Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-21802 State: PUBLISHED Published: 2022-07-25T13:45:39.399625Z Last Updated: 2024-09-16T23:25:57.741Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P) Vendors: n/a Products: grapesjs Problem Types: Cross-site Scripting (XSS) Description: The package grapesjs before 0.19.5 are vulnerable to Cross-site Scripting (XSS) due to an improper sanitization of the class name in Selector Manager. Additional Analyst Notes: - CVE Program Container: References: - https://security.snyk.io/vuln/SNYK-JS-GRAPESJS-2935960 - https://security.snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-2936781 - https://github.com/artf/grapesjs/issues/4411%23issuecomment-1167202709 - https://
vuln/SNYK-JAVA-ORGWEBJARSNPM-2936781 - https://github.com/artf/grapesjs/issues/4411%23issuecomment-1167202709 - https://github.com/artf/grapesjs/commit/13e85d152d486b968265c4b8017e8901e7d89ff3 - https://github.com/artf/grapesjs/releases/tag/v0.19.5
CVE ID: CVE-2022-21803 State: PUBLISHED Published: 2022-04-12T15:20:12.370743Z Last Updated: 2024-09-16T16:53:18.553Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P) Vendors: n/a Products: nconf Problem Types: Prototype Pollution Description: This affects the package nconf before 0.11.4. When using the memory engine, it is possible to store a nested JSON representation of the configuration. The .set() function, that is responsible for setting the configuration properties, is vulnerable to Prototype Pollution. By providing a crafted property, it is possible to modify the properties on the Object.prototype. Additional Analyst Notes: - CVE Program Container: Reference
possible to modify the properties on the Object.prototype. Additional Analyst Notes: - CVE Program Container: References: - https://snyk.io/vuln/SNYK-JS-NCONF-2395478 - https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-2632450 - https://github.com/indexzero/nconf/pull/397 - https://github.com/indexzero/nconf/releases/tag/v0.11.4
CVE ID: CVE-2022-21804 State: PUBLISHED Published: 2023-05-10T13:16:54.532Z Last Updated: 2025-01-27T18:06:40.480Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H) Vendors: n/a Products: Intel QAT Driver for Windows Problem Types: escalation of privilege, CWE-787 Description: Out-of-bounds write in software for the Intel QAT Driver for Windows before version 1.9.0-0008 may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00809.html
CVE ID: CVE-2022-21805 State: PUBLISHED Published: 2022-02-08T10:30:38 Last Updated: 2024-08-03T02:53:36.285Z Vendors: econosys system Products: php_mailform Problem Types: Cross-site scripting Description: Reflected cross-site scripting vulnerability in the attached file name of php_mailform versions prior to Version 1.40 allows a remote unauthenticated attacker to inject an arbitrary script via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/econosys-system/php_mailform - https://jvn.jp/en/jp/JVN16690037/index.html
CVE ID: CVE-2022-21806 State: PUBLISHED Published: 2022-06-17T17:40:13.512Z Last Updated: 2025-04-15T19:00:31.630Z Severity: CRITICAL (CVSS 10 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: Anker Products: Eufy Homebase 2 Problem Types: CWE-368 Description: A use-after-free vulnerability exists in the mips_collector appsrv_server functionality of Anker Eufy Homebase 2 2.1.8.5h. A specially-crafted set of network packets can lead to remote code execution. The device is exposed to attacks from the network. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1440
CVE ID: CVE-2022-21807 State: PUBLISHED Published: 2022-08-18T19:52:16.000Z Last Updated: 2025-05-05T16:30:19.152Z Vendors: n/a Products: Intel(R) VTune(TM) Profiler software Problem Types: escalation of privilege Description: Uncontrolled search path elements in the Intel(R) VTune(TM) Profiler software before version 2022.2.0 may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00658.html
CVE ID: CVE-2022-21808 State: PUBLISHED Published: 2022-03-11T09:10:42 Last Updated: 2024-08-03T02:53:36.258Z Vendors: Yokogawa Electric Corporation Products: CENTUM CS 3000, CENTUM VP, Exaopc Problem Types: CWE-23 Description: Path traversal vulnerability exists in CAMS for HIS Server contained in the following Yokogawa Electric products: CENTUM CS 3000 versions from R3.08.10 to R3.09.00, CENTUM VP versions from R4.01.00 to R4.03.00, from R5.01.00 to R5.04.20, and from R6.01.00 to R6.08.00, Exaopc versions from R3.72.00 to R3.79.00. Additional Analyst Notes: - CVE Program Container: References: - https://web-material3.yokogawa.com/1/32094/files/YSAR-22-0001-E.pdf
