Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-22670 State: PUBLISHED Published: 2022-03-18T18:00:18 Last Updated: 2024-08-03T03:21:48.973Z Vendors: Apple Products: iOS and iPadOS, tvOS, watchOS Problem Types: A malicious application may be able to identify what other applications a user has installed Description: An access issue was addressed with improved access restrictions. This issue is fixed in tvOS 15.4, iOS 15.4 and iPadOS 15.4, watchOS 8.5. A malicious application may be able to identify what other applications a user has installed. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/en-us/HT213182 - https://support.apple.com/en-us/HT213193 - https://support.apple.com/en-us
- https://support.apple.com/en-us/HT213182 - https://support.apple.com/en-us/HT213193 - https://support.apple.com/en-us/HT213186
CVE ID: CVE-2022-22671 State: PUBLISHED Published: 2022-03-18T18:00:15 Last Updated: 2024-08-03T03:21:48.842Z Vendors: Apple Products: iOS and iPadOS Problem Types: A person with physical access to an iOS device may be able to access photos from the lock screen Description: An authentication issue was addressed with improved state management. This issue is fixed in iOS 15.4 and iPadOS 15.4. A person with physical access to an iOS device may be able to access photos from the lock screen. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/en-us/HT213182
CVE ID: CVE-2022-22672 State: PUBLISHED Published: 2022-05-26T17:42:02 Last Updated: 2024-08-03T03:21:48.843Z Vendors: Apple Products: iOS and iPadOS, macOS Problem Types: A malicious application may be able to execute arbitrary code with kernel privileges Description: A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 15.4 and iPadOS 15.4, Security Update 2022-003 Catalina, macOS Monterey 12.3, macOS Big Sur 11.6.5. A malicious application may be able to execute arbitrary code with kernel privileges. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/en-us/HT213182 - https://support.apple.com/en-us/HT2131
- CVE Program Container: References: - https://support.apple.com/en-us/HT213182 - https://support.apple.com/en-us/HT213183 - https://support.apple.com/en-us/HT213184 - https://support.apple.com/en-us/HT213185
CVE ID: CVE-2022-22673 State: PUBLISHED Published: 2022-05-26T17:42:54 Last Updated: 2024-08-03T03:21:48.991Z Vendors: Apple Products: iOS and iPadOS Problem Types: Processing a large input may lead to a denial of service Description: This issue was addressed with improved checks. This issue is fixed in iOS 15.5 and iPadOS 15.5. Processing a large input may lead to a denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/en-us/HT213258
CVE ID: CVE-2022-22674 State: PUBLISHED Published: 2022-05-26T17:43:37.000Z Last Updated: 2025-10-21T23:15:39.269Z Vendors: Apple Products: macOS Problem Types: A local user may be able to read kernel memory Description: An out-of-bounds read issue existed that led to the disclosure of kernel memory. This was addressed with improved input validation. This issue is fixed in macOS Monterey 12.3.1, Security Update 2022-004 Catalina, macOS Big Sur 11.6.6. A local user may be able to read kernel memory. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213255 - https://support.apple.com/en-us/HT213256 - https://support.appl
References: - https://support.apple.com/en-us/HT213255 - https://support.apple.com/en-us/HT213256 - https://support.apple.com/en-us/HT213220
CVE ID: CVE-2022-22675 State: PUBLISHED Published: 2022-05-26T17:44:27.000Z Last Updated: 2025-10-21T23:15:39.128Z Vendors: Apple Products: iOS and iPadOS, macOS, watchOS Problem Types: An application may be able to execute arbitrary code with kernel privileges. Apple is aware of a report that this issue may have been actively exploited. Description: An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in tvOS 15.5, watchOS 8.6, macOS Big Sur 11.6.6, macOS Monterey 12.3.1, iOS 15.4.1 and iPadOS 15.4.1. An application may be able to execute arbitrary code with kernel privileges. Apple is aware of a report that this issue may have been actively exploite
