 11714 Remote Code Execution 11896 Remote Code Execution 11897 Remote Code Execution 11898 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 11801 Remote Code Execution 11802 Remote Code Execution 11803 Remote Code Execution 11926 Remote Code Execution 11927 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 10729 Remote Code Execution 10735 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10047 Remote Code Execution 10048 Remote Code Execution 10481 Remote Code Execution 10482 Remote Code Execution 10484 Remote Code Execution 9312 Remote Code Execution 10287 Remote Code Execution 9318 Remote Code Execution 9344 Remote Code Execution 10051 Remote Code Execution 10049 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Important 11568 Important 11569 Important 11570 Important 11571 Important 11572 Important 11712 Important 11713 Important 11714 Important 11896 Important 11897 Important 11898 Important 11923 Important 11924 Important 11801 Important 11802 Important 11803 Important 11926 Important 11927 Important 11929 Important 11930 Important 11931 Important 10729 Important 10735 Important 10852 Important 10853 Important 10816 Important 10855 Important 10047 Important 10048 Important 10481 Important 10482 Important 10484 Important 9312 Important 10287 Important 9318 Important 9344 Important 10051 Important 10049 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11570 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11712 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11713 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11714 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11896 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11897 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11898 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11801 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11802 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11803 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11926 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11927 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10729 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10735 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10047 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10048 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10481 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10482 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10484 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9312 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10287 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9318 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9344 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10051 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10049 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5012647 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012647 5011503 11568 11569 11570 11571 11572 Yes Security Update 10.0.17763.2803 https://support.microsoft.com/help/5012647 11568 11569 11570 11571 11572 5012647 5012647 https://support.microsoft.com/help/5012647 11568 11569 11570 11571 11572 5012591 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012591 5011485 11712 11713 11714 Yes Security Update 10.0.18363.2212 https://support.microsoft.com/help/5012591 11712 11713 11714 5012591 5012591 https://support.microsoft.com/help/5012591 11712 11713 11714 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11896 11897 11898 11929 Yes Security Update 10.0.19043.1645 https://support.microsoft.com/help/5012599 11896 11897 11898 11929 5012599 5012599 https://support.microsoft.com/help/5012599 11896 11897 11898 11801 11802 11803 11929 11930 11931 5012604 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012604 5011497 11923 11924 Yes Security Update 10.0.20348.643 https://support.microsoft.com/help/5012604 11923 11924 5012604 5012604 https://support.microsoft.com/help/5012604 11923 11924 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11801 11802 11803 Yes Security Update 10.0.19042.1645 https://support.microsoft.com/help/5012599 11801 11802 11803 5012599 5012592 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012592 5011493 11926 11927 Yes Security Update 10.0.22000.613 https://support.microsoft.com/help/5012592 11926 11927 5012592 5012592 https://support.microsoft.com/help/5012592 11926 11927 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11930 11931 Yes Security Update 10.0.19044.1645 https://support.microsoft.com/help/5012599 11930 11931 5012599 5012653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012653 5011491 10729 10735 Yes Security Update 10.0.10240.19265 https://support.microsoft.com/help/5012653 10729 10735 5012653 5012653 https://support.microsoft.com/help/5012653 10729 10735 5012596 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012596 5011495 10852 10853 10816 10855 Yes Security Update 10.0.14393.5066 https://support.microsoft.com/help/5012596 10852 10853 10816 10855 5012596 5012596 https://support.microsoft.com/help/5012596 10852 10853 10816 10855 5012626 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012626 5011552 10047 10048 10051 10049 Yes Monthly Rollup 6.1.7601.25924 https://support.microsoft.com/help/5012626 10047 10048 10051 10049 5012626 5012626 https://support.microsoft.com/help/5012626 10047 10048 10051 10049 5012649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012649 10047 10048 10051 10049 Yes Security Only 6.1.7601.25924 https://support.microsoft.com/help/5012649 10047 10048 10051 10049 5012649 5012649 https://support.microsoft.com/help/5012649 10047 10048 10051 10049 5012670 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012670 5011564 10481 10482 10483 10543 Yes Monthly Rollup 6.3.9600.20337 https://support.microsoft.com/help/5012670 10481 10482 10483 10543 5012670 5012670 https://support.microsoft.com/help/5012670 10481 10482 10484 10483 10543 5012639 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012639 10481 10482 10483 10543 Yes Security Only 6.3.9600.20337 https://support.microsoft.com/help/5012639 10481 10482 10483 10543 5012639 5012639 https://support.microsoft.com/help/5012639 10481 10482 10483 10543 5012670 5011564 10484 Yes Monthly Rollup 6.3.9600.20337 https://support.microsoft.com/help/5012639 10484 5012670 5012658 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012658 5011534 9312 10287 9318 9344 Yes Monthly Rollup 6.0.6003.21446 https://support.microsoft.com/help/5012658 9312 10287 9318 9344 5012658 5012658 https://support.microsoft.com/help/5012658 9312 10287 9318 9344 5012632 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012632 9312 10287 9318 9344 Yes Security Only 6.0.6003.21446 https://support.microsoft.com/help/5012632 9312 10287 9318 9344 5012632 5012632 https://support.microsoft.com/help/5012632 9312 10287 9318 9344 5012650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012650 5011535 10378 10379 Yes Monthly Rollup 6.2.9200.23679 https://support.microsoft.com/help/5012650 10378 10379 5012650 5012650 https://support.microsoft.com/help/5012650 10378 10379 5012666 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012666 10378 10379 Yes Security Only 6.2.9200.23679 https://support.microsoft.com/help/5012666 10378 10379 5012666 5012666 https://support.microsoft.com/help/5012666 10378 10379 <a href="www.cse-cst.gc.ca">Communications Security Establishment</a> 1.0 2022-04-12T08:00:00 <p>Information published.</p> 1.1 2022-08-31T07:00:00 <p>Updated acknowledgment. This is an informational change only.</p> Windows Fax Compose Form Remote Code Execution Vulnerability <p><strong>According to the CVSS metric, the attack vector is local (AV:L). Why does the CVE title indicate that this is a remote code execution?</strong></p> <p>The word <strong>Remote</strong> in the title refers to the location of the attacker. This type of exploit is sometimes referred to as Arbitrary Code Execution (ACE). The attack itself is carried out locally.</p> <p>For example, when the score indicates that the <strong>Attack Vector</strong> is <strong>Local</strong> and <strong>User Interaction</strong> is <strong>Required</strong>, this could describe an exploit in which an attacker, through social engineering, convinces a victim to download and open a specially crafted file from a website which leads to a local attack on their computer.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>Exploitation of the vulnerability requires that a user import a specially crafted contact record and then send it a FAX.</p> <p><strong>In what scenarios is my computer vulnerable?</strong></p> <p>For Windows 11 and Windows 10 the FAX service is not installed by default. For the vulnerability to be exploitable, the Windows Fax and Scan feature needs to be enabled, and the Fax service needs to be running. Systems that do not have the Fax service running are not vulnerable.</p> <p><strong>How can I verify whether the Fax service is running?</strong></p> <ol> <li>Hold the <strong>Windows key</strong> and press <strong>R</strong> on your keyboard. This will open the Run dialog.</li> <li>Type <em>services.msc</em> and press <strong>Enter</strong> to open the Services window.</li> <li>Scroll through the list and locate the <strong>Fax</strong> service. <ul> <li>If the Fax service is not listed, Windows Fax and Scan is not enabled and the system is not vulnerable.</li> <li>If the Fax service is listed but the status is not <em>Running</em>, then the system is not vulnerable at the time, but could be targeted if the service was started. The update should be installed as soon as possible or the Fax service should be removed if not needed.</li> </ul> </li> </ol> Windows Fax Compose Form Microsoft Yes CVE-2022-26918 11568 11569 11570 11571 11572 11712 11713 11714 11896 11897 11898 11923 11924 11801 11802 11803 11926 11927 11929 11930 11931 10729 10735 10852 10853 10816 10855 10047 10048 10481 10482 10484 9312 10287 9318 9344 10051 10049 10378 10379 10483 10543 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11570 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11712 Remote Code Execution 11713 Remote Code Execution 11714 Remote Code Execution 11896 Remote Code Execution 11897 Remote Code Execution 11898 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 11801 Remote Code Execution 11802 Remote Code Execution 11803 Remote Code Execution 11926 Remote Code Execution 11927 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 10729 Remote Code Execution 10735 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10047 Remote Code Execution 10048 Remote Code Execution 10481 Remote Code Execution 10482 Remote Code Execution 10484 Remote Code Execution 9312 Remote Code Execution 10287 Remote Code Execution 9318 Remote Code Execution 9344 Remote Code Execution 10051 Remote Code Execution 10049 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Important 11568 Important 11569 Important 11570 Important 11571 Important 11572 Important 11712 Important 11713 Important 11714 Important 11896 Important 11897 Important 11898 Important 11923 Important 11924 Important 11801 Important 11802 Important 11803 Important 11926 Important 11927 Important 11929 Important 11930 Important 11931 Important 10729 Important 10735 Important 10852 Important 10853 Important 10816 Important 10855 Important 10047 Important 10048 Important 10481 Important 10482 Important 10484 Important 9312 Important 10287 Important 9318 Important 9344 Important 10051 Important 10049 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11570 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11712 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11713 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11714 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11896 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11897 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11898 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11801 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11802 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11803 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11926 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11927 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10729 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10735 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10047 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10048 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10481 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10482 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10484 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9312 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10287 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9318 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9344 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10051 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10049 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5012647 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012647 5011503 11568 11569 11570 11571 11572 Yes Security Update 10.0.17763.2803 https://support.microsoft.com/help/5012647 11568 11569 11570 11571 11572 5012647 5012647 https://support.microsoft.com/help/5012647 11568 11569 11570 11571 11572 5012591 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012591 5011485 11712 11713 11714 Yes Security Update 10.0.18363.2212 https://support.microsoft.com/help/5012591 11712 11713 11714 5012591 5012591 https://support.microsoft.com/help/5012591 11712 11713 11714 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11896 11897 11898 11929 Yes Security Update 10.0.19043.1645 https://support.microsoft.com/help/5012599 11896 11897 11898 11929 5012599 5012599 https://support.microsoft.com/help/5012599 11896 11897 11898 11801 11802 11803 11929 11930 11931 5012604 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012604 5011497 11923 11924 Yes Security Update 10.0.20348.643 https://support.microsoft.com/help/5012604 11923 11924 5012604 5012604 https://support.microsoft.com/help/5012604 11923 11924 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11801 11802 11803 Yes Security Update 10.0.19042.1645 https://support.microsoft.com/help/5012599 11801 11802 11803 5012599 5012592 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012592 5011493 11926 11927 Yes Security Update 10.0.22000.613 https://support.microsoft.com/help/5012592 11926 11927 5012592 5012592 https://support.microsoft.com/help/5012592 11926 11927 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11930 11931 Yes Security Update 10.0.19044.1645 https://support.microsoft.com/help/5012599 11930 11931 5012599 5012653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012653 5011491 10729 10735 Yes Security Update 10.0.10240.19265 https://support.microsoft.com/help/5012653 10729 10735 5012653 5012653 https://support.microsoft.com/help/5012653 10729 10735 5012596 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012596 5011495 10852 10853 10816 10855 Yes Security Update 10.0.14393.5066 https://support.microsoft.com/help/5012596 10852 10853 10816 10855 5012596 5012596 https://support.microsoft.com/help/5012596 10852 10853 10816 10855 5012626 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012626 5011552 10047 10048 10051 10049 Yes Monthly Rollup 6.1.7601.25924 https://support.microsoft.com/help/5012626 10047 10048 10051 10049 5012626 5012626 https://support.microsoft.com/help/5012626 10047 10048 10051 10049 5012649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012649 10047 10048 10051 10049 Yes Security Only 6.1.7601.25924 https://support.microsoft.com/help/5012649 10047 10048 10051 10049 5012649 5012649 https://support.microsoft.com/help/5012649 10047 10048 10051 10049 5012670 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012670 5011564 10481 10482 10483 10543 Yes Monthly Rollup 6.3.9600.20337 https://support.microsoft.com/help/5012670 10481 10482 10483 10543 5012670 5012670 https://support.microsoft.com/help/5012670 10481 10482 10484 10483 10543 5012639 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012639 10481 10482 10483 10543 Yes Security Only 6.3.9600.20337 https://support.microsoft.com/help/5012639 10481 10482 10483 10543 5012639 5012639 https://support.microsoft.com/help/5012639 10481 10482 10483 10543 5012670 5011564 10484 Yes Monthly Rollup 6.3.9600.20337 https://support.microsoft.com/help/5012639 10484 5012670 5012658 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012658 5011534 9312 10287 9318 9344 Yes Monthly Rollup 6.0.6003.21446 https://support.microsoft.com/help/5012658 9312 10287 9318 9344 5012658 5012658 https://support.microsoft.com/help/5012658 9312 10287 9318 9344 5012632 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012632 9312 10287 9318 9344 Yes Security Only 6.0.6003.21446 https://support.microsoft.com/help/5012632 9312 10287 9318 9344 5012632 5012632 https://support.microsoft.com/help/5012632 9312 10287 9318 9344 5012650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012650 5011535 10378 10379 Yes Monthly Rollup 6.2.9200.23679 https://support.microsoft.com/help/5012650 10378 10379 5012650 5012650 https://support.microsoft.com/help/5012650 10378 10379 5012666 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012666 10378 10379 Yes Security Only 6.2.9200.23679 https://support.microsoft.com/help/5012666 10378 10379 5012666 5012666 https://support.microsoft.com/help/5012666 10378 10379 <a href="www.cse-cst.gc.ca">Communications Security Establishment</a> 1.0 2022-04-12T08:00:00 <p>Information published.</p> 1.1 2022-08-31T07:00:00 <p>Updated acknowledgment. This is an informational change only.</p> Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to take additional actions prior to exploitation to prepare the target environment.</p> Windows LDAP - Lightweight Directory Access Protocol Microsoft Yes CVE-2022-26919 11568 11569 11570 11571 11572 11712 11713 11714 11896 11897 11898 11923 11924 11801 11802 11803 11926 11927 11929 11930 11931 10729 10735 10852 10853 10816 10855 10047 10048 10481 10482 10484 9312 10287 9318 9344 10051 10049 10378 10379 10483 10543 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11570 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11712 Remote Code Execution 11713 Remote Code Execution 11714 Remote Code Execution 11896 Remote Code Execution 11897 Remote Code Execution 11898 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 11801 Remote Code Execution 11802 Remote Code Execution 11803 Remote Code Execution 11926 Remote Code Execution 11927 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 10729 Remote Code Execution 10735 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10047 Remote Code Execution 10048 Remote Code Execution 10481 Remote Code Execution 10482 Remote Code Execution 10484 Remote Code Execution 9312 Remote Code Execution 10287 Remote Code Execution 9318 Remote Code Execution 9344 Remote Code Execution 10051 Remote Code Execution 10049 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Critical 11568 Critical 11569 Critical 11570 Critical 11571 Critical 11572 Critical 11712 Critical 11713 Critical 11714 Critical 11896 Critical 11897 Critical 11898 Critical 11923 Critical 11924 Critical 11801 Critical 11802 Critical 11803 Critical 11926 Critical 11927 Critical 11929 Critical 11930 Critical 11931 Critical 10729 Critical 10735 Critical 10852 Critical 10853 Critical 10816 Critical 10855 Critical 10047 Critical 10048 Critical 10481 Critical 10482 Critical 10484 Critical 9312 Critical 10287 Critical 9318 Critical 9344 Critical 10051 Critical 10049 Critical 10378 Critical 10379 Critical 10483 Critical 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11570 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11712 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11713 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11714 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11896 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11897 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11898 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11801 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11802 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11803 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11926 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11927 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10729 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10735 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10047 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10048 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10481 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10482 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10484 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9312 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10287 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9318 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9344 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10051 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10049 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5012647 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012647 5011503 11568 11569 11570 11571 11572 Yes Security Update 10.0.17763.2803 https://support.microsoft.com/help/5012647 11568 11569 11570 11571 11572 5012647 5012647 https://support.microsoft.com/help/5012647 11568 11569 11570 11571 11572 5012591 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012591 5011485 11712 11713 11714 Yes Security Update 10.0.18363.2212 https://support.microsoft.com/help/5012591 11712 11713 11714 5012591 5012591 https://support.microsoft.com/help/5012591 11712 11713 11714 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11896 11897 11898 11929 Yes Security Update 10.0.19043.1645 https://support.microsoft.com/help/5012599 11896 11897 11898 11929 5012599 5012599 https://support.microsoft.com/help/5012599 11896 11897 11898 11801 11802 11803 11929 11930 11931 5012604 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012604 5011497 11923 11924 Yes Security Update 10.0.20348.643 https://support.microsoft.com/help/5012604 11923 11924 5012604 5012604 https://support.microsoft.com/help/5012604 11923 11924 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11801 11802 11803 Yes Security Update 10.0.19042.1645 https://support.microsoft.com/help/5012599 11801 11802 11803 5012599 5012592 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012592 5011493 11926 11927 Yes Security Update 10.0.22000.613 https://support.microsoft.com/help/5012592 11926 11927 5012592 5012592 https://support.microsoft.com/help/5012592 11926 11927 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11930 11931 Yes Security Update 10.0.19044.1645 https://support.microsoft.com/help/5012599 11930 11931 5012599 5012653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012653 5011491 10729 10735 Yes Security Update 10.0.10240.19265 https://support.microsoft.com/help/5012653 10729 10735 5012653 5012653 https://support.microsoft.com/help/5012653 10729 10735 5012596 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012596 5011495 10852 10853 10816 10855 Yes Security Update 10.0.14393.5066 https://support.microsoft.com/help/5012596 10852 10853 10816 10855 5012596 5012596 https://support.microsoft.com/help/5012596 10852 10853 10816 10855 5012626 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012626 5011552 10047 10048 10051 10049 Yes Monthly Rollup 6.1.7601.25924 https://support.microsoft.com/help/5012626 10047 10048 10051 10049 5012626 5012626 https://support.microsoft.com/help/5012626 10047 10048 10051 10049 5012649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012649 10047 10048 10051 10049 Yes Security Only 6.1.7601.25924 https://support.microsoft.com/help/5012649 10047 10048 10051 10049 5012649 5012649 https://support.microsoft.com/help/5012649 10047 10048 10051 10049 5012670 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012670 5011564 10481 10482 10483 10543 Yes Monthly Rollup 6.3.9600.20337 https://support.microsoft.com/help/5012670 10481 10482 10483 10543 5012670 5012670 https://support.microsoft.com/help/5012670 10481 10482 10484 10483 10543 5012639 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012639 10481 10482 10483 10543 Yes Security Only 6.3.9600.20337 https://support.microsoft.com/help/5012639 10481 10482 10483 10543 5012639 5012639 https://support.microsoft.com/help/5012639 10481 10482 10483 10543 5012670 5011564 10484 Yes Monthly Rollup 6.3.9600.20337 https://support.microsoft.com/help/5012639 10484 5012670 5012658 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012658 5011534 9312 10287 9318 9344 Yes Monthly Rollup 6.0.6003.21446 https://support.microsoft.com/help/5012658 9312 10287 9318 9344 5012658 5012658 https://support.microsoft.com/help/5012658 9312 10287 9318 9344 5012632 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012632 9312 10287 9318 9344 Yes Security Only 6.0.6003.21446 https://support.microsoft.com/help/5012632 9312 10287 9318 9344 5012632 5012632 https://support.microsoft.com/help/5012632 9312 10287 9318 9344 5012650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012650 5011535 10378 10379 Yes Monthly Rollup 6.2.9200.23679 https://support.microsoft.com/help/5012650 10378 10379 5012650 5012650 https://support.microsoft.com/help/5012650 10378 10379 5012666 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012666 10378 10379 Yes Security Only 6.2.9200.23679 https://support.microsoft.com/help/5012666 10378 10379 5012666 5012666 https://support.microsoft.com/help/5012666 10378 10379 <p>Mitigation refers to a setting, common configuration, or general best-practice, existing in a default state, that could reduce the severity of exploitation of a vulnerability. The following mitigating factors might be helpful in your situation:</p> <p><strong>For this vulnerability to be exploitable, an administrator must increase the default MaxReceiveBuffer LDAP setting</strong></p> <p>This vulnerability will not be triggered without modifying the default setting for MaxReceiveBuffer.</p> <a href="https://twitter.com/guhe120">Yuki Chen</a> with <a href="https://www.cyberkl.com/">Cyber KunLun</a> 1.0 2022-04-12T08:00:00 <p>Information published.</p> 1.1 2022-04-19T07:00:00 <p>Removed one of the FAQs. This is an information change only.</p> Windows Graphics Component Information Disclosure Vulnerability <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is the contents of Kernel memory. An attacker could read the contents of Kernel memory from a user mode process.</p> Microsoft Graphics Component Microsoft Yes CVE-2022-26920 11568 11569 11570 11571 11572 11712 11713 11714 11896 11897 11898 11923 11924 11801 11802 11803 11926 11927 11929 11930 11931 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11570 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11712 Information Disclosure 11713 Information Disclosure 11714 Information Disclosure 11896 Information Disclosure 11897 Information Disclosure 11898 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 11801 Information Disclosure 11802 Information Disclosure 11803 Information Disclosure 11926 Information Disclosure 11927 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Important 11568 Important 11569 Important 11570 Important 11571 Important 11572 Important 11712 Important 11713 Important 11714 Important 11896 Important 11897 Important 11898 Important 11923 Important 11924 Important 11801 Important 11802 Important 11803 Important 11926 Important 11927 Important 11929 Important 11930 Important 11931 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11570 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11712 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11713 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11714 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11896 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11897 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11898 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11801 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11802 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11803 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11926 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11927 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 5012647 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012647 5011503 11568 11569 11570 11571 11572 Yes Security Update 10.0.17763.2803 https://support.microsoft.com/help/5012647 11568 11569 11570 11571 11572 5012647 5012647 https://support.microsoft.com/help/5012647 11568 11569 11570 11571 11572 5012591 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012591 5011485 11712 11713 11714 Yes Security Update 10.0.18363.2212 https://support.microsoft.com/help/5012591 11712 11713 11714 5012591 5012591 https://support.microsoft.com/help/5012591 11712 11713 11714 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11896 11897 11898 11929 Yes Security Update 10.0.19043.1645 https://support.microsoft.com/help/5012599 11896 11897 11898 11929 5012599 5012599 https://support.microsoft.com/help/5012599 11896 11897 11898 11801 11802 11803 11929 11930 11931 5012604 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012604 5011497 11923 11924 Yes Security Update 10.0.20348.643 https://support.microsoft.com/help/5012604 11923 11924 5012604 5012604 https://support.microsoft.com/help/5012604 11923 11924 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11801 11802 11803 Yes Security Update 10.0.19042.1645 https://support.microsoft.com/help/5012599 11801 11802 11803 5012599 5012592 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012592 5011493 11926 11927 Yes Security Update 10.0.22000.613 https://support.microsoft.com/help/5012592 11926 11927 5012592 5012592 https://support.microsoft.com/help/5012592 11926 11927 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11930 11931 Yes Security Update 10.0.19044.1645 https://support.microsoft.com/help/5012599 11930 11931 5012599 namnp from Viettel Cyber Security 1.0 2022-04-12T08:00:00 <p>Information published.</p> Chromium: CVE-2022-1232 Type Confusion in V8 <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2022">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>100.0.1185.36</td> <td>4/7/2022</td> <td>100.0.4896.60</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2022-1232 11655 11655 11655 Release Notes 11655 No Security Update 100.0.1185.36 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2022-04-07T07:00:00 <p>Information published.</p> Chromium: CVE-2022-1139 Inappropriate implementation in Background Fetch API <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2022">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>100.0.1185.29</td> <td>4/1/2022</td> <td>100.0.4896.60</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2022-1139 11655 11655 11655 Release Notes 11655 No Security Update 100.0.1185.29 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2022-04-01T07:00:00 <p>Information published.</p> Chromium: CVE-2022-1146 Inappropriate implementation in Resource Timing <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2022">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>100.0.1185.29</td> <td>4/1/2022</td> <td>100.0.4896.60</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2022-1146 11655 11655 11655 Release Notes 11655 No Security Update 100.0.1185.29 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2022-04-01T07:00:00 <p>Information published.</p> Chromium: CVE-2022-1145 Use after free in Extensions <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2022">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>100.0.1185.29</td> <td>4/1/2022</td> <td>100.0.4896.60</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2022-1145 11655 11655 11655 Release Notes 11655 No Security Update 100.0.1185.29 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2022-04-01T07:00:00 <p>Information published.</p> Chromium: CVE-2022-1143 Heap buffer overflow in WebUI <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2022">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>100.0.1185.29</td> <td>4/1/2022</td> <td>100.0.4896.60</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2022-1143 11655 11655 11655 Release Notes 11655 No Security Update 100.0.1185.29 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2022-04-01T07:00:00 <p>Information published.</p> Chromium: CVE-2022-1138 Inappropriate implementation in Web Cursor <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2022">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>100.0.1185.29</td> <td>4/1/2022</td> <td>100.0.4896.60</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2022-1138 11655 11655 11655 Release Notes 11655 No Security Update 100.0.1185.29 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2022-04-01T07:00:00 <p>Information published.</p> Chromium: CVE-2022-1137 Inappropriate implementation in Extensions <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2022">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>100.0.1185.29</td> <td>4/1/2022</td> <td>100.0.4896.60</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2022-1137 11655 11655 11655 Release Notes 11655 No Security Update 100.0.1185.29 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2022-04-01T07:00:00 <p>Information published.</p> Chromium: CVE-2022-1136 Use after free in Tab Strip <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2022">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>100.0.1185.29</td> <td>4/1/2022</td> <td>100.0.4896.60</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2022-1136 11655 11655 11655 Release Notes 11655 No Security Update 100.0.1185.29 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2022-04-01T07:00:00 <p>Information published.</p> Chromium: CVE-2022-1135 Use after free in Shopping Cart <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2022">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>100.0.1185.29</td> <td>4/1/2022</td> <td>100.0.4896.60</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2022-1135 11655 11655 11655 Release Notes 11655 No Security Update 100.0.1185.29 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2022-04-01T07:00:00 <p>Information published.</p> Chromium: CVE-2022-1134 Type Confusion in V8 <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2022">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>100.0.1185.29</td> <td>4/1/2022</td> <td>100.0.4896.60</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2022-1134 11655 11655 11655 Release Notes 11655 No Security Update 100.0.1185.29 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2022-04-01T07:00:00 <p>Information published.</p> Chromium: CVE-2022-1133 Use after free in WebRTC <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2022">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>100.0.1185.29</td> <td>4/1/2022</td> <td>100.0.4896.60</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2022-1133 11655 11655 11655 Release Notes 11655 No Security Update 100.0.1185.29 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2022-04-01T07:00:00 <p>Information published.</p> Chromium: CVE-2022-1131 Use after free in Cast UI <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2022">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>100.0.1185.29</td> <td>4/1/2022</td> <td>100.0.4896.60</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2022-1131 11655 11655 11655 Release Notes 11655 No Security Update 100.0.1185.29 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2022-04-01T07:00:00 <p>Information published.</p> Chromium: CVE-2022-1130 Insufficient validation of untrusted input in WebOTP <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2022">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>100.0.1185.29</td> <td>4/1/2022</td> <td>100.0.4896.60</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2022-1130 11655 11655 11655 Release Notes 11655 No Security Update 100.0.1185.29 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2022-04-01T07:00:00 <p>Information published.</p> Chromium: CVE-2022-1129 Inappropriate implementation in Full Screen Mode <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2022">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>100.0.1185.29</td> <td>4/1/2022</td> <td>100.0.4896.60</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2022-1129 11655 11655 11655 Release Notes 11655 No Security Update 100.0.1185.29 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2022-04-01T07:00:00 <p>Information published.</p> Chromium: CVE-2022-1128 Inappropriate implementation in Web Share API <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2022">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>100.0.1185.29</td> <td>4/1/2022</td> <td>100.0.4896.60</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2022-1128 11655 11655 11655 Release Notes 11655 No Security Update 100.0.1185.29 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2022-04-01T07:00:00 <p>Information published.</p> Chromium: CVE-2022-1127 Use after free in QR Code Generator <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2022">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>100.0.1185.29</td> <td>4/1/2022</td> <td>100.0.4896.60</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2022-1127 11655 11655 11655 Release Notes 11655 No Security Update 100.0.1185.29 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2022-04-01T07:00:00 <p>Information published.</p> Chromium: CVE-2022-1125 Use after free in Portals <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2022">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>100.0.1185.29</td> <td>4/1/2022</td> <td>100.0.4896.60</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2022-1125 11655 11655 11655 Release Notes 11655 No Security Update 100.0.1185.29 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2022-04-01T07:00:00 <p>Information published.</p> Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>101.0.1210.32</td> <td>4/28/2022</td> <td>101.0.4951.41</td> </tr> </tbody> </table> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to take additional actions prior to exploitation to prepare the target environment.</p> <p><strong>Why is the severity for this CVE rated as Moderate, but the CVSS score is 8.3?</strong></p> <p><a href="https://www.microsoft.com/en-us/msrc/bounty-new-edge">Per our severity guidelines</a>, the amount of user interaction or preconditions required to allow this sort of exploitation downgraded the severity. The CVSS scoring system doesn't allow for this type of nuance.</p> <p><strong>According to the CVSS metric, a successful exploitation could lead to a scope change (S:C). What does this mean for this vulnerability?</strong></p> <p>This vulnerability could lead to a browser sandbox escape.</p> Microsoft Edge (Chromium-based) Microsoft Yes CVE-2022-29146 11655 Elevation of Privilege 11655 Moderate 11655 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 8.3 7.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11655 Release Notes 11655 No Security Update 101.0.1210.32 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes <a href="https://www.daviderceg.com/">David Erceg</a> 1.0 2022-04-28T07:00:00 <p>Information published.</p> Microsoft Edge (Chromium-based) Spoofing Vulnerability <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>101.0.1210.32</td> <td>4/28/2022</td> <td>101.0.4951.41</td> </tr> </tbody> </table> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to first prepare the target so that it uses Edge in Internet Explorer Mode.</p> <p><strong>What is Microsoft Edge (Chromium-based) in IE Mode?</strong></p> <p>Microsoft Edge (Chromium-based) in IE Mode is a feature that emulates Internet Explorer from within Microsoft Edge (Chromium-based). For more information please see <a href="https://docs.microsoft.com/en-us/deployedge/edge-ie-mode">About IE Mode</a>.</p> <p><strong>How do I get the update that addresses this Microsoft Edge (Chromium-based) in Internet Explorer Mode vulnerability?</strong></p> <p>The Microsoft Edge (Chromium-based) browser will provide the update for Microsoft Edge in IE mode. No Windows update is required.</p> Microsoft Edge (Chromium-based) Microsoft Yes CVE-2022-29147 11655 Spoofing 11655 Low 11655 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 3.1 2.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C 11655 Release Notes 11655 No Security Update 101.0.1210.32 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes Anonymous 1.0 2022-04-28T07:00:00 <p>Information published.</p> Chromium: CVE-2022-1477 Use after free in Vulkan <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2022">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>101.0.1210.32</td> <td>4/28/2022</td> <td>101.0.4951.41</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2022-1477 11655 11655 11655 Release Notes 11655 No Security Update 101.0.1210.32 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2022-04-28T15:53:41 <p>Information published.</p> Chromium: CVE-2022-1478 Use after free in SwiftShader <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2022">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>101.0.1210.32</td> <td>4/28/2022</td> <td>101.0.4951.41</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2022-1478 11655 11655 11655 Release Notes 11655 No Security Update 101.0.1210.32 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2022-04-28T15:53:52 <p>Information published.</p> Chromium: CVE-2022-1479 Use after free in ANGLE <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2022">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>101.0.1210.32</td> <td>4/28/2022</td> <td>101.0.4951.41</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2022-1479 11655 11655 11655 Release Notes 11655 No Security Update 101.0.1210.32 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2022-04-28T15:54:01 <p>Information published.</p> Chromium: CVE-2022-1480 Use after free in Device API <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2022">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>101.0.1210.32</td> <td>4/28/2022</td> <td>101.0.4951.41</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2022-1480 11655 11655 11655 Release Notes 11655 No Security Update 101.0.1210.32 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2022-04-28T15:54:11 <p>Information published.</p> Chromium: CVE-2022-1481 Use after free in Sharing <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2022">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>101.0.1210.32</td> <td>4/28/2022</td> <td>101.0.4951.41</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2022-1481 11655 11655 11655 Release Notes 11655 No Security Update 101.0.1210.32 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2022-04-28T15:54:21 <p>Information published.</p> Chromium: CVE-2022-1482 Inappropriate implementation in WebGL <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2022">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>101.0.1210.32</td> <td>4/28/2022</td> <td>101.0.4951.41</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2022-1482 11655 11655 11655 Release Notes 11655 No Security Update 101.0.1210.32 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2022-04-28T15:54:30 <p>Information published.</p> Chromium: CVE-2022-1483 Heap buffer overflow in WebGPU <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2022">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>101.0.1210.32</td> <td>4/28/2022</td> <td>101.0.4951.41</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2022-1483 11655 11655 11655 Release Notes 11655 No Security Update 101.0.1210.32 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2022-04-28T15:54:39 <p>Information published.</p> Chromium: CVE-2022-1484 Heap buffer overflow in Web UI Settings <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2022">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>101.0.1210.32</td> <td>4/28/2022</td> <td>101.0.4951.41</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2022-1484 11655 11655 11655 Release Notes 11655 No Security Update 101.0.1210.32 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2022-04-28T15:54:49 <p>Information published.</p> Chromium: CVE-2022-1485 Use after free in File System API <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2022">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>101.0.1210.32</td> <td>4/28/2022</td> <td>101.0.4951.41</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2022-1485 11655 11655 11655 Release Notes 11655 No Security Update 101.0.1210.32 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2022-04-28T15:54:58 <p>Information published.