Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
of RV-13FM-1D, MELFA F Series Controller CR751-13VD-0 of RV-13FL-1D, MELFA F Series Controller CR751-13VD-0 of RV-13FLC-1D, MELFA F Series Controller CR751-13VD-0 of RV-13FLM-1D, MELFA F Series Controller CR751-13VD-0 of RV-13F-1D-SH01, MELFA F Series Controller CR751-13VD-0 of RV-13F-1D-SH02, MELFA F Series Controller CR751-13VD-0 of RV-13F-1D-SH03, MELFA F Series Controller CR751-13VD-0 of RV-13F-1D-SH04, MELFA F Series Controller CR751-13VD-0 of RV-13F-1D-SH05, MELFA F Series Controller CR751-13VD-0 of RV-13FL-1D-SH01, MELFA F Series Controller CR751-13VD-0 of RV-13FL-1D-SH02, MELFA F Series Controller CR751-13VD-0 of RV-13FL-1D-SH03, MELFA F Series Controller CR751-13VD-0 of RV-13FL-1D-
D-SH02, MELFA F Series Controller CR751-13VD-0 of RV-13FL-1D-SH03, MELFA F Series Controller CR751-13VD-0 of RV-13FL-1D-SH04, MELFA F Series Controller CR751-13VD-0 of RV-13FL-1D-SH05, MELFA F Series Controller CR751-13VQ-0 of RV-13F-1Q, MELFA F Series Controller CR751-13VQ-0 of RV-13FC-1Q, MELFA F Series Controller CR751-13VQ-0 of RV-13FM-1Q, MELFA F Series Controller CR751-13VQ-0 of RV-13FL-1Q, MELFA F Series Controller CR751-13VQ-0 of RV-13FLC-1Q, MELFA F Series Controller CR751-13VQ-0 of RV-13FLM-1Q, MELFA F Series Controller CR751-13VQ-0 of RV-13F-1Q-SH01, MELFA F Series Controller CR751-13VQ-0 of RV-13F-1Q-SH02, MELFA F Series Controller CR751-13VQ-0 of RV-13F-1Q-SH03, MELFA F Series C
es Controller CR751-13VQ-0 of RV-13F-1Q-SH02, MELFA F Series Controller CR751-13VQ-0 of RV-13F-1Q-SH03, MELFA F Series Controller CR751-13VQ-0 of RV-13F-1Q-SH04, MELFA F Series Controller CR751-13VQ-0 of RV-13F-1Q-SH05, MELFA F Series Controller CR751-13VQ-0 of RV-13FL-1Q-SH01, MELFA F Series Controller CR751-13VQ-0 of RV-13FL-1Q-SH02, MELFA F Series Controller CR751-13VQ-0 of RV-13FL-1Q-SH03, MELFA F Series Controller CR751-13VQ-0 of RV-13FL-1Q-SH04, MELFA F Series Controller CR751-13VQ-0 of RV-13FL-1Q-SH05, MELFA F Series Controller CR751-20VD-0 of RV-20F-1D, MELFA F Series Controller CR751-20VD-0 of RV-20FC-1D, MELFA F Series Controller CR751-20VD-0 of RV-20FM-1D, MELFA F Series Controlle
es Controller CR751-20VD-0 of RV-20FC-1D, MELFA F Series Controller CR751-20VD-0 of RV-20FM-1D, MELFA F Series Controller CR751-20VD-0 of RV-20F-1D-SH01, MELFA F Series Controller CR751-20VD-0 of RV-20F-1D-SH02, MELFA F Series Controller CR751-20VD-0 of RV-20F-1D-SH03, MELFA F Series Controller CR751-20VD-0 of RV-20F-1D-SH04, MELFA F Series Controller CR751-20VD-0 of RV-20F-1D-SH05, MELFA F Series Controller CR751-20VQ-0 of RV-20F-1Q, MELFA F Series Controller CR751-20VQ-0 of RV-20FC-1Q, MELFA F Series Controller CR751-20VQ-0 of RV-20FM-1Q, MELFA F Series Controller CR751-20VQ-0 of RV-20F-1Q-SH01, MELFA F Series Controller CR751-20VQ-0 of RV-20F-1Q-SH02, MELFA F Series Controller CR751-20VQ-
0VQ-0 of RV-20F-1Q-SH01, MELFA F Series Controller CR751-20VQ-0 of RV-20F-1Q-SH02, MELFA F Series Controller CR751-20VQ-0 of RV-20F-1Q-SH03, MELFA F Series Controller CR751-20VQ-0 of RV-20F-1Q-SH04, MELFA F Series Controller CR751-20VQ-0 of RV-20F-1Q-SH05, MELFA F Series Controller CR751-07VLD-0 of RV-7FLL-1D, MELFA F Series Controller CR751-07VLD-0 of RV-7FLLC-1D, MELFA F Series Controller CR751-07VLD-0 of RV-7FLLM-1D, MELFA F Series Controller CR751-07VLD-0 of RV-7FLL-1D-SH01, MELFA F Series Controller CR751-07VLD-0 of RV-7FLL-1D-SH02, MELFA F Series Controller CR751-07VLD-0 of RV-7FLL-1D-SH03, MELFA F Series Controller CR751-07VLD-0 of RV-7FLL-1D-SH04, MELFA F Series Controller CR751-07VL