xecute arbitrary code with kernel privileges. Apple is aware of a report that this issue may have been actively exploited.. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213256 - https://support.apple.com/en-us/HT213220 - https://support.apple.com/en-us/HT213219 - https://support.apple.com/en-us/HT213253 - https://support.apple.com/en-us/HT213254
CVE ID: CVE-2022-22676 State: PUBLISHED Published: 2022-05-26T17:45:14 Last Updated: 2024-08-03T03:21:48.919Z Vendors: Apple Products: macOS Problem Types: An application may be able to delete files for which it does not have permission Description: An event handler validation issue in the XPC Services API was addressed by removing the service. This issue is fixed in macOS Monterey 12.2. An application may be able to delete files for which it does not have permission. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/en-us/HT213054
CVE ID: CVE-2022-22677 State: PUBLISHED Published: 2022-11-01T00:00:00.000Z Last Updated: 2025-05-06T19:10:24.838Z Vendors: Apple Products: macOS Problem Types: Video self-preview in a webRTC call may be interrupted if the user answers a phone call Description: A logic issue in the handling of concurrent media was addressed with improved state handling. This issue is fixed in macOS Monterey 12.4, iOS 15.5 and iPadOS 15.5. Video self-preview in a webRTC call may be interrupted if the user answers a phone call. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213258 - https://support.apple.com/en-us/HT213257
CVE ID: CVE-2022-22679 State: PUBLISHED Published: 2022-02-07T02:15:36.293849Z Last Updated: 2024-09-17T02:26:55.544Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N) Vendors: Synology Products: DiskStation Manager (DSM) Problem Types: CWE-22 Description: Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in support service management in Synology DiskStation Manager (DSM) before 7.0.1-42218-2 allows remote authenticated users to write arbitrary files via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.synology.com/security/advisory/Synology_SA_22_01
CVE ID: CVE-2022-22680 State: PUBLISHED Published: 2022-02-07T02:10:10.780775Z Last Updated: 2024-09-16T18:33:26.555Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Synology Products: DiskStation Manager (DSM) Problem Types: CWE-200 Description: Exposure of sensitive information to an unauthorized actor vulnerability in Web Server in Synology DiskStation Manager (DSM) before 7.0.1-42218-2 allows remote attackers to obtain sensitive information via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.synology.com/security/advisory/Synology_SA_22_01
CVE ID: CVE-2022-22681 State: PUBLISHED Published: 2022-07-06T07:35:10.641885Z Last Updated: 2024-09-16T16:18:01.296Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N) Vendors: Synology Products: Photo Station Problem Types: CWE-384 Description: Session fixation vulnerability in access control management in Synology Photo Station before 6.8.16-3506 allows remote attackers to bypass security constraint via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.synology.com/security/advisory/Synology_SA_21_26
CVE ID: CVE-2022-22682 State: PUBLISHED Published: 2022-07-12T06:20:10.512726Z Last Updated: 2024-09-17T00:20:46.045Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Synology Products: Synology Calendar Problem Types: CWE-79 Description: Improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability in Event Management in Synology Calendar before 2.4.5-10930 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.synology.com/security/advisory/Synology_SA_22_07
CVE ID: CVE-2022-22683 State: PUBLISHED Published: 2022-07-28T07:00:13.884885Z Last Updated: 2024-09-16T22:41:30.330Z Severity: CRITICAL (CVSS 10 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: Synology Products: Media Server Problem Types: CWE-120 Description: Buffer copy without checking size of input ('Classic Buffer Overflow') vulnerability in cgi component in Synology Media Server before 1.8.1-2876 allows remote attackers to execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.synology.com/security/advisory/Synology_SA_20_24