</p> Chromium: CVE-2022-1486 Type Confusion in V8 <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2022">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>101.0.1210.32</td> <td>4/28/2022</td> <td>101.0.4951.41</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2022-1486 11655 11655 11655 Release Notes 11655 No Security Update 101.0.1210.32 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2022-04-28T15:55:06 <p>Information published.</p> Chromium: CVE-2022-1487 Use after free in Ozone <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2022">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>101.0.1210.32</td> <td>4/28/2022</td> <td>101.0.4951.41</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2022-1487 11655 11655 11655 Release Notes 11655 No Security Update 101.0.1210.32 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2022-04-28T15:55:17 <p>Information published.</p> Chromium: CVE-2022-1488 Inappropriate implementation in Extensions API <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2022">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>101.0.1210.32</td> <td>4/28/2022</td> <td>101.0.4951.41</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2022-1488 11655 11655 11655 Release Notes 11655 No Security Update 101.0.1210.32 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2022-04-28T15:55:26 <p>Information published.</p> Chromium: CVE-2022-1490 Use after free in Browser Switcher <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2022">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>101.0.1210.32</td> <td>4/28/2022</td> <td>101.0.4951.41</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2022-1490 11655 11655 11655 Release Notes 11655 No Security Update 101.0.1210.32 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2022-04-28T15:55:36 <p>Information published.</p> Chromium: CVE-2022-1491 Use after free in Bookmarks <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2022">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>101.0.1210.32</td> <td>4/28/2022</td> <td>101.0.4951.41</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2022-1491 11655 11655 11655 Release Notes 11655 No Security Update 101.0.1210.32 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2022-04-28T15:55:46 <p>Information published.</p> Chromium: CVE-2022-1492 Insufficient data validation in Blink Editing <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2022">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>101.0.1210.32</td> <td>4/28/2022</td> <td>101.0.4951.41</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2022-1492 11655 11655 11655 Release Notes 11655 No Security Update 101.0.1210.32 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2022-04-28T15:55:55 <p>Information published.</p> Chromium: CVE-2022-1493 Use after free in Dev Tools <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2022">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>101.0.1210.32</td> <td>4/28/2022</td> <td>101.0.4951.41</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2022-1493 11655 11655 11655 Release Notes 11655 No Security Update 101.0.1210.32 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2022-04-28T15:56:05 <p>Information published.</p> Chromium: CVE-2022-1494 Insufficient data validation in Trusted Types <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2022">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>101.0.1210.32</td> <td>4/28/2022</td> <td>101.0.4951.41</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2022-1494 11655 11655 11655 Release Notes 11655 No Security Update 101.0.1210.32 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2022-04-28T15:56:14 <p>Information published.</p> Chromium: CVE-2022-1495 Incorrect security UI in Downloads <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2022">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>101.0.1210.32</td> <td>4/28/2022</td> <td>101.0.4951.41</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2022-1495 11655 11655 11655 Release Notes 11655 No Security Update 101.0.1210.32 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2022-04-28T15:56:23 <p>Information published.</p> Chromium: CVE-2022-1497 Inappropriate implementation in Input <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2022">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>101.0.1210.32</td> <td>4/28/2022</td> <td>101.0.4951.41</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2022-1497 11655 11655 11655 Release Notes 11655 No Security Update 101.0.1210.32 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2022-04-28T15:56:33 <p>Information published.</p> Chromium: CVE-2022-1498 Inappropriate implementation in HTML Parser <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2022">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>101.0.1210.32</td> <td>4/28/2022</td> <td>101.0.4951.41</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2022-1498 11655 11655 11655 Release Notes 11655 No Security Update 101.0.1210.32 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2022-04-28T15:56:43 <p>Information published.</p> Chromium: CVE-2022-1499 Inappropriate implementation in WebAuthentication <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2022">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>101.0.1210.32</td> <td>4/28/2022</td> <td>101.0.4951.41</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2022-1499 11655 11655 11655 Release Notes 11655 No Security Update 101.0.1210.32 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2022-04-28T15:56:52 <p>Information published.</p> Chromium: CVE-2022-1500 Insufficient data validation in Dev Tools <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2022">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>101.0.1210.32</td> <td>4/28/2022</td> <td>101.0.4951.41</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2022-1500 11655 11655 11655 Release Notes 11655 No Security Update 101.0.1210.32 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2022-04-28T15:57:02 <p>Information published.</p> Chromium: CVE-2022-1501 Inappropriate implementation in iframe <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2022">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>101.0.1210.32</td> <td>4/28/2022</td> <td>101.0.4951.41</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2022-1501 11655 11655 11655 Release Notes 11655 No Security Update 101.0.1210.32 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2022-04-28T15:57:09 <p>Information published.</p> Visual Studio Elevation of Privilege Vulnerability Visual Studio Microsoft Yes CVE-2022-24513 11600 11785 11872 11901 11935 11969 12020 12052 Elevation of Privilege 11600 Elevation of Privilege 11785 Elevation of Privilege 11872 Elevation of Privilege 11901 Elevation of Privilege 11935 Elevation of Privilege 11969 Elevation of Privilege 12020 Elevation of Privilege 12052 Important 11600 Important 11785 Important 11872 Important 11901 Important 11935 Important 11969 Important 12020 Important 12052 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11600 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11785 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11872 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11901 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11935 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11969 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12020 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12052 Release Notes http://aka.ms/vs/15/release/latest 11600 Maybe Security Update 15.9.49 https://docs.microsoft.com/en-us/visualstudio/releasenotes/vs2017-relnotes 11600 Release Notes Release Notes https://my.visualstudio.com/Downloads?q=Visual Studio 2019 version 16.7 11785 Maybe Security Update 16.7.27 https://docs.microsoft.com/en-us/visualstudio/releases/2019/release-notes-v16.7 11785 Release Notes Release Notes https://my.visualstudio.com/Downloads?q=Visual Studio 2019 version 16.9 11872 Maybe Security Update 16.9.23 https://docs.microsoft.com/en-us/visualstudio/releases/2019/release-notes-v16.9 11872 Release Notes Release Notes https://my.visualstudio.com/Downloads?q=Visual Studio Mac 2019 11901 Maybe Security Update 8.10.24 https://docs.microsoft.com/visualstudio/releasenotes/vs2019-mac-relnotes 11901 Release Notes Release Notes https://my.visualstudio.com/Downloads?q=Visual Studio 2019 version 16.11 11935 Maybe Security Update 16.11.16 https://docs.microsoft.com/en-us/visualstudio/releases/2019/release-notes-v16.11 11935 Release Notes Release Notes https://my.visualstudio.com/Downloads?q=Visual Studio 2022 version 17.0 11969 Maybe Security Update 17.0.12 https://docs.microsoft.com/en-us/visualstudio/releases/2022/release-notes-v17.0 11969 Release Notes Release Notes https://my.visualstudio.com/Downloads?q=Visual Studio 2022 version 17.1 12020 Maybe Security Update 17.1.7 https://docs.microsoft.com/en-us/visualstudio/releases/2022/release-notes-v17.1.md 12020 Release Notes Release Notes https://my.visualstudio.com/Downloads?q=Visual Studio Mac 2022 12052 Maybe Security Update 17.0.3 https://docs.microsoft.com/en-us/visualstudio/releases/2022/mac-release-notes 12052 Release Notes Nils Ole  Timm (@firzen14) working with <a href="https://www.zerodayinitiative.com/">Trend Micro Zero Day Initiative</a> 1.0 2022-04-12T07:00:00 <p>Information published.</p> 2.0 2022-05-10T07:00:00 <p>To comprehensively address CVE-2022-24513, Microsoft has released May 2022 security updates for the following supported versions of Visual Studio: Visual Studio 2017 version 15.9, Visual Studio 2019 version 16.9, Visual Studio 2019 version 16.11, Microsoft Visual Studio 2022 version 17.0, and Microsoft Visual Studio 2022 version 17.1. Microsoft strongly recommends that customers install the updates to be fully protected from the vulnerability.</p> 3.0 2022-06-14T07:00:00 <p>Microsoft has released the June 2022 security updates to further address CVE-2022-24513 for the following supported versions of Visual Studio: Visual Studio 2017 version 15.9, Visual Studio 2019 version 16.9, Visual Studio 2019 version 16.11, Microsoft Visual Studio 2022 version 17.0, and Visual Studio 2019 for Mac version 8.10. In addition, Visual Studio 2022 for Mac version 17.0 has been added to the Security Updates table as it is also affected by this vulnerability. Microsoft strongly recommends that customers install these updates to be fully protected from the vulnerability.</p> 4.0 2022-07-12T07:00:00 <p>Microsoft has released July 2022 security updates to further address CVE-2022-24513 for Visual Studio 2019 version 16.9 and Microsoft Visual Studio 2022 version 17.0. Microsoft strongly recommends that customers install these updates to be fully protected from the vulnerability.</p> Microsoft Endpoint Configuration Manager Elevation of Privilege Vulnerability <p><strong>How do I get the update?</strong></p> <p>Customers have two options for the update that addresses this vulnerability:</p> <ol> <li>Upgrade to Configuration Manager current branch, version 2203 (Build 5.00.9078) which is available as an in-console update. See <a href="https://docs.microsoft.com/en-us/mem/configmgr/core/servers/manage/checklist-for-installing-update-2203">Checklist for installing update 2203 for Configuration Manager</a> for more information.</li> <li>Apply the hotfix. Customers running Microsoft Endpoint Configuration Manager, versions 1910 through versions 2111 who are not able to install Configuration Manager Update 2203 (Build 5.00.9078) can download and install hotfix KB12819689. See <a href="https://aka.ms/KB12819689">Connected cache update for Microsoft Endpoint Configuration Manager version 2111</a> for prerequisites, download link, and installation instructions.</li> </ol> <p><strong>What is Microsoft Endpoint Configuration Manager?</strong></p> <p>Microsoft Endpoint Configuration Manager is an on-premises management solution to manage desktops, servers, and laptops that are on your network or are internet-based. You can cloud-enable it to integrate with Intune, Azure Active Directory (AD), Microsoft Defender for Endpoint, and other cloud services. Use Configuration Manager to deploy apps, software updates, and operating systems. You can also monitor compliance, query and act on clients in real time, and much more. For more information see - <a href="https://docs.microsoft.com/en-us/mem/configmgr/core/understand/introduction">What is Configuration Manager?</a>.</p> <p><strong>According to the CVSS metric, privileges required is low (PR:L). What does that mean for this vulnerability?</strong></p> <p>Any authenticated user could trigger this vulnerability. It does not require admin or other elevated privileges.</p> Microsoft Endpoint Configuration Manager Microsoft Yes CVE-2022-24527 12028 Elevation of Privilege 12028 Important 12028 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12028 12819689 https://docs.microsoft.com/en-us/mem/configmgr/hotfix/2111/12819689 12028 Security Update https://docs.microsoft.com/en-us/mem/configmgr/hotfix/2111/12819689 12028 12819689 Jake Baines with <a href="https://www.rapid7.com/">Rapid7</a> 2.0 2022-06-14T07:00:00 <p>The following revisions have been made: 1) Added Microsoft Endpoint Configuration Manager to the Security Updates table as it is affected by this vulnerability. 2) Removed all versions of Windows from the Security Updates table, because the update to address this vulnerability is not available via the Windows security updates. 3) Updated the FAQs to provide information about how customers can get the hotfix for Microsoft Endpoint Configuration Manager that addresses this vulnerability. 4) Corrected the CVE title.</p> 1.0 2022-04-12T08:00:00 <p>Information published.</p> Connected User Experiences and Telemetry Elevation of Privilege Vulnerability Windows Feedback Hub Microsoft Yes CVE-2022-24479 11568 11569 11570 11571 11572 11712 11713 11714 11896 11897 11898 11923 11924 11801 11802 11803 11926 11927 11929 11930 11931 10852 10853 10816 10855 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11570 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11712 Elevation of Privilege 11713 Elevation of Privilege 11714 Elevation of Privilege 11896 Elevation of Privilege 11897 Elevation of Privilege 11898 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11801 Elevation of Privilege 11802 Elevation of Privilege 11803 Elevation of Privilege 11926 Elevation of Privilege 11927 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Important 11568 Important 11569 Important 11570 Important 11571 Important 11572 Important 11712 Important 11713 Important 11714 Important 11896 Important 11897 Important 11898 Important 11923 Important 11924 Important 11801 Important 11802 Important 11803 Important 11926 Important 11927 Important 11929 Important 11930 Important 11931 Important 10852 Important 10853 Important 10816 Important 10855 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11570 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11712 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11713 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11714 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11896 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11897 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11898 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11801 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11802 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11803 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11926 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11927 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 5012647 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012647 5011503 11568 11569 11570 11571 11572 Yes Security Update 10.0.17763.2803 https://support.microsoft.com/help/5012647 11568 11569 11570 11571 11572 5012647 5012647 https://support.microsoft.com/help/5012647 11568 11569 11570 11571 11572 5012591 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012591 5011485 11712 11713 11714 Yes Security Update 10.0.18363.2212 https://support.microsoft.com/help/5012591 11712 11713 11714 5012591 5012591 https://support.microsoft.com/help/5012591 11712 11713 11714 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11896 11897 11898 Yes Security Update 10.0.19043.1645 https://support.microsoft.com/help/5012599 11896 11897 11898 5012599 5012599 https://support.microsoft.com/help/5012599 11896 11897 11898 11801 11802 11803 11929 11930 11931 5012604 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012604 5011497 11923 11924 Yes Security Update 10.0.20348.643 https://support.microsoft.com/help/5012604 11923 11924 5012604 5012604 https://support.microsoft.com/help/5012604 11923 11924 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11801 11802 11803 Yes Security Update 10.0.19042.1645 https://support.microsoft.com/help/5012599 11801 11802 11803 5012599 5012592 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012592 5011493 11926 11927 Yes Security Update 10.0.22000.613 https://support.microsoft.com/help/5012592 11926 11927 5012592 5012592 https://support.microsoft.com/help/5012592 11926 11927 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11929 11930 11931 Yes Security Update 10.0.19044.1645 https://support.microsoft.com/help/5012599 11929 11930 11931 5012599 5012596 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012596 5011495 10852 10853 10816 10855 Yes Security Update 10.0.14393.5066 https://support.microsoft.com/help/5012596 10852 10853 10816 10855 5012596 5012596 https://support.microsoft.com/help/5012596 10852 10853 10816 10855 JeongOh Kyea of THEORI working with Trend Micro's Zero Day Initiative 1.0 2022-04-12T08:00:00 <p>Information published.</p> Windows Common Log File System Driver Elevation of Privilege Vulnerability Windows Common Log File System Driver Microsoft Yes CVE-2022-24481 11568 11569 11570 11571 11572 11712 11713 11714 11896 11897 11898 11923 11924 11801 11802 11803 11926 11927 11929 11930 11931 10729 10735 10852 10853 10816 10855 10047 10048 10481 10482 10484 9312 10287 9318 9344 10051 10049 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11570 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11712 Elevation of Privilege 11713 Elevation of Privilege 11714 Elevation of Privilege 11896 Elevation of Privilege 11897 Elevation of Privilege 11898 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11801 Elevation of Privilege 11802 Elevation of Privilege 11803 Elevation of Privilege 11926 Elevation of Privilege 11927 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 10729 Elevation of Privilege 10735 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10047 Elevation of Privilege 10048 Elevation of Privilege 10481 Elevation of Privilege 10482 Elevation of Privilege 10484 Elevation of Privilege 9312 Elevation of Privilege 10287 Elevation of Privilege 9318 Elevation of Privilege 9344 Elevation of Privilege 10051 Elevation of Privilege 10049 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11570 Important 11571 Important 11572 Important 11712 Important 11713 Important 11714 Important 11896 Important 11897 Important 11898 Important 11923 Important 11924 Important 11801 Important 11802 Important 11803 Important 11926 Important 11927 Important 11929 Important 11930 Important 11931 Important 10729 Important 10735 Important 10852 Important 10853 Important 10816 Important 10855 Important 10047 Important 10048 Important 10481 Important 10482 Important 10484 Important 9312 Important 10287 Important 9318 Important 9344 Important 10051 Important 10049 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation More Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11570 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11712 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11713 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11714 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11896 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11897 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11898 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11801 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11802 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11803 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11926 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11927 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10729 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10735 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10047 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10048 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10481 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10482 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10484 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9312 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10287 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9318 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9344 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10051 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10049 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5012647 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012647 5011503 11568 11569 11570 11571 11572 Yes Security Update 10.0.17763.2803 https://support.microsoft.com/help/5012647 11568 11569 11570 11571 11572 5012647 5012647 https://support.microsoft.com/help/5012647 11568 11569 11570 11571 11572 5012591 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012591 5011485 11712 11713 11714 Yes Security Update 10.0.18363.2212 https://support.microsoft.com/help/5012591 11712 11713 11714 5012591 5012591 https://support.microsoft.com/help/5012591 11712 11713 11714 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11896 11897 11898 Yes Security Update 10.0.19043.1645 https://support.microsoft.com/help/5012599 11896 11897 11898 5012599 5012599 https://support.microsoft.com/help/5012599 11896 11897 11898 11801 11802 11803 11929 11930 11931 5012604 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012604 5011497 11923 11924 Yes Security Update 10.0.20348.643 https://support.microsoft.com/help/5012604 11923 11924 5012604 5012604 https://support.microsoft.com/help/5012604 11923 11924 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11801 11802 11803 Yes Security Update 10.0.19042.1645 https://support.microsoft.com/help/5012599 11801 11802 11803 5012599 5012592 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012592 5011493 11926 11927 Yes Security Update 10.0.22000.613 https://support.microsoft.com/help/5012592 11926 11927 5012592 5012592 https://support.microsoft.com/help/5012592 11926 11927 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11929 11930 11931 Yes Security Update 10.0.19044.1645 https://support.microsoft.com/help/5012599 11929 11930 11931 5012599 5012653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012653 5011491 10729 10735 Yes Security Update 10.0.10240.19265 https://support.microsoft.com/help/5012653 10729 10735 5012653 5012653 https://support.microsoft.com/help/5012653 10729 10735 5012596 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012596 5011495 10852 10853 10816 10855 Yes Security Update 10.0.14393.5066 https://support.microsoft.com/help/5012596 10852 10853 10816 10855 5012596 5012596 https://support.microsoft.com/help/5012596 10852 10853 10816 10855 5012626 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012626 5011552 10047 10048 10051 10049 Yes Monthly Rollup 6.1.7601.25924 https://support.microsoft.com/help/5012626 10047 10048 10051 10049 5012626 5012626 https://support.microsoft.com/help/5012626 10047 10048 10051 10049 5012649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012649 10047 10048 10051 10049 Yes Security Only 6.1.7601.25924 https://support.microsoft.com/help/5012649 10047 10048 10051 10049 5012649 5012649 https://support.microsoft.com/help/5012649 10047 10048 10051 10049 5012670 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012670 5011564 10481 10482 10483 10543 Yes Monthly Rollup 6.3.9600.20337 https://support.microsoft.com/help/5012670 10481 10482 10483 10543 5012670 5012670 https://support.microsoft.com/help/5012670 10481 10482 10484 10483 10543 5012639 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012639 10481 10482 10483 10543 Yes Security Only 6.3.9600.20337 https://support.microsoft.com/help/5012639 10481 10482 10483 10543 5012639 5012639 https://support.microsoft.com/help/5012639 10481 10482 10483 10543 5012670 5011564 10484 Yes Monthly Rollup 6.3.9600.20337 https://support.microsoft.com/help/5012639 10484 5012670 5012658 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012658 5011534 9312 10287 9318 9344 Yes Monthly Rollup 6.0.6003.21446 https://support.microsoft.com/help/5012658 9312 10287 9318 9344 5012658 5012658 https://support.microsoft.com/help/5012658 9312 10287 9318 9344 5012632 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012632 9312 10287 9318 9344 Yes Security Only 6.0.6003.21446 https://support.microsoft.com/help/5012632 9312 10287 9318 9344 5012632 5012632 https://support.microsoft.com/help/5012632 9312 10287 9318 9344 5012650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012650 5011535 10378 10379 Yes Monthly Rollup 6.2.9200.23679 https://support.microsoft.com/help/5012650 10378 10379 5012650 5012650 https://support.microsoft.com/help/5012650 10378 10379 5012666 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012666 10378 10379 Yes Security Only 6.2.9200.23679 https://support.microsoft.com/help/5012666 10378 10379 5012666 5012666 https://support.microsoft.com/help/5012666 10378 10379 <a href="https://twitter.com/jq0904">Jinquan</a> with <a href="https://ti.dbappsecurity.com.cn/">DBAPPSecurity Threat Intelligence Center</a> 1.0 2022-04-12T08:00:00 <p>Information published.</p> Windows Local Security Authority Subsystem Service (LSASS) Remote Code Execution Vulnerability <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>In order to exploit this vulnerability the attacker is required to be a local user with a smart card or already logged on remotely through RDP to the remote machine. The authorized attacker could then exploit this Windows LSASS vulnerability by sending, from a user mode application, specially crafted malicious credentials directed at the Windows machine, which could lead to remote code execution.</p> Windows Local Security Authority Subsystem Service (LSASS) Microsoft Yes CVE-2022-24487 11568 11569 11570 11571 11572 11712 11713 11714 11896 11897 11898 11923 11924 11801 11802 11803 11926 11927 11929 11930 11931 10852 10853 10816 10855 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11570 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11712 Remote Code Execution 11713 Remote Code Execution 11714 Remote Code Execution 11896 Remote Code Execution 11897 Remote Code Execution 11898 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 11801 Remote Code Execution 11802 Remote Code Execution 11803 Remote Code Execution 11926 Remote Code Execution 11927 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Important 11568 Important 11569 Important 11570 Important 11571 Important 11572 Important 11712 Important 11713 Important 11714 Important 11896 Important 11897 Important 11898 Important 11923 Important 11924 Important 11801 Important 11802 Important 11803 Important 11926 Important 11927 Important 11929 Important 11930 Important 11931 Important 10852 Important 10853 Important 10816 Important 10855 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11570 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11712 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11713 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11714 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11896 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11897 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11898 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11801 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11802 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11803 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11926 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11927 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 5012647 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012647 5011503 11568 11569 11570 11571 11572 Yes Security Update 10.0.17763.2803 https://support.microsoft.com/help/5012647 11568 11569 11570 11571 11572 5012647 5012647 https://support.microsoft.com/help/5012647 11568 11569 11570 11571 11572 5012591 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012591 5011485 11712 11713 11714 Yes Security Update 10.0.18363.2212 https://support.microsoft.com/help/5012591 11712 11713 11714 5012591 5012591 https://support.microsoft.com/help/5012591 11712 11713 11714 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11896 11897 11898 Yes Security Update 10.0.19043.1645 https://support.microsoft.com/help/5012599 11896 11897 11898 5012599 5012599 https://support.microsoft.com/help/5012599 11896 11897 11898 11801 11802 11803 11929 11930 11931 5012604 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012604 5011497 11923 11924 Yes Security Update 10.0.20348.643 https://support.microsoft.com/help/5012604 11923 11924 5012604 5012604 https://support.microsoft.com/help/5012604 11923 11924 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11801 11802 11803 Yes Security Update 10.0.19042.1645 https://support.microsoft.com/help/5012599 11801 11802 11803 5012599 5012592 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012592 5011493 11926 11927 Yes Security Update 10.0.22000.613 https://support.microsoft.com/help/5012592 11926 11927 5012592 5012592 https://support.microsoft.com/help/5012592 11926 11927 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11929 11930 11931 Yes Security Update 10.0.19044.1645 https://support.microsoft.com/help/5012599 11929 11930 11931 5012599 5012596 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012596 5011495 10852 10853 10816 10855 Yes Security Update 10.0.14393.5066 https://support.microsoft.com/help/5012596 10852 10853 10816 10855 5012596 5012596 https://support.microsoft.com/help/5012596 10852 10853 10816 10855 Microsoft Offensive Research & Security Engineering (MORSE) 1.0 2022-04-12T08:00:00 <p>Information published.</p> Windows DNS Server Remote Code Execution Vulnerability <p><strong>According to the CVSS metric, privileges required is high (PR:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires the attacker or targeted user to have specific elevated privileges. As is best practice, regular validation and audits of administrative groups should be conducted.</p> Role: DNS Server Microsoft Yes CVE-2022-24536 11571 11572 11923 11924 11803 10816 10855 9312 10287 9318 9344 10051 10049 10378 10379 10483 10543 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 11803 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 9312 Remote Code Execution 10287 Remote Code Execution 9318 Remote Code Execution 9344 Remote Code Execution 10051 Remote Code Execution 10049 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Important 11571 Important 11572 Important 11923 Important 11924 Important 11803 Important 10816 Important 10855 Important 9312 Important 10287 Important 9318 Important 9344 Important 10051 Important 10049 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11803 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9312 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10287 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9318 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9344 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10051 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10049 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5012647 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012647 5011503 11571 11572 Yes Security Update 10.0.17763.2803 https://support.microsoft.com/help/5012647 11571 11572 5012647 5012647 https://support.microsoft.com/help/5012647 11571 11572 5012604 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012604 5011497 11923 11924 Yes Security Update 10.0.20348.643 https://support.microsoft.com/help/5012604 11923 11924 5012604 5012604 https://support.microsoft.com/help/5012604 11923 11924 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11803 Yes Security Update 10.0.19042.1645 https://support.microsoft.com/help/5012599 11803 5012599 5012599 https://support.microsoft.com/help/5012599 11803 5012596 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012596 5011495 10816 10855 Yes Security Update 10.0.14393.5066 https://support.microsoft.com/help/5012596 10816 10855 5012596 5012596 https://support.microsoft.com/help/5012596 10816 10855 5012658 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012658 5011534 9312 10287 9318 9344 Yes Monthly Rollup 6.0.6003.21446 https://support.microsoft.com/help/5012658 9312 10287 9318 9344 5012658 5012658 https://support.microsoft.com/help/5012658 9312 10287 9318 9344 5012632 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012632 9312 10287 9318 9344 Yes Security Only 6.0.6003.21446 https://support.microsoft.com/help/5012632 9312 10287 9318 9344 5012632 5012632 https://support.microsoft.com/help/5012632 9312 10287 9318 9344 5012626 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012626 5011552 10051 10049 Yes Monthly Rollup 6.1.7601.25924 https://support.microsoft.com/help/5012626 10051 10049 5012626 5012626 https://support.microsoft.com/help/5012626 10051 10049 5012649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012649 10051 10049 Yes Security Only 6.1.7601.25924 https://support.microsoft.com/help/5012649 10051 10049 5012649 5012649 https://support.microsoft.com/help/5012649 10051 10049 5012650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012650 5011535 10378 10379 Yes Monthly Rollup 6.2.9200.23679 https://support.microsoft.com/help/5012650 10378 10379 5012650 5012650 https://support.microsoft.com/help/5012650 10378 10379 5012666 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012666 10378 10379 Yes Security Only 6.2.9200.23679 https://support.microsoft.com/help/5012666 10378 10379 5012666 5012666 https://support.microsoft.com/help/5012666 10378 10379 5012670 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012670 5011564 10483 10543 Yes Monthly Rollup 6.3.9600.20337 https://support.microsoft.com/help/5012670 10483 10543 5012670 5012670 https://support.microsoft.com/help/5012670 10483 10543 5012639 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012639 10483 10543 Yes Security Only 6.3.9600.20337 https://support.microsoft.com/help/5012639 10483 10543 5012639 5012639 https://support.microsoft.com/help/5012639 10483 10543 <a href="https://twitter.com/ecthr0s">George Hughey</a> with MSRC Vulnerabilities and Mitigations 1.0 2022-04-12T08:00:00 <p>Information published.</p> Windows Desktop Bridge Elevation of Privilege Vulnerability Windows App Store Microsoft Yes CVE-2022-24488 11896 11897 11898 11923 11924 11801 11802 11803 11926 11927 11929 11930 11931 Elevation of Privilege 11896 Elevation of Privilege 11897 Elevation of Privilege 11898 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11801 Elevation of Privilege 11802 Elevation of Privilege 11803 Elevation of Privilege 11926 Elevation of Privilege 11927 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Important 11896 Important 11897 Important 11898 Important 11923 Important 11924 Important 11801 Important 11802 Important 11803 Important 11926 Important 11927 Important 11929 Important 11930 Important 11931 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11896 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11897 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11898 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11801 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11802 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11803 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11926 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11927 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11896 11897 11898 Yes Security Update 10.0.19043.1645 https://support.microsoft.com/help/5012599 11896 11897 11898 5012599 5012599 https://support.microsoft.com/help/5012599 11896 11897 11898 11801 11802 11803 11929 11930 11931 5012604 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012604 5011497 11923 11924 Yes Security Update 10.0.20348.643 https://support.microsoft.com/help/5012604 11923 11924 5012604 5012604 https://support.microsoft.com/help/5012604 11923 11924 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11801 11802 11803 Yes Security Update 10.0.19042.1645 https://support.microsoft.com/help/5012599 11801 11802 11803 5012599 5012592 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012592 5011493 11926 11927 Yes Security Update 10.0.22000.613 https://support.microsoft.com/help/5012592 11926 11927 5012592 5012592 https://support.microsoft.com/help/5012592 11926 11927 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11929 11930 11931 Yes Security Update 10.0.19044.1645 https://support.microsoft.com/help/5012599 11929 11930 11931 5012599 1.0 2022-04-12T08:00:00 <p>Information published.</p> Cluster Client Failover (CCF) Elevation of Privilege Vulnerability Windows Cluster Client Failover Microsoft Yes CVE-2022-24489 11571 11572 11923 11924 11803 10816 10855 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11803 Elevation of Privilege 10816 Elevation of Privilege 10855 Important 11571 Important 11572 Important 11923 Important 11924 Important 11803 Important 10816 Important 10855 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11803 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 5012647 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012647 5011503 11571 11572 Yes Security Update 10.0.17763.2803 https://support.microsoft.com/help/5012647 11571 11572 5012647 5012647 https://support.microsoft.com/help/5012647 11571 11572 5012604 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012604 5011497 11923 11924 Yes Security Update 10.0.20348.643 https://support.microsoft.com/help/5012604 11923 11924 5012604 5012604 https://support.microsoft.com/help/5012604 11923 11924 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11803 Yes Security Update 10.0.19042.1645 https://support.microsoft.com/help/5012599 11803 5012599 5012599 https://support.microsoft.com/help/5012599 11803 5012596 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012596 5011495 10816 10855 Yes Security Update 10.0.14393.5066 https://support.microsoft.com/help/5012596 10816 10855 5012596 5012596 https://support.microsoft.com/help/5012596 10816 10855 k0shl with Kunlun Lab 1.0 2022-04-12T08:00:00 <p>Information published.</p> Windows Cluster Shared Volume (CSV) Denial of Service Vulnerability Windows Cluster Shared Volume (CSV) Microsoft Yes CVE-2022-24538 11571 11572 11923 11924 11803 10816 10855 10378 10379 10483 10543 Denial of Service 11571 Denial of Service 11572 Denial of Service 11923 Denial of Service 11924 Denial of Service 11803 Denial of Service 10816 Denial of Service 10855 Denial of Service 10378 Denial of Service 10379 Denial of Service 10483 Denial of Service 10543 Important 11571 Important 11572 Important 11923 Important 11924 Important 11803 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11571 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11572 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11923 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11924 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11803 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10816 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10855 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10378 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10379 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10483 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10543 5012647 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012647 5011503 11571 11572 Yes Security Update 10.0.17763.2803 https://support.microsoft.com/help/5012647 11571 11572 5012647 5012647 https://support.microsoft.com/help/5012647 11571 11572 5012604 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012604 5011497 11923 11924 Yes Security Update 10.0.20348.643 https://support.microsoft.com/help/5012604 11923 11924 5012604 5012604 https://support.microsoft.com/help/5012604 11923 11924 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11803 Yes Security Update 10.0.19042.1645 https://support.microsoft.com/help/5012599 11803 5012599 5012599 https://support.microsoft.com/help/5012599 11803 5012596 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012596 5011495 10816 10855 Yes Security Update 10.0.14393.5066 https://support.microsoft.com/help/5012596 10816 10855 5012596 5012596 https://support.microsoft.com/help/5012596 10816 10855 5012650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012650 5011535 10378 10379 Yes Monthly Rollup 6.2.9200.23679 https://support.microsoft.com/help/5012650 10378 10379 5012650 5012650 https://support.microsoft.com/help/5012650 10378 10379 5012666 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012666 10378 10379 Yes Security Only 6.2.9200.23679 https://support.microsoft.com/help/5012666 10378 10379 5012666 5012666 https://support.microsoft.com/help/5012666 10378 10379 5012670 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012670 5011564 10483 10543 Yes Monthly Rollup 6.3.9600.20337 https://support.microsoft.com/help/5012670 10483 10543 5012670 5012670 https://support.microsoft.com/help/5012670 10483 10543 5012639 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012639 10483 10543 Yes Security Only 6.3.9600.20337 https://support.microsoft.com/help/5012639 10483 10543 5012639 5012639 https://support.microsoft.com/help/5012639 10483 10543 k0shl with Kunlun Lab 1.0 2022-04-12T08:00:00 <p>Information published.</p> Windows Hyper-V Shared Virtual Hard Disks Information Disclosure Vulnerability <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is the contents of Kernel memory. An attacker could read the contents of Kernel memory from a user mode process.</p> Role: Windows Hyper-V Microsoft Yes CVE-2022-24490 11571 11572 11923 11924 11803 10816 10855 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 11803 Information Disclosure 10816 Information Disclosure 10855 Important 11571 Important 11572 Important 11923 Important 11924 Important 11803 Important 10816 Important 10855 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 8.1 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U/RL:O/RC:C 11571 8.1 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U/RL:O/RC:C 11572 8.1 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U/RL:O/RC:C 11923 8.1 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U/RL:O/RC:C 11924 8.1 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U/RL:O/RC:C 11803 8.1 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U/RL:O/RC:C 10816 8.1 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U/RL:O/RC:C 10855 5012647 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012647 5011503 11571 11572 Yes Security Update 10.0.17763.2803 https://support.microsoft.com/help/5012647 11571 11572 5012647 5012647 https://support.microsoft.com/help/5012647 11571 11572 5012604 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012604 5011497 11923 11924 Yes Security Update 10.0.20348.643 https://support.microsoft.com/help/5012604 11923 11924 5012604 5012604 https://support.microsoft.com/help/5012604 11923 11924 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11803 Yes Security Update 10.0.19042.1645 https://support.microsoft.com/help/5012599 11803 5012599 5012599 https://support.microsoft.com/help/5012599 11803 5012596 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012596 5011495 10816 10855 Yes Security Update 10.0.14393.5066 https://support.microsoft.com/help/5012596 10816 10855 5012596 5012596 https://support.microsoft.com/help/5012596 10816 10855 k0shl with Kunlun Lab 1.0 2022-04-12T08:00:00 <p>Information published.</p> Windows Hyper-V Shared Virtual Hard Disks Information Disclosure Vulnerability <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is the contents of Kernel memory. An attacker could read the contents of Kernel memory from a user mode process.