Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-35722 State: PUBLISHED Published: 2022-09-28T15:55:15.230Z Last Updated: 2025-05-20T20:31:48.094Z Severity: MEDIUM (CVSS 6.4 CVSS:3.0/UI:N/S:C/AV:N/AC:L/I:L/A:N/PR:L/C:L/RL:O/E:H/RC:C) Vendors: IBM Products: Jazz for Service Management Problem Types: Cross-Site Scripting Description: IBM Jazz for Service Management is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 231381. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.
Force ID: 231381. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/6824117 - https://exchange.xforce.ibmcloud.com/vulnerabilities/231381
CVE ID: CVE-2022-35724 State: PUBLISHED Published: 2022-08-09T06:50:24 Last Updated: 2024-08-03T09:44:21.667Z Vendors: Apache Software Foundation Products: Apache Avro Problem Types: CWE-20, CWE-770 Description: It is possible to provide data to be read that leads the reader to loop in cycles endlessly, consuming CPU. This issue affects Rust applications using Apache Avro Rust SDK prior to 0.14.0 (previously known as avro-rs). Users should update to apache-avro version 0.14.0 which addresses this issue. Additional Analyst Notes: - CVE Program Container: References: - https://lists.apache.org/thread/771z1nwrpkn1ovmyfb2fm65mchdxgy7p
CVE ID: CVE-2022-35725 State: PUBLISHED Published: 2022-09-09T14:39:52.371Z Last Updated: 2025-02-20T20:08:13.988Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N) Vendors: Hans Matzen Products: wp-forecast (WordPress plugin) Problem Types: CWE-79 Description: Authenticated (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Hans Matzen's wp-forecast plugin <= 7.5 at WordPress. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/wp-forecast/wordpress-wp-forecast-plugin-7-5-authenticated-stored-cross-site-scripting-xss-vulnerability/_s_id=cve - https://wordpress.org/plugins/wp-f
st-plugin-7-5-authenticated-stored-cross-site-scripting-xss-vulnerability/_s_id=cve - https://wordpress.org/plugins/wp-forecast/#developers
CVE ID: CVE-2022-35726 State: PUBLISHED Published: 2022-08-23T15:47:56.311Z Last Updated: 2025-02-20T20:10:54.130Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: yotuwp Products: Video Gallery (WordPress plugin) Problem Types: Broken Authentication Description: Broken Authentication vulnerability in yotuwp Video Gallery plugin <= 1.3.4.5 at WordPress. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/yotuwp-easy-youtube-embed/wordpress-video-gallery-plugin-1-3-4-5-broken-authentication - https://wordpress.org/plugins/yotuwp-easy-youtube-embed/#developers
CVE ID: CVE-2022-35727 State: REJECTED Published: N/A Last Updated: 2025-05-28T18:20:14.934Z Description: No description available.
CVE ID: CVE-2022-35728 State: PUBLISHED Published: 2022-08-04T17:49:50.388667Z Last Updated: 2024-09-16T16:42:29.606Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: F5 Products: BIG-IP, BIG-IQ Centralized Management Problem Types: CWE-613 Description: In BIG-IP Versions 17.0.x before 17.0.0.1, 16.1.x before 16.1.3.1, 15.1.x before 15.1.6.1, 14.1.x before 14.1.5.1, and all versions of 13.1.x, and BIG-IQ version 8.x before 8.2.0 and all versions of 7.x, an authenticated user's iControl REST token may remain valid for a limited time after logging out from the Configuration utility. Note: Software versions which have reached End of Technical Support (EoTS) are no
ng out from the Configuration utility. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K55580033
CVE ID: CVE-2022-35729 State: PUBLISHED Published: 2023-02-16T20:00:21.007Z Last Updated: 2025-01-27T18:15:21.307Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: n/a Products: OpenBMC Problem Types: denial of service Description: Out of bounds read in firmware for OpenBMC in some Intel(R) platforms before version 0.72 may allow unauthenticated user to potentially enable denial of service via network access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00737.html
CVE ID: CVE-2022-35730 State: PUBLISHED Published: 2022-12-04T22:35:22.275Z Last Updated: 2025-01-27T15:47:15.857Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: Oren Hahiashvili Products: Oceanwp sticky header Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Oceanwp sticky header plugin <= 1.0.8 on WordPress. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/sticky-header-oceanwp/wordpress-oceanwp-sticky-header-plugin-1-0-8-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2022-35731 State: REJECTED Published: N/A Last Updated: 2025-05-28T18:20:16.215Z Description: No description available.