CVE ID: CVE-2022-22684 State: PUBLISHED Published: 2022-07-28T06:25:12.463617Z Last Updated: 2024-09-16T17:47:55.243Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/MAV:L) Vendors: Synology Products: DiskStation Manager (DSM) Problem Types: CWE-78 Description: Improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability in task management component in Synology DiskStation Manager (DSM) before 6.2.4-25553 allows remote authenticated users to execute arbitrary commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.synology.com/security/advisory/Synology_SA_21_03
CVE ID: CVE-2022-22685 State: PUBLISHED Published: 2022-07-28T06:45:13.034707Z Last Updated: 2024-09-17T01:56:25.485Z Severity: HIGH (CVSS 8.7 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:H) Vendors: Synology Products: WebDAV Server Problem Types: CWE-22 Description: Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in webapi component in Synology WebDAV Server before 2.4.0-0062 allows remote authenticated users to delete arbitrary files via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.synology.com/security/advisory/Synology_SA_21_09
CVE ID: CVE-2022-22686 State: PUBLISHED Published: 2022-07-26T01:30:14.703526Z Last Updated: 2024-09-16T19:14:33.307Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Synology Products: Synology Calendar Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in webapi component in Synology Calendar before 2.3.4-0631 allows remote authenticated users to hijack the authentication of administrators via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.synology.com/security/advisory/Synology_SA_20_07
CVE ID: CVE-2022-22687 State: PUBLISHED Published: 2022-03-25T06:55:17.763146Z Last Updated: 2024-09-16T16:28:18.145Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Synology Products: DiskStation Manager (DSM) Problem Types: CWE-120 Description: Buffer copy without checking size of input ('Classic Buffer Overflow') vulnerability in Authentication functionality in Synology DiskStation Manager (DSM) before 6.2.3-25426-3 allows remote attackers to execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.synology.com/security/advisory/Synology_SA_20_26
CVE ID: CVE-2022-22688 State: PUBLISHED Published: 2022-03-25T06:55:11.476829Z Last Updated: 2024-09-17T01:15:57.138Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Synology Products: DiskStation Manager (DSM) Problem Types: CWE-77 Description: Improper neutralization of special elements used in a command ('Command Injection') vulnerability in File service functionality in Synology DiskStation Manager (DSM) before 6.2.4-25556-2 allows remote authenticated users to execute arbitrary commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.synology.com/security/advisory/Synology_SA_21_22
CVE ID: CVE-2022-22689 State: PUBLISHED Published: 2022-02-04T22:29:27 Last Updated: 2024-08-03T03:21:48.947Z Vendors: n/a Products: CA Harvest Software Change Manager Problem Types: CWE-1236 Description: CA Harvest Software Change Manager versions 13.0.3, 13.0.4, 14.0.0, and 14.0.1, contain a vulnerability in the CSV export functionality, due to insufficient input validation, that can allow a privileged user to potentially execute arbitrary code or commands. Additional Analyst Notes: - CVE Program Container: References: - https://support.broadcom.com/security-advisory/content/security-advisories/CA20220203-01-Security-Notice-for-CA-Harvest-Software-Change-Manager/ESDSA20297
CVE ID: CVE-2022-22690 State: PUBLISHED Published: 2022-01-18T16:52:21.650911Z Last Updated: 2024-09-17T04:08:50.406Z Severity: HIGH (CVSS 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N) Vendors: Umbraco Products: Umbraco CMS Problem Types: Unauthorised runtime configuration manipulation Description: Within the Umbraco CMS, a configuration element named "UmbracoApplicationUrl" (or just "ApplicationUrl") is used whenever application code needs to build a URL pointing back to the site. For example, when a user resets their password and the application builds a password reset URL or when the administrator invites users to the site. For Umbraco versions less than 9.2.0, if the Application URL