</p> Role: Windows Hyper-V Microsoft Yes CVE-2022-24539 11571 11572 11923 11924 11803 10816 10855 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 11803 Information Disclosure 10816 Information Disclosure 10855 Important 11571 Important 11572 Important 11923 Important 11924 Important 11803 Important 10816 Important 10855 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 8.1 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U/RL:O/RC:C 11571 8.1 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U/RL:O/RC:C 11572 8.1 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U/RL:O/RC:C 11923 8.1 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U/RL:O/RC:C 11924 8.1 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U/RL:O/RC:C 11803 8.1 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U/RL:O/RC:C 10816 8.1 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U/RL:O/RC:C 10855 5012647 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012647 5011503 11571 11572 Yes Security Update 10.0.17763.2803 https://support.microsoft.com/help/5012647 11571 11572 5012647 5012647 https://support.microsoft.com/help/5012647 11571 11572 5012604 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012604 5011497 11923 11924 Yes Security Update 10.0.20348.643 https://support.microsoft.com/help/5012604 11923 11924 5012604 5012604 https://support.microsoft.com/help/5012604 11923 11924 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11803 Yes Security Update 10.0.19042.1645 https://support.microsoft.com/help/5012599 11803 5012599 5012599 https://support.microsoft.com/help/5012599 11803 5012596 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012596 5011495 10816 10855 Yes Security Update 10.0.14393.5066 https://support.microsoft.com/help/5012596 10816 10855 5012596 5012596 https://support.microsoft.com/help/5012596 10816 10855 k0shl with Kunlun Lab 1.0 2022-04-12T08:00:00 <p>Information published.</p> Windows Network File System Remote Code Execution Vulnerability <p><strong>I am running a supported version of Windows Server. Is my system vulnerable to this issue?</strong></p> <p>This vulnerability is only exploitable for systems that have the NFS role enabled. See <a href="https://docs.microsoft.com/en-us/windows-server/storage/nfs/nfs-overview">NFS Overview</a> for more information on this feature. More information on installing or uninstalling Roles or Role Services is available <a href="https://docs.microsoft.com/en-us/windows-server/administration/server-manager/install-or-uninstall-roles-role-services-or-features#install-roles-role-services-and-features-by-using-the-add-roles-and-features-wizard">here</a>.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An attacker could send a specially crafted NFS protocol network message to a vulnerable Windows machine, which could enable remote code execution.</p> Windows Network File System Microsoft Yes CVE-2022-24491 11568 11569 11570 11571 11572 11712 11713 11714 11896 11897 11898 11923 11924 11801 11802 11803 11926 11927 11929 11930 11931 10729 10735 10852 10853 10816 10855 10481 10482 10484 10378 10379 10483 10543 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11570 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11712 Remote Code Execution 11713 Remote Code Execution 11714 Remote Code Execution 11896 Remote Code Execution 11897 Remote Code Execution 11898 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 11801 Remote Code Execution 11802 Remote Code Execution 11803 Remote Code Execution 11926 Remote Code Execution 11927 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 10729 Remote Code Execution 10735 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10481 Remote Code Execution 10482 Remote Code Execution 10484 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Critical 11568 Critical 11569 Critical 11570 Critical 11571 Critical 11572 Critical 11712 Critical 11713 Critical 11714 Critical 11896 Critical 11897 Critical 11898 Critical 11923 Critical 11924 Critical 11801 Critical 11802 Critical 11803 Critical 11926 Critical 11927 Critical 11929 Critical 11930 Critical 11931 Critical 10729 Critical 10735 Critical 10852 Critical 10853 Critical 10816 Critical 10855 Critical 10481 Critical 10482 Critical 10484 Critical 10378 Critical 10379 Critical 10483 Critical 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation More Likely 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11570 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11712 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11713 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11714 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11896 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11897 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11898 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11801 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11802 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11803 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11926 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11927 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10729 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10735 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10481 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10482 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10484 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5012647 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012647 5011503 11568 11569 11570 11571 11572 Yes Security Update 10.0.17763.2803 https://support.microsoft.com/help/5012647 11568 11569 11570 11571 11572 5012647 5012647 https://support.microsoft.com/help/5012647 11568 11569 11570 11571 11572 5012591 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012591 5011485 11712 11713 11714 Yes Security Update 10.0.18363.2212 https://support.microsoft.com/help/5012591 11712 11713 11714 5012591 5012591 https://support.microsoft.com/help/5012591 11712 11713 11714 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11896 11897 11898 Yes Security Update 10.0.19043.1645 https://support.microsoft.com/help/5012599 11896 11897 11898 5012599 5012599 https://support.microsoft.com/help/5012599 11896 11897 11898 11801 11802 11803 11929 11930 11931 5012604 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012604 5011497 11923 11924 Yes Security Update 10.0.20348.643 https://support.microsoft.com/help/5012604 11923 11924 5012604 5012604 https://support.microsoft.com/help/5012604 11923 11924 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11801 11802 11803 Yes Security Update 10.0.19042.1645 https://support.microsoft.com/help/5012599 11801 11802 11803 5012599 5012592 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012592 5011493 11926 11927 Yes Security Update 10.0.22000.613 https://support.microsoft.com/help/5012592 11926 11927 5012592 5012592 https://support.microsoft.com/help/5012592 11926 11927 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11929 11930 11931 Yes Security Update 10.0.19044.1645 https://support.microsoft.com/help/5012599 11929 11930 11931 5012599 5012653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012653 5011491 10729 10735 Yes Security Update 10.0.10240.19265 https://support.microsoft.com/help/5012653 10729 10735 5012653 5012653 https://support.microsoft.com/help/5012653 10729 10735 5012596 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012596 5011495 10852 10853 10816 10855 Yes Security Update 10.0.14393.5066 https://support.microsoft.com/help/5012596 10852 10853 10816 10855 5012596 5012596 https://support.microsoft.com/help/5012596 10852 10853 10816 10855 5012670 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012670 5011564 10481 10482 10483 10543 Yes Monthly Rollup 6.3.9600.20337 https://support.microsoft.com/help/5012670 10481 10482 10483 10543 5012670 5012670 https://support.microsoft.com/help/5012670 10481 10482 10484 10483 10543 5012639 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012639 10481 10482 10483 10543 Yes Security Only 6.3.9600.20337 https://support.microsoft.com/help/5012639 10481 10482 10483 10543 5012639 5012639 https://support.microsoft.com/help/5012639 10481 10482 10483 10543 5012670 5011564 10484 Yes Monthly Rollup 6.3.9600.20337 https://support.microsoft.com/help/5012639 10484 5012670 5012650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012650 5011535 10378 10379 Yes Monthly Rollup 6.2.9200.23679 https://support.microsoft.com/help/5012650 10378 10379 5012650 5012650 https://support.microsoft.com/help/5012650 10378 10379 5012666 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012666 10378 10379 Yes Security Only 6.2.9200.23679 https://support.microsoft.com/help/5012666 10378 10379 5012666 5012666 https://support.microsoft.com/help/5012666 10378 10379 liubenjin with Codesafe Team of Legendsec at Qi&#39;anxin Group 1.0 2022-04-12T08:00:00 <p>Information published.</p> Windows ALPC Elevation of Privilege Vulnerability <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows ALPC Microsoft Yes CVE-2022-24540 11568 11569 11570 11571 11572 11712 11713 11714 11896 11897 11898 11923 11924 11801 11802 11803 11926 11927 11929 11930 11931 10729 10735 10852 10853 10816 10855 10047 10048 10481 10482 10484 9312 10287 9318 9344 10051 10049 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11570 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11712 Elevation of Privilege 11713 Elevation of Privilege 11714 Elevation of Privilege 11896 Elevation of Privilege 11897 Elevation of Privilege 11898 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11801 Elevation of Privilege 11802 Elevation of Privilege 11803 Elevation of Privilege 11926 Elevation of Privilege 11927 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 10729 Elevation of Privilege 10735 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10047 Elevation of Privilege 10048 Elevation of Privilege 10481 Elevation of Privilege 10482 Elevation of Privilege 10484 Elevation of Privilege 9312 Elevation of Privilege 10287 Elevation of Privilege 9318 Elevation of Privilege 9344 Elevation of Privilege 10051 Elevation of Privilege 10049 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11570 Important 11571 Important 11572 Important 11712 Important 11713 Important 11714 Important 11896 Important 11897 Important 11898 Important 11923 Important 11924 Important 11801 Important 11802 Important 11803 Important 11926 Important 11927 Important 11929 Important 11930 Important 11931 Important 10729 Important 10735 Important 10852 Important 10853 Important 10816 Important 10855 Important 10047 Important 10048 Important 10481 Important 10482 Important 10484 Important 9312 Important 10287 Important 9318 Important 9344 Important 10051 Important 10049 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11570 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11712 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11713 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11714 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11896 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11897 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11898 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11801 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11802 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11803 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11926 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11927 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10729 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10735 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10047 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10048 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10481 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10482 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10484 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9312 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10287 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9318 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9344 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10051 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10049 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5012647 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012647 5011503 11568 11569 11570 11571 11572 Yes Security Update 10.0.17763.2803 https://support.microsoft.com/help/5012647 11568 11569 11570 11571 11572 5012647 5012647 https://support.microsoft.com/help/5012647 11568 11569 11570 11571 11572 5012591 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012591 5011485 11712 11713 11714 Yes Security Update 10.0.18363.2212 https://support.microsoft.com/help/5012591 11712 11713 11714 5012591 5012591 https://support.microsoft.com/help/5012591 11712 11713 11714 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11896 11897 11898 Yes Security Update 10.0.19043.1645 https://support.microsoft.com/help/5012599 11896 11897 11898 5012599 5012599 https://support.microsoft.com/help/5012599 11896 11897 11898 11801 11802 11803 11929 11930 11931 5012604 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012604 5011497 11923 11924 Yes Security Update 10.0.20348.643 https://support.microsoft.com/help/5012604 11923 11924 5012604 5012604 https://support.microsoft.com/help/5012604 11923 11924 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11801 11802 11803 Yes Security Update 10.0.19042.1645 https://support.microsoft.com/help/5012599 11801 11802 11803 5012599 5012592 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012592 5011493 11926 11927 Yes Security Update 10.0.22000.613 https://support.microsoft.com/help/5012592 11926 11927 5012592 5012592 https://support.microsoft.com/help/5012592 11926 11927 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11929 11930 11931 Yes Security Update 10.0.19044.1645 https://support.microsoft.com/help/5012599 11929 11930 11931 5012599 5012653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012653 5011491 10729 10735 Yes Security Update 10.0.10240.19265 https://support.microsoft.com/help/5012653 10729 10735 5012653 5012653 https://support.microsoft.com/help/5012653 10729 10735 5012596 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012596 5011495 10852 10853 10816 10855 Yes Security Update 10.0.14393.5066 https://support.microsoft.com/help/5012596 10852 10853 10816 10855 5012596 5012596 https://support.microsoft.com/help/5012596 10852 10853 10816 10855 5012626 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012626 5011552 10047 10048 10051 10049 Yes Monthly Rollup 6.1.7601.25924 https://support.microsoft.com/help/5012626 10047 10048 10051 10049 5012626 5012626 https://support.microsoft.com/help/5012626 10047 10048 10051 10049 5012649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012649 10047 10048 10051 10049 Yes Security Only 6.1.7601.25924 https://support.microsoft.com/help/5012649 10047 10048 10051 10049 5012649 5012649 https://support.microsoft.com/help/5012649 10047 10048 10051 10049 5012670 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012670 5011564 10481 10482 10483 10543 Yes Monthly Rollup 6.3.9600.20337 https://support.microsoft.com/help/5012670 10481 10482 10483 10543 5012670 5012670 https://support.microsoft.com/help/5012670 10481 10482 10484 10483 10543 5012639 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012639 10481 10482 10483 10543 Yes Security Only 6.3.9600.20337 https://support.microsoft.com/help/5012639 10481 10482 10483 10543 5012639 5012639 https://support.microsoft.com/help/5012639 10481 10482 10483 10543 5012670 5011564 10484 Yes Monthly Rollup 6.3.9600.20337 https://support.microsoft.com/help/5012639 10484 5012670 5012658 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012658 5011534 9312 10287 9318 9344 Yes Monthly Rollup 6.0.6003.21446 https://support.microsoft.com/help/5012658 9312 10287 9318 9344 5012658 5012658 https://support.microsoft.com/help/5012658 9312 10287 9318 9344 5012632 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012632 9312 10287 9318 9344 Yes Security Only 6.0.6003.21446 https://support.microsoft.com/help/5012632 9312 10287 9318 9344 5012632 5012632 https://support.microsoft.com/help/5012632 9312 10287 9318 9344 5012650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012650 5011535 10378 10379 Yes Monthly Rollup 6.2.9200.23679 https://support.microsoft.com/help/5012650 10378 10379 5012650 5012650 https://support.microsoft.com/help/5012650 10378 10379 5012666 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012666 10378 10379 Yes Security Only 6.2.9200.23679 https://support.microsoft.com/help/5012666 10378 10379 5012666 5012666 https://support.microsoft.com/help/5012666 10378 10379 Anonymous 1.0 2022-04-12T08:00:00 <p>Information published.</p> Remote Procedure Call Runtime Remote Code Execution Vulnerability <p><strong>How could an attacker exploit the vulnerability?</strong></p> <p>To exploit this vulnerability, an attacker would need to trick a user into executing a specially crafted script which executes an RPC call to an RPC host. This could result in remote code execution on the server side with the same permissions as the RPC service.</p> Windows Remote Procedure Call Runtime Microsoft Yes CVE-2022-24492 11568 11569 11570 11571 11572 11712 11713 11714 11896 11897 11898 11923 11924 11801 11802 11803 11926 11927 11929 11930 11931 10729 10735 10852 10853 10816 10855 10047 10048 10481 10482 10484 9312 10287 9318 9344 10051 10049 10378 10379 10483 10543 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11570 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11712 Remote Code Execution 11713 Remote Code Execution 11714 Remote Code Execution 11896 Remote Code Execution 11897 Remote Code Execution 11898 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 11801 Remote Code Execution 11802 Remote Code Execution 11803 Remote Code Execution 11926 Remote Code Execution 11927 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 10729 Remote Code Execution 10735 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10047 Remote Code Execution 10048 Remote Code Execution 10481 Remote Code Execution 10482 Remote Code Execution 10484 Remote Code Execution 9312 Remote Code Execution 10287 Remote Code Execution 9318 Remote Code Execution 9344 Remote Code Execution 10051 Remote Code Execution 10049 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Important 11568 Important 11569 Important 11570 Important 11571 Important 11572 Important 11712 Important 11713 Important 11714 Important 11896 Important 11897 Important 11898 Important 11923 Important 11924 Important 11801 Important 11802 Important 11803 Important 11926 Important 11927 Important 11929 Important 11930 Important 11931 Important 10729 Important 10735 Important 10852 Important 10853 Important 10816 Important 10855 Important 10047 Important 10048 Important 10481 Important 10482 Important 10484 Important 9312 Important 10287 Important 9318 Important 9344 Important 10051 Important 10049 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11570 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11712 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11713 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11714 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11896 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11897 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11898 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11801 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11802 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11803 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11926 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11927 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10729 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10735 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10047 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10048 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10481 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10482 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10484 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9312 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10287 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9318 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9344 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10051 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10049 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5012647 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012647 5011503 11568 11569 11570 11571 11572 Yes Security Update 10.0.17763.2803 https://support.microsoft.com/help/5012647 11568 11569 11570 11571 11572 5012647 5012647 https://support.microsoft.com/help/5012647 11568 11569 11570 11571 11572 5012591 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012591 5011485 11712 11713 11714 Yes Security Update 10.0.18363.2212 https://support.microsoft.com/help/5012591 11712 11713 11714 5012591 5012591 https://support.microsoft.com/help/5012591 11712 11713 11714 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11896 11897 11898 Yes Security Update 10.0.19043.1645 https://support.microsoft.com/help/5012599 11896 11897 11898 5012599 5012599 https://support.microsoft.com/help/5012599 11896 11897 11898 11801 11802 11803 11929 11930 11931 5012604 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012604 5011497 11923 11924 Yes Security Update 10.0.20348.643 https://support.microsoft.com/help/5012604 11923 11924 5012604 5012604 https://support.microsoft.com/help/5012604 11923 11924 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11801 11802 11803 Yes Security Update 10.0.19042.1645 https://support.microsoft.com/help/5012599 11801 11802 11803 5012599 5012592 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012592 5011493 11926 11927 Yes Security Update 10.0.22000.613 https://support.microsoft.com/help/5012592 11926 11927 5012592 5012592 https://support.microsoft.com/help/5012592 11926 11927 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11929 11930 11931 Yes Security Update 10.0.19044.1645 https://support.microsoft.com/help/5012599 11929 11930 11931 5012599 5012653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012653 5011491 10729 10735 Yes Security Update 10.0.10240.19265 https://support.microsoft.com/help/5012653 10729 10735 5012653 5012653 https://support.microsoft.com/help/5012653 10729 10735 5012596 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012596 5011495 10852 10853 10816 10855 Yes Security Update 10.0.14393.5066 https://support.microsoft.com/help/5012596 10852 10853 10816 10855 5012596 5012596 https://support.microsoft.com/help/5012596 10852 10853 10816 10855 5012626 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012626 5011552 10047 10048 10051 10049 Yes Monthly Rollup 6.1.7601.25924 https://support.microsoft.com/help/5012626 10047 10048 10051 10049 5012626 5012626 https://support.microsoft.com/help/5012626 10047 10048 10051 10049 5012649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012649 10047 10048 10051 10049 Yes Security Only 6.1.7601.25924 https://support.microsoft.com/help/5012649 10047 10048 10051 10049 5012649 5012649 https://support.microsoft.com/help/5012649 10047 10048 10051 10049 5012670 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012670 5011564 10481 10482 10483 10543 Yes Monthly Rollup 6.3.9600.20337 https://support.microsoft.com/help/5012670 10481 10482 10483 10543 5012670 5012670 https://support.microsoft.com/help/5012670 10481 10482 10484 10483 10543 5012639 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012639 10481 10482 10483 10543 Yes Security Only 6.3.9600.20337 https://support.microsoft.com/help/5012639 10481 10482 10483 10543 5012639 5012639 https://support.microsoft.com/help/5012639 10481 10482 10483 10543 5012670 5011564 10484 Yes Monthly Rollup 6.3.9600.20337 https://support.microsoft.com/help/5012639 10484 5012670 5012658 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012658 5011534 9312 10287 9318 9344 Yes Monthly Rollup 6.0.6003.21446 https://support.microsoft.com/help/5012658 9312 10287 9318 9344 5012658 5012658 https://support.microsoft.com/help/5012658 9312 10287 9318 9344 5012632 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012632 9312 10287 9318 9344 Yes Security Only 6.0.6003.21446 https://support.microsoft.com/help/5012632 9312 10287 9318 9344 5012632 5012632 https://support.microsoft.com/help/5012632 9312 10287 9318 9344 5012650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012650 5011535 10378 10379 Yes Monthly Rollup 6.2.9200.23679 https://support.microsoft.com/help/5012650 10378 10379 5012650 5012650 https://support.microsoft.com/help/5012650 10378 10379 5012666 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012666 10378 10379 Yes Security Only 6.2.9200.23679 https://support.microsoft.com/help/5012666 10378 10379 5012666 5012666 https://support.microsoft.com/help/5012666 10378 10379 <a href="https://twitter.com/guhe120">Yuki Chen</a> with <a href="https://www.cyberkl.com/">Cyber KunLun</a> 1.0 2022-04-12T08:00:00 <p>Information published.</p> Windows Server Service Remote Code Execution Vulnerability <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>This vulnerability requires that a user with an affected version of Windows access a malicious server. An attacker would have to host a specially crafted server share or website. An attacker would have no way to force users to visit this specially crafted server share or website, but would have to convince them to visit the server share or website, typically by way of an enticement in an email or chat message.</p> Windows SMB Microsoft Yes CVE-2022-24541 11568 11569 11570 11571 11572 11712 11713 11714 11896 11897 11898 11923 11924 11801 11802 11803 11926 11927 11929 11930 11931 10729 10735 10852 10853 10816 10855 10047 10048 10481 10482 10484 9312 10287 9318 9344 10051 10049 10378 10379 10483 10543 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11570 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11712 Remote Code Execution 11713 Remote Code Execution 11714 Remote Code Execution 11896 Remote Code Execution 11897 Remote Code Execution 11898 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 11801 Remote Code Execution 11802 Remote Code Execution 11803 Remote Code Execution 11926 Remote Code Execution 11927 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 10729 Remote Code Execution 10735 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10047 Remote Code Execution 10048 Remote Code Execution 10481 Remote Code Execution 10482 Remote Code Execution 10484 Remote Code Execution 9312 Remote Code Execution 10287 Remote Code Execution 9318 Remote Code Execution 9344 Remote Code Execution 10051 Remote Code Execution 10049 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Critical 11568 Critical 11569 Critical 11570 Critical 11571 Critical 11572 Critical 11712 Critical 11713 Critical 11714 Critical 11896 Critical 11897 Critical 11898 Critical 11923 Critical 11924 Critical 11801 Critical 11802 Critical 11803 Critical 11926 Critical 11927 Critical 11929 Critical 11930 Critical 11931 Critical 10729 Critical 10735 Critical 10852 Critical 10853 Critical 10816 Critical 10855 Critical 10047 Critical 10048 Critical 10481 Critical 10482 Critical 10484 Critical 9312 Critical 10287 Critical 9318 Critical 9344 Critical 10051 Critical 10049 Critical 10378 Critical 10379 Critical 10483 Critical 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11570 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11712 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11713 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11714 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11896 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11897 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11898 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11801 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11802 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11803 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11926 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11927 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10729 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10735 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10047 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10048 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10481 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10482 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10484 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9312 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10287 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9318 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9344 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10051 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10049 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5012647 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012647 5011503 11568 11569 11570 11571 11572 Yes Security Update 10.0.17763.2803 https://support.microsoft.com/help/5012647 11568 11569 11570 11571 11572 5012647 5012647 https://support.microsoft.com/help/5012647 11568 11569 11570 11571 11572 5012591 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012591 5011485 11712 11713 11714 Yes Security Update 10.0.18363.2212 https://support.microsoft.com/help/5012591 11712 11713 11714 5012591 5012591 https://support.microsoft.com/help/5012591 11712 11713 11714 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11896 11897 11898 Yes Security Update 10.0.19043.1645 https://support.microsoft.com/help/5012599 11896 11897 11898 5012599 5012599 https://support.microsoft.com/help/5012599 11896 11897 11898 11801 11802 11803 11929 11930 11931 5012604 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012604 5011497 11923 11924 Yes Security Update 10.0.20348.643 https://support.microsoft.com/help/5012604 11923 11924 5012604 5012604 https://support.microsoft.com/help/5012604 11923 11924 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11801 11802 11803 Yes Security Update 10.0.19042.1645 https://support.microsoft.com/help/5012599 11801 11802 11803 5012599 5012592 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012592 5011493 11926 11927 Yes Security Update 10.0.22000.613 https://support.microsoft.com/help/5012592 11926 11927 5012592 5012592 https://support.microsoft.com/help/5012592 11926 11927 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11929 11930 11931 Yes Security Update 10.0.19044.1645 https://support.microsoft.com/help/5012599 11929 11930 11931 5012599 5012653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012653 5011491 10729 10735 Yes Security Update 10.0.10240.19265 https://support.microsoft.com/help/5012653 10729 10735 5012653 5012653 https://support.microsoft.com/help/5012653 10729 10735 5012596 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012596 5011495 10852 10853 10816 10855 Yes Security Update 10.0.14393.5066 https://support.microsoft.com/help/5012596 10852 10853 10816 10855 5012596 5012596 https://support.microsoft.com/help/5012596 10852 10853 10816 10855 5012626 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012626 5011552 10047 10048 10051 10049 Yes Monthly Rollup 6.1.7601.25924 https://support.microsoft.com/help/5012626 10047 10048 10051 10049 5012626 5012626 https://support.microsoft.com/help/5012626 10047 10048 10051 10049 5012649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012649 10047 10048 10051 10049 Yes Security Only 6.1.7601.25924 https://support.microsoft.com/help/5012649 10047 10048 10051 10049 5012649 5012649 https://support.microsoft.com/help/5012649 10047 10048 10051 10049 5012670 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012670 5011564 10481 10482 10483 10543 Yes Monthly Rollup 6.3.9600.20337 https://support.microsoft.com/help/5012670 10481 10482 10483 10543 5012670 5012670 https://support.microsoft.com/help/5012670 10481 10482 10484 10483 10543 5012639 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012639 10481 10482 10483 10543 Yes Security Only 6.3.9600.20337 https://support.microsoft.com/help/5012639 10481 10482 10483 10543 5012639 5012639 https://support.microsoft.com/help/5012639 10481 10482 10483 10543 5012670 5011564 10484 Yes Monthly Rollup 6.3.9600.20337 https://support.microsoft.com/help/5012639 10484 5012670 5012658 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012658 5011534 9312 10287 9318 9344 Yes Monthly Rollup 6.0.6003.21446 https://support.microsoft.com/help/5012658 9312 10287 9318 9344 5012658 5012658 https://support.microsoft.com/help/5012658 9312 10287 9318 9344 5012632 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012632 9312 10287 9318 9344 Yes Security Only 6.0.6003.21446 https://support.microsoft.com/help/5012632 9312 10287 9318 9344 5012632 5012632 https://support.microsoft.com/help/5012632 9312 10287 9318 9344 5012650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012650 5011535 10378 10379 Yes Monthly Rollup 6.2.9200.23679 https://support.microsoft.com/help/5012650 10378 10379 5012650 5012650 https://support.microsoft.com/help/5012650 10378 10379 5012666 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012666 10378 10379 Yes Security Only 6.2.9200.23679 https://support.microsoft.com/help/5012666 10378 10379 5012666 5012666 https://support.microsoft.com/help/5012666 10378 10379 <p>Mitigation refers to a setting, common configuration, or general best-practice, existing in a default state, that could reduce the severity of exploitation of a vulnerability. The following mitigating factors may be helpful in your situation:</p> <p><strong>1. Block TCP port 445 at the enterprise perimeter firewall</strong></p> <p>TCP port 445 is used to initiate a connection with the affected component. Blocking this port at the network perimeter firewall will help protect systems that are behind that firewall from attempts to exploit this vulnerability. This can help protect networks from attacks that originate outside the enterprise perimeter. Blocking the affected ports at the enterprise perimeter is the best defense to help avoid Internet-based attacks. <strong>However, systems could still be vulnerable to attacks from within their enterprise perimeter.</strong></p> <p><strong>2. Follow Microsoft guidelines to secure SMB traffic</strong></p> <p><a href="https://docs.microsoft.com/windows-server/storage/file-server/smb-secure-traffic">Secure SMB Traffic in Windows Server</a>.</p> <a href="https://twitter.com/guhe120">Yuki Chen</a> with <a href="https://www.cyberkl.com/">Cyber KunLun</a> 1.0 2022-04-12T08:00:00 <p>Information published.</p> Microsoft Local Security Authority (LSA) Server Information Disclosure Vulnerability <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is the contents of Kernel memory. An attacker could read the contents of Kernel memory from a user mode process.</p> Microsoft Local Security Authority Server (lsasrv) Microsoft Yes CVE-2022-24493 11568 11569 11570 11571 11572 11712 11713 11714 11896 11897 11898 11923 11924 11801 11802 11803 11926 11927 11929 11930 11931 10729 10735 10852 10853 10816 10855 10047 10048 10481 10482 10484 10051 10049 10378 10379 10483 10543 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11570 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11712 Information Disclosure 11713 Information Disclosure 11714 Information Disclosure 11896 Information Disclosure 11897 Information Disclosure 11898 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 11801 Information Disclosure 11802 Information Disclosure 11803 Information Disclosure 11926 Information Disclosure 11927 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 10729 Information Disclosure 10735 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 10047 Information Disclosure 10048 Information Disclosure 10481 Information Disclosure 10482 Information Disclosure 10484 Information Disclosure 10051 Information Disclosure 10049 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Important 11568 Important 11569 Important 11570 Important 11571 Important 11572 Important 11712 Important 11713 Important 11714 Important 11896 Important 11897 Important 11898 Important 11923 Important 11924 Important 11801 Important 11802 Important 11803 Important 11926 Important 11927 Important 11929 Important 11930 Important 11931 Important 10729 Important 10735 Important 10852 Important 10853 Important 10816 Important 10855 Important 10047 Important 10048 Important 10481 Important 10482 Important 10484 Important 10051 Important 10049 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11570 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11712 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11713 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11714 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11896 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11897 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11898 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11801 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11802 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11803 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11926 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11927 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10729 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10735 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10047 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10048 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10481 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10482 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10484 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10051 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10049 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 5012647 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012647 5011503 11568 11569 11570 11571 11572 Yes Security Update 10.0.17763.2803 https://support.microsoft.com/help/5012647 11568 11569 11570 11571 11572 5012647 5012647 https://support.microsoft.com/help/5012647 11568 11569 11570 11571 11572 5012591 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012591 5011485 11712 11713 11714 Yes Security Update 10.0.18363.2212 https://support.microsoft.com/help/5012591 11712 11713 11714 5012591 5012591 https://support.microsoft.com/help/5012591 11712 11713 11714 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11896 11897 11898 Yes Security Update 10.0.19043.1645 https://support.microsoft.com/help/5012599 11896 11897 11898 5012599 5012599 https://support.microsoft.com/help/5012599 11896 11897 11898 11801 11802 11803 11929 11930 11931 5012604 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012604 5011497 11923 11924 Yes Security Update 10.0.20348.643 https://support.microsoft.com/help/5012604 11923 11924 5012604 5012604 https://support.microsoft.com/help/5012604 11923 11924 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11801 11802 11803 Yes Security Update 10.0.19042.1645 https://support.microsoft.com/help/5012599 11801 11802 11803 5012599 5012592 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012592 5011493 11926 11927 Yes Security Update 10.0.22000.613 https://support.microsoft.com/help/5012592 11926 11927 5012592 5012592 https://support.microsoft.com/help/5012592 11926 11927 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11929 11930 11931 Yes Security Update 10.0.19044.1645 https://support.microsoft.com/help/5012599 11929 11930 11931 5012599 5012653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012653 5011491 10729 10735 Yes Security Update 10.0.10240.19265 https://support.microsoft.com/help/5012653 10729 10735 5012653 5012653 https://support.microsoft.com/help/5012653 10729 10735 5012596 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012596 5011495 10852 10853 10816 10855 Yes Security Update 10.0.14393.5066 https://support.microsoft.com/help/5012596 10852 10853 10816 10855 5012596 5012596 https://support.microsoft.com/help/5012596 10852 10853 10816 10855 5012626 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012626 5011552 10047 10048 10051 10049 Yes Monthly Rollup 6.1.7601.25924 https://support.microsoft.com/help/5012626 10047 10048 10051 10049 5012626 5012626 https://support.microsoft.com/help/5012626 10047 10048 10051 10049 5012649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012649 10047 10048 10051 10049 Yes Security Only 6.1.7601.25924 https://support.microsoft.com/help/5012649 10047 10048 10051 10049 5012649 5012649 https://support.microsoft.com/help/5012649 10047 10048 10051 10049 5012670 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012670 5011564 10481 10482 10483 10543 Yes Monthly Rollup 6.3.9600.20337 https://support.microsoft.com/help/5012670 10481 10482 10483 10543 5012670 5012670 https://support.microsoft.com/help/5012670 10481 10482 10484 10483 10543 5012639 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012639 10481 10482 10483 10543 Yes Security Only 6.3.9600.20337 https://support.microsoft.com/help/5012639 10481 10482 10483 10543 5012639 5012639 https://support.microsoft.com/help/5012639 10481 10482 10483 10543 5012670 5011564 10484 Yes Monthly Rollup 6.3.9600.20337 https://support.microsoft.com/help/5012639 10484 5012670 5012650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012650 5011535 10378 10379 Yes Monthly Rollup 6.2.9200.23679 https://support.microsoft.com/help/5012650 10378 10379 5012650 5012650 https://support.microsoft.com/help/5012650 10378 10379 5012666 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012666 10378 10379 Yes Security Only 6.2.9200.23679 https://support.microsoft.com/help/5012666 10378 10379 5012666 5012666 https://support.microsoft.com/help/5012666 10378 10379 1.0 2022-04-12T08:00:00 <p>Information published.