CVE ID: CVE-2022-35732 State: REJECTED Published: N/A Last Updated: 2025-05-28T18:20:17.541Z Description: No description available.
CVE ID: CVE-2022-35733 State: PUBLISHED Published: 2022-08-23T01:35:12 Last Updated: 2024-08-03T09:44:21.661Z Vendors: UNIMO Technology Co., Ltd Products: UNIMO Technology digital video recorders UDR-JA1004/JA1008/JA1016 and UDR-JA1016 Problem Types: Missing Authentication for Critical Function Description: Missing authentication for critical function vulnerability in UNIMO Technology digital video recorders (UDR-JA1004/JA1008/JA1016 firmware versions v1.0.20.13 and earlier, and UDR-JA1016 firmware versions v2.0.20.13 and earlier) allows a remote unauthenticated attacker to execute an arbitrary OS command by sending a specially crafted request to the affected device web interface. Additional
execute an arbitrary OS command by sending a specially crafted request to the affected device web interface. Additional Analyst Notes: - CVE Program Container: References: - http://www.unimo.co.jp/table_notice/index.php?act=1&resid=1643590226-637355 - https://jvn.jp/en/vu/JVNVU90821877/index.html
CVE ID: CVE-2022-35734 State: PUBLISHED Published: 2022-08-16T07:02:16 Last Updated: 2024-08-03T09:44:21.866Z Vendors: HJ Holdings, Inc. Products: 'Hulu / フールー' App for Android Problem Types: Use of Hard-coded Credentials Description: 'Hulu / フールー' App for Android from version 3.0.47 to the version prior to 3.1.2 uses a hard-coded API key for an external service. By exploiting this vulnerability, API key for an external service may be obtained by analyzing data in the app. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN40907489/index.html
CVE ID: CVE-2022-35735 State: PUBLISHED Published: 2022-08-04T17:50:06.202273Z Last Updated: 2024-09-17T01:47:08.345Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: F5 Products: BIG-IP Problem Types: CWE-74 Description: In BIG-IP Versions 16.1.x before 16.1.3.1, 15.1.x before 15.1.6.1, 14.1.x before 14.1.5.1, and all versions of 13.1.x, an authenticated attacker with Resource Administrator or Manager privileges can create or modify existing monitor objects in the Configuration utility in an undisclosed manner leading to a privilege escalation. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. Additional Analyst Note
n. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K13213418
CVE ID: CVE-2022-35736 State: REJECTED Published: N/A Last Updated: 2025-05-28T18:20:18.844Z Description: No description available.
CVE ID: CVE-2022-35737 State: PUBLISHED Published: 2022-08-03T00:00:00 Last Updated: 2024-08-03T09:44:21.941Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQLite 1.0.12 through 3.39.x before 3.39.2 sometimes allows an array-bounds overflow if billions of bytes are used in a string argument to a C API. Additional Analyst Notes: - CVE Program Container: References: - https://www.sqlite.org/cves.html - https://kb.cert.org/vuls/id/720344 - https://sqlite.org/releaselog/3_39_2.html - https://security.netapp.com/advisory/ntap-20220915-0009/ - https://blog.trailofbits.com/2022/10/25/sqlite-vulnerability-july-2022-library-api/ - https://security.gentoo.org/glsa/202210-40
CVE ID: CVE-2022-35739 State: PUBLISHED Published: 2022-10-25T00:00:00.000Z Last Updated: 2025-05-07T20:37:50.779Z Vendors: n/a Products: n/a Problem Types: n/a Description: PRTG Network Monitor through 22.2.77.2204 does not prevent custom input for a device’s icon, which can be modified to insert arbitrary content into the style tag for that device. When the device page loads, the arbitrary Cascading Style Sheets (CSS) data is inserted into the style tag, loading malicious content. Due to PRTG Network Monitor preventing “characters, and from modern browsers disabling JavaScript support in style tags, this vulnerability could not be escalated into a Cross-Site Scripting vulnerability. Additi
cript support in style tags, this vulnerability could not be escalated into a Cross-Site Scripting vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.paessler.com/prtg/history/stable - https://raxis.com/blog/cve-2022-35739