t URL or when the administrator invites users to the site. For Umbraco versions less than 9.2.0, if the Application URL is not specifically configured, the attacker can manipulate this value and store it persistently affecting all users for components where the "UmbracoApplicationUrl" is used. For example, the attacker is able to change the URL users receive when resetting their password so that it points to the attackers server, when the user follows this link the reset token can be intercepted by the attacker resulting in account takeover. Additional Analyst Notes: - CVE Program Container: References: - https://appcheck-ng.com/umbraco-applicationurl-overwrite-persistent-password-reset-pois
Program Container: References: - https://appcheck-ng.com/umbraco-applicationurl-overwrite-persistent-password-reset-poison-cve-2022-22690-cve-2022-22691/
CVE ID: CVE-2022-22691 State: PUBLISHED Published: 2022-01-18T16:52:20.429251Z Last Updated: 2024-09-16T23:46:59.483Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N) Vendors: Umbraco Products: Umbraco CMS Problem Types: CWE-640 Description: The password reset component deployed within Umbraco uses the hostname supplied within the request host header when building a password reset URL. It may be possible to manipulate the URL sent to Umbraco users when so that it points to the attackers server thereby disclosing the password reset token if/when the link is followed. A related vulnerability (CVE-2022-22690) could allow this flaw to become persistent so that all passwor
ink is followed. A related vulnerability (CVE-2022-22690) could allow this flaw to become persistent so that all password reset URLs are affected persistently following a successful attack. See the AppCheck advisory for further information and associated caveats. Additional Analyst Notes: - CVE Program Container: References: - https://appcheck-ng.com/umbraco-applicationurl-overwrite-persistent-password-reset-poison-cve-2022-22690-cve-2022-22691/
CVE ID: CVE-2022-22700 State: PUBLISHED Published: 2022-03-03T18:20:21 Last Updated: 2024-08-03T03:21:49.056Z Vendors: n/a Products: CyberArk Identity Problem Types: User enumeration Description: CyberArk Identity versions up to and including 22.1 in the 'StartAuthentication' resource, exposes the response header 'X-CFY-TX-TM'. In certain configurations, that response header contains different, predictable value ranges which can be used to determine whether a user exists in the tenant. Additional Analyst Notes: - CVE Program Container: References: - https://fluidattacks.com/advisories/porter/ - https://docs.cyberark.com/Product-Doc/OnlineHelp/Idaptive/Latest/en/Content/ReleaseNotes/ReleaseNo
/advisories/porter/ - https://docs.cyberark.com/Product-Doc/OnlineHelp/Idaptive/Latest/en/Content/ReleaseNotes/ReleaseNotes-Latest.htm
CVE ID: CVE-2022-22701 State: PUBLISHED Published: 2022-01-07T21:59:38 Last Updated: 2024-08-03T03:21:48.988Z Vendors: n/a Products: PartKeepr Problem Types: Local file inclusion Description: PartKeepr versions up to v1.4.0, loads attachments using a URL while creating a part and allows the use of the 'file://' URI scheme, allowing an authenticated user to read local files. Additional Analyst Notes: - CVE Program Container: References: - https://fluidattacks.com/advisories/hendrix/ - https://github.com/partkeepr/PartKeepr/issues/1229
CVE ID: CVE-2022-22702 State: PUBLISHED Published: 2022-01-07T22:00:52 Last Updated: 2024-08-03T03:21:48.762Z Vendors: n/a Products: PartKeepr Problem Types: Server-side request forgery Description: PartKeepr versions up to v1.4.0, in the functionality to upload attachments using a URL when creating a part does not validate that requests can be made to local ports, allowing an authenticated user to carry out SSRF attacks and port enumeration. Additional Analyst Notes: - CVE Program Container: References: - https://fluidattacks.com/advisories/joplin/ - https://github.com/partkeepr/PartKeepr/issues/1230
CVE ID: CVE-2022-22703 State: PUBLISHED Published: 2022-01-17T20:04:02 Last Updated: 2024-08-03T03:21:49.020Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Stormshield SSO Agent 2.x before 2.1.1 and 3.x before 3.0.2, the cleartext user password and PSK are contained in the log file of the .exe installer. Additional Analyst Notes: - CVE Program Container: References: - https://advisories.stormshield.eu/2022-001