D-0 of RV-7FLL-1D-SH03, MELFA F Series Controller CR751-07VLD-0 of RV-7FLL-1D-SH04, MELFA F Series Controller CR751-07VLD-0 of RV-7FLL-1D-SH05, MELFA F Series Controller CR751-07VLQ-0 of RV-7FLL-1Q, MELFA F Series Controller CR751-07VLQ-0 of RV-7FLLC-1Q, MELFA F Series Controller CR751-07VLQ-0 of RV-7FLLM-1Q, MELFA F Series Controller CR751-07VLQ-0 of RV-7FLL-1Q-SH01, MELFA F Series Controller CR751-07VLQ-0 of RV-7FLL-1Q-SH02, MELFA F Series Controller CR751-07VLQ-0 of RV-7FLL-1Q-SH03, MELFA F Series Controller CR751-07VLQ-0 of RV-7FLL-1Q-SH04, MELFA F Series Controller CR751-07VLQ-0 of RV-7FLL-1Q-SH05, MELFA F Series Controller CR760-35VD-1 of RV-35F-D, MELFA F Series Controller CR760-35VQ-
51-07VLQ-0 of RV-7FLL-1Q-SH05, MELFA F Series Controller CR760-35VD-1 of RV-35F-D, MELFA F Series Controller CR760-35VQ-1 of RV-35F-Q, MELFA F Series Controller CR760-35VD-1 of RV-35FM-D, MELFA F Series Controller CR760-35VQ-1 of RV-35FM-Q, MELFA F Series Controller CR760-35VD-1 of RV-50F-D, MELFA F Series Controller CR760-35VQ-1 of RV-50F-Q, MELFA F Series Controller CR760-35VD-1 of RV-50FM-D, MELFA F Series Controller CR760-35VQ-1 of RV-50FM-Q, MELFA F Series Controller CR760-35VD-1 of RV-70F-D, MELFA F Series Controller CR760-35VQ-1 of RV-70F-Q, MELFA F Series Controller CR760-35VD-1 of RV-70FM-D, MELFA F Series Controller CR760-35VQ-1 of RV-70FM-Q Problem Types: CWE-489 Description: Acti
CR760-35VD-1 of RV-70FM-D, MELFA F Series Controller CR760-35VQ-1 of RV-70FM-Q Problem Types: CWE-489 Description: Active Debug Code vulnerability in robot controller of Mitsubishi Electric Corporation industrial robot MELFA SD/SQ Series and MELFA F-Series allows a remote unauthenticated attacker to gain unauthorized access by authentication bypass through an unauthorized telnet login. As for the affected model names, controller types and firmware versions, see the Mitsubishi Electric's advisory which is listed in [References] section. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2022-
am Container: - CISA ADP Vulnrichment: References: - https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2022-020_en.pdf - https://jvn.jp/vu/JVNVU94588481/index.html - https://www.cisa.gov/uscert/ics/advisories/icsa-23-026-05
CVE ID: CVE-2022-33324 State: PUBLISHED Published: 2022-12-23T02:24:15.274Z Last Updated: 2024-09-05T05:25:44.061Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Mitsubishi Electric Corporation Products: MELSEC iQ-R Series R00CPU, MELSEC iQ-R Series R01CPU, MELSEC iQ-R Series R02CPU, MELSEC iQ-R Series R04CPU, MELSEC iQ-R Series R08CPU, MELSEC iQ-R Series R16CPU, MELSEC iQ-R Series R32CPU, MELSEC iQ-R Series R120CPU, MELSEC iQ-R Series R04ENCPU, MELSEC iQ-R Series R08ENCPU, MELSEC iQ-R Series R16ENCPU, MELSEC iQ-R Series R32ENCPU, MELSEC iQ-R Series R120ENCPU, MELSEC iQ-R Series R08SFCPU, MELSEC iQ-R Series R16SFCPU, MELSEC iQ-R Series R32SFCPU, MELSEC iQ-R S
R Series R120ENCPU, MELSEC iQ-R Series R08SFCPU, MELSEC iQ-R Series R16SFCPU, MELSEC iQ-R Series R32SFCPU, MELSEC iQ-R Series R120SFCPU, MELSEC iQ-R Series R12CCPU-V, MELSEC iQ-L Series L04HCPU, MELSEC iQ-L Series L08HCPU, MELSEC iQ-L Series L16HCPU, MELSEC iQ-L Series L32HCPU, MELIPC Series MI5122-VW, MELSEC iQ-R Series R08PSFCPU, MELSEC iQ-R Series R16PSFCPU, MELSEC iQ-R Series R32PSFCPU, MELSEC iQ-R Series R120PSFCPU Problem Types: CWE-404 Description: Improper Resource Shutdown or Release vulnerability in Mitsubishi Electric Corporation MELSEC iQ-R Series R00/01/02CPU Firmware versions "32" and prior, Mitsubishi Electric Corporation MELSEC iQ-R Series R04/08/16/32/120(EN)CPU Firmware ver
irmware versions "32" and prior, Mitsubishi Electric Corporation MELSEC iQ-R Series R04/08/16/32/120(EN)CPU Firmware versions "65" and prior, Mitsubishi Electric Corporation MELSEC iQ-R Series R08/16/32/120SFCPU Firmware versions "29" and prior, Mitsubishi Electric Corporation MELSEC iQ-R Series R08/16/32/120PSFCPU Firmware versions "08" and prior, Mitsubishi Electric Corporation MELSEC iQ-R Series R12CCPU-V Firmware versions "17" and prior, Mitsubishi Electric Corporation MELSEC iQ-L Series L04/08/16/32HCPU Firmware versions "05" and prior and Mitsubishi Electric Corporation MELIPC Series MI5122-VW Firmware versions "07" and prior allows a remote unauthenticated attacker to cause a Denial o