CVE ID: CVE-2022-21809 State: PUBLISHED Published: 2022-05-12T17:01:31.633Z Last Updated: 2025-04-15T19:03:36.288Z Severity: CRITICAL (CVSS 9.9 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: InHand Networks Products: InRouter302 Problem Types: CWE-377 Description: A file write vulnerability exists in the httpd upload.cgi functionality of InHand Networks InRouter302 V3.5.4. A specially-crafted HTTP request can lead to arbitrary file upload. An attacker can upload a malicious file to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.inhandnetworks.com/upload/attachment/202205/10/InHand-PSA-2022-01.pdf - htt
ADP Vulnrichment: References: - https://www.inhandnetworks.com/upload/attachment/202205/10/InHand-PSA-2022-01.pdf - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1468
CVE ID: CVE-2022-21810 State: PUBLISHED Published: 2023-01-25T05:00:03.902Z Last Updated: 2025-04-01T14:49:31.407Z Severity: HIGH (CVSS 7.4 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P) Vendors: n/a Products: smartctl Problem Types: CWE-78 Description: All versions of the package smartctl are vulnerable to Command Injection via the info method due to improper input sanitization. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security.snyk.io/vuln/SNYK-JS-SMARTCTL-3175613 - https://github.com/baslr/node-smartctl/blob/f61266084d5b3e4baae9bd85f67ec4ec6a716736/index.js%23L18
CVE ID: CVE-2022-21812 State: PUBLISHED Published: 2022-08-18T19:47:46.000Z Last Updated: 2025-05-05T16:30:09.438Z Vendors: n/a Products: Intel(R) HAXM software Problem Types: escalation of privilege Description: Improper access control in the Intel(R) HAXM software before version 7.7.1 may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00655.html
CVE ID: CVE-2022-21813 State: PUBLISHED Published: 2022-02-07T00:00:00 Last Updated: 2024-08-03T02:53:36.217Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H) Vendors: NVIDIA Products: NVIDIA GPU Display Driver Problem Types: CWE-284 Description: NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel driver, where improper handling of insufficient permissions or privileges may allow an unprivileged local user limited write access to protected memory, which can lead to denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5312 - https://security.gentoo.org/glsa/202310-
ainer: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5312 - https://security.gentoo.org/glsa/202310-02
CVE ID: CVE-2022-21814 State: PUBLISHED Published: 2022-02-07T00:00:00 Last Updated: 2024-08-03T02:53:36.204Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H) Vendors: NVIDIA Products: NVIDIA GPU Display Driver Problem Types: CWE-280 Description: NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel driver package, where improper handling of insufficient permissions or privileges may allow an unprivileged local user limited write access to protected memory, which can lead to denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5312 - https://security.gentoo.org/glsa
ram Container: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5312 - https://security.gentoo.org/glsa/202310-02
CVE ID: CVE-2022-21815 State: PUBLISHED Published: 2022-02-07T20:00:17 Last Updated: 2024-08-03T02:53:36.246Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: NVIDIA Products: NVIDIA GPU Display Driver Problem Types: CWE-476 Description: NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for private IOCTLs where a NULL pointer dereference in the kernel, created within user mode code, may lead to a denial of service in the form of a system crash. Additional Analyst Notes: - CVE Program Container: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5312
CVE ID: CVE-2022-21816 State: PUBLISHED Published: 2022-02-07T20:00:19 Last Updated: 2024-08-03T02:53:36.276Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: NVIDIA Products: NVIDIA Virtual GPU Software and NVIDIA Cloud Gaming Problem Types: CWE-284 Description: NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (nvidia.ko), where a user in the guest OS can cause a GPU interrupt storm on the hypervisor host, leading to a denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5312