</p> Windows Print Spooler Elevation of Privilege Vulnerability Windows Print Spooler Components Microsoft Yes CVE-2022-26801 11568 11569 11570 11571 11572 11712 11713 11714 11896 11897 11898 11923 11924 11801 11802 11803 11926 11927 11929 11930 11931 10729 10735 10852 10853 10816 10855 10047 10048 10481 10482 10484 9312 10287 9318 9344 10051 10049 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11570 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11712 Elevation of Privilege 11713 Elevation of Privilege 11714 Elevation of Privilege 11896 Elevation of Privilege 11897 Elevation of Privilege 11898 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11801 Elevation of Privilege 11802 Elevation of Privilege 11803 Elevation of Privilege 11926 Elevation of Privilege 11927 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 10729 Elevation of Privilege 10735 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10047 Elevation of Privilege 10048 Elevation of Privilege 10481 Elevation of Privilege 10482 Elevation of Privilege 10484 Elevation of Privilege 9312 Elevation of Privilege 10287 Elevation of Privilege 9318 Elevation of Privilege 9344 Elevation of Privilege 10051 Elevation of Privilege 10049 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11570 Important 11571 Important 11572 Important 11712 Important 11713 Important 11714 Important 11896 Important 11897 Important 11898 Important 11923 Important 11924 Important 11801 Important 11802 Important 11803 Important 11926 Important 11927 Important 11929 Important 11930 Important 11931 Important 10729 Important 10735 Important 10852 Important 10853 Important 10816 Important 10855 Important 10047 Important 10048 Important 10481 Important 10482 Important 10484 Important 9312 Important 10287 Important 9318 Important 9344 Important 10051 Important 10049 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11570 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11712 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11713 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11714 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11896 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11897 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11898 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11801 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11802 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11803 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11926 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11927 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10729 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10735 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10047 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10048 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10481 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10482 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10484 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9312 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10287 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9318 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9344 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10051 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10049 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5012647 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012647 5011503 11568 11569 11570 11571 11572 Yes Security Update 10.0.17763.2803 https://support.microsoft.com/help/5012647 11568 11569 11570 11571 11572 5012647 5012647 https://support.microsoft.com/help/5012647 11568 11569 11570 11571 11572 5012591 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012591 5011485 11712 11713 11714 Yes Security Update 10.0.18363.2212 https://support.microsoft.com/help/5012591 11712 11713 11714 5012591 5012591 https://support.microsoft.com/help/5012591 11712 11713 11714 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11896 11897 11898 Yes Security Update 10.0.19043.1645 https://support.microsoft.com/help/5012599 11896 11897 11898 5012599 5012599 https://support.microsoft.com/help/5012599 11896 11897 11898 11801 11802 11803 11929 11930 11931 5012604 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012604 5011497 11923 11924 Yes Security Update 10.0.20348.643 https://support.microsoft.com/help/5012604 11923 11924 5012604 5012604 https://support.microsoft.com/help/5012604 11923 11924 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11801 11802 11803 Yes Security Update 10.0.19042.1645 https://support.microsoft.com/help/5012599 11801 11802 11803 5012599 5012592 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012592 5011493 11926 11927 Yes Security Update 10.0.22000.613 https://support.microsoft.com/help/5012592 11926 11927 5012592 5012592 https://support.microsoft.com/help/5012592 11926 11927 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11929 11930 11931 Yes Security Update 10.0.19044.1645 https://support.microsoft.com/help/5012599 11929 11930 11931 5012599 5012653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012653 5011491 10729 10735 Yes Security Update 10.0.10240.19265 https://support.microsoft.com/help/5012653 10729 10735 5012653 5012653 https://support.microsoft.com/help/5012653 10729 10735 5012596 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012596 5011495 10852 10853 10816 10855 Yes Security Update 10.0.14393.5066 https://support.microsoft.com/help/5012596 10852 10853 10816 10855 5012596 5012596 https://support.microsoft.com/help/5012596 10852 10853 10816 10855 5012626 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012626 5011552 10047 10048 10051 10049 Yes Monthly Rollup 6.1.7601.25924 https://support.microsoft.com/help/5012626 10047 10048 10051 10049 5012626 5012626 https://support.microsoft.com/help/5012626 10047 10048 10051 10049 5012649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012649 10047 10048 10051 10049 Yes Security Only 6.1.7601.25924 https://support.microsoft.com/help/5012649 10047 10048 10051 10049 5012649 5012649 https://support.microsoft.com/help/5012649 10047 10048 10051 10049 5012670 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012670 5011564 10481 10482 10483 10543 Yes Monthly Rollup 6.3.9600.20337 https://support.microsoft.com/help/5012670 10481 10482 10483 10543 5012670 5012670 https://support.microsoft.com/help/5012670 10481 10482 10484 10483 10543 5012639 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012639 10481 10482 10483 10543 Yes Security Only 6.3.9600.20337 https://support.microsoft.com/help/5012639 10481 10482 10483 10543 5012639 5012639 https://support.microsoft.com/help/5012639 10481 10482 10483 10543 5012670 5011564 10484 Yes Monthly Rollup 6.3.9600.20337 https://support.microsoft.com/help/5012639 10484 5012670 5012658 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012658 5011534 9312 10287 9318 9344 Yes Monthly Rollup 6.0.6003.21446 https://support.microsoft.com/help/5012658 9312 10287 9318 9344 5012658 5012658 https://support.microsoft.com/help/5012658 9312 10287 9318 9344 5012632 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012632 9312 10287 9318 9344 Yes Security Only 6.0.6003.21446 https://support.microsoft.com/help/5012632 9312 10287 9318 9344 5012632 5012632 https://support.microsoft.com/help/5012632 9312 10287 9318 9344 5012650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012650 5011535 10378 10379 Yes Monthly Rollup 6.2.9200.23679 https://support.microsoft.com/help/5012650 10378 10379 5012650 5012650 https://support.microsoft.com/help/5012650 10378 10379 5012666 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012666 10378 10379 Yes Security Only 6.2.9200.23679 https://support.microsoft.com/help/5012666 10378 10379 5012666 5012666 https://support.microsoft.com/help/5012666 10378 10379 <a href="https://twitter.com/ecthr0s">George Hughey</a> with MSRC Vulnerabilities and Mitigations 1.0 2022-04-12T08:00:00 <p>Information published.</p> Windows Print Spooler Elevation of Privilege Vulnerability Windows Print Spooler Components Microsoft Yes CVE-2022-26802 11568 11569 11570 11571 11572 11712 11713 11714 11896 11897 11898 11923 11924 11801 11802 11803 11926 11927 11929 11930 11931 10729 10735 10852 10853 10816 10855 10047 10048 10481 10482 10484 9312 10287 9318 9344 10051 10049 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11570 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11712 Elevation of Privilege 11713 Elevation of Privilege 11714 Elevation of Privilege 11896 Elevation of Privilege 11897 Elevation of Privilege 11898 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11801 Elevation of Privilege 11802 Elevation of Privilege 11803 Elevation of Privilege 11926 Elevation of Privilege 11927 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 10729 Elevation of Privilege 10735 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10047 Elevation of Privilege 10048 Elevation of Privilege 10481 Elevation of Privilege 10482 Elevation of Privilege 10484 Elevation of Privilege 9312 Elevation of Privilege 10287 Elevation of Privilege 9318 Elevation of Privilege 9344 Elevation of Privilege 10051 Elevation of Privilege 10049 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11570 Important 11571 Important 11572 Important 11712 Important 11713 Important 11714 Important 11896 Important 11897 Important 11898 Important 11923 Important 11924 Important 11801 Important 11802 Important 11803 Important 11926 Important 11927 Important 11929 Important 11930 Important 11931 Important 10729 Important 10735 Important 10852 Important 10853 Important 10816 Important 10855 Important 10047 Important 10048 Important 10481 Important 10482 Important 10484 Important 9312 Important 10287 Important 9318 Important 9344 Important 10051 Important 10049 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11570 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11712 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11713 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11714 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11896 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11897 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11898 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11801 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11802 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11803 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11926 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11927 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10729 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10735 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10047 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10048 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10481 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10482 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10484 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9312 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10287 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9318 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9344 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10051 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10049 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5012647 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012647 5011503 11568 11569 11570 11571 11572 Yes Security Update 10.0.17763.2803 https://support.microsoft.com/help/5012647 11568 11569 11570 11571 11572 5012647 5012647 https://support.microsoft.com/help/5012647 11568 11569 11570 11571 11572 5012591 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012591 5011485 11712 11713 11714 Yes Security Update 10.0.18363.2212 https://support.microsoft.com/help/5012591 11712 11713 11714 5012591 5012591 https://support.microsoft.com/help/5012591 11712 11713 11714 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11896 11897 11898 Yes Security Update 10.0.19043.1645 https://support.microsoft.com/help/5012599 11896 11897 11898 5012599 5012599 https://support.microsoft.com/help/5012599 11896 11897 11898 11801 11802 11803 11929 11930 11931 5012604 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012604 5011497 11923 11924 Yes Security Update 10.0.20348.643 https://support.microsoft.com/help/5012604 11923 11924 5012604 5012604 https://support.microsoft.com/help/5012604 11923 11924 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11801 11802 11803 Yes Security Update 10.0.19042.1645 https://support.microsoft.com/help/5012599 11801 11802 11803 5012599 5012592 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012592 5011493 11926 11927 Yes Security Update 10.0.22000.613 https://support.microsoft.com/help/5012592 11926 11927 5012592 5012592 https://support.microsoft.com/help/5012592 11926 11927 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11929 11930 11931 Yes Security Update 10.0.19044.1645 https://support.microsoft.com/help/5012599 11929 11930 11931 5012599 5012653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012653 5011491 10729 10735 Yes Security Update 10.0.10240.19265 https://support.microsoft.com/help/5012653 10729 10735 5012653 5012653 https://support.microsoft.com/help/5012653 10729 10735 5012596 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012596 5011495 10852 10853 10816 10855 Yes Security Update 10.0.14393.5066 https://support.microsoft.com/help/5012596 10852 10853 10816 10855 5012596 5012596 https://support.microsoft.com/help/5012596 10852 10853 10816 10855 5012626 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012626 5011552 10047 10048 10051 10049 Yes Monthly Rollup 6.1.7601.25924 https://support.microsoft.com/help/5012626 10047 10048 10051 10049 5012626 5012626 https://support.microsoft.com/help/5012626 10047 10048 10051 10049 5012649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012649 10047 10048 10051 10049 Yes Security Only 6.1.7601.25924 https://support.microsoft.com/help/5012649 10047 10048 10051 10049 5012649 5012649 https://support.microsoft.com/help/5012649 10047 10048 10051 10049 5012670 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012670 5011564 10481 10482 10483 10543 Yes Monthly Rollup 6.3.9600.20337 https://support.microsoft.com/help/5012670 10481 10482 10483 10543 5012670 5012670 https://support.microsoft.com/help/5012670 10481 10482 10484 10483 10543 5012639 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012639 10481 10482 10483 10543 Yes Security Only 6.3.9600.20337 https://support.microsoft.com/help/5012639 10481 10482 10483 10543 5012639 5012639 https://support.microsoft.com/help/5012639 10481 10482 10483 10543 5012670 5011564 10484 Yes Monthly Rollup 6.3.9600.20337 https://support.microsoft.com/help/5012639 10484 5012670 5012658 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012658 5011534 9312 10287 9318 9344 Yes Monthly Rollup 6.0.6003.21446 https://support.microsoft.com/help/5012658 9312 10287 9318 9344 5012658 5012658 https://support.microsoft.com/help/5012658 9312 10287 9318 9344 5012632 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012632 9312 10287 9318 9344 Yes Security Only 6.0.6003.21446 https://support.microsoft.com/help/5012632 9312 10287 9318 9344 5012632 5012632 https://support.microsoft.com/help/5012632 9312 10287 9318 9344 5012650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012650 5011535 10378 10379 Yes Monthly Rollup 6.2.9200.23679 https://support.microsoft.com/help/5012650 10378 10379 5012650 5012650 https://support.microsoft.com/help/5012650 10378 10379 5012666 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012666 10378 10379 Yes Security Only 6.2.9200.23679 https://support.microsoft.com/help/5012666 10378 10379 5012666 5012666 https://support.microsoft.com/help/5012666 10378 10379 <a href="https://twitter.com/ecthr0s">George Hughey</a> with MSRC Vulnerabilities and Mitigations 1.0 2022-04-12T08:00:00 <p>Information published.</p> Windows Print Spooler Elevation of Privilege Vulnerability Windows Print Spooler Components Microsoft Yes CVE-2022-26803 11568 11569 11570 11571 11572 11712 11713 11714 11896 11897 11898 11923 11924 11801 11802 11803 11926 11927 11929 11930 11931 10729 10735 10852 10853 10816 10855 10481 10482 10484 10051 10049 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11570 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11712 Elevation of Privilege 11713 Elevation of Privilege 11714 Elevation of Privilege 11896 Elevation of Privilege 11897 Elevation of Privilege 11898 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11801 Elevation of Privilege 11802 Elevation of Privilege 11803 Elevation of Privilege 11926 Elevation of Privilege 11927 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 10729 Elevation of Privilege 10735 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10481 Elevation of Privilege 10482 Elevation of Privilege 10484 Elevation of Privilege 10051 Elevation of Privilege 10049 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11570 Important 11571 Important 11572 Important 11712 Important 11713 Important 11714 Important 11896 Important 11897 Important 11898 Important 11923 Important 11924 Important 11801 Important 11802 Important 11803 Important 11926 Important 11927 Important 11929 Important 11930 Important 11931 Important 10729 Important 10735 Important 10852 Important 10853 Important 10816 Important 10855 Important 10481 Important 10482 Important 10484 Important 10051 Important 10049 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11570 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11712 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11713 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11714 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11896 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11897 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11898 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11801 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11802 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11803 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11926 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11927 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10729 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10735 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10481 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10482 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10484 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10051 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10049 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5012647 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012647 5011503 11568 11569 11570 11571 11572 Yes Security Update 10.0.17763.2803 https://support.microsoft.com/help/5012647 11568 11569 11570 11571 11572 5012647 5012647 https://support.microsoft.com/help/5012647 11568 11569 11570 11571 11572 5012591 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012591 5011485 11712 11713 11714 Yes Security Update 10.0.18363.2212 https://support.microsoft.com/help/5012591 11712 11713 11714 5012591 5012591 https://support.microsoft.com/help/5012591 11712 11713 11714 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11896 11897 11898 Yes Security Update 10.0.19043.1645 https://support.microsoft.com/help/5012599 11896 11897 11898 5012599 5012599 https://support.microsoft.com/help/5012599 11896 11897 11898 11801 11802 11803 11929 11930 11931 5012604 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012604 5011497 11923 11924 Yes Security Update 10.0.20348.643 https://support.microsoft.com/help/5012604 11923 11924 5012604 5012604 https://support.microsoft.com/help/5012604 11923 11924 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11801 11802 11803 Yes Security Update 10.0.19042.1645 https://support.microsoft.com/help/5012599 11801 11802 11803 5012599 5012592 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012592 5011493 11926 11927 Yes Security Update 10.0.22000.613 https://support.microsoft.com/help/5012592 11926 11927 5012592 5012592 https://support.microsoft.com/help/5012592 11926 11927 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11929 11930 11931 Yes Security Update 10.0.19044.1645 https://support.microsoft.com/help/5012599 11929 11930 11931 5012599 5012653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012653 5011491 10729 10735 Yes Security Update 10.0.10240.19265 https://support.microsoft.com/help/5012653 10729 10735 5012653 5012653 https://support.microsoft.com/help/5012653 10729 10735 5012596 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012596 5011495 10852 10853 10816 10855 Yes Security Update 10.0.14393.5066 https://support.microsoft.com/help/5012596 10852 10853 10816 10855 5012596 5012596 https://support.microsoft.com/help/5012596 10852 10853 10816 10855 5012670 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012670 5011564 10481 10482 10483 10543 Yes Monthly Rollup 6.3.9600.20337 https://support.microsoft.com/help/5012670 10481 10482 10483 10543 5012670 5012670 https://support.microsoft.com/help/5012670 10481 10482 10484 10483 10543 5012639 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012639 10481 10482 10483 10543 Yes Security Only 6.3.9600.20337 https://support.microsoft.com/help/5012639 10481 10482 10483 10543 5012639 5012639 https://support.microsoft.com/help/5012639 10481 10482 10483 10543 5012670 5011564 10484 Yes Monthly Rollup 6.3.9600.20337 https://support.microsoft.com/help/5012639 10484 5012670 5012626 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012626 5011552 10051 10049 Yes Monthly Rollup 6.1.7601.25924 https://support.microsoft.com/help/5012626 10051 10049 5012626 5012626 https://support.microsoft.com/help/5012626 10051 10049 5012649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012649 10051 10049 Yes Security Only 6.1.7601.25924 https://support.microsoft.com/help/5012649 10051 10049 5012649 5012649 https://support.microsoft.com/help/5012649 10051 10049 5012650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012650 5011535 10378 10379 Yes Monthly Rollup 6.2.9200.23679 https://support.microsoft.com/help/5012650 10378 10379 5012650 5012650 https://support.microsoft.com/help/5012650 10378 10379 5012666 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012666 10378 10379 Yes Security Only 6.2.9200.23679 https://support.microsoft.com/help/5012666 10378 10379 5012666 5012666 https://support.microsoft.com/help/5012666 10378 10379 <a href="https://twitter.com/ecthr0s">George Hughey</a> with MSRC Vulnerabilities and Mitigations 1.0 2022-04-12T08:00:00 <p>Information published.</p> Windows Work Folder Service Elevation of Privilege Vulnerability <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows Work Folder Service Microsoft Yes CVE-2022-26807 11568 11569 11570 11571 11572 11712 11713 11714 11896 11897 11898 11923 11924 11801 11802 11803 11926 11927 11929 11930 11931 10729 10735 10852 10853 10816 10855 10047 10048 10481 10482 10484 10051 10049 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11570 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11712 Elevation of Privilege 11713 Elevation of Privilege 11714 Elevation of Privilege 11896 Elevation of Privilege 11897 Elevation of Privilege 11898 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11801 Elevation of Privilege 11802 Elevation of Privilege 11803 Elevation of Privilege 11926 Elevation of Privilege 11927 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 10729 Elevation of Privilege 10735 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10047 Elevation of Privilege 10048 Elevation of Privilege 10481 Elevation of Privilege 10482 Elevation of Privilege 10484 Elevation of Privilege 10051 Elevation of Privilege 10049 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11570 Important 11571 Important 11572 Important 11712 Important 11713 Important 11714 Important 11896 Important 11897 Important 11898 Important 11923 Important 11924 Important 11801 Important 11802 Important 11803 Important 11926 Important 11927 Important 11929 Important 11930 Important 11931 Important 10729 Important 10735 Important 10852 Important 10853 Important 10816 Important 10855 Important 10047 Important 10048 Important 10481 Important 10482 Important 10484 Important 10051 Important 10049 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11570 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11712 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11713 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11714 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11896 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11897 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11898 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11801 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11802 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11803 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11926 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11927 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10729 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10735 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10047 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10048 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10481 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10482 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10484 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10051 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10049 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5012647 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012647 5011503 11568 11569 11570 11571 11572 Yes Security Update 10.0.17763.2803 https://support.microsoft.com/help/5012647 11568 11569 11570 11571 11572 5012647 5012647 https://support.microsoft.com/help/5012647 11568 11569 11570 11571 11572 5012591 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012591 5011485 11712 11713 11714 Yes Security Update 10.0.18363.2212 https://support.microsoft.com/help/5012591 11712 11713 11714 5012591 5012591 https://support.microsoft.com/help/5012591 11712 11713 11714 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11896 11897 11898 Yes Security Update 10.0.19043.1645 https://support.microsoft.com/help/5012599 11896 11897 11898 5012599 5012599 https://support.microsoft.com/help/5012599 11896 11897 11898 11801 11802 11803 11929 11930 11931 5012604 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012604 5011497 11923 11924 Yes Security Update 10.0.20348.643 https://support.microsoft.com/help/5012604 11923 11924 5012604 5012604 https://support.microsoft.com/help/5012604 11923 11924 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11801 11802 11803 Yes Security Update 10.0.19042.1645 https://support.microsoft.com/help/5012599 11801 11802 11803 5012599 5012592 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012592 5011493 11926 11927 Yes Security Update 10.0.22000.613 https://support.microsoft.com/help/5012592 11926 11927 5012592 5012592 https://support.microsoft.com/help/5012592 11926 11927 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11929 11930 11931 Yes Security Update 10.0.19044.1645 https://support.microsoft.com/help/5012599 11929 11930 11931 5012599 5012653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012653 5011491 10729 10735 Yes Security Update 10.0.10240.19265 https://support.microsoft.com/help/5012653 10729 10735 5012653 5012653 https://support.microsoft.com/help/5012653 10729 10735 5012596 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012596 5011495 10852 10853 10816 10855 Yes Security Update 10.0.14393.5066 https://support.microsoft.com/help/5012596 10852 10853 10816 10855 5012596 5012596 https://support.microsoft.com/help/5012596 10852 10853 10816 10855 5012626 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012626 5011552 10047 10048 10051 10049 Yes Monthly Rollup 6.1.7601.25924 https://support.microsoft.com/help/5012626 10047 10048 10051 10049 5012626 5012626 https://support.microsoft.com/help/5012626 10047 10048 10051 10049 5012649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012649 10047 10048 10051 10049 Yes Security Only 6.1.7601.25924 https://support.microsoft.com/help/5012649 10047 10048 10051 10049 5012649 5012649 https://support.microsoft.com/help/5012649 10047 10048 10051 10049 5012670 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012670 5011564 10481 10482 10483 10543 Yes Monthly Rollup 6.3.9600.20337 https://support.microsoft.com/help/5012670 10481 10482 10483 10543 5012670 5012670 https://support.microsoft.com/help/5012670 10481 10482 10484 10483 10543 5012639 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012639 10481 10482 10483 10543 Yes Security Only 6.3.9600.20337 https://support.microsoft.com/help/5012639 10481 10482 10483 10543 5012639 5012639 https://support.microsoft.com/help/5012639 10481 10482 10483 10543 5012670 5011564 10484 Yes Monthly Rollup 6.3.9600.20337 https://support.microsoft.com/help/5012639 10484 5012670 1.0 2022-04-12T08:00:00 <p>Information published.</p> Windows File Explorer Elevation of Privilege Vulnerability <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows File Explorer Microsoft Yes CVE-2022-26808 11568 11569 11570 11571 11572 11712 11713 11714 11896 11897 11898 11923 11924 11801 11802 11803 11926 11927 11929 11930 11931 10729 10735 10852 10853 10816 10855 10481 10482 10484 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11570 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11712 Elevation of Privilege 11713 Elevation of Privilege 11714 Elevation of Privilege 11896 Elevation of Privilege 11897 Elevation of Privilege 11898 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11801 Elevation of Privilege 11802 Elevation of Privilege 11803 Elevation of Privilege 11926 Elevation of Privilege 11927 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 10729 Elevation of Privilege 10735 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10481 Elevation of Privilege 10482 Elevation of Privilege 10484 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11570 Important 11571 Important 11572 Important 11712 Important 11713 Important 11714 Important 11896 Important 11897 Important 11898 Important 11923 Important 11924 Important 11801 Important 11802 Important 11803 Important 11926 Important 11927 Important 11929 Important 11930 Important 11931 Important 10729 Important 10735 Important 10852 Important 10853 Important 10816 Important 10855 Important 10481 Important 10482 Important 10484 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11570 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11712 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11713 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11714 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11896 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11897 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11898 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11801 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11802 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11803 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11926 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11927 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10729 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10735 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10481 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10482 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10484 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5012647 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012647 5011503 11568 11569 11570 11571 11572 Yes Security Update 10.0.17763.2803 https://support.microsoft.com/help/5012647 11568 11569 11570 11571 11572 5012647 5012647 https://support.microsoft.com/help/5012647 11568 11569 11570 11571 11572 5012591 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012591 5011485 11712 11713 11714 Yes Security Update 10.0.18363.2212 https://support.microsoft.com/help/5012591 11712 11713 11714 5012591 5012591 https://support.microsoft.com/help/5012591 11712 11713 11714 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11896 11897 11898 Yes Security Update 10.0.19043.1645 https://support.microsoft.com/help/5012599 11896 11897 11898 5012599 5012599 https://support.microsoft.com/help/5012599 11896 11897 11898 11801 11802 11803 11929 11930 11931 5012604 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012604 5011497 11923 11924 Yes Security Update 10.0.20348.643 https://support.microsoft.com/help/5012604 11923 11924 5012604 5012604 https://support.microsoft.com/help/5012604 11923 11924 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11801 11802 11803 Yes Security Update 10.0.19042.1645 https://support.microsoft.com/help/5012599 11801 11802 11803 5012599 5012592 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012592 5011493 11926 11927 Yes Security Update 10.0.22000.613 https://support.microsoft.com/help/5012592 11926 11927 5012592 5012592 https://support.microsoft.com/help/5012592 11926 11927 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11929 11930 11931 Yes Security Update 10.0.19044.1645 https://support.microsoft.com/help/5012599 11929 11930 11931 5012599 5012653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012653 5011491 10729 10735 Yes Security Update 10.0.10240.19265 https://support.microsoft.com/help/5012653 10729 10735 5012653 5012653 https://support.microsoft.com/help/5012653 10729 10735 5012596 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012596 5011495 10852 10853 10816 10855 Yes Security Update 10.0.14393.5066 https://support.microsoft.com/help/5012596 10852 10853 10816 10855 5012596 5012596 https://support.microsoft.com/help/5012596 10852 10853 10816 10855 5012670 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012670 5011564 10481 10482 10483 10543 Yes Monthly Rollup 6.3.9600.20337 https://support.microsoft.com/help/5012670 10481 10482 10483 10543 5012670 5012670 https://support.microsoft.com/help/5012670 10481 10482 10484 10483 10543 5012639 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012639 10481 10482 10483 10543 Yes Security Only 6.3.9600.20337 https://support.microsoft.com/help/5012639 10481 10482 10483 10543 5012639 5012639 https://support.microsoft.com/help/5012639 10481 10482 10483 10543 5012670 5011564 10484 Yes Monthly Rollup 6.3.9600.20337 https://support.microsoft.com/help/5012639 10484 5012670 1.0 2022-04-12T08:00:00 <p>Information published.</p> Remote Procedure Call Runtime Remote Code Execution Vulnerability <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>To exploit this vulnerability, an unauthenticated attacker would need to send a specially crafted RPC call to an RPC host. This could result in remote code execution on the server side with the same permissions as the RPC service.</p> <p><strong>Why did Microsoft remove the Mitigation to “Block TCP port 445 at the enterprise perimeter firewall”?</strong></p> <p>The researcher who submitted the vulnerability used SMB as the attack vector to trigger the exploit in the RPC service, so the mitigation was effective for the issue that was presented to us. Although blocking ports 139 and 445 [SMB] at the perimeter firewall is a recommended practice, it does not directly protect against all potential attack scenarios for this specific vulnerability. At this time we are not aware of any other specific attack vectors for this vulnerability, and continue to encourage users to:</p> <ul> <li>Apply the April 2022 security updates to fully address this issue.</li> <li>Follow Microsoft guidelines to secure SMB traffic. See <a href="https://docs.microsoft.com/en-us/windows-server/storage/file-server/smb-secure-traffic">Secure SMB Traffic in Windows Server</a>.</li> </ul> <p><strong>The vulnerability is in RPC, not SMB. Should I also block RPC?</strong></p> <p>The known attack that was presented to Microsoft does not use TCP Port 135 to initiate an exploit but, as the vulnerability is in RPC, blocking TCP port 135 at the enterprise perimeter firewall is a recommended best practice that would reduce the likelihood of other potential attacks against this vulnerability.</p> Windows Remote Procedure Call Runtime Microsoft Yes CVE-2022-26809 11568 11569 11570 11571 11572 11712 11713 11714 11896 11897 11898 11923 11924 11801 11802 11803 11926 11927 11929 11930 11931 10729 10735 10852 10853 10816 10855 10047 10048 10481 10482 10484 9312 10287 9318 9344 10051 10049 10378 10379 10483 10543 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11570 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11712 Remote Code Execution 11713 Remote Code Execution 11714 Remote Code Execution 11896 Remote Code Execution 11897 Remote Code Execution 11898 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 11801 Remote Code Execution 11802 Remote Code Execution 11803 Remote Code Execution 11926 Remote Code Execution 11927 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 10729 Remote Code Execution 10735 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10047 Remote Code Execution 10048 Remote Code Execution 10481 Remote Code Execution 10482 Remote Code Execution 10484 Remote Code Execution 9312 Remote Code Execution 10287 Remote Code Execution 9318 Remote Code Execution 9344 Remote Code Execution 10051 Remote Code Execution 10049 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Critical 11568 Critical 11569 Critical 11570 Critical 11571 Critical 11572 Critical 11712 Critical 11713 Critical 11714 Critical 11896 Critical 11897 Critical 11898 Critical 11923 Critical 11924 Critical 11801 Critical 11802 Critical 11803 Critical 11926 Critical 11927 Critical 11929 Critical 11930 Critical 11931 Critical 10729 Critical 10735 Critical 10852 Critical 10853 Critical 10816 Critical 10855 Critical 10047 Critical 10048 Critical 10481 Critical 10482 Critical 10484 Critical 9312 Critical 10287 Critical 9318 Critical 9344 Critical 10051 Critical 10049 Critical 10378 Critical 10379 Critical 10483 Critical 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation More Likely 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11570 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11712 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11713 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11714 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11896 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11897 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11898 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11801 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11802 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11803 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11926 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11927 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10729 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10735 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10047 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10048 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10481 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10482 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10484 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9312 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10287 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9318 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9344 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10051 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10049 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5012647 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012647 5011503 11568 11569 11570 11571 11572 Yes Security Update 10.0.17763.2803 https://support.microsoft.com/help/5012647 11568 11569 11570 11571 11572 5012647 5012647 https://support.microsoft.com/help/5012647 11568 11569 11570 11571 11572 5012591 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012591 5011485 11712 11713 11714 Yes Security Update 10.0.18363.2212 https://support.microsoft.com/help/5012591 11712 11713 11714 5012591 5012591 https://support.microsoft.com/help/5012591 11712 11713 11714 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11896 11897 11898 Yes Security Update 10.0.19043.1645 https://support.microsoft.com/help/5012599 11896 11897 11898 5012599 5012599 https://support.microsoft.com/help/5012599 11896 11897 11898 11801 11802 11803 11929 11930 11931 5012604 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012604 5011497 11923 11924 Yes Security Update 10.0.20348.643 https://support.microsoft.com/help/5012604 11923 11924 5012604 5012604 https://support.microsoft.com/help/5012604 11923 11924 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11801 11802 11803 Yes Security Update 10.0.19042.1645 https://support.microsoft.com/help/5012599 11801 11802 11803 5012599 5012592 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012592 5011493 11926 11927 Yes Security Update 10.0.22000.613 https://support.microsoft.com/help/5012592 11926 11927 5012592 5012592 https://support.microsoft.com/help/5012592 11926 11927 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11929 11930 11931 Yes Security Update 10.0.19044.1645 https://support.microsoft.com/help/5012599 11929 11930 11931 5012599 5012653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012653 5011491 10729 10735 Yes Security Update 10.0.10240.19265 https://support.microsoft.com/help/5012653 10729 10735 5012653 5012653 https://support.microsoft.com/help/5012653 10729 10735 5012596 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012596 5011495 10852 10853 10816 10855 Yes Security Update 10.0.14393.5066 https://support.microsoft.com/help/5012596 10852 10853 10816 10855 5012596 5012596 https://support.microsoft.com/help/5012596 10852 10853 10816 10855 5012626 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012626 5011552 10047 10048 10051 10049 Yes Monthly Rollup 6.1.7601.25924 https://support.microsoft.com/help/5012626 10047 10048 10051 10049 5012626 5012626 https://support.microsoft.com/help/5012626 10047 10048 10051 10049 5012649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012649 10047 10048 10051 10049 Yes Security Only 6.1.7601.25924 https://support.microsoft.com/help/5012649 10047 10048 10051 10049 5012649 5012649 https://support.microsoft.com/help/5012649 10047 10048 10051 10049 5012670 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012670 5011564 10481 10482 10483 10543 Yes Monthly Rollup 6.3.9600.20337 https://support.microsoft.com/help/5012670 10481 10482 10483 10543 5012670 5012670 https://support.microsoft.com/help/5012670 10481 10482 10484 10483 10543 5012639 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012639 10481 10482 10483 10543 Yes Security Only 6.3.9600.20337 https://support.microsoft.com/help/5012639 10481 10482 10483 10543 5012639 5012639 https://support.microsoft.com/help/5012639 10481 10482 10483 10543 5012670 5011564 10484 Yes Monthly Rollup 6.3.9600.20337 https://support.microsoft.com/help/5012639 10484 5012670 5012658 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012658 5011534 9312 10287 9318 9344 Yes Monthly Rollup 6.0.6003.21446 https://support.microsoft.com/help/5012658 9312 10287 9318 9344 5012658 5012658 https://support.microsoft.com/help/5012658 9312 10287 9318 9344 5012632 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012632 9312 10287 9318 9344 Yes Security Only 6.0.6003.21446 https://support.microsoft.com/help/5012632 9312 10287 9318 9344 5012632 5012632 https://support.microsoft.com/help/5012632 9312 10287 9318 9344 5012650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012650 5011535 10378 10379 Yes Monthly Rollup 6.2.9200.23679 https://support.microsoft.com/help/5012650 10378 10379 5012650 5012650 https://support.microsoft.com/help/5012650 10378 10379 5012666 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012666 10378 10379 Yes Security Only 6.2.9200.23679 https://support.microsoft.com/help/5012666 10378 10379 5012666 5012666 https://support.microsoft.com/help/5012666 10378 10379 BugHunter010 (@CyberKunlun) 1.1 2022-04-19T07:00:00 <p>Removed the Mitigation “Block TCP port 445 at the enterprise perimeter firewall” and added an FAQ to explain that the mitigation does not directly protect against all potential attack scenarios for this specific vulnerability. Added information in FAQs to provide recommended best practices for port blocking at the perimeter firewall. These are informational changes only.</p> 1.0 2022-04-12T08:00:00 <p>Information published.</p> Windows File Server Resource Management Service Elevation of Privilege Vulnerability Windows File Server Microsoft Yes CVE-2022-26810 11568 11569 11570 11571 11572 11712 11713 11714 11896 11897 11898 11923 11924 11801 11802 11803 11929 11930 11931 10852 10853 10816 10855 10047 10048 10481 10482 10484 9312 10287 9318 9344 10051 10049 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11570 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11712 Elevation of Privilege 11713 Elevation of Privilege 11714 Elevation of Privilege 11896 Elevation of Privilege 11897 Elevation of Privilege 11898 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11801 Elevation of Privilege 11802 Elevation of Privilege 11803 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10047 Elevation of Privilege 10048 Elevation of Privilege 10481 Elevation of Privilege 10482 Elevation of Privilege 10484 Elevation of Privilege 9312 Elevation of Privilege 10287 Elevation of Privilege 9318 Elevation of Privilege 9344 Elevation of Privilege 10051 Elevation of Privilege 10049 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11570 Important 11571 Important 11572 Important 11712 Important 11713 Important 11714 Important 11896 Important 11897 Important 11898 Important 11923 Important 11924 Important 11801 Important 11802 Important 11803 Important 11929 Important 11930 Important 11931 Important 10852 Important 10853 Important 10816 Important 10855 Important 10047 Important 10048 Important 10481 Important 10482 Important 10484 Important 9312 Important 10287 Important 9318 Important 9344 Important 10051 Important 10049 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11570 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11712 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11713 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11714 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11896 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11897 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11898 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11801 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11802 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11803 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10047 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10048 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10481 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10482 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10484 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9312 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10287 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9318 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9344 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10051 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10049 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5012647 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012647 5011503 11568 11569 11570 11571 11572 Yes Security Update 10.0.17763.2803 https://support.microsoft.com/help/5012647 11568 11569 11570 11571 11572 5012647 5012647 https://support.microsoft.com/help/5012647 11568 11569 11570 11571 11572 5012591 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012591 5011485 11712 11713 11714 Yes Security Update 10.0.18363.2212 https://support.microsoft.com/help/5012591 11712 11713 11714 5012591 5012591 https://support.microsoft.com/help/5012591 11712 11713 11714 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11896 11897 11898 Yes Security Update 10.0.19043.1645 https://support.microsoft.com/help/5012599 11896 11897 11898 5012599 5012599 https://support.microsoft.com/help/5012599 11896 11897 11898 11801 11802 11803 11929 11930 11931 5012604 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012604 5011497 11923 11924 Yes Security Update 10.0.20348.643 https://support.microsoft.com/help/5012604 11923 11924 5012604 5012604 https://support.microsoft.com/help/5012604 11923 11924 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11801 11802 11803 Yes Security Update 10.0.19042.1645 https://support.microsoft.com/help/5012599 11801 11802 11803 5012599 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11929 11930 11931 Yes Security Update 10.0.19044.1645 https://support.microsoft.com/help/5012599 11929 11930 11931 5012599 5012596 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012596 5011495 10852 10853 10816 10855 Yes Security Update 10.0.14393.5066 https://support.microsoft.com/help/5012596 10852 10853 10816 10855 5012596 5012596 https://support.microsoft.com/help/5012596 10852 10853 10816 10855 5012626 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012626 5011552 10047 10048 10051 10049 Yes Monthly Rollup 6.1.7601.25924 https://support.microsoft.com/help/5012626 10047 10048 10051 10049 5012626 5012626 https://support.microsoft.com/help/5012626 10047 10048 10051 10049 5012649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012649 10047 10048 10051 10049 Yes Security Only 6.1.7601.25924 https://support.microsoft.com/help/5012649 10047 10048 10051 10049 5012649 5012649 https://support.microsoft.com/help/5012649 10047 10048 10051 10049 5012670 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012670 5011564 10481 10482 10483 10543 Yes Monthly Rollup 6.3.9600.20337 https://support.microsoft.com/help/5012670 10481 10482 10483 10543 5012670 5012670 https://support.microsoft.com/help/5012670 10481 10482 10484 10483 10543 5012639 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012639 10481 10482 10483 10543 Yes Security Only 6.3.9600.20337 https://support.microsoft.com/help/5012639 10481 10482 10483 10543 5012639 5012639 https://support.microsoft.com/help/5012639 10481 10482 10483 10543 5012670 5011564 10484 Yes Monthly Rollup 6.3.9600.20337 https://support.microsoft.com/help/5012639 10484 5012670 5012658 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012658 5011534 9312 10287 9318 9344 Yes Monthly Rollup 6.0.6003.21446 https://support.microsoft.com/help/5012658 9312 10287 9318 9344 5012658 5012658 https://support.microsoft.com/help/5012658 9312 10287 9318 9344 5012632 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012632 9312 10287 9318 9344 Yes Security Only 6.0.6003.21446 https://support.microsoft.com/help/5012632 9312 10287 9318 9344 5012632 5012632 https://support.microsoft.com/help/5012632 9312 10287 9318 9344 5012650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012650 5011535 10378 10379 Yes Monthly Rollup 6.2.9200.23679 https://support.microsoft.com/help/5012650 10378 10379 5012650 5012650 https://support.microsoft.com/help/5012650 10378 10379 5012666 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012666 10378 10379 Yes Security Only 6.2.9200.23679 https://support.microsoft.com/help/5012666 10378 10379 5012666 5012666 https://support.microsoft.com/help/5012666 10378 10379 k0shl with Kunlun Lab 1.0 2022-04-12T08:00:00 <p>Information published.