on MELIPC Series MI5122-VW Firmware versions "07" and prior allows a remote unauthenticated attacker to cause a Denial of Service condition in Ethernet communication on the module by sending specially crafted packets. A system reset of the module is required for recovery. Additional Analyst Notes: - CVE Program Container: References: - https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2022-018_en.pdf - https://jvn.jp/vu/JVNVU96883262 - https://www.cisa.gov/uscert/ics/advisories/icsa-22-356-03
CVE ID: CVE-2022-33325 State: PUBLISHED Published: 2022-06-30T19:05:46.151Z Last Updated: 2025-04-15T18:59:31.856Z Severity: CRITICAL (CVSS 9.1 CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: Robustel Products: R1510 Problem Types: CWE-78 Description: Multiple command injection vulnerabilities exist in the web_server ajax endpoints functionalities of Robustel R1510 3.3.0. A specially-crafted network packets can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these vulnerabilities.The `/ajax/clear_tools_log/` API is affected by command injection vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: Referen
by command injection vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1573
CVE ID: CVE-2022-33326 State: PUBLISHED Published: 2022-06-30T19:05:50.115Z Last Updated: 2025-04-15T18:59:25.509Z Severity: CRITICAL (CVSS 9.1 CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: Robustel Products: R1510 Problem Types: CWE-78 Description: Multiple command injection vulnerabilities exist in the web_server ajax endpoints functionalities of Robustel R1510 3.3.0. A specially-crafted network packets can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these vulnerabilities.The `/ajax/config_rollback/` API is affected by a command injection vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: Refer
by a command injection vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1573
CVE ID: CVE-2022-33327 State: PUBLISHED Published: 2022-06-30T19:05:56.446Z Last Updated: 2025-04-15T18:59:17.317Z Severity: CRITICAL (CVSS 9.1 CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: Robustel Products: R1510 Problem Types: CWE-78 Description: Multiple command injection vulnerabilities exist in the web_server ajax endpoints functionalities of Robustel R1510 3.3.0. A specially-crafted network packets can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these vulnerabilities.The `/ajax/remove_sniffer_raw_log/` API is affected by a command injection vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment
ffected by a command injection vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1573
CVE ID: CVE-2022-33328 State: PUBLISHED Published: 2022-06-30T19:05:59.634Z Last Updated: 2025-04-15T18:59:09.916Z Severity: CRITICAL (CVSS 9.1 CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: Robustel Products: R1510 Problem Types: CWE-78 Description: Multiple command injection vulnerabilities exist in the web_server ajax endpoints functionalities of Robustel R1510 3.3.0. A specially-crafted network packets can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these vulnerabilities.The `/ajax/remove/` API is affected by a command injection vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: -
mand injection vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1573