CVE ID: CVE-2022-35740 State: PUBLISHED Published: 2022-11-10T00:00:00.000Z Last Updated: 2025-05-01T13:50:10.841Z Vendors: n/a Products: n/a Problem Types: n/a Description: dotCMS before 22.06 allows remote attackers to bypass intended access control and obtain sensitive information by using a semicolon in a URL to introduce a matrix parameter. (This is also fixed in 5.3.8.12, 21.06.9, and 22.03.2 for LTS users.) Some Java application frameworks, including those used by Spring or Tomcat, allow the use of matrix parameters: these are URI parameters separated by semicolons. Through precise semicolon placement in a URI, it is possible to exploit this feature to avoid dotCMS's path-based XSS pr
Through precise semicolon placement in a URI, it is possible to exploit this feature to avoid dotCMS's path-based XSS prevention (such as "require login" filters), and consequently access restricted resources. For example, an attacker could place a semicolon immediately before a / character that separates elements of a filesystem path. This could reveal file content that is ordinarily only visible to signed-in users. This issue can be chained with other exploit code to achieve XSS attacks against dotCMS. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dotcms.com/security/SI-63 - https://github.com/dotCMS/patches-hotfixes/tree/master/com.d
ment: References: - https://www.dotcms.com/security/SI-63 - https://github.com/dotCMS/patches-hotfixes/tree/master/com.dotcms.security.matrixparams
CVE ID: CVE-2022-35741 State: PUBLISHED Published: 2022-07-18T14:30:14 Last Updated: 2024-08-03T09:44:21.691Z Vendors: Apache Software Foundation Products: Apache CloudStack Problem Types: XML external entity injection Description: Apache CloudStack version 4.5.0 and later has a SAML 2.0 authentication Service Provider plugin which is found to be vulnerable to XML external entity (XXE) injection. This plugin is not enabled by default and the attacker would require that this plugin be enabled to exploit the vulnerability. When the SAML 2.0 plugin is enabled in affected versions of Apache CloudStack could potentially allow the exploitation of XXE vulnerabilities. The SAML 2.0 messages construc
ons of Apache CloudStack could potentially allow the exploitation of XXE vulnerabilities. The SAML 2.0 messages constructed during the authentication flow in Apache CloudStack are XML-based and the XML data is parsed by various standard libraries that are now understood to be vulnerable to XXE injection attacks such as arbitrary file reading, possible denial of service, server-side request forgery (SSRF) on the CloudStack management server. Additional Analyst Notes: - CVE Program Container: References: - https://lists.apache.org/thread/hwhxvtwp1d5dsm156bsf1cnyvtmrfv3f - http://www.openwall.com/lists/oss-security/2022/07/18/2 - http://www.openwall.com/lists/oss-security/2022/07/20/1
CVE ID: CVE-2022-35742 State: PUBLISHED Published: 2023-06-01T01:09:34.836Z Last Updated: 2025-01-02T19:33:56.095Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft Office 2019, Microsoft 365 Apps for Enterprise, Microsoft Office LTSC 2021, Microsoft Outlook 2016, Microsoft Outlook 2013 Service Pack 1 Problem Types: Denial of Service Description: Microsoft Outlook Denial of Service Vulnerability Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35742
CVE ID: CVE-2022-35743 State: PUBLISHED Published: 2023-05-31T18:07:00.424Z Last Updated: 2025-01-02T19:33:56.677Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows 10 Version 21H1, Windows Server 2022, Windows 10 Version 20H2, Windows Server version 20H2, Windows 11 version 21H2, Windows 10 Version 21H2, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows 7, Windows 7 Service Pack 1, Windows 8.1, Windows Server 2008 R2 Service Pack 1, Windows Server 2008
tallation), Windows 7, Windows 7 Service Pack 1, Windows 8.1, Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) Problem Types: Remote Code Execution Description: Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35743
CVE ID: CVE-2022-35744 State: PUBLISHED Published: 2023-05-31T18:07:00.959Z Last Updated: 2025-01-02T19:33:57.243Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows 10 Version 21H1, Windows Server 2022, Windows 10 Version 20H2, Windows Server version 20H2, Windows 11 version 21H2, Windows 10 Version 21H2, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows 7, Windows 7 Service Pack 1, Windows 8.1, Windows Server 2008 Service Pack 2, Windows Server 200
installation), Windows 7, Windows 7 Service Pack 1, Windows 8.1, Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) Problem Types: Remote Code Execution Description: Windows Point-to-Point Protocol (PPP) Remote Code Execution Vulnerability Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-gui