CVE ID: CVE-2022-21817 State: PUBLISHED Published: 2022-02-02T12:17:42 Last Updated: 2024-08-03T02:53:36.231Z Severity: CRITICAL (CVSS 9.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N) Vendors: n/a Products: n/a Problem Types: n/a Description: NVIDIA Omniverse Launcher contains a Cross-Origin Resource Sharing (CORS) vulnerability which can allow an unprivileged remote attacker, if they can get user to browse malicious site, to acquire access tokens allowing them to access resources in other security domains, which may lead to code execution, escalation of privileges, and impact to confidentiality and integrity. Additional Analyst Notes: - CVE Program Container: References: - https://nvidia.c
pact to confidentiality and integrity. Additional Analyst Notes: - CVE Program Container: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5318
CVE ID: CVE-2022-21818 State: PUBLISHED Published: 2022-02-14T23:45:13 Last Updated: 2024-08-03T02:53:36.254Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N) Vendors: NVIDIA Products: NVIDIA License System Problem Types: CWE-312 Description: NVIDIA License System contains a vulnerability in the installation scripts for the DLS virtual appliance, where a user on a network after signing in to the portal can access other users’ credentials, allowing them to gain escalated privileges, resulting in limited impact to both confidentiality and integrity. Additional Analyst Notes: - CVE Program Container: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5319
CVE ID: CVE-2022-21819 State: PUBLISHED Published: 2022-03-11T00:00:00 Last Updated: 2024-08-03T02:53:36.253Z Severity: HIGH (CVSS 7.6 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: NVIDIA Products: Jetson Nano, Jetson Nano 2GB Problem Types: CWE-732 Description: NVIDIA distributions of Jetson Linux contain a vulnerability where an error in the IOMMU configuration may allow an unprivileged attacker with physical access to the board direct read/write access to the entire system address space through the PCI bus. Such an attack could result in denial of service, code execution, escalation of privileges, and impact to data integrity and confidentiality. The scope impact may extend to ot
execution, escalation of privileges, and impact to data integrity and confidentiality. The scope impact may extend to other components. Additional Analyst Notes: - CVE Program Container: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5321 - https://www.thegoodpenguin.co.uk/blog/pcie-dma-attack-against-a-secured-jetson-nano-cve-2022-21819/
CVE ID: CVE-2022-21820 State: PUBLISHED Published: 2022-03-24T17:05:10 Last Updated: 2024-08-03T02:53:36.259Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: NVIDIA Products: NVIDIA Data Center GPU Manager Problem Types: CWE-20 Description: NVIDIA DCGM contains a vulnerability in nvhostengine, where a network user can cause detection of error conditions without action, which may lead to limited code execution, some denial of service, escalation of privileges, and limited impacts to both data confidentiality and integrity. Additional Analyst Notes: - CVE Program Container: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5328 - http://packets
Notes: - CVE Program Container: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5328 - http://packetstormsecurity.com/files/167396/NVIDIA-Data-Center-GPU-Manager-Remote-Memory-Corruption.html
CVE ID: CVE-2022-21821 State: PUBLISHED Published: 2022-03-29T20:05:11 Last Updated: 2024-08-03T02:53:36.263Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: NVIDIA Products: NVIDIA CUDA Toolkit Problem Types: CWE-1285 Description: NVIDIA CUDA Toolkit SDK contains an integer overflow vulnerability in cuobjdump.To exploit this vulnerability, a remote attacker would require a local user to download a specially crafted, corrupted file and locally execute cuobjdump against the file. Such an attack may lead to remote code execution that causes complete denial of service and an impact on data confidentiality and integrity. Additional Analyst Notes: - CVE Program Con
plete denial of service and an impact on data confidentiality and integrity. Additional Analyst Notes: - CVE Program Container: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5334