</p> Windows DNS Server Remote Code Execution Vulnerability <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>In a network-based attack an attacker would need to have the privileges to query the Domain Name Service (DNS). If the timing of DNS queries is perfect, the attacker could execute code remotely on the target server.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Active Directory Domain Services Microsoft Yes CVE-2022-26814 11571 11572 11923 11924 11803 10816 10855 10483 10543 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 11803 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10483 Remote Code Execution 10543 Important 11571 Important 11572 Important 11923 Important 11924 Important 11803 Important 10816 Important 10855 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 6.6 5.9 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 11571 6.6 5.9 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 11572 6.6 5.9 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 11923 6.6 5.9 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 11924 6.6 5.9 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 11803 6.6 5.9 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10816 6.6 5.9 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10855 6.6 5.9 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10483 6.6 5.9 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10543 5012647 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012647 5011503 11571 11572 Yes Security Update 10.0.17763.2803 https://support.microsoft.com/help/5012647 11571 11572 5012647 5012647 https://support.microsoft.com/help/5012647 11571 11572 5012604 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012604 5011497 11923 11924 Yes Security Update 10.0.20348.643 https://support.microsoft.com/help/5012604 11923 11924 5012604 5012604 https://support.microsoft.com/help/5012604 11923 11924 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11803 Yes Security Update 10.0.19042.1645 https://support.microsoft.com/help/5012599 11803 5012599 5012599 https://support.microsoft.com/help/5012599 11803 5012596 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012596 5011495 10816 10855 Yes Security Update 10.0.14393.5066 https://support.microsoft.com/help/5012596 10816 10855 5012596 5012596 https://support.microsoft.com/help/5012596 10816 10855 5012670 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012670 5011564 10483 10543 Yes Monthly Rollup 6.3.9600.20337 https://support.microsoft.com/help/5012670 10483 10543 5012670 5012670 https://support.microsoft.com/help/5012670 10483 10543 5012639 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012639 10483 10543 Yes Security Only 6.3.9600.20337 https://support.microsoft.com/help/5012639 10483 10543 5012639 5012639 https://support.microsoft.com/help/5012639 10483 10543 Yuki Chen with <a href="https://www.cyberkl.com/">Cyber KunLun</a> 1.0 2022-04-12T08:00:00 <p>Information published.</p> Windows DNS Server Remote Code Execution Vulnerability <p><strong>According to the CVSS metric, privileges required is high (PR:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires the attacker or targeted user to have specific elevated privileges. As is best practice, regular validation and audits of administrative groups should be conducted.</p> Role: DNS Server Microsoft Yes CVE-2022-26815 11571 11572 11923 11924 11803 10816 10855 9312 10287 9318 9344 10051 10049 10378 10379 10483 10543 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 11803 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 9312 Remote Code Execution 10287 Remote Code Execution 9318 Remote Code Execution 9344 Remote Code Execution 10051 Remote Code Execution 10049 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Important 11571 Important 11572 Important 11923 Important 11924 Important 11803 Important 10816 Important 10855 Important 9312 Important 10287 Important 9318 Important 9344 Important 10051 Important 10049 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11803 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9312 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10287 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9318 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9344 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10051 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10049 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5012647 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012647 5011503 11571 11572 Yes Security Update 10.0.17763.2803 https://support.microsoft.com/help/5012647 11571 11572 5012647 5012647 https://support.microsoft.com/help/5012647 11571 11572 5012604 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012604 5011497 11923 11924 Yes Security Update 10.0.20348.643 https://support.microsoft.com/help/5012604 11923 11924 5012604 5012604 https://support.microsoft.com/help/5012604 11923 11924 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11803 Yes Security Update 10.0.19042.1645 https://support.microsoft.com/help/5012599 11803 5012599 5012599 https://support.microsoft.com/help/5012599 11803 5012596 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012596 5011495 10816 10855 Yes Security Update 10.0.14393.5066 https://support.microsoft.com/help/5012596 10816 10855 5012596 5012596 https://support.microsoft.com/help/5012596 10816 10855 5012658 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012658 5011534 9312 10287 9318 9344 Yes Monthly Rollup 6.0.6003.21446 https://support.microsoft.com/help/5012658 9312 10287 9318 9344 5012658 5012658 https://support.microsoft.com/help/5012658 9312 10287 9318 9344 5012632 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012632 9312 10287 9318 9344 Yes Security Only 6.0.6003.21446 https://support.microsoft.com/help/5012632 9312 10287 9318 9344 5012632 5012632 https://support.microsoft.com/help/5012632 9312 10287 9318 9344 5012626 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012626 5011552 10051 10049 Yes Monthly Rollup 6.1.7601.25924 https://support.microsoft.com/help/5012626 10051 10049 5012626 5012626 https://support.microsoft.com/help/5012626 10051 10049 5012649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012649 10051 10049 Yes Security Only 6.1.7601.25924 https://support.microsoft.com/help/5012649 10051 10049 5012649 5012649 https://support.microsoft.com/help/5012649 10051 10049 5012650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012650 5011535 10378 10379 Yes Monthly Rollup 6.2.9200.23679 https://support.microsoft.com/help/5012650 10378 10379 5012650 5012650 https://support.microsoft.com/help/5012650 10378 10379 5012666 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012666 10378 10379 Yes Security Only 6.2.9200.23679 https://support.microsoft.com/help/5012666 10378 10379 5012666 5012666 https://support.microsoft.com/help/5012666 10378 10379 5012670 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012670 5011564 10483 10543 Yes Monthly Rollup 6.3.9600.20337 https://support.microsoft.com/help/5012670 10483 10543 5012670 5012670 https://support.microsoft.com/help/5012670 10483 10543 5012639 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012639 10483 10543 Yes Security Only 6.3.9600.20337 https://support.microsoft.com/help/5012639 10483 10543 5012639 5012639 https://support.microsoft.com/help/5012639 10483 10543 <p>The following <a href="https://technet.microsoft.com/library/security/dn848375.aspx">mitigating factors</a> may be helpful in your situation:</p> <p>To be vulnerable, a DNS server would need to have dynamic updates enabled.</p> <a href="https://twitter.com/guhe120">Yuki Chen</a> 1.0 2022-04-12T08:00:00 <p>Information published.</p> Windows DNS Server Information Disclosure Vulnerability <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could potentially read small portions of heap memory.</p> Role: DNS Server Microsoft Yes CVE-2022-26816 11571 11572 11923 11924 11803 10816 10855 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 11803 Information Disclosure 10816 Information Disclosure 10855 Important 11571 Important 11572 Important 11923 Important 11924 Important 11803 Important 10816 Important 10855 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11803 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 5012647 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012647 5011503 11571 11572 Yes Security Update 10.0.17763.2803 https://support.microsoft.com/help/5012647 11571 11572 5012647 5012647 https://support.microsoft.com/help/5012647 11571 11572 5012604 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012604 5011497 11923 11924 Yes Security Update 10.0.20348.643 https://support.microsoft.com/help/5012604 11923 11924 5012604 5012604 https://support.microsoft.com/help/5012604 11923 11924 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11803 Yes Security Update 10.0.19042.1645 https://support.microsoft.com/help/5012599 11803 5012599 5012599 https://support.microsoft.com/help/5012599 11803 5012596 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012596 5011495 10816 10855 Yes Security Update 10.0.14393.5066 https://support.microsoft.com/help/5012596 10816 10855 5012596 5012596 https://support.microsoft.com/help/5012596 10816 10855 <a href="https://twitter.com/guhe120">Yuki Chen</a> 1.0 2022-04-12T08:00:00 <p>Information published.</p> Windows DNS Server Remote Code Execution Vulnerability <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>In a network-based attack an attacker would need to have the privileges to query the Domain Name Service (DNS). If the timing of DNS queries is perfect, the attacker could execute code remotely on the target server.</p> Active Directory Domain Services Microsoft Yes CVE-2022-26817 11571 11572 11923 11924 11803 10816 10855 10483 10543 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 11803 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10483 Remote Code Execution 10543 Important 11571 Important 11572 Important 11923 Important 11924 Important 11803 Important 10816 Important 10855 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 6.6 5.8 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 6.6 5.8 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 6.6 5.8 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 6.6 5.8 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 6.6 5.8 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11803 6.6 5.8 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 6.6 5.8 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 6.6 5.8 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 6.6 5.8 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5012647 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012647 5011503 11571 11572 Yes Security Update 10.0.17763.2803 https://support.microsoft.com/help/5012647 11571 11572 5012647 5012647 https://support.microsoft.com/help/5012647 11571 11572 5012604 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012604 5011497 11923 11924 Yes Security Update 10.0.20348.643 https://support.microsoft.com/help/5012604 11923 11924 5012604 5012604 https://support.microsoft.com/help/5012604 11923 11924 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11803 Yes Security Update 10.0.19042.1645 https://support.microsoft.com/help/5012599 11803 5012599 5012599 https://support.microsoft.com/help/5012599 11803 5012596 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012596 5011495 10816 10855 Yes Security Update 10.0.14393.5066 https://support.microsoft.com/help/5012596 10816 10855 5012596 5012596 https://support.microsoft.com/help/5012596 10816 10855 5012670 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012670 5011564 10483 10543 Yes Monthly Rollup 6.3.9600.20337 https://support.microsoft.com/help/5012670 10483 10543 5012670 5012670 https://support.microsoft.com/help/5012670 10483 10543 5012639 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012639 10483 10543 Yes Security Only 6.3.9600.20337 https://support.microsoft.com/help/5012639 10483 10543 5012639 5012639 https://support.microsoft.com/help/5012639 10483 10543 <a href="https://twitter.com/guhe120">Yuki Chen</a> 1.0 2022-04-12T08:00:00 <p>Information published.</p> Windows DNS Server Remote Code Execution Vulnerability <p><strong>According to the CVSS metric, privileges required is high (PR:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires the attacker or targeted user to have specific elevated privileges. As is best practice, regular validation and audits of administrative groups should be conducted.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>In a network-based attack an attacker would need to have the privileges to query the Domain Name Service (DNS). If the timing of DNS queries is perfect, the attacker could execute code remotely on the target server.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to take additional actions prior to exploitation to prepare the target environment.</p> Role: DNS Server Microsoft Yes CVE-2022-26818 11571 11572 11923 11924 11803 10816 10855 10483 10543 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 11803 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10483 Remote Code Execution 10543 Important 11571 Important 11572 Important 11923 Important 11924 Important 11803 Important 10816 Important 10855 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 6.6 5.8 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 6.6 5.8 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 6.6 5.8 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 6.6 5.8 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 6.6 5.8 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11803 6.6 5.8 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 6.6 5.8 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 6.6 5.8 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 6.6 5.8 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5012647 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012647 5011503 11571 11572 Yes Security Update 10.0.17763.2803 https://support.microsoft.com/help/5012647 11571 11572 5012647 5012647 https://support.microsoft.com/help/5012647 11571 11572 5012604 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012604 5011497 11923 11924 Yes Security Update 10.0.20348.643 https://support.microsoft.com/help/5012604 11923 11924 5012604 5012604 https://support.microsoft.com/help/5012604 11923 11924 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11803 Yes Security Update 10.0.19042.1645 https://support.microsoft.com/help/5012599 11803 5012599 5012599 https://support.microsoft.com/help/5012599 11803 5012596 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012596 5011495 10816 10855 Yes Security Update 10.0.14393.5066 https://support.microsoft.com/help/5012596 10816 10855 5012596 5012596 https://support.microsoft.com/help/5012596 10816 10855 5012670 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012670 5011564 10483 10543 Yes Monthly Rollup 6.3.9600.20337 https://support.microsoft.com/help/5012670 10483 10543 5012670 5012670 https://support.microsoft.com/help/5012670 10483 10543 5012639 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012639 10483 10543 Yes Security Only 6.3.9600.20337 https://support.microsoft.com/help/5012639 10483 10543 5012639 5012639 https://support.microsoft.com/help/5012639 10483 10543 <a href="https://twitter.com/guhe120">Yuki Chen</a> 1.0 2022-04-12T08:00:00 <p>Information published.</p> Windows DNS Server Remote Code Execution Vulnerability <p><strong>According to the CVSS metric, privileges required is high (PR:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires the attacker or targeted user to have specific elevated privileges. As is best practice, regular validation and audits of administrative groups should be conducted.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Role: DNS Server Microsoft Yes CVE-2022-26819 11571 11572 11923 11924 11803 10816 10855 9312 10287 9318 9344 10051 10049 10378 10379 10483 10543 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 11803 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 9312 Remote Code Execution 10287 Remote Code Execution 9318 Remote Code Execution 9344 Remote Code Execution 10051 Remote Code Execution 10049 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Important 11571 Important 11572 Important 11923 Important 11924 Important 11803 Important 10816 Important 10855 Important 9312 Important 10287 Important 9318 Important 9344 Important 10051 Important 10049 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 6.6 5.8 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 6.6 5.8 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 6.6 5.8 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 6.6 5.8 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 6.6 5.8 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11803 6.6 5.8 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 6.6 5.8 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 6.6 5.8 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9312 6.6 5.8 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10287 6.6 5.8 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9318 6.6 5.8 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9344 6.6 5.8 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10051 6.6 5.8 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10049 6.6 5.8 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 6.6 5.8 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 6.6 5.8 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 6.6 5.8 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5012647 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012647 5011503 11571 11572 Yes Security Update 10.0.17763.2803 https://support.microsoft.com/help/5012647 11571 11572 5012647 5012647 https://support.microsoft.com/help/5012647 11571 11572 5012604 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012604 5011497 11923 11924 Yes Security Update 10.0.20348.643 https://support.microsoft.com/help/5012604 11923 11924 5012604 5012604 https://support.microsoft.com/help/5012604 11923 11924 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11803 Yes Security Update 10.0.19042.1645 https://support.microsoft.com/help/5012599 11803 5012599 5012599 https://support.microsoft.com/help/5012599 11803 5012596 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012596 5011495 10816 10855 Yes Security Update 10.0.14393.5066 https://support.microsoft.com/help/5012596 10816 10855 5012596 5012596 https://support.microsoft.com/help/5012596 10816 10855 5012658 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012658 5011534 9312 10287 9318 9344 Yes Monthly Rollup 6.0.6003.21446 https://support.microsoft.com/help/5012658 9312 10287 9318 9344 5012658 5012658 https://support.microsoft.com/help/5012658 9312 10287 9318 9344 5012632 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012632 9312 10287 9318 9344 Yes Security Only 6.0.6003.21446 https://support.microsoft.com/help/5012632 9312 10287 9318 9344 5012632 5012632 https://support.microsoft.com/help/5012632 9312 10287 9318 9344 5012626 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012626 5011552 10051 10049 Yes Monthly Rollup 6.1.7601.25924 https://support.microsoft.com/help/5012626 10051 10049 5012626 5012626 https://support.microsoft.com/help/5012626 10051 10049 5012649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012649 10051 10049 Yes Security Only 6.1.7601.25924 https://support.microsoft.com/help/5012649 10051 10049 5012649 5012649 https://support.microsoft.com/help/5012649 10051 10049 5012650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012650 5011535 10378 10379 Yes Monthly Rollup 6.2.9200.23679 https://support.microsoft.com/help/5012650 10378 10379 5012650 5012650 https://support.microsoft.com/help/5012650 10378 10379 5012666 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012666 10378 10379 Yes Security Only 6.2.9200.23679 https://support.microsoft.com/help/5012666 10378 10379 5012666 5012666 https://support.microsoft.com/help/5012666 10378 10379 5012670 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012670 5011564 10483 10543 Yes Monthly Rollup 6.3.9600.20337 https://support.microsoft.com/help/5012670 10483 10543 5012670 5012670 https://support.microsoft.com/help/5012670 10483 10543 5012639 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012639 10483 10543 Yes Security Only 6.3.9600.20337 https://support.microsoft.com/help/5012639 10483 10543 5012639 5012639 https://support.microsoft.com/help/5012639 10483 10543 <a href="https://twitter.com/guhe120">Yuki Chen</a> 1.0 2022-04-12T08:00:00 <p>Information published.</p> Windows DNS Server Remote Code Execution Vulnerability <p><strong>According to the CVSS metric, privileges required is high (PR:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires the attacker or targeted user to have specific elevated privileges. As is best practice, regular validation and audits of administrative groups should be conducted.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Role: DNS Server Microsoft Yes CVE-2022-26820 11571 11572 11923 11924 11803 10816 10855 9312 10287 9318 9344 10051 10049 10378 10379 10483 10543 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 11803 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 9312 Remote Code Execution 10287 Remote Code Execution 9318 Remote Code Execution 9344 Remote Code Execution 10051 Remote Code Execution 10049 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Important 11571 Important 11572 Important 11923 Important 11924 Important 11803 Important 10816 Important 10855 Important 9312 Important 10287 Important 9318 Important 9344 Important 10051 Important 10049 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 6.6 5.8 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 6.6 5.8 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 6.6 5.8 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 6.6 5.8 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 6.6 5.8 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11803 6.6 5.8 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 6.6 5.8 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 6.6 5.8 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9312 6.6 5.8 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10287 6.6 5.8 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9318 6.6 5.8 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9344 6.6 5.8 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10051 6.6 5.8 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10049 6.6 5.8 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 6.6 5.8 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 6.6 5.8 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 6.6 5.8 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5012647 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012647 5011503 11571 11572 Yes Security Update 10.0.17763.2803 https://support.microsoft.com/help/5012647 11571 11572 5012647 5012647 https://support.microsoft.com/help/5012647 11571 11572 5012604 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012604 5011497 11923 11924 Yes Security Update 10.0.20348.643 https://support.microsoft.com/help/5012604 11923 11924 5012604 5012604 https://support.microsoft.com/help/5012604 11923 11924 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11803 Yes Security Update 10.0.19042.1645 https://support.microsoft.com/help/5012599 11803 5012599 5012599 https://support.microsoft.com/help/5012599 11803 5012596 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012596 5011495 10816 10855 Yes Security Update 10.0.14393.5066 https://support.microsoft.com/help/5012596 10816 10855 5012596 5012596 https://support.microsoft.com/help/5012596 10816 10855 5012658 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012658 5011534 9312 10287 9318 9344 Yes Monthly Rollup 6.0.6003.21446 https://support.microsoft.com/help/5012658 9312 10287 9318 9344 5012658 5012658 https://support.microsoft.com/help/5012658 9312 10287 9318 9344 5012632 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012632 9312 10287 9318 9344 Yes Security Only 6.0.6003.21446 https://support.microsoft.com/help/5012632 9312 10287 9318 9344 5012632 5012632 https://support.microsoft.com/help/5012632 9312 10287 9318 9344 5012626 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012626 5011552 10051 10049 Yes Monthly Rollup 6.1.7601.25924 https://support.microsoft.com/help/5012626 10051 10049 5012626 5012626 https://support.microsoft.com/help/5012626 10051 10049 5012649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012649 10051 10049 Yes Security Only 6.1.7601.25924 https://support.microsoft.com/help/5012649 10051 10049 5012649 5012649 https://support.microsoft.com/help/5012649 10051 10049 5012650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012650 5011535 10378 10379 Yes Monthly Rollup 6.2.9200.23679 https://support.microsoft.com/help/5012650 10378 10379 5012650 5012650 https://support.microsoft.com/help/5012650 10378 10379 5012666 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012666 10378 10379 Yes Security Only 6.2.9200.23679 https://support.microsoft.com/help/5012666 10378 10379 5012666 5012666 https://support.microsoft.com/help/5012666 10378 10379 5012670 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012670 5011564 10483 10543 Yes Monthly Rollup 6.3.9600.20337 https://support.microsoft.com/help/5012670 10483 10543 5012670 5012670 https://support.microsoft.com/help/5012670 10483 10543 5012639 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012639 10483 10543 Yes Security Only 6.3.9600.20337 https://support.microsoft.com/help/5012639 10483 10543 5012639 5012639 https://support.microsoft.com/help/5012639 10483 10543 <a href="https://twitter.com/guhe120">Yuki Chen</a> 1.0 2022-04-12T08:00:00 <p>Information published.</p> Windows DNS Server Remote Code Execution Vulnerability <p><strong>According to the CVSS metric, privileges required is high (PR:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires the attacker or targeted user to have specific elevated privileges. As is best practice, regular validation and audits of administrative groups should be conducted.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Role: DNS Server Microsoft Yes CVE-2022-26821 11571 11572 11923 11924 11803 10816 10855 9312 10287 9318 9344 10051 10049 10378 10379 10483 10543 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 11803 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 9312 Remote Code Execution 10287 Remote Code Execution 9318 Remote Code Execution 9344 Remote Code Execution 10051 Remote Code Execution 10049 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Important 11571 Important 11572 Important 11923 Important 11924 Important 11803 Important 10816 Important 10855 Important 9312 Important 10287 Important 9318 Important 9344 Important 10051 Important 10049 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 6.6 5.8 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 6.6 5.8 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 6.6 5.8 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 6.6 5.8 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 6.6 5.8 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11803 6.6 5.8 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 6.6 5.8 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 6.6 5.8 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9312 6.6 5.8 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10287 6.6 5.8 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9318 6.6 5.8 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9344 6.6 5.8 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10051 6.6 5.8 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10049 6.6 5.8 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 6.6 5.8 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 6.6 5.8 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 6.6 5.8 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5012647 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012647 5011503 11571 11572 Yes Security Update 10.0.17763.2803 https://support.microsoft.com/help/5012647 11571 11572 5012647 5012647 https://support.microsoft.com/help/5012647 11571 11572 5012604 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012604 5011497 11923 11924 Yes Security Update 10.0.20348.643 https://support.microsoft.com/help/5012604 11923 11924 5012604 5012604 https://support.microsoft.com/help/5012604 11923 11924 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11803 Yes Security Update 10.0.19042.1645 https://support.microsoft.com/help/5012599 11803 5012599 5012599 https://support.microsoft.com/help/5012599 11803 5012596 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012596 5011495 10816 10855 Yes Security Update 10.0.14393.5066 https://support.microsoft.com/help/5012596 10816 10855 5012596 5012596 https://support.microsoft.com/help/5012596 10816 10855 5012658 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012658 5011534 9312 10287 9318 9344 Yes Monthly Rollup 6.0.6003.21446 https://support.microsoft.com/help/5012658 9312 10287 9318 9344 5012658 5012658 https://support.microsoft.com/help/5012658 9312 10287 9318 9344 5012632 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012632 9312 10287 9318 9344 Yes Security Only 6.0.6003.21446 https://support.microsoft.com/help/5012632 9312 10287 9318 9344 5012632 5012632 https://support.microsoft.com/help/5012632 9312 10287 9318 9344 5012626 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012626 5011552 10051 10049 Yes Monthly Rollup 6.1.7601.25924 https://support.microsoft.com/help/5012626 10051 10049 5012626 5012626 https://support.microsoft.com/help/5012626 10051 10049 5012649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012649 10051 10049 Yes Security Only 6.1.7601.25924 https://support.microsoft.com/help/5012649 10051 10049 5012649 5012649 https://support.microsoft.com/help/5012649 10051 10049 5012650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012650 5011535 10378 10379 Yes Monthly Rollup 6.2.9200.23679 https://support.microsoft.com/help/5012650 10378 10379 5012650 5012650 https://support.microsoft.com/help/5012650 10378 10379 5012666 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012666 10378 10379 Yes Security Only 6.2.9200.23679 https://support.microsoft.com/help/5012666 10378 10379 5012666 5012666 https://support.microsoft.com/help/5012666 10378 10379 5012670 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012670 5011564 10483 10543 Yes Monthly Rollup 6.3.9600.20337 https://support.microsoft.com/help/5012670 10483 10543 5012670 5012670 https://support.microsoft.com/help/5012670 10483 10543 5012639 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012639 10483 10543 Yes Security Only 6.3.9600.20337 https://support.microsoft.com/help/5012639 10483 10543 5012639 5012639 https://support.microsoft.com/help/5012639 10483 10543 <a href="https://twitter.com/guhe120">Yuki Chen</a> 1.0 2022-04-12T08:00:00 <p>Information published.</p> Windows DNS Server Remote Code Execution Vulnerability <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> <p><strong>According to the CVSS metric, privileges required is high (PR:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires the attacker or targeted user to have specific elevated privileges. As is best practice, regular validation and audits of administrative groups should be conducted.</p> Role: DNS Server Microsoft Yes CVE-2022-26822 11571 11572 11923 11924 11803 10816 10855 9312 10287 9318 9344 10051 10049 10378 10379 10483 10543 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 11803 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 9312 Remote Code Execution 10287 Remote Code Execution 9318 Remote Code Execution 9344 Remote Code Execution 10051 Remote Code Execution 10049 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Important 11571 Important 11572 Important 11923 Important 11924 Important 11803 Important 10816 Important 10855 Important 9312 Important 10287 Important 9318 Important 9344 Important 10051 Important 10049 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 6.6 5.8 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 6.6 5.8 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 6.6 5.8 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 6.6 5.8 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 6.6 5.8 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11803 6.6 5.8 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 6.6 5.8 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 6.6 5.8 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9312 6.6 5.8 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10287 6.6 5.8 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9318 6.6 5.8 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9344 6.6 5.8 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10051 6.6 5.8 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10049 6.6 5.8 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 6.6 5.8 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 6.6 5.8 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 6.6 5.8 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5012647 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012647 5011503 11571 11572 Yes Security Update 10.0.17763.2803 https://support.microsoft.com/help/5012647 11571 11572 5012647 5012647 https://support.microsoft.com/help/5012647 11571 11572 5012604 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012604 5011497 11923 11924 Yes Security Update 10.0.20348.643 https://support.microsoft.com/help/5012604 11923 11924 5012604 5012604 https://support.microsoft.com/help/5012604 11923 11924 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11803 Yes Security Update 10.0.19042.1645 https://support.microsoft.com/help/5012599 11803 5012599 5012599 https://support.microsoft.com/help/5012599 11803 5012596 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012596 5011495 10816 10855 Yes Security Update 10.0.14393.5066 https://support.microsoft.com/help/5012596 10816 10855 5012596 5012596 https://support.microsoft.com/help/5012596 10816 10855 5012658 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012658 5011534 9312 10287 9318 9344 Yes Monthly Rollup 6.0.6003.21446 https://support.microsoft.com/help/5012658 9312 10287 9318 9344 5012658 5012658 https://support.microsoft.com/help/5012658 9312 10287 9318 9344 5012632 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012632 9312 10287 9318 9344 Yes Security Only 6.0.6003.21446 https://support.microsoft.com/help/5012632 9312 10287 9318 9344 5012632 5012632 https://support.microsoft.com/help/5012632 9312 10287 9318 9344 5012626 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012626 5011552 10051 10049 Yes Monthly Rollup 6.1.7601.25924 https://support.microsoft.com/help/5012626 10051 10049 5012626 5012626 https://support.microsoft.com/help/5012626 10051 10049 5012649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012649 10051 10049 Yes Security Only 6.1.7601.25924 https://support.microsoft.com/help/5012649 10051 10049 5012649 5012649 https://support.microsoft.com/help/5012649 10051 10049 5012650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012650 5011535 10378 10379 Yes Monthly Rollup 6.2.9200.23679 https://support.microsoft.com/help/5012650 10378 10379 5012650 5012650 https://support.microsoft.com/help/5012650 10378 10379 5012666 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012666 10378 10379 Yes Security Only 6.2.9200.23679 https://support.microsoft.com/help/5012666 10378 10379 5012666 5012666 https://support.microsoft.com/help/5012666 10378 10379 5012670 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012670 5011564 10483 10543 Yes Monthly Rollup 6.3.9600.20337 https://support.microsoft.com/help/5012670 10483 10543 5012670 5012670 https://support.microsoft.com/help/5012670 10483 10543 5012639 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012639 10483 10543 Yes Security Only 6.3.9600.20337 https://support.microsoft.com/help/5012639 10483 10543 5012639 5012639 https://support.microsoft.com/help/5012639 10483 10543 <a href="https://twitter.com/guhe120">Yuki Chen</a> 1.0 2022-04-12T08:00:00 <p>Information published.</p> Windows DNS Server Remote Code Execution Vulnerability <p><strong>According to the CVSS metric, privileges required is high (PR:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires the attacker or targeted user to have specific elevated privileges. As is best practice, regular validation and audits of administrative groups should be conducted.</p> Role: DNS Server Microsoft Yes CVE-2022-26823 11571 11572 11923 11924 11803 10816 10855 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 11803 Remote Code Execution 10816 Remote Code Execution 10855 Important 11571 Important 11572 Important 11923 Important 11924 Important 11803 Important 10816 Important 10855 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11803 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 5012647 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012647 5011503 11571 11572 Yes Security Update 10.0.17763.2803 https://support.microsoft.com/help/5012647 11571 11572 5012647 5012647 https://support.microsoft.com/help/5012647 11571 11572 5012604 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012604 5011497 11923 11924 Yes Security Update 10.0.20348.643 https://support.microsoft.com/help/5012604 11923 11924 5012604 5012604 https://support.microsoft.com/help/5012604 11923 11924 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11803 Yes Security Update 10.0.19042.1645 https://support.microsoft.com/help/5012599 11803 5012599 5012599 https://support.microsoft.com/help/5012599 11803 5012596 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012596 5011495 10816 10855 Yes Security Update 10.0.14393.5066 https://support.microsoft.com/help/5012596 10816 10855 5012596 5012596 https://support.microsoft.com/help/5012596 10816 10855 <a href="https://twitter.com/guhe120">Yuki Chen</a> 1.0 2022-04-12T08:00:00 <p>Information published.</p> Windows DNS Server Remote Code Execution Vulnerability <p><strong>According to the CVSS metric, privileges required is high (PR:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires the attacker or targeted user to have specific elevated privileges. As is best practice, regular validation and audits of administrative groups should be conducted.</p> Role: DNS Server Microsoft Yes CVE-2022-26824 11571 11572 11923 11924 11803 10816 10855 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 11803 Remote Code Execution 10816 Remote Code Execution 10855 Important 11571 Important 11572 Important 11923 Important 11924 Important 11803 Important 10816 Important 10855 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11803 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 5012647 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012647 5011503 11571 11572 Yes Security Update 10.0.17763.2803 https://support.microsoft.com/help/5012647 11571 11572 5012647 5012647 https://support.microsoft.com/help/5012647 11571 11572 5012604 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012604 5011497 11923 11924 Yes Security Update 10.0.20348.643 https://support.microsoft.com/help/5012604 11923 11924 5012604 5012604 https://support.microsoft.com/help/5012604 11923 11924 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11803 Yes Security Update 10.0.19042.1645 https://support.microsoft.com/help/5012599 11803 5012599 5012599 https://support.microsoft.com/help/5012599 11803 5012596 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012596 5011495 10816 10855 Yes Security Update 10.0.14393.5066 https://support.microsoft.com/help/5012596 10816 10855 5012596 5012596 https://support.microsoft.com/help/5012596 10816 10855 <a href="https://twitter.com/guhe120">Yuki Chen</a> 1.0 2022-04-12T08:00:00 <p>Information published.</p> Windows DNS Server Remote Code Execution Vulnerability <p><strong>According to the CVSS metric, privileges required is high (PR:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires the attacker or targeted user to have specific elevated privileges. As is best practice, regular validation and audits of administrative groups should be conducted.</p> Role: DNS Server Microsoft Yes CVE-2022-26825 11571 11572 11923 11924 11803 10816 10855 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 11803 Remote Code Execution 10816 Remote Code Execution 10855 Important 11571 Important 11572 Important 11923 Important 11924 Important 11803 Important 10816 Important 10855 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11803 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 5012647 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012647 5011503 11571 11572 Yes Security Update 10.0.17763.2803 https://support.microsoft.com/help/5012647 11571 11572 5012647 5012647 https://support.microsoft.com/help/5012647 11571 11572 5012604 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012604 5011497 11923 11924 Yes Security Update 10.0.20348.643 https://support.microsoft.com/help/5012604 11923 11924 5012604 5012604 https://support.microsoft.com/help/5012604 11923 11924 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11803 Yes Security Update 10.0.19042.1645 https://support.microsoft.com/help/5012599 11803 5012599 5012599 https://support.microsoft.com/help/5012599 11803 5012596 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012596 5011495 10816 10855 Yes Security Update 10.0.14393.5066 https://support.microsoft.com/help/5012596 10816 10855 5012596 5012596 https://support.microsoft.com/help/5012596 10816 10855 <a href="https://twitter.com/guhe120">Yuki Chen</a> 1.0 2022-04-12T08:00:00 <p>Information published.