CVE ID: CVE-2022-33329 State: PUBLISHED Published: 2022-06-30T19:06:05.719Z Last Updated: 2025-04-15T18:59:03.180Z Severity: CRITICAL (CVSS 9.1 CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: Robustel Products: R1510 Problem Types: CWE-78 Description: Multiple command injection vulnerabilities exist in the web_server ajax endpoints functionalities of Robustel R1510 3.3.0. A specially-crafted network packets can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these vulnerabilities.The `/ajax/set_sys_time/` API is affected by a command injection vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: Referenc
a command injection vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1573
CVE ID: CVE-2022-33631 State: PUBLISHED Published: 2022-08-09T19:49:40.000Z Last Updated: 2025-06-05T18:48:17.454Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft Office 2019, Microsoft 365 Apps for Enterprise, Microsoft Office LTSC 2021, Microsoft Excel 2016, Microsoft Excel 2013 Service Pack 1 Problem Types: Security Feature Bypass Description: Microsoft Excel Security Feature Bypass Vulnerability Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33631
CVE ID: CVE-2022-33632 State: PUBLISHED Published: 2022-07-12T22:37:55 Last Updated: 2025-07-08T15:36:25.379Z Severity: MEDIUM (CVSS 4.7 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft Office LTSC 2021, Microsoft Office 2019, Microsoft 365 Apps for Enterprise, Microsoft Office 2016, Microsoft Office 2013 Service Pack 1 Problem Types: Security Feature Bypass Description: Microsoft Office Security Feature Bypass Vulnerability Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33632
CVE ID: CVE-2022-33633 State: PUBLISHED Published: 2022-07-12T22:37:56 Last Updated: 2025-07-08T15:36:26.035Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft Lync Server 2013 CU10, Skype for Business Server 2015 CU12, Skype for Business Server 2019 CU6 Problem Types: Remote Code Execution Description: Skype for Business and Lync Remote Code Execution Vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33633
CVE ID: CVE-2022-33634 State: PUBLISHED Published: 2022-10-11T00:00:00 Last Updated: 2025-01-02T21:27:02.884Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows 10 Version 21H1, Windows Server 2022, Windows 10 Version 20H2, Windows 11 version 21H2, Windows 10 Version 21H2, Windows 11 version 22H2, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows 7, Windows 7 Service Pack 1, Windows 8.1, Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pac
), Windows 7, Windows 7 Service Pack 1, Windows 8.1, Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) Problem Types: Remote Code Execution Description: Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33634
CVE ID: CVE-2022-33635 State: PUBLISHED Published: 2022-10-11T00:00:00 Last Updated: 2025-01-02T21:26:58.714Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows 10 Version 21H1, Windows Server 2022, Windows 10 Version 20H2, Windows 11 version 21H2, Windows 10 Version 21H2, Windows 11 version 22H2, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows 7, Windows 7 Service Pack 1, Windows 8.1, Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pac
), Windows 7, Windows 7 Service Pack 1, Windows 8.1, Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) Problem Types: Remote Code Execution Description: Windows GDI+ Remote Code Execution Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33635
CVE ID: CVE-2022-33636 State: PUBLISHED Published: 2022-08-09T19:49:50 Last Updated: 2025-01-02T19:33:44.373Z Severity: HIGH (CVSS 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft Edge (Chromium-based) Problem Types: Remote Code Execution Description: Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33636