nal Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35744
CVE ID: CVE-2022-35745 State: PUBLISHED Published: 2023-05-31T18:07:01.505Z Last Updated: 2025-01-02T19:33:57.712Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows 10 Version 21H1, Windows Server 2022, Windows 10 Version 20H2, Windows Server version 20H2, Windows 11 version 21H2, Windows 10 Version 21H2, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows 7, Windows 7 Service Pack 1, Windows 8.1, Windows Server 2008 Service Pack 2, Windows Server 2008 Se
dditional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35745
CVE ID: CVE-2022-35746 State: PUBLISHED Published: 2023-05-31T18:07:02.139Z Last Updated: 2025-01-02T19:33:58.349Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows 10 Version 21H1, Windows Server 2022, Windows 10 Version 20H2, Windows Server version 20H2, Windows 11 version 21H2, Windows 10 Version 21H2, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows 8.1, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Wi
tallation), Windows 8.1, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) Problem Types: Elevation of Privilege Description: Windows Digital Media Receiver Elevation of Privilege Vulnerability Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35746
CVE ID: CVE-2022-35747 State: PUBLISHED Published: 2023-05-31T18:07:02.694Z Last Updated: 2025-01-02T19:33:58.992Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows 10 Version 21H1, Windows Server 2022, Windows 10 Version 20H2, Windows Server version 20H2, Windows 11 version 21H2, Windows 10 Version 21H2, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows 7, Windows 7 Service Pack 1, Windows 8.1, Windows Server 2008 Service Pack 2, Windows Server 2008
nstallation), Windows 7, Windows 7 Service Pack 1, Windows 8.1, Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) Problem Types: Denial of Service Description: Windows Point-to-Point Protocol (PPP) Denial of Service Vulnerability Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnera
t Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35747
CVE ID: CVE-2022-35748 State: PUBLISHED Published: 2023-05-31T18:07:03.204Z Last Updated: 2025-01-02T19:33:59.644Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server version 20H2, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) Problem Types: Denial of Service Description: HTTP.sys Denial of Service Vulnerability Additional Analyst Notes: - CVE Program Container: -
l of Service Description: HTTP.sys Denial of Service Vulnerability Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35748
CVE ID: CVE-2022-35749 State: PUBLISHED Published: 2023-05-31T18:07:03.722Z Last Updated: 2025-01-02T19:34:00.416Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows 10 Version 21H1, Windows Server 2022, Windows 10 Version 20H2, Windows Server version 20H2, Windows 11 version 21H2, Windows 10 Version 21H2, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows 8.1, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Wi
tallation), Windows 8.1, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) Problem Types: Elevation of Privilege Description: Windows Digital Media Receiver Elevation of Privilege Vulnerability Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35749
CVE ID: CVE-2022-35750 State: PUBLISHED Published: 2023-05-31T18:07:04.236Z Last Updated: 2025-01-02T19:34:00.997Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows 10 Version 21H1, Windows Server 2022, Windows 10 Version 20H2, Windows Server version 20H2, Windows 11 version 21H2, Windows 10 Version 21H2, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows 7, Windows 7 Service Pack 1, Windows 8.1, Windows Server 2008 Service Pack 2, Windows Server 2008 Se
tallation), Windows 7, Windows 7 Service Pack 1, Windows 8.1, Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) Problem Types: Elevation of Privilege Description: Win32k Elevation of Privilege Vulnerability Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35750
CVE ID: CVE-2022-35751 State: PUBLISHED Published: 2023-05-31T18:07:04.776Z Last Updated: 2025-01-02T19:34:01.915Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows 10 Version 21H1, Windows Server 2022, Windows Server version 20H2, Windows 11 version 21H2, Windows 10 Version 21H2, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows 7 Service Pack 1, Windows 8.1, Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installati