</p> Windows DNS Server Remote Code Execution Vulnerability <p><strong>According to the CVSS metric, privileges required is high (PR:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires the attacker or targeted user to have specific elevated privileges. As is best practice, regular validation and audits of administrative groups should be conducted.</p> Role: DNS Server Microsoft Yes CVE-2022-26826 11568 11569 11570 11571 11572 11712 11713 11714 11896 11897 11898 11923 11924 11801 11802 11803 11926 11927 11929 11930 11931 10852 10853 10816 10855 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11570 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11712 Remote Code Execution 11713 Remote Code Execution 11714 Remote Code Execution 11896 Remote Code Execution 11897 Remote Code Execution 11898 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 11801 Remote Code Execution 11802 Remote Code Execution 11803 Remote Code Execution 11926 Remote Code Execution 11927 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Important 11568 Important 11569 Important 11570 Important 11571 Important 11572 Important 11712 Important 11713 Important 11714 Important 11896 Important 11897 Important 11898 Important 11923 Important 11924 Important 11801 Important 11802 Important 11803 Important 11926 Important 11927 Important 11929 Important 11930 Important 11931 Important 10852 Important 10853 Important 10816 Important 10855 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11570 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11712 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11713 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11714 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11896 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11897 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11898 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11801 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11802 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11803 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11926 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11927 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 5012647 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012647 5011503 11568 11569 11570 11571 11572 Yes Security Update 10.0.17763.2803 https://support.microsoft.com/help/5012647 11568 11569 11570 11571 11572 5012647 5012647 https://support.microsoft.com/help/5012647 11568 11569 11570 11571 11572 5012591 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012591 5011485 11712 11713 11714 Yes Security Update 10.0.18363.2212 https://support.microsoft.com/help/5012591 11712 11713 11714 5012591 5012591 https://support.microsoft.com/help/5012591 11712 11713 11714 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11896 11897 11898 Yes Security Update 10.0.19043.1645 https://support.microsoft.com/help/5012599 11896 11897 11898 5012599 5012599 https://support.microsoft.com/help/5012599 11896 11897 11898 11801 11802 11803 11929 11930 11931 5012604 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012604 5011497 11923 11924 Yes Security Update 10.0.20348.643 https://support.microsoft.com/help/5012604 11923 11924 5012604 5012604 https://support.microsoft.com/help/5012604 11923 11924 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11801 11802 11803 Yes Security Update 10.0.19042.1645 https://support.microsoft.com/help/5012599 11801 11802 11803 5012599 5012592 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012592 5011493 11926 11927 Yes Security Update 10.0.22000.613 https://support.microsoft.com/help/5012592 11926 11927 5012592 5012592 https://support.microsoft.com/help/5012592 11926 11927 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11929 11930 11931 Yes Security Update 10.0.19044.1645 https://support.microsoft.com/help/5012599 11929 11930 11931 5012599 5012596 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012596 5011495 10852 10853 10816 10855 Yes Security Update 10.0.14393.5066 https://support.microsoft.com/help/5012596 10852 10853 10816 10855 5012596 5012596 https://support.microsoft.com/help/5012596 10852 10853 10816 10855 1.0 2022-04-12T08:00:00 <p>Information published.</p> Windows File Server Resource Management Service Elevation of Privilege Vulnerability <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows File Server Microsoft Yes CVE-2022-26827 11568 11569 11570 11571 11572 11712 11713 11714 11896 11897 11898 11923 11924 11801 11802 11803 11929 11930 11931 10852 10853 10816 10855 10047 10048 10481 10482 10484 10051 10049 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11570 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11712 Elevation of Privilege 11713 Elevation of Privilege 11714 Elevation of Privilege 11896 Elevation of Privilege 11897 Elevation of Privilege 11898 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11801 Elevation of Privilege 11802 Elevation of Privilege 11803 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10047 Elevation of Privilege 10048 Elevation of Privilege 10481 Elevation of Privilege 10482 Elevation of Privilege 10484 Elevation of Privilege 10051 Elevation of Privilege 10049 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11570 Important 11571 Important 11572 Important 11712 Important 11713 Important 11714 Important 11896 Important 11897 Important 11898 Important 11923 Important 11924 Important 11801 Important 11802 Important 11803 Important 11929 Important 11930 Important 11931 Important 10852 Important 10853 Important 10816 Important 10855 Important 10047 Important 10048 Important 10481 Important 10482 Important 10484 Important 10051 Important 10049 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11570 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11712 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11713 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11714 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11896 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11897 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11898 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11801 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11802 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11803 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10047 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10048 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10481 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10482 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10484 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10051 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10049 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5012647 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012647 5011503 11568 11569 11570 11571 11572 Yes Security Update 10.0.17763.2803 https://support.microsoft.com/help/5012647 11568 11569 11570 11571 11572 5012647 5012647 https://support.microsoft.com/help/5012647 11568 11569 11570 11571 11572 5012591 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012591 5011485 11712 11713 11714 Yes Security Update 10.0.18363.2212 https://support.microsoft.com/help/5012591 11712 11713 11714 5012591 5012591 https://support.microsoft.com/help/5012591 11712 11713 11714 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11896 11897 11898 Yes Security Update 10.0.19043.1645 https://support.microsoft.com/help/5012599 11896 11897 11898 5012599 5012599 https://support.microsoft.com/help/5012599 11896 11897 11898 11801 11802 11803 11929 11930 11931 5012604 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012604 5011497 11923 11924 Yes Security Update 10.0.20348.643 https://support.microsoft.com/help/5012604 11923 11924 5012604 5012604 https://support.microsoft.com/help/5012604 11923 11924 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11801 11802 11803 Yes Security Update 10.0.19042.1645 https://support.microsoft.com/help/5012599 11801 11802 11803 5012599 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11929 11930 11931 Yes Security Update 10.0.19044.1645 https://support.microsoft.com/help/5012599 11929 11930 11931 5012599 5012596 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012596 5011495 10852 10853 10816 10855 Yes Security Update 10.0.14393.5066 https://support.microsoft.com/help/5012596 10852 10853 10816 10855 5012596 5012596 https://support.microsoft.com/help/5012596 10852 10853 10816 10855 5012626 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012626 5011552 10047 10048 10051 10049 Yes Monthly Rollup 6.1.7601.25924 https://support.microsoft.com/help/5012626 10047 10048 10051 10049 5012626 5012626 https://support.microsoft.com/help/5012626 10047 10048 10051 10049 5012649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012649 10047 10048 10051 10049 Yes Security Only 6.1.7601.25924 https://support.microsoft.com/help/5012649 10047 10048 10051 10049 5012649 5012649 https://support.microsoft.com/help/5012649 10047 10048 10051 10049 5012670 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012670 5011564 10481 10482 10483 10543 Yes Monthly Rollup 6.3.9600.20337 https://support.microsoft.com/help/5012670 10481 10482 10483 10543 5012670 5012670 https://support.microsoft.com/help/5012670 10481 10482 10484 10483 10543 5012639 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012639 10481 10482 10483 10543 Yes Security Only 6.3.9600.20337 https://support.microsoft.com/help/5012639 10481 10482 10483 10543 5012639 5012639 https://support.microsoft.com/help/5012639 10481 10482 10483 10543 5012670 5011564 10484 Yes Monthly Rollup 6.3.9600.20337 https://support.microsoft.com/help/5012639 10484 5012670 5012650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012650 5011535 10378 10379 Yes Monthly Rollup 6.2.9200.23679 https://support.microsoft.com/help/5012650 10378 10379 5012650 5012650 https://support.microsoft.com/help/5012650 10378 10379 5012666 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012666 10378 10379 Yes Security Only 6.2.9200.23679 https://support.microsoft.com/help/5012666 10378 10379 5012666 5012666 https://support.microsoft.com/help/5012666 10378 10379 1.0 2022-04-12T08:00:00 <p>Information published.</p> Windows Bluetooth Driver Elevation of Privilege Vulnerability <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Microsoft Bluetooth Driver Microsoft Yes CVE-2022-26828 11568 11569 11570 11571 11572 11712 11713 11714 11896 11897 11898 11923 11924 11801 11802 11803 11929 11930 11931 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11570 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11712 Elevation of Privilege 11713 Elevation of Privilege 11714 Elevation of Privilege 11896 Elevation of Privilege 11897 Elevation of Privilege 11898 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11801 Elevation of Privilege 11802 Elevation of Privilege 11803 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Important 11568 Important 11569 Important 11570 Important 11571 Important 11572 Important 11712 Important 11713 Important 11714 Important 11896 Important 11897 Important 11898 Important 11923 Important 11924 Important 11801 Important 11802 Important 11803 Important 11929 Important 11930 Important 11931 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11570 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11712 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11713 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11714 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11896 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11897 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11898 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11801 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11802 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11803 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 5012647 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012647 5011503 11568 11569 11570 11571 11572 Yes Security Update 10.0.17763.2803 https://support.microsoft.com/help/5012647 11568 11569 11570 11571 11572 5012647 5012647 https://support.microsoft.com/help/5012647 11568 11569 11570 11571 11572 5012591 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012591 5011485 11712 11713 11714 Yes Security Update 10.0.18363.2212 https://support.microsoft.com/help/5012591 11712 11713 11714 5012591 5012591 https://support.microsoft.com/help/5012591 11712 11713 11714 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11896 11897 11898 Yes Security Update 10.0.19043.1645 https://support.microsoft.com/help/5012599 11896 11897 11898 5012599 5012599 https://support.microsoft.com/help/5012599 11896 11897 11898 11801 11802 11803 11929 11930 11931 5012604 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012604 5011497 11923 11924 Yes Security Update 10.0.20348.643 https://support.microsoft.com/help/5012604 11923 11924 5012604 5012604 https://support.microsoft.com/help/5012604 11923 11924 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11801 11802 11803 Yes Security Update 10.0.19042.1645 https://support.microsoft.com/help/5012599 11801 11802 11803 5012599 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11929 11930 11931 Yes Security Update 10.0.19044.1645 https://support.microsoft.com/help/5012599 11929 11930 11931 5012599 1.0 2022-04-12T08:00:00 <p>Information published.</p> Windows DNS Server Remote Code Execution Vulnerability <p><strong>According to the CVSS metric, privileges required is high (PR:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires the attacker or targeted user to have specific elevated privileges. As is best practice, regular validation and audits of administrative groups should be conducted.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Role: DNS Server Microsoft Yes CVE-2022-26829 11571 11572 11923 11924 11803 10816 10855 9312 10287 9318 9344 10051 10049 10378 10379 10483 10543 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 11803 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 9312 Remote Code Execution 10287 Remote Code Execution 9318 Remote Code Execution 9344 Remote Code Execution 10051 Remote Code Execution 10049 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Important 11571 Important 11572 Important 11923 Important 11924 Important 11803 Important 10816 Important 10855 Important 9312 Important 10287 Important 9318 Important 9344 Important 10051 Important 10049 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 6.6 5.9 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 11571 6.6 5.9 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 11572 6.6 5.9 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 11923 6.6 5.9 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 11924 6.6 5.9 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 11803 6.6 5.9 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10816 6.6 5.9 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10855 6.6 5.9 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 9312 6.6 5.9 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10287 6.6 5.9 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 9318 6.6 5.9 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 9344 6.6 5.9 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10051 6.6 5.9 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10049 6.6 5.9 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10378 6.6 5.9 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10379 6.6 5.9 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10483 6.6 5.9 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10543 5012647 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012647 5011503 11571 11572 Yes Security Update 10.0.17763.2803 https://support.microsoft.com/help/5012647 11571 11572 5012647 5012647 https://support.microsoft.com/help/5012647 11571 11572 5012604 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012604 5011497 11923 11924 Yes Security Update 10.0.20348.643 https://support.microsoft.com/help/5012604 11923 11924 5012604 5012604 https://support.microsoft.com/help/5012604 11923 11924 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11803 Yes Security Update 10.0.19042.1645 https://support.microsoft.com/help/5012599 11803 5012599 5012599 https://support.microsoft.com/help/5012599 11803 5012596 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012596 5011495 10816 10855 Yes Security Update 10.0.14393.5066 https://support.microsoft.com/help/5012596 10816 10855 5012596 5012596 https://support.microsoft.com/help/5012596 10816 10855 5012658 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012658 5011534 9312 10287 9318 9344 Yes Monthly Rollup 6.0.6003.21446 https://support.microsoft.com/help/5012658 9312 10287 9318 9344 5012658 5012658 https://support.microsoft.com/help/5012658 9312 10287 9318 9344 5012632 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012632 9312 10287 9318 9344 Yes Security Only 6.0.6003.21446 https://support.microsoft.com/help/5012632 9312 10287 9318 9344 5012632 5012632 https://support.microsoft.com/help/5012632 9312 10287 9318 9344 5012626 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012626 5011552 10051 10049 Yes Monthly Rollup 6.1.7601.25924 https://support.microsoft.com/help/5012626 10051 10049 5012626 5012626 https://support.microsoft.com/help/5012626 10051 10049 5012649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012649 10051 10049 Yes Security Only 6.1.7601.25924 https://support.microsoft.com/help/5012649 10051 10049 5012649 5012649 https://support.microsoft.com/help/5012649 10051 10049 5012650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012650 5011535 10378 10379 Yes Monthly Rollup 6.2.9200.23679 https://support.microsoft.com/help/5012650 10378 10379 5012650 5012650 https://support.microsoft.com/help/5012650 10378 10379 5012666 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012666 10378 10379 Yes Security Only 6.2.9200.23679 https://support.microsoft.com/help/5012666 10378 10379 5012666 5012666 https://support.microsoft.com/help/5012666 10378 10379 5012670 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012670 5011564 10483 10543 Yes Monthly Rollup 6.3.9600.20337 https://support.microsoft.com/help/5012670 10483 10543 5012670 5012670 https://support.microsoft.com/help/5012670 10483 10543 5012639 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012639 10483 10543 Yes Security Only 6.3.9600.20337 https://support.microsoft.com/help/5012639 10483 10543 5012639 5012639 https://support.microsoft.com/help/5012639 10483 10543 1.0 2022-04-12T08:00:00 <p>Information published.</p> DiskUsage.exe Remote Code Execution Vulnerability <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to take additional actions prior to exploitation to prepare the target environment.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>This vulnerability requires that a user with an affected version of Windows access a malicious server. An attacker would have to host a specially crafted server share or website. An attacker would have no way to force users to visit this specially crafted server share or website, but would have to convince them to visit the server share or website, typically by way of an enticement in an email or chat message.</p> diskusage Microsoft Yes CVE-2022-26830 11923 11924 11926 11927 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 11926 Remote Code Execution 11927 Important 11923 Important 11924 Important 11926 Important 11927 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11926 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11927 5012604 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012604 5011497 11923 11924 Yes Security Update 10.0.20348.643 https://support.microsoft.com/help/5012604 11923 11924 5012604 5012604 https://support.microsoft.com/help/5012604 11923 11924 5012592 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012592 5011493 11926 11927 Yes Security Update 10.0.22000.613 https://support.microsoft.com/help/5012592 11926 11927 5012592 5012592 https://support.microsoft.com/help/5012592 11926 11927 <p>Mitigation refers to a setting, common configuration, or general best-practice, existing in a default state, that could reduce the severity of exploitation of a vulnerability. The following mitigating factors may be helpful in your situation:</p> <p><strong>1. Block TCP port 445 at the enterprise perimeter firewall</strong></p> <p>TCP port 445 is used to initiate a connection with the affected component. Blocking this port at the network perimeter firewall will help protect systems that are behind that firewall from attempts to exploit this vulnerability. This can help protect networks from attacks that originate outside the enterprise perimeter. Blocking the affected ports at the enterprise perimeter is the best defense to help avoid Internet-based attacks. <strong>However, systems could still be vulnerable to attacks from within their enterprise perimeter.</strong></p> <p><strong>2. Follow Microsoft guidelines to secure SMB traffic</strong></p> <p><a href="https://docs.microsoft.com/windows-server/storage/file-server/smb-secure-traffic">Secure SMB Traffic in Windows Server</a>.</p> 1.0 2022-04-12T08:00:00 <p>Information published.</p> Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability Windows LDAP - Lightweight Directory Access Protocol Microsoft Yes CVE-2022-26831 11568 11569 11570 11571 11572 11712 11713 11714 11896 11897 11898 11923 11924 11801 11802 11803 11926 11927 11929 11930 11931 10729 10735 10852 10853 10816 10855 10047 10048 10481 10482 10484 9312 10287 9318 9344 10051 10049 10378 10379 10483 10543 Denial of Service 11568 Denial of Service 11569 Denial of Service 11570 Denial of Service 11571 Denial of Service 11572 Denial of Service 11712 Denial of Service 11713 Denial of Service 11714 Denial of Service 11896 Denial of Service 11897 Denial of Service 11898 Denial of Service 11923 Denial of Service 11924 Denial of Service 11801 Denial of Service 11802 Denial of Service 11803 Denial of Service 11926 Denial of Service 11927 Denial of Service 11929 Denial of Service 11930 Denial of Service 11931 Denial of Service 10729 Denial of Service 10735 Denial of Service 10852 Denial of Service 10853 Denial of Service 10816 Denial of Service 10855 Denial of Service 10047 Denial of Service 10048 Denial of Service 10481 Denial of Service 10482 Denial of Service 10484 Denial of Service 9312 Denial of Service 10287 Denial of Service 9318 Denial of Service 9344 Denial of Service 10051 Denial of Service 10049 Denial of Service 10378 Denial of Service 10379 Denial of Service 10483 Denial of Service 10543 Important 11568 Important 11569 Important 11570 Important 11571 Important 11572 Important 11712 Important 11713 Important 11714 Important 11896 Important 11897 Important 11898 Important 11923 Important 11924 Important 11801 Important 11802 Important 11803 Important 11926 Important 11927 Important 11929 Important 11930 Important 11931 Important 10729 Important 10735 Important 10852 Important 10853 Important 10816 Important 10855 Important 10047 Important 10048 Important 10481 Important 10482 Important 10484 Important 9312 Important 10287 Important 9318 Important 9344 Important 10051 Important 10049 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11568 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11569 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11570 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11571 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11572 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11712 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11713 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11714 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11896 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11897 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11898 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11923 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11924 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11801 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11802 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11803 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11926 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11927 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11929 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11930 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11931 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10729 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10735 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10852 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10853 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10816 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10855 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10047 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10048 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10481 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10482 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10484 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 9312 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10287 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 9318 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 9344 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10051 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10049 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10378 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10379 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10483 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10543 5012647 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012647 5011503 11568 11569 11570 11571 11572 Yes Security Update 10.0.17763.2803 https://support.microsoft.com/help/5012647 11568 11569 11570 11571 11572 5012647 5012647 https://support.microsoft.com/help/5012647 11568 11569 11570 11571 11572 5012591 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012591 5011485 11712 11713 11714 Yes Security Update 10.0.18363.2212 https://support.microsoft.com/help/5012591 11712 11713 11714 5012591 5012591 https://support.microsoft.com/help/5012591 11712 11713 11714 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11896 11897 11898 Yes Security Update 10.0.19043.1645 https://support.microsoft.com/help/5012599 11896 11897 11898 5012599 5012599 https://support.microsoft.com/help/5012599 11896 11897 11898 11801 11802 11803 11929 11930 11931 5012604 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012604 5011497 11923 11924 Yes Security Update 10.0.20348.643 https://support.microsoft.com/help/5012604 11923 11924 5012604 5012604 https://support.microsoft.com/help/5012604 11923 11924 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11801 11802 11803 Yes Security Update 10.0.19042.1645 https://support.microsoft.com/help/5012599 11801 11802 11803 5012599 5012592 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012592 5011493 11926 11927 Yes Security Update 10.0.22000.613 https://support.microsoft.com/help/5012592 11926 11927 5012592 5012592 https://support.microsoft.com/help/5012592 11926 11927 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11929 11930 11931 Yes Security Update 10.0.19044.1645 https://support.microsoft.com/help/5012599 11929 11930 11931 5012599 5012653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012653 5011491 10729 10735 Yes Security Update 10.0.10240.19265 https://support.microsoft.com/help/5012653 10729 10735 5012653 5012653 https://support.microsoft.com/help/5012653 10729 10735 5012596 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012596 5011495 10852 10853 10816 10855 Yes Security Update 10.0.14393.5066 https://support.microsoft.com/help/5012596 10852 10853 10816 10855 5012596 5012596 https://support.microsoft.com/help/5012596 10852 10853 10816 10855 5012626 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012626 5011552 10047 10048 10051 10049 Yes Monthly Rollup 6.1.7601.25924 https://support.microsoft.com/help/5012626 10047 10048 10051 10049 5012626 5012626 https://support.microsoft.com/help/5012626 10047 10048 10051 10049 5012649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012649 10047 10048 10051 10049 Yes Security Only 6.1.7601.25924 https://support.microsoft.com/help/5012649 10047 10048 10051 10049 5012649 5012649 https://support.microsoft.com/help/5012649 10047 10048 10051 10049 5012670 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012670 5011564 10481 10482 10483 10543 Yes Monthly Rollup 6.3.9600.20337 https://support.microsoft.com/help/5012670 10481 10482 10483 10543 5012670 5012670 https://support.microsoft.com/help/5012670 10481 10482 10484 10483 10543 5012639 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012639 10481 10482 10483 10543 Yes Security Only 6.3.9600.20337 https://support.microsoft.com/help/5012639 10481 10482 10483 10543 5012639 5012639 https://support.microsoft.com/help/5012639 10481 10482 10483 10543 5012670 5011564 10484 Yes Monthly Rollup 6.3.9600.20337 https://support.microsoft.com/help/5012639 10484 5012670 5012658 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012658 5011534 9312 10287 9318 9344 Yes Monthly Rollup 6.0.6003.21446 https://support.microsoft.com/help/5012658 9312 10287 9318 9344 5012658 5012658 https://support.microsoft.com/help/5012658 9312 10287 9318 9344 5012632 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012632 9312 10287 9318 9344 Yes Security Only 6.0.6003.21446 https://support.microsoft.com/help/5012632 9312 10287 9318 9344 5012632 5012632 https://support.microsoft.com/help/5012632 9312 10287 9318 9344 5012650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012650 5011535 10378 10379 Yes Monthly Rollup 6.2.9200.23679 https://support.microsoft.com/help/5012650 10378 10379 5012650 5012650 https://support.microsoft.com/help/5012650 10378 10379 5012666 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012666 10378 10379 Yes Security Only 6.2.9200.23679 https://support.microsoft.com/help/5012666 10378 10379 5012666 5012666 https://support.microsoft.com/help/5012666 10378 10379 Yuki Chen with <a href="https://www.cyberkl.com/">Cyber KunLun</a> 1.0 2022-04-12T08:00:00 <p>Information published.</p> .NET Framework Denial of Service Vulnerability .NET Framework Microsoft Yes CVE-2022-26832 11676-11713 10636-10049 11529-10481 11529-10048 11529-10484 11650-10378 11650-10543 11529-10378 11529-10483 11529-10482 11650-10481 11529-10047 11676-11568 11676-11572 11650-10483 10636-9344 11650-10816 11529-10543 11650-10049 11650-10379 11529-10379 11650-10853 11650-10048 11650-10484 10636-10378 11529-10051 10636-10483 10636-10379 10636-10051 11676-11569 11676-11923 11650-10852 10636-9318 11650-10855 11529-10049 11650-10051 11676-11924 10636-10543 11676-11714 11676-11571 11650-10482 11650-10047 11676-11712 11676-11801 11676-11802 11676-11803 11676-11927 11676-11926 11677-11568 11677-11569 11677-11570 11677-11571 11723-10852 11723-10816 11723-10855 11677-11572 11723-10853 10728-9312 9292-9312 10728-9318 9195-9312 9195-9318 9292-9318 2472-10481 2472-10482 2472-10379 2472-10378 2472-10483 2472-10543 9495-10047 9495-10048 9495-10051 9495-10049 10636-10047 10636-10048 10636-10481 10636-10484 10636-10482 10636-9312 10636-10287 11650-11896 11650-11897 11650-11930 11650-11929 11650-11931 11650-11898 Denial of Service 11676-11713 Denial of Service 10636-10049 Denial of Service 11529-10481 Denial of Service 11529-10048 Denial of Service 11529-10484 Denial of Service 11650-10378 Denial of Service 11650-10543 Denial of Service 11529-10378 Denial of Service 11529-10483 Denial of Service 11529-10482 Denial of Service 11650-10481 Denial of Service 11529-10047 Denial of Service 11676-11568 Denial of Service 11676-11572 Denial of Service 11650-10483 Denial of Service 10636-9344 Denial of Service 11650-10816 Denial of Service 11529-10543 Denial of Service 11650-10049 Denial of Service 11650-10379 Denial of Service 11529-10379 Denial of Service 11650-10853 Denial of Service 11650-10048 Denial of Service 11650-10484 Denial of Service 10636-10378 Denial of Service 11529-10051 Denial of Service 10636-10483 Denial of Service 10636-10379 Denial of Service 10636-10051 Denial of Service 11676-11569 Denial of Service 11676-11923 Denial of Service 11650-10852 Denial of Service 10636-9318 Denial of Service 11650-10855 Denial of Service 11529-10049 Denial of Service 11650-10051 Denial of Service 11676-11924 Denial of Service 10636-10543 Denial of Service 11676-11714 Denial of Service 11676-11571 Denial of Service 11650-10482 Denial of Service 11650-10047 Denial of Service 11676-11712 Denial of Service 11676-11801 Denial of Service 11676-11802 Denial of Service 11676-11803 Denial of Service 11676-11927 Denial of Service 11676-11926 Denial of Service 11677-11568 Denial of Service 11677-11569 Denial of Service 11677-11570 Denial of Service 11677-11571 Denial of Service 11723-10852 Denial of Service 11723-10816 Denial of Service 11723-10855 Denial of Service 11677-11572 Denial of Service 11723-10853 Denial of Service 10728-9312 Denial of Service 9292-9312 Denial of Service 10728-9318 Denial of Service 9195-9312 Denial of Service 9195-9318 Denial of Service 9292-9318 Denial of Service 2472-10481 Denial of Service 2472-10482 Denial of Service 2472-10379 Denial of Service 2472-10378 Denial of Service 2472-10483 Denial of Service 2472-10543 Denial of Service 9495-10047 Denial of Service 9495-10048 Denial of Service 9495-10051 Denial of Service 9495-10049 Denial of Service 10636-10047 Denial of Service 10636-10048 Denial of Service 10636-10481 Denial of Service 10636-10484 Denial of Service 10636-10482 Denial of Service 10636-9312 Denial of Service 10636-10287 Denial of Service 11650-11896 Denial of Service 11650-11897 Denial of Service 11650-11930 Denial of Service 11650-11929 Denial of Service 11650-11931 Denial of Service 11650-11898 Important 11676-11713 Important 10636-10049 Important 11529-10481 Important 11529-10048 Important 11529-10484 Important 11650-10378 Important 11650-10543 Important 11529-10378 Important 11529-10483 Important 11529-10482 Important 11650-10481 Important 11529-10047 Important 11676-11568 Important 11676-11572 Important 11650-10483 Important 10636-9344 Important 11650-10816 Important 11529-10543 Important 11650-10049 Important 11650-10379 Important 11529-10379 Important 11650-10853 Important 11650-10048 Important 11650-10484 Important 10636-10378 Important 11529-10051 Important 10636-10483 Important 10636-10379 Important 10636-10051 Important 11676-11569 Important 11676-11923 Important 11650-10852 Important 10636-9318 Important 11650-10855 Important 11529-10049 Important 11650-10051 Important 11676-11924 Important 10636-10543 Important 11676-11714 Important 11676-11571 Important 11650-10482 Important 11650-10047 Important 11676-11712 Important 11676-11801 Important 11676-11802 Important 11676-11803 Important 11676-11927 Important 11676-11926 Important 11677-11568 Important 11677-11569 Important 11677-11570 Important 11677-11571 Important 11723-10852 Important 11723-10816 Important 11723-10855 Important 11677-11572 Important 11723-10853 Important 10728-9312 Important 9292-9312 Important 10728-9318 Important 9195-9312 Important 9195-9318 Important 9292-9318 Important 2472-10481 Important 2472-10482 Important 2472-10379 Important 2472-10378 Important 2472-10483 Important 2472-10543 Important 9495-10047 Important 9495-10048 Important 9495-10051 Important 9495-10049 Important 10636-10047 Important 10636-10048 Important 10636-10481 Important 10636-10484 Important 10636-10482 Important 10636-9312 Important 10636-10287 Important 11650-11896 Important 11650-11897 Important 11650-11930 Important 11650-11929 Important 11650-11931 Important 11650-11898 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-11713 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10636-10049 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11529-10481 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11529-10048 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11529-10484 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11650-10378 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11650-10543 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11529-10378 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11529-10483 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11529-10482 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11650-10481 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11529-10047 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-11568 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-11572 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11650-10483 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10636-9344 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11650-10816 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11529-10543 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11650-10049 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11650-10379 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11529-10379 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11650-10853 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11650-10048 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11650-10484 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10636-10378 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11529-10051 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10636-10483 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10636-10379 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10636-10051 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-11569 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-11923 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11650-10852 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10636-9318 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11650-10855 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11529-10049 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11650-10051 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-11924 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10636-10543 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-11714 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-11571 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11650-10482 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11650-10047 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-11712 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-11801 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-11802 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-11803 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-11927 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-11926 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11677-11568 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11677-11569 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11677-11570 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11677-11571 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11723-10852 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11723-10816 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11723-10855 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11677-11572 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11723-10853 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10728-9312 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 9292-9312 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10728-9318 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 9195-9312 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 9195-9318 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 9292-9318 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 2472-10481 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 2472-10482 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 2472-10379 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 2472-10378 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 2472-10483 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 2472-10543 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 9495-10047 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 9495-10048 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 9495-10051 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 9495-10049 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10636-10047 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10636-10048 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10636-10481 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10636-10484 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10636-10482 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10636-9312 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10636-10287 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11650-11896 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11650-11897 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11650-11930 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11650-11929 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11650-11931 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11650-11898 5012120 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012120 5008879 11676-11713 11676-11714 11676-11712 Maybe Security Update 4.8.4494.03 https://support.microsoft.com/help/5012120 11676-11713 11676-11714 11676-11712 5012120 5012329 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012141 5008860 10636-10049 10636-10051 10636-10047 10636-10048 Maybe Monthly Rollup 4.0.52732.36732 https://support.microsoft.com/help/5012329 10636-10049 10636-10051 10636-10047 10636-10048 5012329 5012324 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012154 10636-10049 10636-10051 10636-10047 10636-10048 Maybe Security Only 4.0.52734.36734 https://support.microsoft.com/help/5012324 10636-10049 10636-10051 10636-10047 10636-10048 5012324 5012324 https://support.microsoft.com/help/5012324 10636-10049 11529-10048 11529-10047 11650-10049 11650-10048 11529-10051 10636-10051 11529-10049 11650-10051 11650-10047 9495-10047 9495-10048 9495-10051 9495-10049 10636-10047 10636-10048 5012331 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012130 5008875 11529-10481 11529-10483 11529-10482 11529-10543 Maybe Monthly Rollup 4.7.03930.02 https://support.microsoft.com/help/5012331 11529-10481 11529-10483 11529-10482 11529-10543 5012331 5012326 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012147 11529-10481 11529-10483 11529-10482 11529-10543 Maybe Security Only 4.0.3930.01 https://support.microsoft.com/help/5012326 11529-10481 11529-10483 11529-10482 11529-10543 5012326 5012329 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012131 5008859 11529-10048 11529-10047 11529-10051 11529-10049 Maybe Monthly Rollup 4.7.03930.02 https://support.microsoft.com/help/5012329 11529-10048 11529-10047 11529-10051 11529-10049 5012329 5012324 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012148 11529-10048 11529-10047 11529-10051 11529-10049 Maybe Security Only 4.7.3930.01 https://support.microsoft.com/help/5012324 11529-10048 11529-10047 11529-10051 11529-10049 5012324 5012331 5008875 11529-10484 Maybe Monthly Rollup 4.7.03930.02 https://support.microsoft.com/help/5012331 11529-10484 5012331 5012330 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012122 5008881 11650-10378 11650-10379 Maybe Monthly Rollup 4.8.04494.03 https://support.microsoft.com/help/5012330 11650-10378 11650-10379 5012330 5012325 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012143 11650-10378 11650-10379 Maybe Security Only 4.8.4494.01 https://support.microsoft.com/help/5012325 11650-10378 11650-10379 5012325 5012331 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012124 5008883 11650-10543 11650-10481 11650-10483 11650-10482 Maybe Monthly Rollup 4.8.04494.03 https://support.microsoft.com/help/5012331 11650-10543 11650-10481 11650-10483 11650-10482 5012331 5012326 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012144 11650-10543 11650-10481 11650-10483 11650-10482 Maybe Security Only 4.8.4494.01 https://support.microsoft.com/help/5012326 11650-10543 11650-10481 11650-10483 11650-10482 5012326 5012330 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012129 5008874 11529-10378 11529-10379 Maybe Monthly Rollup 4.703930.02 https://support.microsoft.com/help/5012330 11529-10378 11529-10379 5012330 5012325 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012146 11529-10378 11529-10379 Maybe Security Only 4.7.3930.01 https://support.microsoft.com/help/5012325 11529-10378 11529-10379 5012325 5012328 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012119 5008878 11676-11568 11676-11572 11676-11569 11676-11571 Maybe Security Update 4.8.4494.03 https://support.microsoft.com/help/5012328 11676-11568 11676-11572 11676-11569 11676-11571 5012328 5012332 