CVE ID: CVE-2022-21822 State: PUBLISHED Published: 2022-03-17T20:30:13 Last Updated: 2024-08-03T02:53:36.246Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: NVIDIA Products: NVIDIA FLARE Problem Types: CWE-770 Description: NVIDIA FLARE contains a vulnerability in the admin interface, where an un-authorized attacker can cause Allocation of Resources Without Limits or Throttling, which may lead to cause system unavailable. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/NVIDIA/NVFlare/security/advisories/GHSA-jx8f-cpx7-fv47
CVE ID: CVE-2022-21823 State: PUBLISHED Published: 2022-01-07T22:39:51 Last Updated: 2024-08-03T02:53:36.259Z Vendors: n/a Products: Ivanti Workspace Control Problem Types: CWE-922 Description: A insecure storage of sensitive information vulnerability exists in Ivanti Workspace Control <2021.2 (10.7.30.0) that could allow an attacker with locally authenticated low privileges to obtain key information due to an unspecified attack vector. Additional Analyst Notes: - CVE Program Container: References: - https://forums.ivanti.com/s/article/A-locally-authenticated-user-with-low-privileges-can-obtain-key-information-due-to-an-unspecified-attack-vector?language=en_US
CVE ID: CVE-2022-21824 State: PUBLISHED Published: 2022-02-24T00:00:00 Last Updated: 2025-04-30T22:24:41.602Z Vendors: NodeJS Products: Node Problem Types: CWE-471 Description: Due to the formatting logic of the "console.table()" function it was not safe to allow user controlled input to be passed to the "properties" parameter while simultaneously passing a plain object with at least one property as the first parameter, which could be "__proto__". The prototype pollution has very limited control, in that it only allows an empty string to be assigned to numerical keys of the object prototype.Node.js >= 12.22.9, >= 14.18.3, >= 16.13.2, and >= 17.3.1 use a null protoype for the object these pro
object prototype.Node.js >= 12.22.9, >= 14.18.3, >= 16.13.2, and >= 17.3.1 use a null protoype for the object these properties are being assigned to. Additional Analyst Notes: - CVE Program Container: References: - https://nodejs.org/en/blog/vulnerability/jan-2022-security-releases/ - https://hackerone.com/reports/1431042 - https://www.oracle.com/security-alerts/cpuapr2022.html - https://security.netapp.com/advisory/ntap-20220325-0007/ - https://www.debian.org/security/2022/dsa-5170 - https://www.oracle.com/security-alerts/cpujul2022.html - https://security.netapp.com/advisory/ntap-20220729-0004/ - https://lists.debian.org/debian-lts-announce/2022/10/msg00006.html
CVE ID: CVE-2022-21825 State: PUBLISHED Published: 2022-02-09T22:05:54 Last Updated: 2024-08-03T02:53:36.292Z Vendors: n/a Products: Citrix Workspace App for Linux Problem Types: CWE-284 Description: An Improper Access Control vulnerability exists in Citrix Workspace App for Linux 2012 - 2111 with App Protection installed that can allow an attacker to perform local privilege escalation. Additional Analyst Notes: - CVE Program Container: References: - https://support.citrix.com/article/CTX338435
CVE ID: CVE-2022-21826 State: PUBLISHED Published: 2022-09-30T16:24:25 Last Updated: 2024-08-03T02:53:36.293Z Vendors: n/a Products: Pulse Connect Secure VPN Server Problem Types: CWE-444 Description: Pulse Secure version 9.115 and below may be susceptible to client-side http request smuggling, When the application receives a POST request, it ignores the request's Content-Length header and leaves the POST body on the TCP/TLS socket. This body ends up prefixing the next HTTP request sent down that connection, this means when someone loads website attacker may be able to make browser issue a POST to the application, enabling XSS. Additional Analyst Notes: - CVE Program Container: References: -
browser issue a POST to the application, enabling XSS. Additional Analyst Notes: - CVE Program Container: References: - https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/Client-Side-Desync-Attack/
CVE ID: CVE-2022-21827 State: PUBLISHED Published: 2022-05-26T16:41:39 Last Updated: 2024-08-03T02:53:36.260Z Vendors: n/a Products: Citrix Gateway Windows Plugin Problem Types: CWE-269 Description: An improper privilege vulnerability has been discovered in Citrix Gateway Plug-in for Windows (Citrix Secure Access for Windows) <21.9.1.2 what could allow an attacker who has gained local access to a computer with Citrix Gateway Plug-in installed, to corrupt or delete files as SYSTEM. Additional Analyst Notes: - CVE Program Container: References: - https://support.citrix.com/article/CTX341455