CVE ID: CVE-2022-33637 State: PUBLISHED Published: 2022-07-12T22:37:58 Last Updated: 2025-07-08T15:36:47.595Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft Defender for Endpoint for Linux Problem Types: Tampering Description: Microsoft Defender for Endpoint Tampering Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33637
CVE ID: CVE-2022-33638 State: PUBLISHED Published: 2022-06-29T17:10:18 Last Updated: 2025-01-02T19:03:17.446Z Severity: HIGH (CVSS 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft Edge (Chromium-based) Problem Types: Elevation of Privilege Description: Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33638
CVE ID: CVE-2022-33639 State: PUBLISHED Published: 2022-06-29T00:00:00 Last Updated: 2025-01-02T19:03:18.161Z Severity: HIGH (CVSS 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft Edge (Chromium-based) Problem Types: Elevation of Privilege Description: Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33639
CVE ID: CVE-2022-33640 State: PUBLISHED Published: 2022-08-09T19:50:03.000Z Last Updated: 2025-06-05T18:40:29.082Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: Microsoft Products: Open Management Infrastructure, System Center Operations Manager (SCOM) 2019, System Center Operations Manager (SCOM) 2016, System Center Operations Manager (SCOM) 2022 Problem Types: Elevation of Privilege Description: System Center Operations Manager: Open Management Infrastructure (OMI) Elevation of Privilege Vulnerability Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability
s: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33640
CVE ID: CVE-2022-33641 State: PUBLISHED Published: 2022-07-12T22:37:59 Last Updated: 2025-07-08T15:35:55.902Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H/E:P/RL:O/RC:C) Vendors: Microsoft Products: Azure Site Recovery VMWare to Azure Problem Types: Elevation of Privilege Description: Azure Site Recovery Elevation of Privilege Vulnerability Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33641
CVE ID: CVE-2022-33642 State: PUBLISHED Published: 2022-07-12T22:38:01 Last Updated: 2025-07-08T15:35:56.545Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C) Vendors: Microsoft Products: Azure Site Recovery VMWare to Azure Problem Types: Elevation of Privilege Description: Azure Site Recovery Elevation of Privilege Vulnerability Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33642
CVE ID: CVE-2022-33643 State: PUBLISHED Published: 2022-07-12T22:38:03 Last Updated: 2025-07-08T15:35:57.253Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H/E:P/RL:O/RC:C) Vendors: Microsoft Products: Azure Site Recovery VMWare to Azure Problem Types: Elevation of Privilege Description: Azure Site Recovery Elevation of Privilege Vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33643
CVE ID: CVE-2022-33644 State: PUBLISHED Published: 2022-07-12T22:38:05 Last Updated: 2025-07-08T15:36:26.628Z Severity: HIGH (CVSS 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 20H2, Windows 10 Version 21H1, Windows 10 Version 21H2 Problem Types: Elevation of Privilege Description: Xbox Live Save Service Elevation of Privilege Vulnerability Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33644
CVE ID: CVE-2022-33645 State: PUBLISHED Published: 2022-10-11T00:00:00 Last Updated: 2025-01-02T21:27:01.324Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows 10 Version 21H1, Windows Server 2022, Windows 10 Version 20H2, Windows 11 version 21H2, Windows 10 Version 21H2, Windows 11 version 22H2, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows 7, Windows 7 Service Pack 1, Windows 8.1, Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pac
), Windows 7, Windows 7 Service Pack 1, Windows 8.1, Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) Problem Types: Denial of Service Description: Windows TCP/IP Driver Denial of Service Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33645