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012141 5008860 10636-9344 10636-9318 Maybe Monthly Rollup 52732.36732 https://support.microsoft.com/help/5012332 10636-9344 10636-9318 5012332 5012327 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012154 10636-9344 10636-9318 10636-9312 10636-10287 Maybe Security Only 4.0.52734.36734 https://support.microsoft.com/help/5012327 10636-9344 10636-9318 10636-9312 10636-10287 5012327 5012327 https://support.microsoft.com/help/5012327 10636-9344 10636-9318 10728-9312 9292-9312 10728-9318 9195-9312 9195-9318 9292-9318 10636-9312 10636-10287 5012118 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012118 5008877 11650-10816 11650-10853 11650-10852 11650-10855 Maybe Security Update 4.8.4494.03 https://support.microsoft.com/help/5012118 11650-10816 11650-10853 11650-10852 11650-10855 5012118 5012329 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012125 5008858 11650-10049 11650-10048 11650-10051 11650-10047 Maybe Monthly Rollup 4.8.04494.03 https://support.microsoft.com/help/5012329 11650-10049 11650-10048 11650-10051 11650-10047 5012329 5012324 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012145 11650-10049 11650-10048 11650-10051 11650-10047 Maybe Security Only 4.8.4494.01 https://support.microsoft.com/help/5012324 11650-10049 11650-10048 11650-10051 11650-10047 5012324 5012331 5008883 11650-10484 Maybe Monthly Rollup 4.8.04494.03 https://support.microsoft.com/help/5012331 11650-10484 5012331 5012330 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012140 5008869 10636-10378 10636-10379 Maybe Monthly Rollup 4.0.52730.36730 https://support.microsoft.com/help/5012330 10636-10378 10636-10379 5012330 5012325 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012153 10636-10378 10636-10379 Maybe Security Only 4.0.52730.36730 https://support.microsoft.com/help/5012325 10636-10378 10636-10379 5012325 5012331 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012142 5008870 10636-10483 10636-10543 10636-10481 10636-10482 Maybe Monthly Rollup 4.0.52730.36730 https://support.microsoft.com/help/5012331 10636-10483 10636-10543 10636-10481 10636-10482 5012331 5012326 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012155 10636-10483 10636-10543 10636-10481 10636-10482 Maybe Security Only 4.0.52730.3673 https://support.microsoft.com/help/5012326 10636-10483 10636-10543 10636-10481 10636-10482 5012326 5012123 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012123 5008882 11676-11923 11676-11924 Maybe Security Update 4.8.4494.03 https://support.microsoft.com/help/5012123 11676-11923 11676-11924 5012123 5012117 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012117 5008876 11676-11801 11676-11802 11676-11803 11650-11896 11650-11897 11650-11930 11650-11929 11650-11931 11650-11898 Maybe Security Update 4.8.4494.03 https://support.microsoft.com/help/5012117 11676-11801 11676-11802 11676-11803 11650-11896 11650-11897 11650-11930 11650-11929 11650-11931 11650-11898 5012117 5012121 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012121 5008880 11676-11927 11676-11926 Maybe Security Update 4.8.4494.03 https://support.microsoft.com/help/5012121 11676-11927 11676-11926 5012121 5012328 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012128 5008873 11677-11568 11677-11569 11677-11570 11677-11571 11677-11572 Maybe Security Update 4.7.3930.02 https://support.microsoft.com/help/5012328 11677-11568 11677-11569 11677-11570 11677-11571 11677-11572 5012328 5012596 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012596 5011495 11723-10852 11723-10816 11723-10855 11723-10853 Yes Security Update 10.0.14393.5066 https://support.microsoft.com/help/5012596 11723-10852 11723-10816 11723-10855 11723-10853 5012596 5012596 https://support.microsoft.com/help/5012596 11723-10852 11723-10816 11723-10855 11723-10853 5012332 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012141 5008860 10728-9312 10636-9312 10636-10287 Maybe Monthly Rollup 4.0.52732.36732 https://support.microsoft.com/help/5012332 10728-9312 10636-9312 10636-10287 5012332 5012327 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012148 10728-9312 10728-9318 Maybe Security Only 4.7.3930.01 https://support.microsoft.com/help/5012327 10728-9312 10728-9318 5012327 5012332 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012137 5008866 9292-9312 9195-9312 9195-9318 9292-9318 Maybe Monthly Rollup 2.0.50727.8962 https://support.microsoft.com/help/5012332 9292-9312 9195-9312 9195-9318 9292-9318 5012332 5012327 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012150 9292-9312 9195-9312 9195-9318 9292-9318 Maybe Security Only 2.0.50727.8962 https://support.microsoft.com/help/5012327 9292-9312 9195-9312 9195-9318 9292-9318 5012327 5012332 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012131 5008859 10728-9318 Maybe Monthly Rollup 4.7.03930.02 https://support.microsoft.com/help/5012332 10728-9318 5012332 5016568 2472-10481 Maybe Monthly Rollup https://support.microsoft.com/help/5016568 2472-10481 5016568 5012326 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012152 2472-10481 2472-10482 2472-10483 2472-10543 Maybe Security Only 2.0.50727.8962 https://support.microsoft.com/help/5012326 2472-10481 2472-10482 2472-10483 2472-10543 5012326 5016568 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5016568 2472-10482 2472-10483 2472-10543 Maybe Monthly Rollup https://support.microsoft.com/help/5016568 2472-10482 2472-10483 2472-10543 5016568 5012330 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012136 5008865 2472-10379 2472-10378 Maybe Monthly Rollup 2.0.50727.8962 https://support.microsoft.com/help/5012330 2472-10379 2472-10378 5012330 5012325 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012149 2472-10379 2472-10378 Maybe Security Only 2.0.50727.8962 https://support.microsoft.com/help/5012325 2472-10379 2472-10378 5012325 5012329 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012138 5008867 9495-10047 9495-10048 9495-10051 9495-10049 Maybe Monthly Rollup 6.1.50727.8962 https://support.microsoft.com/help/5012329 9495-10047 9495-10048 9495-10051 9495-10049 5012329 5012324 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012151 9495-10047 9495-10048 9495-10051 9495-10049 Maybe Security Only 2.0.50727.8962 https://support.microsoft.com/help/5012324 9495-10047 9495-10048 9495-10051 9495-10049 5012324 5012331 5008870 10636-10484 Maybe Monthly Rollup 4.0.52730.36730 https://support.microsoft.com/help/5012331 10636-10484 5012331 <a href="https://twitter.com/orange_8361">Orange Tsai (@orange_8361)</a> with <a href="https://devco.re/">DEVCORE</a> 2.0 2022-04-19T07:00:00 <p>In the Security Updates table, added .NET Framework 4.8 installed on Windows Server 2016 and Windows Server 2016 (Server Core installation), .NET Framework 3.5 and 4.7.2 intalled on Windows Server 2019 and Windows Server 2019 (Server Core installation), and .NET Framework 3.5 and 4.8 installed on Windows Server 2019 and Windows Server 2019 (Server Core installation) as these versions of Windows Server with these versions of .NET Framework installed are affected by this vulnerability. Customers running these versions of .NET Framework should install the April 2022 security updates to be protected from this vulnerability.</p> 3.0 2022-06-14T07:00:00 <p>In the Security Updates table, added .NET Framework 4.6.2/4.7/4.7.1/4.7.2 installed on Windows 10 version 1607, Windows Server 2016, and Windows Server 2016 (Server Core installation) as these versions of Window 10 and Windows Server with .NET Framework 4.6.2/4.7/4.7.1/4.7.2 installed are affected by this vulnerability. Customers running these versions of .NET Framework should install the April 2022 security updates to be protected from this vulnerability.</p> 4.0 2022-08-09T07:00:00 <p>To comprehensively address this vulnerability, Microsoft has released Monthly Rollup KB5016268 for .NET Framework 3.5 installed on Windows 8.1 and Windows Server 2012 R2. Microsoft strongly recommends that customers install the update to be fully protected from the vulnerability. Customers whose systems are configured to receive automatic updates do not need to take any further action.</p> 1.0 2022-04-12T08:00:00 <p>Information published.</p> 4.1 2024-06-24T07:00:00 <p>Updated the build numbers. This is an informational update only.</p> Windows Upgrade Assistant Remote Code Execution Vulnerability <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>The attacker would need to trick or coerce a legitimate user into downloading and executing a specially crafted install file</p> <p><strong>How do I get the update?</strong></p> <p>The Windows Upgrade Assistant for Windows 10 will automatically install the fix when you navigate to <a href="https://www.microsoft.com/software-download/windows10">https://www.microsoft.com/software-download/windows10</a> and click <strong>Update Now</strong>.</p> Windows Upgrade Assistant Microsoft Yes CVE-2022-24543 12027 Remote Code Execution 12027 Important 12027 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12027 Release Notes https://www.microsoft.com/en-us/software-download/windows10 12027 Maybe Security Update 1.4.19041.1555 https://www.microsoft.com/en-us/software-download/windows10 12027 Release Notes <a href="https://twitter.com/onnoveath">JaeHeng Yoon(@onnoveath)</a> with JENBlack Soft <a href="https://twitter.com/l33d0hyun">DoHyun Lee(@l33d0hyun)</a> with DNSLab, Korea University <a href="https://twitter.com/SeungYun_Le2">SeungYun LEE(@SeungYun_Le2)</a> 1.1 2022-04-19T07:00:00 <p>Updated acknowledgment. This is an informational change only.</p> 1.0 2022-04-12T07:00:00 <p>Information published.</p> HEVC Video Extensions Remote Code Execution Vulnerability <p><strong>According to the CVSS metric, the attack vector is local (AV:L). Why does the CVE title indicate that this is a remote code execution?</strong></p> <p>The word <strong>Remote</strong> in the title refers to the location of the attacker. This type of exploit is sometimes referred to as Arbitrary Code Execution (ACE). The attack itself is carried out locally.</p> <p>For example, when the score indicates that the <strong>Attack Vector</strong> is <strong>Local</strong> and <strong>User Interaction</strong> is <strong>Required</strong>, this could describe an exploit in which an attacker, through social engineering, convinces a victim to download and open a specially crafted file from a website which leads to a local attack on their computer.</p> <p><strong>My system is in a disconnected environment. Is it vulnerable?</strong></p> <p>Customers using the Volume Licensing Servicing Center can get this update through their organizations.</p> <p><strong>How can I check if the update is installed?</strong></p> <p>If your device manufacturer preinstalled this app, package versions <strong>1.0.50361.0</strong> and later contain this update.</p> <p>If you purchased this app from the Microsoft Store, package versions <strong>1.0.50362.0</strong> and later contain this update.</p> <p>You can check the package version in PowerShell:</p> <p><code>Get-AppxPackage -Name Microsoft.HEVCVideoExtension*</code></p> Microsoft Windows Codecs Library Microsoft Yes CVE-2022-24532 12010 11808 Remote Code Execution 12010 Remote Code Execution 11808 Important 12010 Important 11808 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12010 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11808 Update Information 12010 Maybe Security Update 1.0.50361.0 https://support.microsoft.com/en-us/account-billing/get-updates-for-apps-and-games-in-microsoft-store-a1fe19c0-532d-ec47-7035-d1c5a1dd464f 12010 Update Information Update Information 11808 Maybe Security Update 1.0.50362.0 https://support.microsoft.com/en-us/account-billing/get-updates-for-apps-and-games-in-microsoft-store-a1fe19c0-532d-ec47-7035-d1c5a1dd464f 11808 Update Information Dhanesh Kizhakkinan with Mandiant 1.0 2022-04-12T07:00:00 <p>Information published.</p> Windows Graphics Component Remote Code Execution Vulnerability <p><strong>According to the CVSS metric, the attack vector is local (AV:L). Why does the CVE title indicate that this is a remote code execution?</strong></p> <p>The word <strong>Remote</strong> in the title refers to the location of the attacker. This type of exploit is sometimes referred to as Arbitrary Code Execution (ACE). The attack itself is carried out locally.</p> <p>For example, when the score indicates that the <strong>Attack Vector</strong> is <strong>Local</strong> and <strong>User Interaction</strong> is <strong>Required</strong>, this could describe an exploit in which an attacker, through social engineering, convinces a victim to download and open a specially crafted file from a website which leads to a local attack on their computer.</p> Microsoft Graphics Component Microsoft Yes CVE-2022-26903 11568 11569 11570 11571 11572 11712 11713 11714 11896 11897 11898 11923 11924 11801 11802 11803 11929 11930 11931 10729 10735 10852 10853 10816 10855 10047 10048 10481 10482 10484 9312 10287 9318 9344 10051 10049 10378 10379 10483 10543 12031 12032 11772 12033 12034 12035 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11570 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11712 Remote Code Execution 11713 Remote Code Execution 11714 Remote Code Execution 11896 Remote Code Execution 11897 Remote Code Execution 11898 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 11801 Remote Code Execution 11802 Remote Code Execution 11803 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 10729 Remote Code Execution 10735 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10047 Remote Code Execution 10048 Remote Code Execution 10481 Remote Code Execution 10482 Remote Code Execution 10484 Remote Code Execution 9312 Remote Code Execution 10287 Remote Code Execution 9318 Remote Code Execution 9344 Remote Code Execution 10051 Remote Code Execution 10049 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Remote Code Execution 12031 Remote Code Execution 12032 Remote Code Execution 11772 Remote Code Execution 12033 Remote Code Execution 12034 Remote Code Execution 12035 Important 11568 Important 11569 Important 11570 Important 11571 Important 11572 Important 11712 Important 11713 Important 11714 Important 11896 Important 11897 Important 11898 Important 11923 Important 11924 Important 11801 Important 11802 Important 11803 Important 11929 Important 11930 Important 11931 Important 10729 Important 10735 Important 10852 Important 10853 Important 10816 Important 10855 Important 10047 Important 10048 Important 10481 Important 10482 Important 10484 Important 9312 Important 10287 Important 9318 Important 9344 Important 10051 Important 10049 Important 10378 Important 10379 Important 10483 Important 10543 Important 12031 Important 12032 Important 11772 Important 12033 Important 12034 Important 12035 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11570 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11712 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11713 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11714 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11896 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11897 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11898 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11801 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11802 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11803 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10729 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10735 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10047 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10048 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10481 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10482 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10484 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9312 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10287 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9318 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 9344 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10051 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10049 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12031 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12032 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11772 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12033 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12034 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12035 5012647 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012647 5011503 11568 11569 11570 11571 11572 Yes Security Update 10.0.17763.2803 https://support.microsoft.com/help/5012647 11568 11569 11570 11571 11572 5012647 5012647 https://support.microsoft.com/help/5012647 11568 11569 11570 11571 11572 5012591 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012591 5011485 11712 11713 11714 Yes Security Update 10.0.18363.2212 https://support.microsoft.com/help/5012591 11712 11713 11714 5012591 5012591 https://support.microsoft.com/help/5012591 11712 11713 11714 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11896 11897 11898 11929 Yes Security Update 10.0.19043.1645 https://support.microsoft.com/help/5012599 11896 11897 11898 11929 5012599 5012599 https://support.microsoft.com/help/5012599 11896 11897 11898 11801 11802 11803 11929 11930 11931 5012604 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012604 5011497 11923 11924 Yes Security Update 10.0.20348.643 https://support.microsoft.com/help/5012604 11923 11924 5012604 5012604 https://support.microsoft.com/help/5012604 11923 11924 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11801 11802 11803 Yes Security Update 10.0.19042.1645 https://support.microsoft.com/help/5012599 11801 11802 11803 5012599 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11930 11931 Yes Security Update 10.0.19044.1645 https://support.microsoft.com/help/5012599 11930 11931 5012599 5012653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012653 5011491 10729 10735 Yes Security Update 10.0.10240.19265 https://support.microsoft.com/help/5012653 10729 10735 5012653 5012653 https://support.microsoft.com/help/5012653 10729 10735 5012596 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012596 5011495 10852 10853 10816 10855 Yes Security Update 10.0.14393.5066 https://support.microsoft.com/help/5012596 10852 10853 10816 10855 5012596 5012596 https://support.microsoft.com/help/5012596 10852 10853 10816 10855 5012626 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012626 5011552 10047 10048 10051 10049 Yes Monthly Rollup 6.1.7601.25924 https://support.microsoft.com/help/5012626 10047 10048 10051 10049 5012626 5012626 https://support.microsoft.com/help/5012626 10047 10048 10051 10049 5012649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012649 10047 10048 10051 10049 Yes Security Only 6.1.7601.25924 https://support.microsoft.com/help/5012649 10047 10048 10051 10049 5012649 5012649 https://support.microsoft.com/help/5012649 10047 10048 10051 10049 5012670 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012670 5011564 10481 10482 10483 10543 Yes Monthly Rollup 6.3.9600.20337 https://support.microsoft.com/help/5012670 10481 10482 10483 10543 5012670 5012670 https://support.microsoft.com/help/5012670 10481 10482 10484 10483 10543 5012639 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012639 10481 10482 10483 10543 Yes Security Only 6.3.9600.20337 https://support.microsoft.com/help/5012639 10481 10482 10483 10543 5012639 5012639 https://support.microsoft.com/help/5012639 10481 10482 10483 10543 5012670 5011564 10484 Yes Monthly Rollup 6.3.9600.20337 https://support.microsoft.com/help/5012639 10484 5012670 5012658 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012658 5011534 9312 10287 9318 9344 Yes Monthly Rollup 6.0.6003.21446 https://support.microsoft.com/help/5012658 9312 10287 9318 9344 5012658 5012658 https://support.microsoft.com/help/5012658 9312 10287 9318 9344 5012632 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012632 9312 10287 9318 9344 Yes Security Only 6.0.6003.21446 https://support.microsoft.com/help/5012632 9312 10287 9318 9344 5012632 5012632 https://support.microsoft.com/help/5012632 9312 10287 9318 9344 5012650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012650 5011535 10378 10379 Yes Monthly Rollup 6.2.9200.23679 https://support.microsoft.com/help/5012650 10378 10379 5012650 5012650 https://support.microsoft.com/help/5012650 10378 10379 5012666 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012666 10378 10379 Yes Security Only 6.2.9200.23679 https://support.microsoft.com/help/5012666 10378 10379 5012666 5012666 https://support.microsoft.com/help/5012666 10378 10379 Release Notes https://play.google.com/store/apps/details?id=com.microsoft.office.excel&hl=en_US 12031 Maybe Security Update 16.0.15028.20140 https://play.google.com/store/apps/details?id=com.microsoft.office.excel&hl=en_US 12031 Release Notes Release Notes https://play.google.com/store/apps/details?id=com.microsoft.office.powerpoint&hl=en_US 12032 Maybe Security Update 16.0.15028.20116 https://play.google.com/store/apps/details?id=com.microsoft.office.powerpoint&hl=en_US 12032 Release Notes Release Notes https://play.google.com/store/apps/details?id=com.microsoft.office.word&hl=en_US 11772 Maybe Security Update 16.0.15028.20116 https://play.google.com/store/apps/details?id=com.microsoft.office.word&hl=en_US 11772 Release Notes Release Notes https://www.microsoft.com/en-us/p/word-mobile-preview/9wzdncrfjb9s?culture=en-us&country=US&activetab=pivot:overviewtab 12033 Maybe Security Update 16.0.14326.20910 https://www.microsoft.com/en-us/p/word-mobile-preview/9wzdncrfjb9s?culture=en-us&country=US&activetab=pivot:overviewtab 12033 Release Notes Release Notes https://www.microsoft.com/en-us/p/excel-mobile-preview/9wzdncrfjbh3?culture=en-us&country=US&activetab=pivot:overviewtab 12034 Maybe Security Update 16.0.14326.20910 https://www.microsoft.com/en-us/p/excel-mobile-preview/9wzdncrfjbh3?culture=en-us&country=US&activetab=pivot:overviewtab 12034 Release Notes Release Notes https://www.microsoft.com/en-us/p/powerpoint-mobile-preview/9wzdncrfjb5q?culture=en-us&country=US&activetab=pivot:overviewtab 12035 Maybe Security Update 16.0.14326.20910 https://www.microsoft.com/en-us/p/powerpoint-mobile-preview/9wzdncrfjb5q?culture=en-us&country=US&activetab=pivot:overviewtab 12035 Release Notes Li Shuang and willJ of vulnerability research institute 1.0 2022-04-12T07:00:00 <p>Information published.</p> Azure SDK for .NET Information Disclosure Vulnerability <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>This vulnerability could disclose sensitive information in exception body, which might include user access tokens.</p> <p><strong>According to the CVSS metric, privileges required is low (PR:L). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to have access to the location where the application that is using the SDK is storing the exception (for example, event logs).</p> Azure SDK Microsoft Yes CVE-2022-26907 12024 Information Disclosure 12024 Important 12024 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 5.3 4.8 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C 12024 Release Notes https://www.nuget.org/packages/Microsoft.Rest.ClientRuntime 12024 Maybe Security Update 2.3.24 https://www.nuget.org/packages/Microsoft.Rest.ClientRuntime 12024 Release Notes 1.0 2022-04-12T08:00:00 <p>Information published.</p> Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to take additional actions prior to exploitation to prepare the target environment.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>100.0.1185.29</td> <td>4/1/2022</td> <td>100.0.4896.60</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Microsoft Yes CVE-2022-26900 11655 Elevation of Privilege 11655 Important 11655 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 8.3 7.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11655 Release Notes 11655 No Security Update 100.0.1185.29 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes <a href="https://www.daviderceg.com/">David Erceg</a> 1.0 2022-04-01T07:00:00 <p>Information published.</p> Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to take additional actions prior to exploitation to prepare the target environment.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>100.0.1185.29</td> <td>4/1/2022</td> <td>100.0.4896.60</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Microsoft Yes CVE-2022-26908 11655 Elevation of Privilege 11655 Important 11655 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 8.3 7.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11655 Release Notes 11655 No Security Update 100.0.1185.29 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes <a href="https://www.daviderceg.com/">David Erceg</a> 1.0 2022-04-01T07:00:00 <p>Information published.</p> Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to take additional actions prior to exploitation to prepare the target environment.</p> <p><strong>Why is the severity for this CVE rated as Moderate, but the CVSS score is 8.3?</strong></p> <p><a href="https://www.microsoft.com/en-us/msrc/bounty-new-edge">Per our severity guidelines</a>, the amount of user interaction or preconditions required to allow this sort of exploitation downgraded the severity. The CVSS scoring system doesn't allow for this type of nuance.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>100.0.1185.29</td> <td>4/1/2022</td> <td>100.0.4896.60</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Microsoft Yes CVE-2022-26909 11655 Elevation of Privilege 11655 Moderate 11655 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 8.3 7.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11655 Release Notes 11655 No Security Update 100.0.1185.29 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes <a href="https://www.daviderceg.com/">David Erceg</a> 1.0 2022-04-01T07:00:00 <p>Information published.</p> Skype for Business and Lync Spoofing Vulnerability <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An attacker could make a specially crafted network call to the target Skype for Business server, which could cause the parsing of an http request made to an arbitrary address. This could disclose IP addresses or port numbers or both to the attacker.</p> Skype for Business Microsoft Yes CVE-2022-26910 12025 12026 Spoofing 12025 Spoofing 12026 Important 12025 Important 12026 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 5.3 4.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C 12025 5.3 4.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C 12026 5012686 https://www.microsoft.com/download/details.aspx?familyid=0d08ed37-106a-456f-a5c6-61df22588bec 12025 Maybe Security Update 9319.628 https://support.microsoft.com/help/5012686 12025 5012686 5012686 12026 Maybe Security Update 2046.396 https://support.microsoft.com/help/5012686 12026 5012686 <a href="https://twitter.com/rskvp93">rskvp93</a> with <a href="https://lab.viettelcybersecurity.com/">VCSLAB of Viettel Cyber Security</a> 1.0 2022-04-12T08:00:00 <p>Information published.</p> Skype for Business Information Disclosure Vulnerability <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is file content.</p> Skype for Business Microsoft Yes CVE-2022-26911 11892 12025 12026 Information Disclosure 11892 Information Disclosure 12025 Information Disclosure 12026 Important 11892 Important 12025 Important 12026 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11892 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12025 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12026 5012681 https://www.microsoft.com/download/details.aspx?familyid=dac7c777-fe8a-45a2-9a82-07a2e15c298f 11892 Maybe Security Update 8308.1194 https://support.microsoft.com/help/5012681 11892 5012681 5012686 https://www.microsoft.com/download/details.aspx?familyid=0d08ed37-106a-456f-a5c6-61df22588bec 12025 12026 Maybe Security Update 9319.628 https://support.microsoft.com/help/5012686 12025 12026 5012686 <a href="https://twitter.com/rskvp93">rskvp93</a> with <a href="https://lab.viettelcybersecurity.com/">VCSLAB of Viettel Cyber Security</a> 1.0 2022-04-12T08:00:00 <p>Information published.</p> Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to take additional actions prior to exploitation to prepare the target environment.</p> <p><strong>Why is the severity for this CVE rated as Moderate, but the CVSS score is 8.3?</strong></p> <p><a href="https://www.microsoft.com/en-us/msrc/bounty-new-edge">Per our severity guidelines</a>, the amount of user interaction or preconditions required to allow this sort of exploitation downgraded the severity. The CVSS scoring system doesn't allow for this type of nuance.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>100.0.1185.29</td> <td>4/1/2022</td> <td>100.0.4896.60</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Microsoft Yes CVE-2022-26912 11655 Elevation of Privilege 11655 Moderate 11655 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 8.3 7.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11655 Release Notes 11655 No Security Update 100.0.1185.29 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes <a href="https://www.daviderceg.com/">David Erceg</a> 1.0 2022-04-01T07:00:00 <p>Information published.</p> Visual Studio Code Elevation of Privilege Vulnerability Visual Studio Code Microsoft Yes CVE-2022-26921 11622 Elevation of Privilege 11622 Important 11622 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 7.3 6.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11622 Release Notes https://code.visualstudio.com/Download 11622 Maybe Security Update 1.66.2 https://code.visualstudio.com/updates/v1_66 11622 Release Notes s7331 with <a href="https://controlgap.com/">Control Gap</a> 1.0 2022-04-12T08:00:00 <p>Information published.</p> YARP Denial of Service Vulnerability <p><strong>Where can I find more information about YARP?</strong></p> <p>To learn more about YARP, see <a href="https://microsoft.github.io/reverse-proxy/">YARP: Yet Another Reverse Proxy</a>.</p> YARP reverse proxy Microsoft Yes CVE-2022-26924 12029 12030 Denial of Service 12029 Denial of Service 12030 Important 12029 Important 12030 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12029 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12030 Release Notes https://www.nuget.org/packages/Yarp.ReverseProxy/1.0.1 12029 Maybe Security Update 1.0.1 https://github.com/microsoft/reverse-proxy/security/advisories/GHSA-8xc6-g8xw-h2c4 12029 Release Notes Release Notes https://www.nuget.org/packages/Yarp.ReverseProxy/1.1.0-rc.1.22211.2 12030 Maybe Security Update 1.1.0-rc.1.22211.2 https://github.com/microsoft/reverse-proxy/security/advisories/GHSA-8xc6-g8xw-h2c4 12030 Release Notes 1.0 2022-04-12T08:00:00 <p>Information published.</p> Chromium: CVE-2022-1305 Use after free in storage <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2022">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>100.0.1185.44</td> <td>4/15/2022</td> <td>100.0.4896.127</td> </tr> <tr> <td>100.0.1185.44</td> <td>4/15/2022</td> <td>100.0.4896.88</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2022-1305 11655 11655 11655 Release Notes 11655 No Security Update 100.0.1185.44 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2022-04-15T07:00:00 <p>Information published.</p> Chromium: CVE-2022-1306 Inappropriate implementation in compositing <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2022">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>100.0.1185.44</td> <td>4/15/2022</td> <td>100.0.4896.127</td> </tr> <tr> <td>100.0.1185.44</td> <td>4/15/2022</td> <td>100.0.4896.88</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2022-1306 11655 11655 11655 Release Notes 11655 No Security Update 100.0.1185.44 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2022-04-15T07:00:00 <p>Information published.</p> Chromium: CVE-2022-1307 Inappropriate implementation in full screen <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2022">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>100.0.1185.44</td> <td>4/15/2022</td> <td>100.0.4896.127</td> </tr> <tr> <td>100.0.1185.44</td> <td>4/15/2022</td> <td>100.0.4896.88</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2022-1307 11655 11655 11655 Release Notes 11655 No Security Update 100.0.1185.44 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2022-04-15T07:00:00 <p>Information published.</p> Chromium: CVE-2022-1308 Use after free in BFCache <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2022">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>100.0.1185.44</td> <td>4/15/2022</td> <td>100.0.4896.127</td> </tr> <tr> <td>100.0.1185.44</td> <td>4/15/2022</td> <td>100.0.4896.88</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2022-1308 11655 11655 11655 Release Notes 11655 No Security Update 100.0.1185.44 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2022-04-15T07:00:00 <p>Information published.</p> Chromium: CVE-2022-1309 Insufficient policy enforcement in developer tools <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2022">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>100.0.1185.44</td> <td>4/15/2022</td> <td>100.0.4896.127</td> </tr> <tr> <td>100.0.1185.44</td> <td>4/15/2022</td> <td>100.0.4896.88</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2022-1309 11655 11655 11655 Release Notes 11655 No Security Update 100.0.1185.44 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2022-04-15T07:00:00 <p>Information published.</p> Chromium: CVE-2022-1310 Use after free in regular expressions <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2022">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>100.0.1185.44</td> <td>4/15/2022</td> <td>100.0.4896.127</td> </tr> <tr> <td>100.0.1185.44</td> <td>4/15/2022</td> <td>100.0.4896.88</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2022-1310 11655 11655 11655 Release Notes 11655 No Security Update 100.0.1185.44 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2022-04-15T07:00:00 <p>Information published.</p> Chromium: CVE-2022-1312 Use after free in storage <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2022">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>100.0.1185.44</td> <td>4/15/2022</td> <td>100.0.4896.127</td> </tr> <tr> <td>100.0.1185.44</td> <td>4/15/2022</td> <td>100.0.4896.88</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2022-1312 11655 11655 11655 Release Notes 11655 No Security Update 100.0.1185.44 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2022-04-15T07:00:00 <p>Information published.</p> Chromium: CVE-2022-1313 Use after free in tab groups <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2022">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>100.0.1185.44</td> <td>4/15/2022</td> <td>100.0.4896.127</td> </tr> <tr> <td>100.0.1185.44</td> <td>4/15/2022</td> <td>100.0.4896.88</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2022-1313 11655 11655 11655 Release Notes 11655 No Security Update 100.0.1185.44 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2022-04-15T07:00:00 <p>Information published.</p> Chromium: CVE-2022-1314 Type Confusion in V8 <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2022">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>100.0.1185.44</td> <td>4/15/2022</td> <td>100.0.4896.127</td> </tr> <tr> <td>100.0.1185.44</td> <td>4/15/2022</td> <td>100.0.4896.88</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2022-1314 11655 11655 11655 Release Notes 11655 No Security Update 100.0.1185.44 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2022-04-15T07:00:00 <p>Information published.</p> Chromium: CVE-2022-1364: Type Confusion in V8 <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2022">Google Chrome Releases</a> for more information.</p> <p>Google is aware that an exploit for CVE-2022-1364 exists in the wild.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>100.0.1185.44</td> <td>4/15/2022</td> <td>100.0.4896.127</td> </tr> <tr> <td>100.0.1185.44</td> <td>4/15/2022</td> <td>100.0.4896.88</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2022-1364 11655 11655 11655 Release Notes 11655 No Security Update 100.0.1185.29 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2022-04-15T07:00:00 <p>Information published.</p> Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to take additional actions prior to exploitation to prepare the target environment.</p> <p><strong>Why is the severity for this CVE rated as Moderate, but the CVSS score is 8.3?</strong></p> <p><a href="https://www.microsoft.com/en-us/msrc/bounty-new-edge">Per our severity guidelines</a>, the amount of user interaction or preconditions required to allow this sort of exploitation downgraded the severity. The CVSS scoring system doesn't allow for this type of nuance.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>100.0.1185.44</td> <td>4/15/2022</td> <td>100.0.4896.127</td> </tr> <tr> <td>100.0.1185.44</td> <td>4/15/2022</td> <td>100.0.4896.88</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Microsoft Yes CVE-2022-29144 11655 Elevation of Privilege 11655 Important 11655 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11655 Release Notes 11655 No Security Update 100.0.1185.44 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes <a href="https://www.daviderceg.com/">David Erceg</a> 1.0 2022-04-15T07:00:00 <p>Information published.</p> 1.1 2023-08-01T07:00:00 <p>Updated one or more CVSS scores for the affected products. This is an informational change only.</p> https://nvd.nist.gov/vuln/detail/CVE-2018-1311 https://nvd.nist.gov/vuln/detail/CVE-2018-1311 Mariner security@apache.org Yes CVE-2018-1311 12137 12138 12137 12138 12137 12138 8.1 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H 12137 8.1 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H 12138 xerces-c 12137 xerces-c-3.2.3-2.cm1.x86_64.rpm 0001-01-01T00:00:00 xerces-c-devel-3.2.3-2.cm1.x86_64.rpm 0001-01-01T00:00:00 xerces-c-debuginfo-3.2.3-2.cm1.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 3.2.3-2 https://nvd.nist.gov/vuln/detail/CVE-2018-1311 12137 xerces-c xerces-c 12138 xerces-c-3.2.3-2.cm1.aarch64.rpm 0001-01-01T00:00:00 xerces-c-devel-3.2.3-2.cm1.aarch64.rpm 0001-01-01T00:00:00 xerces-c-debuginfo-3.2.3-2.cm1.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 3.2.3-2 https://nvd.nist.gov/vuln/detail/CVE-2018-1311 12138 xerces-c 1.0 2022-04-06T00:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2021-3572 Mariner secalert@redhat.com Yes CVE-2021-3572 12137 12138 12137 12138 12137 12138 5.7 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N 12137 5.7 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N 12138 python-pip 12137 12138 python-pip-19.2-2.cm1.noarch.rpm 0001-01-01T00:00:00 CBL-Mariner 19.2-2 https://nvd.nist.gov/vuln/detail/CVE-2021-3572 12137 12138 python-pip 1.0 2022-04-09T00:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2021-36230 https://nvd.nist.gov/vuln/detail/CVE-2021-36230 Mariner cve@mitre.org Yes CVE-2021-36230 12139 12140 12139 12140 12139 12140 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 12139 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 12140 terraform 12139 terraform-1.3.2-1.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.3.2-1 https://nvd.nist.gov/vuln/detail/CVE-2021-36230 12139 terraform terraform 12140 terraform-1.3.2-1.cm2.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.3.2-1 https://nvd.nist.gov/vuln/detail/CVE-2021-36230 12140 terraform 1.0 2022-04-02T00:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2021-4202 https://nvd.nist.gov/vuln/detail/CVE-2021-4202 https://nvd.nist.gov/vuln/detail/CVE-2021-4202 https://nvd.nist.gov/vuln/detail/CVE-2021-4202 Mariner secalert@redhat.com Yes CVE-2021-4202 12137 12138 12139 12140 12137 12138 12139 12140 12137 12138 12139 12140 7.0 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H 12137 7.0 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H 12138 7.0 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H 12139 7.0 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H 12140 kernel 12137 kernel-5.10.111.1-1.cm1.x86_64.rpm 0001-01-01T00:00:00 kernel-devel-5.10.111.1-1.cm1.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-5.10.111.1-1.cm1.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-5.10.111.1-1.cm1.x86_64.rpm 0001-01-01T00:00:00 kernel-docs-5.10.111.1-1.cm1.x86_64.rpm 0001-01-01T00:00:00 kernel-oprofile-5.10.111.1-1.cm1.x86_64.rpm 0001-01-01T00:00:00 kernel-tools-5.10.111.1-1.cm1.x86_64.rpm 0001-01-01T00:00:00 bpftool-5.10.111.1-1.cm1.x86_64.rpm 0001-01-01T00:00:00 kernel-debuginfo-5.10.111.1-1.cm1.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 5.10.111.1-1 https://nvd.nist.gov/vuln/detail/CVE-2021-4202 12137 kernel kernel 12138 kernel-5.10.111.1-1.cm1.aarch64.rpm 0001-01-01T00:00:00 kernel-devel-5.10.111.1-1.cm1.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-5.10.111.1-1.cm1.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-5.10.111.1-1.cm1.aarch64.rpm 0001-01-01T00:00:00 kernel-docs-5.10.111.1-1.cm1.aarch64.rpm 0001-01-01T00:00:00 kernel-tools-5.10.111.1-1.cm1.aarch64.rpm 0001-01-01T00:00:00 kernel-dtb-5.10.111.1-1.cm1.aarch64.rpm 0001-01-01T00:00:00 bpftool-5.10.111.1-1.cm1.aarch64.rpm 0001-01-01T00:00:00 kernel-debuginfo-5.10.111.1-1.cm1.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 5.10.111.1-1 https://nvd.nist.gov/vuln/detail/CVE-2021-4202 12138 kernel kernel 12139 kernel-5.15.41.1-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-devel-5.15.41.1-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-5.15.41.1-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-5.15.41.1-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-docs-5.15.41.1-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-tools-5.15.41.1-1.cm2.x86_64.rpm 0001-01-01T00:00:00 python3-perf-5.15.41.1-1.cm2.x86_64.rpm 0001-01-01T00:00:00 bpftool-5.15.41.1-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-debuginfo-5.15.41.1-1.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 5.15.37.1-2 https://nvd.nist.gov/vuln/detail/CVE-2021-4202 12139 kernel kernel 12140 kernel-5.15.41.1-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-devel-5.15.41.1-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-5.15.41.1-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-5.15.41.1-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-docs-5.15.41.1-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-tools-5.15.41.1-1.cm2.aarch64.rpm 0001-01-01T00:00:00 python3-perf-5.15.41.1-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-dtb-5.15.41.1-1.cm2.aarch64.rpm 0001-01-01T00:00:00 bpftool-5.15.41.1-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-debuginfo-5.15.41.1-1.cm2.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 5.15.37.1-2 https://nvd.nist.gov/vuln/detail/CVE-2021-4202 12140 kernel 1.0 2022-04-08T00:00:00 <p>Information published.</p> 1.1 2022-04-09T00:00:00 <p>Added kernel to CBL-Mariner 1.0</p> https://nvd.nist.gov/vuln/detail/CVE-2020-26558 https://nvd.nist.gov/vuln/detail/CVE-2020-26558 Mariner cve@mitre.org Yes CVE-2020-26558 12137 12138 12137 12138 12137 12138 4.2 4.2 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N 12137 4.2 4.2 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N 12138 kernel 12137 kernel-5.10.116.1-1.cm1.x86_64.rpm 0001-01-01T00:00:00 kernel-devel-5.10.116.1-1.cm1.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-5.10.116.1-1.cm1.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-5.10.116.1-1.cm1.x86_64.rpm 0001-01-01T00:00:00 kernel-docs-5.10.116.1-1.cm1.x86_64.rpm 0001-01-01T00:00:00 kernel-oprofile-5.10.116.1-1.cm1.x86_64.rpm 0001-01-01T00:00:00 kernel-tools-5.10.116.1-1.cm1.x86_64.rpm 0001-01-01T00:00:00 bpftool-5.10.116.1-1.cm1.x86_64.rpm 0001-01-01T00:00:00 kernel-debuginfo-5.10.116.1-1.cm1.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 5.10.116.1-1 https://nvd.nist.gov/vuln/detail/CVE-2020-26558 12137 kernel kernel 12138 kernel-5.10.116.1-1.cm1.aarch64.rpm 0001-01-01T00:00:00 kernel-devel-5.10.116.1-1.cm1.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-5.10.116.1-1.cm1.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-5.10.116.1-1.cm1.aarch64.rpm 0001-01-01T00:00:00 kernel-docs-5.10.116.1-1.cm1.aarch64.rpm 0001-01-01T00:00:00 kernel-tools-5.10.116.1-1.cm1.aarch64.rpm 0001-01-01T00:00:00 kernel-dtb-5.10.116.1-1.cm1.aarch64.rpm 0001-01-01T00:00:00 bpftool-5.10.116.1-1.cm1.aarch64.rpm 0001-01-01T00:00:00 kernel-debuginfo-5.10.116.1-1.cm1.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 5.10.116.1-1 https://nvd.nist.gov/vuln/detail/CVE-2020-26558 12138 kernel 1.0 2022-04-23T00:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2019-1010238 https://nvd.nist.gov/vuln/detail/CVE-2019-1010238 Mariner cve-assign@distributedweaknessfiling.org Yes CVE-2019-1010238 12139 12140 12139 12140 12139 12140 9.8 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H 12139 9.8 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H 12140 pango 12139 pango-1.45.5-1.cm2.x86_64.rpm 0001-01-01T00:00:00 pango-devel-1.45.5-1.cm2.x86_64.rpm 0001-01-01T00:00:00 pango-debuginfo-1.45.5-1.