Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-33646 State: PUBLISHED Published: 2022-08-09T19:50:20.000Z Last Updated: 2025-06-05T18:39:21.270Z Severity: HIGH (CVSS 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: Microsoft Products: Azure Batch Problem Types: Elevation of Privilege Description: Azure Batch Node Agent Elevation of Privilege Vulnerability Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33646
CVE ID: CVE-2022-33647 State: PUBLISHED Published: 2022-09-13T18:41:30 Last Updated: 2025-03-11T16:10:18.548Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows
Service Pack 1 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) Problem Types: Elevation of Privilege Description: Windows Kerberos Elevation of Privilege Vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33647
CVE ID: CVE-2022-33648 State: PUBLISHED Published: 2022-08-09T19:50:33 Last Updated: 2025-01-02T19:33:44.943Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft Office Online Server Problem Types: Remote Code Execution Description: Microsoft Excel Remote Code Execution Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33648
CVE ID: CVE-2022-33649 State: PUBLISHED Published: 2022-08-09T19:50:44 Last Updated: 2025-01-02T19:33:45.497Z Severity: CRITICAL (CVSS 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft Edge (Chromium-based) Problem Types: Security Feature Bypass Description: Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33649
CVE ID: CVE-2022-33650 State: PUBLISHED Published: 2022-07-12T22:38:06 Last Updated: 2025-07-08T15:36:27.258Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C) Vendors: Microsoft Products: Azure Site Recovery VMWare to Azure Problem Types: Elevation of Privilege Description: Azure Site Recovery Elevation of Privilege Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33650
CVE ID: CVE-2022-33651 State: PUBLISHED Published: 2022-07-12T22:38:07 Last Updated: 2025-07-08T15:36:27.943Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C) Vendors: Microsoft Products: Azure Site Recovery VMWare to Azure Problem Types: Elevation of Privilege Description: Azure Site Recovery Elevation of Privilege Vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33651
CVE ID: CVE-2022-33652 State: PUBLISHED Published: 2022-07-12T22:38:09 Last Updated: 2025-07-08T15:36:28.586Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C) Vendors: Microsoft Products: Azure Site Recovery VMWare to Azure Problem Types: Elevation of Privilege Description: Azure Site Recovery Elevation of Privilege Vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33652
CVE ID: CVE-2022-33653 State: PUBLISHED Published: 2022-07-12T22:38:10 Last Updated: 2025-07-08T15:36:29.221Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C) Vendors: Microsoft Products: Azure Site Recovery VMWare to Azure Problem Types: Elevation of Privilege Description: Azure Site Recovery Elevation of Privilege Vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33653
CVE ID: CVE-2022-33654 State: PUBLISHED Published: 2022-07-12T22:38:12 Last Updated: 2025-07-08T15:36:29.864Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C) Vendors: Microsoft Products: Azure Site Recovery VMWare to Azure Problem Types: Elevation of Privilege Description: Azure Site Recovery Elevation of Privilege Vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33654
CVE ID: CVE-2022-33655 State: PUBLISHED Published: 2022-07-12T22:38:13 Last Updated: 2025-07-08T15:36:30.497Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H/E:P/RL:O/RC:C) Vendors: Microsoft Products: Azure Site Recovery VMWare to Azure Problem Types: Elevation of Privilege Description: Azure Site Recovery Elevation of Privilege Vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33655
CVE ID: CVE-2022-33656 State: PUBLISHED Published: 2022-07-12T22:38:15 Last Updated: 2025-07-08T15:36:31.047Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H/E:P/RL:O/RC:C) Vendors: Microsoft Products: Azure Site Recovery VMWare to Azure Problem Types: Elevation of Privilege Description: Azure Site Recovery Elevation of Privilege Vulnerability Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33656
CVE ID: CVE-2022-33657 State: PUBLISHED Published: 2022-07-12T22:38:16 Last Updated: 2025-07-08T15:36:31.532Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H/E:P/RL:O/RC:C) Vendors: Microsoft Products: Azure Site Recovery VMWare to Azure Problem Types: Elevation of Privilege Description: Azure Site Recovery Elevation of Privilege Vulnerability Additional Analyst Notes: - ADP Container: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33657
CVE ID: CVE-2022-33658 State: PUBLISHED Published: 2022-07-12T22:38:17 Last Updated: 2025-07-08T15:36:32.165Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C) Vendors: Microsoft Products: Azure Site Recovery VMWare to Azure Problem Types: Elevation of Privilege Description: Azure Site Recovery Elevation of Privilege Vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33658
CVE ID: CVE-2022-33659 State: PUBLISHED Published: 2022-07-12T22:38:19 Last Updated: 2025-07-08T15:36:32.750Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C) Vendors: Microsoft Products: Azure Site Recovery VMWare to Azure Problem Types: Elevation of Privilege Description: Azure Site Recovery Elevation of Privilege Vulnerability Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33659
CVE ID: CVE-2022-33660 State: PUBLISHED Published: 2022-07-12T22:38:20 Last Updated: 2025-07-08T15:36:33.237Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C) Vendors: Microsoft Products: Azure Site Recovery VMWare to Azure Problem Types: Elevation of Privilege Description: Azure Site Recovery Elevation of Privilege Vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33660