CVE ID: CVE-2022-22704 State: PUBLISHED Published: 2022-01-06T04:23:28 Last Updated: 2024-08-03T03:21:49.169Z Vendors: n/a Products: n/a Problem Types: n/a Description: The zabbix-agent2 package before 5.4.9-r1 for Alpine Linux sometimes allows privilege escalation to root because the design incorrectly expected that systemd would (in effect) determine part of the configuration. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.alpinelinux.org/alpine/aports/-/issues/13368
CVE ID: CVE-2022-22706 State: PUBLISHED Published: 2022-03-03T14:27:54.000Z Last Updated: 2025-10-21T23:15:44.955Z Vendors: n/a Products: n/a Problem Types: n/a Description: Arm Mali GPU Kernel Driver allows a non-privileged user to achieve write access to read-only memory pages. This affects Midgard r26p0 through r31p0, Bifrost r0p0 through r35p0, and Valhall r19p0 through r35p0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://developer.arm.com/support/arm-security-updates - https://developer.arm.com/support/arm-security-updates/mali-gpu-kernel-driver
CVE ID: CVE-2022-22707 State: PUBLISHED Published: 2022-01-06T05:55:30 Last Updated: 2024-08-03T03:21:48.853Z Vendors: n/a Products: n/a Problem Types: n/a Description: In lighttpd 1.4.46 through 1.4.63, the mod_extforward_Forwarded function of the mod_extforward plugin has a stack-based buffer overflow (4 bytes representing -1), as demonstrated by remote denial of service (daemon crash) in a non-default configuration. The non-default configuration requires handling of the Forwarded header in a somewhat unusual manner. Also, a 32-bit system is much more likely to be affected than a 64-bit system. Additional Analyst Notes: - CVE Program Container: References: - https://redmine.lighttpd.net/is
d than a 64-bit system. Additional Analyst Notes: - CVE Program Container: References: - https://redmine.lighttpd.net/issues/3134 - https://www.debian.org/security/2022/dsa-5040
CVE ID: CVE-2022-22709 State: PUBLISHED Published: 2022-02-09T16:37:00 Last Updated: 2025-01-02T18:28:28.079Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: VP9 Video Extensions Problem Types: Remote Code Execution Description: VP9 Video Extensions Remote Code Execution Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-22709
CVE ID: CVE-2022-22710 State: PUBLISHED Published: 2022-02-09T16:37:02 Last Updated: 2025-01-02T18:28:03.812Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows 10 Version 1909, Windows 10 Version 21H1, Windows Server 2022, Windows 10 Version 20H2, Windows Server version 20H2, Windows 11 version 21H2, Windows 10 Version 21H2, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows 7, Windows 7 Service Pack 1, Windows 8.1, Windows Server 2008 Service Pack 2,
2016 (Server Core installation), Windows 7, Windows 7 Service Pack 1, Windows 8.1, Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) Problem Types: Denial of Service Description: Windows Common Log File System Driver Denial of Service Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerabilit
ty Additional Analyst Notes: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-22710
CVE ID: CVE-2022-22711 State: PUBLISHED Published: 2022-07-12T22:37:21 Last Updated: 2025-07-08T15:35:55.162Z Severity: MEDIUM (CVSS 5.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows 10 Version 21H1, Windows Server 2022, Windows 10 Version 20H2, Windows Server version 20H2, Windows 11 version 21H2, Windows 10 Version 21H2, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation) Problem Types: Information Disclosure Description: Windows BitLocker Information Disclosure Vulnerability Additi
lation) Problem Types: Information Disclosure Description: Windows BitLocker Information Disclosure Vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-22711
CVE ID: CVE-2022-22712 State: PUBLISHED Published: 2022-02-09T16:37:03 Last Updated: 2025-01-02T18:28:04.330Z Severity: MEDIUM (CVSS 5.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows 10 Version 1909, Windows 10 Version 21H1, Windows Server 2022, Windows Server version 20H2, Windows 11 version 21H2, Windows 10 Version 21H2 Problem Types: Denial of Service Description: Windows Hyper-V Denial of Service Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-22712