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.45.5-1 https://nvd.nist.gov/vuln/detail/CVE-2019-1010238 12139 pango pango 12140 pango-1.45.5-1.cm2.aarch64.rpm 0001-01-01T00:00:00 pango-devel-1.45.5-1.cm2.aarch64.rpm 0001-01-01T00:00:00 pango-debuginfo-1.45.5-1.cm2.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.45.5-1 https://nvd.nist.gov/vuln/detail/CVE-2019-1010238 12140 pango 1.0 2022-04-07T00:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2020-35501 https://nvd.nist.gov/vuln/detail/CVE-2020-35501 https://nvd.nist.gov/vuln/detail/CVE-2020-35501 https://nvd.nist.gov/vuln/detail/CVE-2020-35501 Mariner secalert@redhat.com Yes CVE-2020-35501 12137 12138 12139 12140 12137 12138 12139 12140 12137 12138 12139 12140 3.4 3.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N 12137 3.4 3.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N 12138 3.4 3.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N 12139 3.4 3.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N 12140 kernel 12137 kernel-5.10.116.1-1.cm1.x86_64.rpm 0001-01-01T00:00:00 kernel-devel-5.10.116.1-1.cm1.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-5.10.116.1-1.cm1.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-5.10.116.1-1.cm1.x86_64.rpm 0001-01-01T00:00:00 kernel-docs-5.10.116.1-1.cm1.x86_64.rpm 0001-01-01T00:00:00 kernel-oprofile-5.10.116.1-1.cm1.x86_64.rpm 0001-01-01T00:00:00 kernel-tools-5.10.116.1-1.cm1.x86_64.rpm 0001-01-01T00:00:00 bpftool-5.10.116.1-1.cm1.x86_64.rpm 0001-01-01T00:00:00 kernel-debuginfo-5.10.116.1-1.cm1.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 5.10.116.1-1 https://nvd.nist.gov/vuln/detail/CVE-2020-35501 12137 kernel kernel 12138 kernel-5.10.116.1-1.cm1.aarch64.rpm 0001-01-01T00:00:00 kernel-devel-5.10.116.1-1.cm1.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-5.10.116.1-1.cm1.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-5.10.116.1-1.cm1.aarch64.rpm 0001-01-01T00:00:00 kernel-docs-5.10.116.1-1.cm1.aarch64.rpm 0001-01-01T00:00:00 kernel-tools-5.10.116.1-1.cm1.aarch64.rpm 0001-01-01T00:00:00 kernel-dtb-5.10.116.1-1.cm1.aarch64.rpm 0001-01-01T00:00:00 bpftool-5.10.116.1-1.cm1.aarch64.rpm 0001-01-01T00:00:00 kernel-debuginfo-5.10.116.1-1.cm1.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 5.10.116.1-1 https://nvd.nist.gov/vuln/detail/CVE-2020-35501 12138 kernel kernel 12139 kernel-5.15.41.1-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-devel-5.15.41.1-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-5.15.41.1-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-5.15.41.1-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-docs-5.15.41.1-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-tools-5.15.41.1-1.cm2.x86_64.rpm 0001-01-01T00:00:00 python3-perf-5.15.41.1-1.cm2.x86_64.rpm 0001-01-01T00:00:00 bpftool-5.15.41.1-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-debuginfo-5.15.41.1-1.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 5.15.41.1-1 https://nvd.nist.gov/vuln/detail/CVE-2020-35501 12139 kernel kernel 12140 kernel-5.15.41.1-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-devel-5.15.41.1-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-5.15.41.1-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-5.15.41.1-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-docs-5.15.41.1-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-tools-5.15.41.1-1.cm2.aarch64.rpm 0001-01-01T00:00:00 python3-perf-5.15.41.1-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-dtb-5.15.41.1-1.cm2.aarch64.rpm 0001-01-01T00:00:00 bpftool-5.15.41.1-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-debuginfo-5.15.41.1-1.cm2.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 5.15.41.1-1 https://nvd.nist.gov/vuln/detail/CVE-2020-35501 12140 kernel 1.0 2022-04-08T00:00:00 <p>Information published.</p> 1.1 2022-04-09T00:00:00 <p>Added kernel to CBL-Mariner 1.0</p> https://nvd.nist.gov/vuln/detail/CVE-2021-4157 https://nvd.nist.gov/vuln/detail/CVE-2021-4157 Mariner secalert@redhat.com Yes CVE-2021-4157 12137 12138 12137 12138 12137 12138 8.0 8.0 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 12137 8.0 8.0 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 12138 kernel 12137 kernel-5.10.111.1-1.cm1.x86_64.rpm 0001-01-01T00:00:00 kernel-devel-5.10.111.1-1.cm1.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-5.10.111.1-1.cm1.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-5.10.111.1-1.cm1.x86_64.rpm 0001-01-01T00:00:00 kernel-docs-5.10.111.1-1.cm1.x86_64.rpm 0001-01-01T00:00:00 kernel-oprofile-5.10.111.1-1.cm1.x86_64.rpm 0001-01-01T00:00:00 kernel-tools-5.10.111.1-1.cm1.x86_64.rpm 0001-01-01T00:00:00 bpftool-5.10.111.1-1.cm1.x86_64.rpm 0001-01-01T00:00:00 kernel-debuginfo-5.10.111.1-1.cm1.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 5.10.111.1-1 https://nvd.nist.gov/vuln/detail/CVE-2021-4157 12137 kernel kernel 12138 kernel-5.10.111.1-1.cm1.aarch64.rpm 0001-01-01T00:00:00 kernel-devel-5.10.111.1-1.cm1.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-5.10.111.1-1.cm1.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-5.10.111.1-1.cm1.aarch64.rpm 0001-01-01T00:00:00 kernel-docs-5.10.111.1-1.cm1.aarch64.rpm 0001-01-01T00:00:00 kernel-tools-5.10.111.1-1.cm1.aarch64.rpm 0001-01-01T00:00:00 kernel-dtb-5.10.111.1-1.cm1.aarch64.rpm 0001-01-01T00:00:00 bpftool-5.10.111.1-1.cm1.aarch64.rpm 0001-01-01T00:00:00 kernel-debuginfo-5.10.111.1-1.cm1.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 5.10.111.1-1 https://nvd.nist.gov/vuln/detail/CVE-2021-4157 12138 kernel 1.0 2022-04-09T00:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2018-9057 https://nvd.nist.gov/vuln/detail/CVE-2018-9057 Mariner cve@mitre.org Yes CVE-2018-9057 12139 12140 12139 12140 12139 12140 9.8 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H 12139 9.8 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H 12140 terraform 12139 terraform-1.2.2-2.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.2.2-2 https://nvd.nist.gov/vuln/detail/CVE-2018-9057 12139 terraform terraform 12140 terraform-1.2.2-2.cm2.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.2.2-2 https://nvd.nist.gov/vuln/detail/CVE-2018-9057 12140 terraform 1.0 2022-04-02T00:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2021-3618 https://nvd.nist.gov/vuln/detail/CVE-2021-3618 https://nvd.nist.gov/vuln/detail/CVE-2021-3618 https://nvd.nist.gov/vuln/detail/CVE-2021-3618 https://nvd.nist.gov/vuln/detail/CVE-2021-3618 https://nvd.nist.gov/vuln/detail/CVE-2021-3618 https://nvd.nist.gov/vuln/detail/CVE-2021-3618 https://nvd.nist.gov/vuln/detail/CVE-2021-3618 Mariner secalert@redhat.com Yes CVE-2021-3618 12137 12138 12139 12140 12137 12138 12139 12140 12137 12138 12139 12140 7.4 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N 12137 7.4 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N 12138 7.4 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N 12139 7.4 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N 12140 nginx 12137 nginx-1.20.1-3.cm1.x86_64.rpm 0001-01-01T00:00:00 nginx-filesystem-1.20.1-3.cm1.noarch.rpm 0001-01-01T00:00:00 nginx-debuginfo-1.20.1-3.cm1.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.20.1-3 https://nvd.nist.gov/vuln/detail/CVE-2021-3618 12137 nginx vsftpd 12137 vsftpd-3.0.5-1.cm1.x86_64.rpm 0001-01-01T00:00:00 vsftpd-debuginfo-3.0.5-1.cm1.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 3.0.5-1 https://nvd.nist.gov/vuln/detail/CVE-2021-3618 12137 vsftpd nginx 12138 nginx-1.20.1-3.cm1.aarch64.rpm 0001-01-01T00:00:00 nginx-filesystem-1.20.1-3.cm1.noarch.rpm 0001-01-01T00:00:00 nginx-debuginfo-1.20.1-3.cm1.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.20.1-3 https://nvd.nist.gov/vuln/detail/CVE-2021-3618 12138 nginx vsftpd 12138 vsftpd-3.0.5-1.cm1.aarch64.rpm 0001-01-01T00:00:00 vsftpd-debuginfo-3.0.5-1.cm1.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 3.0.5-1 https://nvd.nist.gov/vuln/detail/CVE-2021-3618 12138 vsftpd nginx 12139 nginx-1.20.2-2.cm2.x86_64.rpm 0001-01-01T00:00:00 nginx-filesystem-1.20.2-2.cm2.noarch.rpm 0001-01-01T00:00:00 nginx-debuginfo-1.20.2-2.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.20.2-2 https://nvd.nist.gov/vuln/detail/CVE-2021-3618 12139 nginx vsftpd 12139 vsftpd-3.0.5-1.cm2.x86_64.rpm 0001-01-01T00:00:00 vsftpd-debuginfo-3.0.5-1.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 3.0.5-1 https://nvd.nist.gov/vuln/detail/CVE-2021-3618 12139 vsftpd nginx 12140 nginx-1.20.2-2.cm2.aarch64.rpm 0001-01-01T00:00:00 nginx-filesystem-1.20.2-2.cm2.noarch.rpm 0001-01-01T00:00:00 nginx-debuginfo-1.20.2-2.cm2.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 1.20.2-2 https://nvd.nist.gov/vuln/detail/CVE-2021-3618 12140 nginx vsftpd 12140 vsftpd-3.0.5-1.cm2.aarch64.rpm 0001-01-01T00:00:00 vsftpd-debuginfo-3.0.5-1.cm2.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 3.0.5-1 https://nvd.nist.gov/vuln/detail/CVE-2021-3618 12140 vsftpd 1.0 2022-04-05T00:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2022-0500 https://nvd.nist.gov/vuln/detail/CVE-2022-0500 https://nvd.nist.gov/vuln/detail/CVE-2022-0500 https://nvd.nist.gov/vuln/detail/CVE-2022-0500 Mariner secalert@redhat.com Yes CVE-2022-0500 12137 12138 12139 12140 12137 12138 12139 12140 12137 12138 12139 12140 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 12137 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 12138 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 12139 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 12140 kernel 12137 kernel-5.10.111.1-1.cm1.x86_64.rpm 0001-01-01T00:00:00 kernel-devel-5.10.111.1-1.cm1.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-5.10.111.1-1.cm1.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-5.10.111.1-1.cm1.x86_64.rpm 0001-01-01T00:00:00 kernel-docs-5.10.111.1-1.cm1.x86_64.rpm 0001-01-01T00:00:00 kernel-oprofile-5.10.111.1-1.cm1.x86_64.rpm 0001-01-01T00:00:00 kernel-tools-5.10.111.1-1.cm1.x86_64.rpm 0001-01-01T00:00:00 bpftool-5.10.111.1-1.cm1.x86_64.rpm 0001-01-01T00:00:00 kernel-debuginfo-5.10.111.1-1.cm1.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 5.10.111.1-1 https://nvd.nist.gov/vuln/detail/CVE-2022-0500 12137 kernel kernel 12138 kernel-5.10.111.1-1.cm1.aarch64.rpm 0001-01-01T00:00:00 kernel-devel-5.10.111.1-1.cm1.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-5.10.111.1-1.cm1.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-5.10.111.1-1.cm1.aarch64.rpm 0001-01-01T00:00:00 kernel-docs-5.10.111.1-1.cm1.aarch64.rpm 0001-01-01T00:00:00 kernel-tools-5.10.111.1-1.cm1.aarch64.rpm 0001-01-01T00:00:00 kernel-dtb-5.10.111.1-1.cm1.aarch64.rpm 0001-01-01T00:00:00 bpftool-5.10.111.1-1.cm1.aarch64.rpm 0001-01-01T00:00:00 kernel-debuginfo-5.10.111.1-1.cm1.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 5.10.111.1-1 https://nvd.nist.gov/vuln/detail/CVE-2022-0500 12138 kernel kernel 12139 kernel-5.15.41.1-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-devel-5.15.41.1-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-5.15.41.1-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-5.15.41.1-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-docs-5.15.41.1-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-tools-5.15.41.1-1.cm2.x86_64.rpm 0001-01-01T00:00:00 python3-perf-5.15.41.1-1.cm2.x86_64.rpm 0001-01-01T00:00:00 bpftool-5.15.41.1-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-debuginfo-5.15.41.1-1.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 5.15.37.1-2 https://nvd.nist.gov/vuln/detail/CVE-2022-0500 12139 kernel kernel 12140 kernel-5.15.41.1-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-devel-5.15.41.1-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-5.15.41.1-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-5.15.41.1-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-docs-5.15.41.1-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-tools-5.15.41.1-1.cm2.aarch64.rpm 0001-01-01T00:00:00 python3-perf-5.15.41.1-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-dtb-5.15.41.1-1.cm2.aarch64.rpm 0001-01-01T00:00:00 bpftool-5.15.41.1-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-debuginfo-5.15.41.1-1.cm2.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 5.15.37.1-2 https://nvd.nist.gov/vuln/detail/CVE-2022-0500 12140 kernel 1.0 2022-04-08T00:00:00 <p>Information published.</p> 1.1 2022-04-09T00:00:00 <p>Added kernel to CBL-Mariner 1.0</p> https://nvd.nist.gov/vuln/detail/CVE-2022-0998 https://nvd.nist.gov/vuln/detail/CVE-2022-0998 https://nvd.nist.gov/vuln/detail/CVE-2022-0998 https://nvd.nist.gov/vuln/detail/CVE-2022-0998 Mariner secalert@redhat.com Yes CVE-2022-0998 12137 12138 12139 12140 12137 12138 12139 12140 12137 12138 12139 12140 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 12137 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 12138 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 12139 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 12140 kernel 12137 kernel-5.10.111.1-1.cm1.x86_64.rpm 0001-01-01T00:00:00 kernel-devel-5.10.111.1-1.cm1.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-5.10.111.1-1.cm1.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-5.10.111.1-1.cm1.x86_64.rpm 0001-01-01T00:00:00 kernel-docs-5.10.111.1-1.cm1.x86_64.rpm 0001-01-01T00:00:00 kernel-oprofile-5.10.111.1-1.cm1.x86_64.rpm 0001-01-01T00:00:00 kernel-tools-5.10.111.1-1.cm1.x86_64.rpm 0001-01-01T00:00:00 bpftool-5.10.111.1-1.cm1.x86_64.rpm 0001-01-01T00:00:00 kernel-debuginfo-5.10.111.1-1.cm1.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 5.10.111.1-1 https://nvd.nist.gov/vuln/detail/CVE-2022-0998 12137 kernel kernel 12138 kernel-5.10.111.1-1.cm1.aarch64.rpm 0001-01-01T00:00:00 kernel-devel-5.10.111.1-1.cm1.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-5.10.111.1-1.cm1.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-5.10.111.1-1.cm1.aarch64.rpm 0001-01-01T00:00:00 kernel-docs-5.10.111.1-1.cm1.aarch64.rpm 0001-01-01T00:00:00 kernel-tools-5.10.111.1-1.cm1.aarch64.rpm 0001-01-01T00:00:00 kernel-dtb-5.10.111.1-1.cm1.aarch64.rpm 0001-01-01T00:00:00 bpftool-5.10.111.1-1.cm1.aarch64.rpm 0001-01-01T00:00:00 kernel-debuginfo-5.10.111.1-1.cm1.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 5.10.111.1-1 https://nvd.nist.gov/vuln/detail/CVE-2022-0998 12138 kernel kernel 12139 kernel-5.15.41.1-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-devel-5.15.41.1-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-5.15.41.1-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-5.15.41.1-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-docs-5.15.41.1-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-tools-5.15.41.1-1.cm2.x86_64.rpm 0001-01-01T00:00:00 python3-perf-5.15.41.1-1.cm2.x86_64.rpm 0001-01-01T00:00:00 bpftool-5.15.41.1-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-debuginfo-5.15.41.1-1.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 5.15.37.1-2 https://nvd.nist.gov/vuln/detail/CVE-2022-0998 12139 kernel kernel 12140 kernel-5.15.41.1-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-devel-5.15.41.1-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-5.15.41.1-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-5.15.41.1-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-docs-5.15.41.1-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-tools-5.15.41.1-1.cm2.aarch64.rpm 0001-01-01T00:00:00 python3-perf-5.15.41.1-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-dtb-5.15.41.1-1.cm2.aarch64.rpm 0001-01-01T00:00:00 bpftool-5.15.41.1-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-debuginfo-5.15.41.1-1.cm2.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 5.15.37.1-2 https://nvd.nist.gov/vuln/detail/CVE-2022-0998 12140 kernel 1.0 2022-04-08T00:00:00 <p>Information published.</p> 1.1 2022-04-09T00:00:00 <p>Added kernel to CBL-Mariner 1.0</p> https://nvd.nist.gov/vuln/detail/CVE-2021-4203 https://nvd.nist.gov/vuln/detail/CVE-2021-4203 Mariner secalert@redhat.com Yes CVE-2021-4203 12137 12138 12137 12138 12137 12138 6.8 6.8 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H 12137 6.8 6.8 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H 12138 kernel 12137 kernel-5.10.111.1-1.cm1.x86_64.rpm 0001-01-01T00:00:00 kernel-devel-5.10.111.1-1.cm1.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-5.10.111.1-1.cm1.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-5.10.111.1-1.cm1.x86_64.rpm 0001-01-01T00:00:00 kernel-docs-5.10.111.1-1.cm1.x86_64.rpm 0001-01-01T00:00:00 kernel-oprofile-5.10.111.1-1.cm1.x86_64.rpm 0001-01-01T00:00:00 kernel-tools-5.10.111.1-1.cm1.x86_64.rpm 0001-01-01T00:00:00 bpftool-5.10.111.1-1.cm1.x86_64.rpm 0001-01-01T00:00:00 kernel-debuginfo-5.10.111.1-1.cm1.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 5.10.111.1-1 https://nvd.nist.gov/vuln/detail/CVE-2021-4203 12137 kernel kernel 12138 kernel-5.10.111.1-1.cm1.aarch64.rpm 0001-01-01T00:00:00 kernel-devel-5.10.111.1-1.cm1.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-5.10.111.1-1.cm1.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-5.10.111.1-1.cm1.aarch64.rpm 0001-01-01T00:00:00 kernel-docs-5.10.111.1-1.cm1.aarch64.rpm 0001-01-01T00:00:00 kernel-tools-5.10.111.1-1.cm1.aarch64.rpm 0001-01-01T00:00:00 kernel-dtb-5.10.111.1-1.cm1.aarch64.rpm 0001-01-01T00:00:00 bpftool-5.10.111.1-1.cm1.aarch64.rpm 0001-01-01T00:00:00 kernel-debuginfo-5.10.111.1-1.cm1.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 5.10.111.1-1 https://nvd.nist.gov/vuln/detail/CVE-2021-4203 12138 kernel 1.0 2022-04-09T00:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2022-0435 https://nvd.nist.gov/vuln/detail/CVE-2022-0435 https://nvd.nist.gov/vuln/detail/CVE-2022-0435 https://nvd.nist.gov/vuln/detail/CVE-2022-0435 Mariner secalert@redhat.com Yes CVE-2022-0435 12137 12138 12139 12140 12137 12138 12139 12140 12137 12138 12139 12140 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 12137 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 12138 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 12139 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 12140 kernel 12137 kernel-5.10.111.1-1.cm1.x86_64.rpm 0001-01-01T00:00:00 kernel-devel-5.10.111.1-1.cm1.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-5.10.111.1-1.cm1.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-5.10.111.1-1.cm1.x86_64.rpm 0001-01-01T00:00:00 kernel-docs-5.10.111.1-1.cm1.x86_64.rpm 0001-01-01T00:00:00 kernel-oprofile-5.10.111.1-1.cm1.x86_64.rpm 0001-01-01T00:00:00 kernel-tools-5.10.111.1-1.cm1.x86_64.rpm 0001-01-01T00:00:00 bpftool-5.10.111.1-1.cm1.x86_64.rpm 0001-01-01T00:00:00 kernel-debuginfo-5.10.111.1-1.cm1.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 5.10.111.1-1 https://nvd.nist.gov/vuln/detail/CVE-2022-0435 12137 kernel kernel 12138 kernel-5.10.111.1-1.cm1.aarch64.rpm 0001-01-01T00:00:00 kernel-devel-5.10.111.1-1.cm1.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-5.10.111.1-1.cm1.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-5.10.111.1-1.cm1.aarch64.rpm 0001-01-01T00:00:00 kernel-docs-5.10.111.1-1.cm1.aarch64.rpm 0001-01-01T00:00:00 kernel-tools-5.10.111.1-1.cm1.aarch64.rpm 0001-01-01T00:00:00 kernel-dtb-5.10.111.1-1.cm1.aarch64.rpm 0001-01-01T00:00:00 bpftool-5.10.111.1-1.cm1.aarch64.rpm 0001-01-01T00:00:00 kernel-debuginfo-5.10.111.1-1.cm1.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 5.10.111.1-1 https://nvd.nist.gov/vuln/detail/CVE-2022-0435 12138 kernel kernel 12139 kernel-5.15.41.1-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-devel-5.15.41.1-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-5.15.41.1-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-5.15.41.1-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-docs-5.15.41.1-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-tools-5.15.41.1-1.cm2.x86_64.rpm 0001-01-01T00:00:00 python3-perf-5.15.41.1-1.cm2.x86_64.rpm 0001-01-01T00:00:00 bpftool-5.15.41.1-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-debuginfo-5.15.41.1-1.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 5.15.37.1-2 https://nvd.nist.gov/vuln/detail/CVE-2022-0435 12139 kernel kernel 12140 kernel-5.15.41.1-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-devel-5.15.41.1-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-5.15.41.1-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-5.15.41.1-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-docs-5.15.41.1-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-tools-5.15.41.1-1.cm2.aarch64.rpm 0001-01-01T00:00:00 python3-perf-5.15.41.1-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-dtb-5.15.41.1-1.cm2.aarch64.rpm 0001-01-01T00:00:00 bpftool-5.15.41.1-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-debuginfo-5.15.41.1-1.cm2.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 5.15.37.1-2 https://nvd.nist.gov/vuln/detail/CVE-2022-0435 12140 kernel 1.0 2022-04-08T00:00:00 <p>Information published.</p> 1.1 2022-04-09T00:00:00 <p>Added kernel to CBL-Mariner 1.0</p> https://nvd.nist.gov/vuln/detail/CVE-2021-44647 https://nvd.nist.gov/vuln/detail/CVE-2021-44647 Mariner cve@mitre.org Yes CVE-2021-44647 12139 12140 12139 12140 12139 12140 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 12139 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 12140 lua 12139 lua-5.4.3-3.cm2.x86_64.rpm 0001-01-01T00:00:00 lua-devel-5.4.3-3.cm2.x86_64.rpm 0001-01-01T00:00:00 lua-libs-5.4.3-3.cm2.x86_64.rpm 0001-01-01T00:00:00 lua-static-5.4.3-3.cm2.x86_64.rpm 0001-01-01T00:00:00 lua-debuginfo-5.4.3-3.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 5.4.3-3 https://nvd.nist.gov/vuln/detail/CVE-2021-44647 12139 lua lua 12140 lua-5.4.3-3.cm2.aarch64.rpm 0001-01-01T00:00:00 lua-devel-5.4.3-3.cm2.aarch64.rpm 0001-01-01T00:00:00 lua-libs-5.4.3-3.cm2.aarch64.rpm 0001-01-01T00:00:00 lua-static-5.4.3-3.cm2.aarch64.rpm 0001-01-01T00:00:00 lua-debuginfo-5.4.3-3.cm2.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 5.4.3-3 https://nvd.nist.gov/vuln/detail/CVE-2021-44647 12140 lua 1.0 2022-04-14T00:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2022-0322 https://nvd.nist.gov/vuln/detail/CVE-2022-0322 Mariner secalert@redhat.com Yes CVE-2022-0322 12137 12138 12137 12138 12137 12138 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 12137 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 12138 kernel 12137 kernel-5.10.111.1-1.cm1.x86_64.rpm 0001-01-01T00:00:00 kernel-devel-5.10.111.1-1.cm1.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-5.10.111.1-1.cm1.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-5.10.111.1-1.cm1.x86_64.rpm 0001-01-01T00:00:00 kernel-docs-5.10.111.1-1.cm1.x86_64.rpm 0001-01-01T00:00:00 kernel-oprofile-5.10.111.1-1.cm1.x86_64.rpm 0001-01-01T00:00:00 kernel-tools-5.10.111.1-1.cm1.x86_64.rpm 0001-01-01T00:00:00 bpftool-5.10.111.1-1.cm1.x86_64.rpm 0001-01-01T00:00:00 kernel-debuginfo-5.10.111.1-1.cm1.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 5.10.111.1-1 https://nvd.nist.gov/vuln/detail/CVE-2022-0322 12137 kernel kernel 12138 kernel-5.10.111.1-1.cm1.aarch64.rpm 0001-01-01T00:00:00 kernel-devel-5.10.111.1-1.cm1.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-5.10.111.1-1.cm1.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-5.10.111.1-1.cm1.aarch64.rpm 0001-01-01T00:00:00 kernel-docs-5.10.111.1-1.cm1.aarch64.rpm 0001-01-01T00:00:00 kernel-tools-5.10.111.1-1.cm1.aarch64.rpm 0001-01-01T00:00:00 kernel-dtb-5.10.111.1-1.cm1.aarch64.rpm 0001-01-01T00:00:00 bpftool-5.10.111.1-1.cm1.aarch64.rpm 0001-01-01T00:00:00 kernel-debuginfo-5.10.111.1-1.cm1.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 5.10.111.1-1 https://nvd.nist.gov/vuln/detail/CVE-2022-0322 12138 kernel 1.0 2022-04-09T00:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2022-0330 https://nvd.nist.gov/vuln/detail/CVE-2022-0330 https://nvd.nist.gov/vuln/detail/CVE-2022-0330 https://nvd.nist.gov/vuln/detail/CVE-2022-0330 Mariner secalert@redhat.com Yes CVE-2022-0330 12137 12138 12139 12140 12137 12138 12139 12140 12137 12138 12139 12140 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 12137 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 12138 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 12139 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 12140 kernel 12137 kernel-5.10.116.1-1.cm1.x86_64.rpm 0001-01-01T00:00:00 kernel-devel-5.10.116.1-1.cm1.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-5.10.116.1-1.cm1.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-5.10.116.1-1.cm1.x86_64.rpm 0001-01-01T00:00:00 kernel-docs-5.10.116.1-1.cm1.x86_64.rpm 0001-01-01T00:00:00 kernel-oprofile-5.10.116.1-1.cm1.x86_64.rpm 0001-01-01T00:00:00 kernel-tools-5.10.116.1-1.cm1.x86_64.rpm 0001-01-01T00:00:00 bpftool-5.10.116.1-1.cm1.x86_64.rpm 0001-01-01T00:00:00 kernel-debuginfo-5.10.116.1-1.cm1.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 5.10.116.1-1 https://nvd.nist.gov/vuln/detail/CVE-2022-0330 12137 kernel kernel 12138 kernel-5.10.116.1-1.cm1.aarch64.rpm 0001-01-01T00:00:00 kernel-devel-5.10.116.1-1.cm1.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-5.10.116.1-1.cm1.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-5.10.116.1-1.cm1.aarch64.rpm 0001-01-01T00:00:00 kernel-docs-5.10.116.1-1.cm1.aarch64.rpm 0001-01-01T00:00:00 kernel-tools-5.10.116.1-1.cm1.aarch64.rpm 0001-01-01T00:00:00 kernel-dtb-5.10.116.1-1.cm1.aarch64.rpm 0001-01-01T00:00:00 bpftool-5.10.116.1-1.cm1.aarch64.rpm 0001-01-01T00:00:00 kernel-debuginfo-5.10.116.1-1.cm1.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 5.10.116.1-1 https://nvd.nist.gov/vuln/detail/CVE-2022-0330 12138 kernel kernel 12139 kernel-5.15.41.1-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-devel-5.15.41.1-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-5.15.41.1-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-5.15.41.1-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-docs-5.15.41.1-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-tools-5.15.41.1-1.cm2.x86_64.rpm 0001-01-01T00:00:00 python3-perf-5.15.41.1-1.cm2.x86_64.rpm 0001-01-01T00:00:00 bpftool-5.15.41.1-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-debuginfo-5.15.41.1-1.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 5.15.37.1-2 https://nvd.nist.gov/vuln/detail/CVE-2022-0330 12139 kernel kernel 12140 kernel-5.15.41.1-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-devel-5.15.41.1-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-5.15.41.1-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-5.15.41.1-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-docs-5.15.41.1-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-tools-5.15.41.1-1.cm2.aarch64.rpm 0001-01-01T00:00:00 python3-perf-5.15.41.1-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-dtb-5.15.41.1-1.cm2.aarch64.rpm 0001-01-01T00:00:00 bpftool-5.15.41.1-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-debuginfo-5.15.41.1-1.cm2.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 5.15.37.1-2 https://nvd.nist.gov/vuln/detail/CVE-2022-0330 12140 kernel 1.0 2022-04-08T00:00:00 <p>Information published.</p> 1.1 2022-04-09T00:00:00 <p>Added kernel to CBL-Mariner 1.0</p> https://nvd.nist.gov/vuln/detail/CVE-2022-0494 https://nvd.nist.gov/vuln/detail/CVE-2022-0494 https://nvd.nist.gov/vuln/detail/CVE-2022-0494 https://nvd.nist.gov/vuln/detail/CVE-2022-0494 Mariner secalert@redhat.com Yes CVE-2022-0494 12137 12138 12139 12140 12137 12138 12139 12140 12137 12138 12139 12140 4.4 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N 12137 4.4 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N 12138 4.4 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N 12139 4.4 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N 12140 kernel 12137 kernel-5.10.116.1-1.cm1.x86_64.rpm 0001-01-01T00:00:00 kernel-devel-5.10.116.1-1.cm1.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-5.10.116.1-1.cm1.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-5.10.116.1-1.cm1.x86_64.rpm 0001-01-01T00:00:00 kernel-docs-5.10.116.1-1.cm1.x86_64.rpm 0001-01-01T00:00:00 kernel-oprofile-5.10.116.1-1.cm1.x86_64.rpm 0001-01-01T00:00:00 kernel-tools-5.10.116.1-1.cm1.x86_64.rpm 0001-01-01T00:00:00 bpftool-5.10.116.1-1.cm1.x86_64.rpm 0001-01-01T00:00:00 kernel-debuginfo-5.10.116.1-1.cm1.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 5.10.116.1-1 https://nvd.nist.gov/vuln/detail/CVE-2022-0494 12137 kernel kernel 12138 kernel-5.10.116.1-1.cm1.aarch64.rpm 0001-01-01T00:00:00 kernel-devel-5.10.116.1-1.cm1.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-5.10.116.1-1.cm1.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-5.10.116.1-1.cm1.aarch64.rpm 0001-01-01T00:00:00 kernel-docs-5.10.116.1-1.cm1.aarch64.rpm 0001-01-01T00:00:00 kernel-tools-5.10.116.1-1.cm1.aarch64.rpm 0001-01-01T00:00:00 kernel-dtb-5.10.116.1-1.cm1.aarch64.rpm 0001-01-01T00:00:00 bpftool-5.10.116.1-1.cm1.aarch64.rpm 0001-01-01T00:00:00 kernel-debuginfo-5.10.116.1-1.cm1.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 5.10.116.1-1 https://nvd.nist.gov/vuln/detail/CVE-2022-0494 12138 kernel kernel 12139 kernel-5.15.41.1-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-devel-5.15.41.1-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-5.15.41.1-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-5.15.41.1-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-docs-5.15.41.1-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-tools-5.15.41.1-1.cm2.x86_64.rpm 0001-01-01T00:00:00 python3-perf-5.15.41.1-1.cm2.x86_64.rpm 0001-01-01T00:00:00 bpftool-5.15.41.1-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-debuginfo-5.15.41.1-1.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 5.15.37.1-2 https://nvd.nist.gov/vuln/detail/CVE-2022-0494 12139 kernel kernel 12140 kernel-5.15.41.1-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-devel-5.15.41.1-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-5.15.41.1-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-5.15.41.1-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-docs-5.15.41.1-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-tools-5.15.41.1-1.cm2.aarch64.rpm 0001-01-01T00:00:00 python3-perf-5.15.41.1-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-dtb-5.15.41.1-1.cm2.aarch64.rpm 0001-01-01T00:00:00 bpftool-5.15.41.1-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-debuginfo-5.15.41.1-1.cm2.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 5.15.37.1-2 https://nvd.nist.gov/vuln/detail/CVE-2022-0494 12140 kernel 1.0 2022-04-08T00:00:00 <p>Information published.</p> 1.1 2022-04-09T00:00:00 <p>Added kernel to CBL-Mariner 1.0</p> https://nvd.nist.gov/vuln/detail/CVE-2022-1056 https://nvd.nist.gov/vuln/detail/CVE-2022-1056 Mariner cve@gitlab.com Yes CVE-2022-1056 12139 12140 12139 12140 12139 12140 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H 12139 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H 12140 libtiff 12139 libtiff-4.3.0-2.cm2.x86_64.rpm 0001-01-01T00:00:00 libtiff-devel-4.3.0-2.cm2.x86_64.rpm 0001-01-01T00:00:00 libtiff-debuginfo-4.3.0-2.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 4.3.0-2 https://nvd.nist.gov/vuln/detail/CVE-2022-1056 12139 libtiff libtiff 12140 libtiff-4.3.0-2.cm2.aarch64.rpm 0001-01-01T00:00:00 libtiff-devel-4.3.0-2.cm2.aarch64.rpm 0001-01-01T00:00:00 libtiff-debuginfo-4.3.0-2.cm2.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 4.3.0-2 https://nvd.nist.gov/vuln/detail/CVE-2022-1056 12140 libtiff 1.0 2022-04-05T00:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2022-1154 https://nvd.nist.gov/vuln/detail/CVE-2022-1154 https://nvd.nist.gov/vuln/detail/CVE-2022-1154 https://nvd.nist.gov/vuln/detail/CVE-2022-1154 Mariner security@huntr.dev Yes CVE-2022-1154 12137 12138 12139 12140 12137 12138 12139 12140 12137 12138 12139 12140 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 12137 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 12138 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 12139 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 12140 vim 12137 vim-8.2.4774-1.cm1.x86_64.rpm 0001-01-01T00:00:00 vim-extra-8.2.4774-1.cm1.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 8.2.4763-1 https://nvd.nist.gov/vuln/detail/CVE-2022-1154 12137 vim vim 12138 vim-8.2.4774-1.cm1.aarch64.rpm 0001-01-01T00:00:00 vim-extra-8.2.4774-1.cm1.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 8.2.4763-1 https://nvd.nist.gov/vuln/detail/CVE-2022-1154 12138 vim vim 12139 vim-8.2.4743-2.cm2.x86_64.rpm 0001-01-01T00:00:00 vim-extra-8.2.4743-2.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 8.2.4743-1 https://nvd.nist.gov/vuln/detail/CVE-2022-1154 12139 vim vim 12140 vim-8.2.4743-2.cm2.aarch64.rpm 0001-01-01T00:00:00 vim-extra-8.2.4743-2.cm2.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 8.2.4743-1 https://nvd.nist.gov/vuln/detail/CVE-2022-1154 12140 vim 1.0 2022-04-05T00:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2022-1160 https://nvd.nist.gov/vuln/detail/CVE-2022-1160 https://nvd.nist.gov/vuln/detail/CVE-2022-1160 https://nvd.nist.gov/vuln/detail/CVE-2022-1160 Mariner security@huntr.dev Yes CVE-2022-1160 12137 12138 12139 12140 12137 12138 12139 12140 12137 12138 12139 12140 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 12137 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 12138 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 12139 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 12140 vim 12137 vim-8.2.4774-1.cm1.x86_64.rpm 0001-01-01T00:00:00 vim-extra-8.2.4774-1.cm1.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 8.2.4763-1 https://nvd.nist.gov/vuln/detail/CVE-2022-1160 12137 vim vim 12138 vim-8.2.4774-1.cm1.aarch64.rpm 0001-01-01T00:00:00 vim-extra-8.2.4774-1.cm1.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 8.2.4763-1 https://nvd.nist.gov/vuln/detail/CVE-2022-1160 12138 vim vim 12139 vim-8.2.4743-2.cm2.x86_64.rpm 0001-01-01T00:00:00 vim-extra-8.2.4743-2.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 8.2.4743-1 https://nvd.nist.gov/vuln/detail/CVE-2022-1160 12139 vim vim 12140 vim-8.2.4743-2.cm2.aarch64.rpm 0001-01-01T00:00:00 vim-extra-8.2.4743-2.cm2.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 8.2.4743-1 https://nvd.nist.gov/vuln/detail/CVE-2022-1160 12140 vim 1.0 2022-04-06T00:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2022-26280 https://nvd.nist.gov/vuln/detail/CVE-2022-26280 Mariner cve@mitre.org Yes CVE-2022-26280 12139 12140 12139 12140 12139 12140 6.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H 12139 6.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H 12140 libarchive 12139 libarchive-3.6.1-1.cm2.x86_64.rpm 0001-01-01T00:00:00 libarchive-devel-3.6.1-1.cm2.x86_64.rpm 0001-01-01T00:00:00 libarchive-debuginfo-3.6.1-1.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 3.6.1-1 https://nvd.nist.gov/vuln/detail/CVE-2022-26280 12139 libarchive libarchive 12140 libarchive-3.6.1-1.cm2.aarch64.rpm 0001-01-01T00:00:00 libarchive-devel-3.6.1-1.cm2.aarch64.rpm 0001-01-01T00:00:00 libarchive-debuginfo-3.6.1-1.cm2.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 3.6.1-1 https://nvd.nist.gov/vuln/detail/CVE-2022-26280 12140 libarchive 1.0 2022-04-06T00:00:00 <p>Information published.</p> https://nvd.nist.gov/vuln/detail/CVE-2022-27950 https://nvd.nist.gov/vuln/detail/CVE-2022-27950 https://nvd.nist.gov/vuln/detail/CVE-2022-27950 https://nvd.nist.gov/vuln/detail/CVE-2022-27950 Mariner cve@mitre.org Yes CVE-2022-27950 12137 12138 12139 12140 12137 12138 12139 12140 12137 12138 12139 12140 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 12137 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 12138 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 12139 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 12140 kernel 12137 kernel-5.10.111.1-1.cm1.x86_64.rpm 0001-01-01T00:00:00 kernel-devel-5.10.111.1-1.cm1.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-5.10.111.1-1.cm1.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-5.10.111.1-1.cm1.x86_64.rpm 0001-01-01T00:00:00 kernel-docs-5.10.111.1-1.cm1.x86_64.rpm 0001-01-01T00:00:00 kernel-oprofile-5.10.111.1-1.cm1.x86_64.rpm 0001-01-01T00:00:00 kernel-tools-5.10.111.1-1.cm1.x86_64.rpm 0001-01-01T00:00:00 bpftool-5.10.111.1-1.cm1.x86_64.rpm 0001-01-01T00:00:00 kernel-debuginfo-5.10.111.1-1.cm1.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 5.10.111.1-1 https://nvd.nist.gov/vuln/detail/CVE-2022-27950 12137 kernel kernel 12138 kernel-5.10.111.1-1.cm1.aarch64.rpm 0001-01-01T00:00:00 kernel-devel-5.10.111.1-1.cm1.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-5.10.111.1-1.cm1.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-5.10.111.1-1.cm1.aarch64.rpm 0001-01-01T00:00:00 kernel-docs-5.10.111.1-1.cm1.aarch64.rpm 0001-01-01T00:00:00 kernel-tools-5.10.111.1-1.cm1.aarch64.rpm 0001-01-01T00:00:00 kernel-dtb-5.10.111.1-1.cm1.aarch64.rpm 0001-01-01T00:00:00 bpftool-5.10.111.1-1.cm1.aarch64.rpm 0001-01-01T00:00:00 kernel-debuginfo-5.10.111.1-1.cm1.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 5.10.111.1-1 https://nvd.nist.gov/vuln/detail/CVE-2022-27950 12138 kernel kernel 12139 kernel-5.15.41.1-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-devel-5.15.41.1-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-5.15.41.1-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-5.15.41.1-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-docs-5.15.41.1-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-tools-5.15.41.1-1.cm2.x86_64.rpm 0001-01-01T00:00:00 python3-perf-5.15.41.1-1.cm2.x86_64.rpm 0001-01-01T00:00:00 bpftool-5.15.41.1-1.cm2.x86_64.rpm 0001-01-01T00:00:00 kernel-debuginfo-5.15.41.1-1.cm2.x86_64.rpm 0001-01-01T00:00:00 CBL-Mariner 5.15.37.1-2 https://nvd.nist.gov/vuln/detail/CVE-2022-27950 12139 kernel kernel 12140 kernel-5.15.41.1-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-devel-5.15.41.1-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-accessibility-5.15.41.1-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-drivers-sound-5.15.41.1-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-docs-5.15.41.1-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-tools-5.15.41.1-1.cm2.aarch64.rpm 0001-01-01T00:00:00 python3-perf-5.15.41.1-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-dtb-5.15.41.1-1.cm2.aarch64.rpm 0001-01-01T00:00:00 bpftool-5.15.41.1-1.cm2.aarch64.rpm 0001-01-01T00:00:00 kernel-debuginfo-5.15.41.1-1.cm2.aarch64.rpm 0001-01-01T00:00:00 CBL-Mariner 5.15.37.1-2 https://nvd.nist.gov/vuln/detail/CVE-2022-27950 12140 kernel 1.0 2022-04-06T00:00:00 <p>Information published.</p> Microsoft SharePoint Server Spoofing Vulnerability <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>This vulnerability requires that a user with an affected version of Windows access a malicious server. An attacker would have to host a specially crafted server share or website. An attacker would have no way to force users to visit this specially crafted server share or website, but would have to convince them to visit the server share or website, typically by way of an enticement in an email or chat message.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>A standard user who has been authenticated in the domain could potentially use this vulnerability to send malicious content in SIP Address field which would allow the user to have access to content that is not authorized.</p> Microsoft Office SharePoint Microsoft Yes CVE-2022-24472 10950 11585 11961 10917 10612 Spoofing 10950 Spoofing 11585 Spoofing 11961 Spoofing 10917 Spoofing 10612 Important 10950 Important 11585 Important 11961 Important 10917 Important 10612 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 8.0 7.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10950 8.0 7.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11585 8.0 7.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11961 8.0 7.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10917 8.0 7.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10612 5002183 https://www.microsoft.com/download/details.aspx?familyid=094833cc-8c4e-4361-8091-a8f2c02b0611 5002136 10950 10917 Maybe Security Update 16.0.5305.1000 https://support.microsoft.com/kb/5002183 10950 10917 5002183 5002180 https://www.microsoft.com/download/details.aspx?familyid=b1bdf137-0d69-4bec-ab27-2440353f8cb5 5002135 11585 Maybe Security Update 16.0.10385.20001 https://support.microsoft.com/kb/5002180 11585 5002180 5002191 https://www.microsoft.com/download/details.aspx?familyid=2d216999-c53c-4df9-9e07-eb839b13bc56 5002191 11961 Maybe Security Update 16.0.14931.20196 https://support.microsoft.com/help/5002191 11961 5002191 5002191 https://support.microsoft.com/help/5002191 11961 5002189 https://www.microsoft.com/download/details.aspx?familyid=85780521-d581-4d97-8fe6-91df82f0a776 5002155 10612 Maybe Security Update 15.0.5441.1000 https://support.microsoft.com/kb/5002189 10612 5002189 satanon with NCSC 1.0 2022-04-12T08:00:00 <p>Information published.</p> Windows Hyper-V Remote Code Execution Vulnerability <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> <p><strong>According to the CVSS metric, the attack vector is local (AV:L). Why does the CVE title indicate that this is a remote code execution?</strong></p> <p>The word <strong>Remote</strong> in the title refers to the location of the attacker. This type of exploit is sometimes referred to as Arbitrary Code Execution (ACE). The attack itself is carried out locally.</p> <p>For example, when the score indicates that the <strong>Attack Vector</strong> is <strong>Local</strong> and <strong>User Interaction</strong> is <strong>Required</strong>, this could describe an exploit in which an attacker, through social engineering, convinces a victim to download and open a specially crafted file from a website which leads to a local attack on their computer.</p> <p><strong>According to the CVSS metric, a successful exploitation could lead to a scope change (S:C). What does this mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability could allow a Hyper-V guest to affect the functionality of the Hyper-V host.</p> Role: Windows Hyper-V Microsoft Yes CVE-2022-24537 11569 11571 11572 11713 11896 11923 11924 11803 11926 11931 10853 10816 10855 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11713 Remote Code Execution 11896 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 11803 Remote Code Execution 11926 Remote Code Execution 11931 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Critical 11569 Critical 11571 Critical 11572 Critical 11713 Critical 11896 Critical 11923 Critical 11924 Critical 11803 Critical 11926 Critical 11931 Critical 10853 Critical 10816 Critical 10855 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11713 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11896 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11803 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11926 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 5012647 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012647 5011503 11569 11571 11572 Yes Security Update 10.0.17763.2803 https://support.microsoft.com/help/5012647 11569 11571 11572 5012647 5012647 https://support.microsoft.com/help/5012647 11569 11571 11572 5012591 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012591 5011485 11713 Yes Security Update 10.0.18363.2212 https://support.microsoft.com/help/5012591 11713 5012591 5012591 https://support.microsoft.com/help/5012591 11713 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11896 Yes Security Update 10.0.19043.1645 https://support.microsoft.com/help/5012599 11896 5012599 5012599 https://support.microsoft.com/help/5012599 11896 11803 11931 5012604 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012604 5011497 11923 11924 Yes Security Update 10.0.20348.643 https://support.microsoft.com/help/5012604 11923 11924 5012604 5012604 https://support.microsoft.com/help/5012604 11923 11924 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11803 Yes Security Update 10.0.19042.1645 https://support.microsoft.com/help/5012599 11803 5012599 5012592 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012592 5011493 11926 Yes Security Update 10.0.22000.613 https://support.microsoft.com/help/5012592 11926 5012592 5012592 https://support.microsoft.com/help/5012592 11926 5012599 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012599 5011487 11931 Yes Security Update 10.0.19044.1645 https://support.microsoft.com/help/5012599 11931 5012599 5012596 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5012596 5011495 10853 10816 10855 Yes Security Update 10.0.14393.5066 https://support.microsoft.com/help/5012596 10853 10816 10855 5012596 5012596 https://support.microsoft.com/help/5012596 10853 10816 10855 Maxime Villard, of M.O.R.S.E. 1.0 2022-04-12T08:00:00 <p>Information published.</p>