CVE ID: CVE-2022-21828 State: PUBLISHED Published: 2022-03-04T16:15:00 Last Updated: 2024-08-03T02:53:36.277Z Vendors: n/a Products: Ivanti Incapptic Connect Problem Types: CWE-502 Description: A user with high privilege access to the Incapptic Connect web console can remotely execute code on the Incapptic Connect server using a unspecified attack vector in Incapptic Connect version 1.40.0, 1.39.1, 1.39.0, 1.38.1, 1.38.0, 1.37.1, 1.37.0, 1.36.0, 1.35.5, 1.35.4 and 1.35.3. Additional Analyst Notes: - CVE Program Container: References: - https://forums.ivanti.com/s/article/SA-2022-02-23?language=en_US
CVE ID: CVE-2022-21829 State: PUBLISHED Published: 2022-06-24T15:00:05 Last Updated: 2024-08-03T02:53:36.288Z Vendors: n/a Products: https://github.com/concrete5/concrete5 Problem Types: CWE-319 Description: Concrete CMS Versions 9.0.0 through 9.0.2 and 8.5.7 and below can download zip files over HTTP and execute code from those zip files which could lead to an RCE. Fixed by enforcing ‘concrete_secure’ instead of ‘concrete’. Concrete now only makes requests over https even a request comes in via http. Concrete CMS security team ranked this 8 with CVSS v3.1 vector: AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H Credit goes to Anna for reporting HackerOne 1482520. Additional Analyst Notes: - CVE Program
/PR:H/UI:N/S:C/C:H/I:H/A:H Credit goes to Anna for reporting HackerOne 1482520. Additional Analyst Notes: - CVE Program Container: References: - https://documentation.concretecms.org/developers/introduction/version-history/858-release-notes - https://hackerone.com/reports/1482520%2C - https://documentation.concretecms.org/developers/introduction/version-history/910-release-notes%2C
CVE ID: CVE-2022-21830 State: PUBLISHED Published: 2022-04-01T22:17:01 Last Updated: 2024-08-03T02:53:36.288Z Vendors: n/a Products: Rocket.chat Livechat Problem Types: CWE-79 Description: A blind self XSS vulnerability exists in RocketChat LiveChat <v1.9 that could allow an attacker to trick a victim pasting malicious code in their chat instance. Additional Analyst Notes: - CVE Program Container: References: - https://hackerone.com/reports/1091118
CVE ID: CVE-2022-21831 State: PUBLISHED Published: 2022-05-26T00:00:00 Last Updated: 2024-08-03T02:53:36.300Z Vendors: n/a Products: https://github.com/rails/rails Problem Types: CWE-94 Description: A code injection vulnerability exists in the Active Storage >= v5.2.0 that could allow an attacker to execute code via image_processing arguments. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/advisories/GHSA-w749-p3v6-hccq - https://lists.debian.org/debian-lts-announce/2022/09/msg00002.html - https://security.netapp.com/advisory/ntap-20221118-0001/ - https://www.debian.org/security/2023/dsa-5372
CVE ID: CVE-2022-21833 State: PUBLISHED Published: 2022-01-11T20:22:13 Last Updated: 2025-01-02T18:22:54.298Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows 10 Version 1909, Windows 10 Version 21H1, Windows Server 2022, Windows 10 Version 20H2, Windows Server version 20H2, Windows 11 version 21H2, Windows 10 Version 21H2, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows 7, Windows 7 Service Pack 1, Windows 8.1, Windows Server 2008 Service Pack 2, Wi
016 (Server Core installation), Windows 7, Windows 7 Service Pack 1, Windows 8.1, Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) Problem Types: Elevation of Privilege Description: Virtual Machine IDE Drive Elevation of Privilege Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CV
dditional Analyst Notes: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-21833
CVE ID: CVE-2022-21834 State: PUBLISHED Published: 2022-01-11T20:22:14 Last Updated: 2025-01-02T18:22:53.744Z Severity: HIGH (CVSS 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows 10 Version 1909, Windows 10 Version 21H1, Windows Server 2022, Windows 10 Version 20H2, Windows Server version 20H2, Windows 11 version 21H2, Windows 10 Version 21H2, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows 7, Windows 7 Service Pack 1, Windows 8.1, Windows Server 2008 Service Pack 2, Wind