CVE ID: CVE-2022-33661 State: PUBLISHED Published: 2022-07-12T22:38:22 Last Updated: 2025-07-08T15:36:34.881Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H/E:P/RL:O/RC:C) Vendors: Microsoft Products: Azure Site Recovery VMWare to Azure Problem Types: Elevation of Privilege Description: Azure Site Recovery Elevation of Privilege Vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33661
CVE ID: CVE-2022-33662 State: PUBLISHED Published: 2022-07-12T22:38:23 Last Updated: 2025-07-08T15:36:37.242Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H/E:P/RL:O/RC:C) Vendors: Microsoft Products: Azure Site Recovery VMWare to Azure Problem Types: Elevation of Privilege Description: Azure Site Recovery Elevation of Privilege Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33662
CVE ID: CVE-2022-33663 State: PUBLISHED Published: 2022-07-12T22:38:25 Last Updated: 2025-07-08T15:36:37.857Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H/E:P/RL:O/RC:C) Vendors: Microsoft Products: Azure Site Recovery VMWare to Azure Problem Types: Elevation of Privilege Description: Azure Site Recovery Elevation of Privilege Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33663
CVE ID: CVE-2022-33664 State: PUBLISHED Published: 2022-07-12T22:38:26 Last Updated: 2025-07-08T15:36:38.414Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C) Vendors: Microsoft Products: Azure Site Recovery VMWare to Azure Problem Types: Elevation of Privilege Description: Azure Site Recovery Elevation of Privilege Vulnerability Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33664
CVE ID: CVE-2022-33665 State: PUBLISHED Published: 2022-07-12T22:38:28 Last Updated: 2025-07-08T15:36:38.979Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H/E:P/RL:O/RC:C) Vendors: Microsoft Products: Azure Site Recovery VMWare to Azure Problem Types: Elevation of Privilege Description: Azure Site Recovery Elevation of Privilege Vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33665
CVE ID: CVE-2022-33666 State: PUBLISHED Published: 2022-07-12T22:38:29 Last Updated: 2025-07-08T15:36:39.643Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H/E:P/RL:O/RC:C) Vendors: Microsoft Products: Azure Site Recovery VMWare to Azure Problem Types: Elevation of Privilege Description: Azure Site Recovery Elevation of Privilege Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33666
CVE ID: CVE-2022-33667 State: PUBLISHED Published: 2022-07-12T22:38:31 Last Updated: 2025-07-08T15:36:40.272Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H/E:P/RL:O/RC:C) Vendors: Microsoft Products: Azure Site Recovery VMWare to Azure Problem Types: Elevation of Privilege Description: Azure Site Recovery Elevation of Privilege Vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33667
CVE ID: CVE-2022-33668 State: PUBLISHED Published: 2022-07-12T22:38:32 Last Updated: 2025-07-08T15:36:40.905Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C) Vendors: Microsoft Products: Azure Site Recovery VMWare to Azure Problem Types: Elevation of Privilege Description: Azure Site Recovery Elevation of Privilege Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33668
CVE ID: CVE-2022-33669 State: PUBLISHED Published: 2022-07-12T22:38:34 Last Updated: 2025-07-08T15:36:41.539Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C) Vendors: Microsoft Products: Azure Site Recovery VMWare to Azure Problem Types: Elevation of Privilege Description: Azure Site Recovery Elevation of Privilege Vulnerability Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33669
CVE ID: CVE-2022-33670 State: PUBLISHED Published: 2022-08-09T19:50:56 Last Updated: 2025-01-02T19:33:46.054Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows 11 version 21H2, Windows 10 Version 21H1, Windows 10 Version 20H2, Windows Server version 20H2, Windows 10 Version 1809, Windows Server 2022, Windows Server 2016, Windows 8.1, Windows 10 Version 1607, Windows Server 2019, Windows 10 Version 21H2, Windows Server 2016 (Server Core installation), Windows Server 2012, Windows Server 2019 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows 10 Version 1507, Wind
installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows 10 Version 1507, Windows Server 2012 (Server Core installation) Problem Types: Elevation of Privilege Description: Windows Partition Management Driver Elevation of Privilege Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33670
CVE ID: CVE-2022-33671 State: PUBLISHED Published: 2022-07-12T22:38:35 Last Updated: 2025-07-08T15:36:42.198Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C) Vendors: Microsoft Products: Azure Site Recovery VMWare to Azure Problem Types: Elevation of Privilege Description: Azure Site Recovery Elevation of Privilege Vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33671
CVE ID: CVE-2022-33672 State: PUBLISHED Published: 2022-07-12T22:38:37 Last Updated: 2025-07-08T15:36:42.760Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H/E:P/RL:O/RC:C) Vendors: Microsoft Products: Azure Site Recovery VMWare to Azure Problem Types: Elevation of Privilege Description: Azure Site Recovery Elevation of Privilege Vulnerability Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33672
CVE ID: CVE-2022-33673 State: PUBLISHED Published: 2022-07-12T22:38:38 Last Updated: 2025-07-08T15:36:43.240Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H/E:P/RL:O/RC:C) Vendors: Microsoft Products: Azure Site Recovery VMWare to Azure Problem Types: Elevation of Privilege Description: Azure Site Recovery Elevation of Privilege Vulnerability Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33673
CVE ID: CVE-2022-33674 State: PUBLISHED Published: 2022-07-12T22:38:39 Last Updated: 2025-07-08T15:36:43.869Z Severity: HIGH (CVSS 8.3 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C) Vendors: Microsoft Products: Azure Site Recovery VMWare to Azure Problem Types: Elevation of Privilege Description: Azure Site Recovery Elevation of Privilege Vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33674
CVE ID: CVE-2022-33675 State: PUBLISHED Published: 2022-07-12T22:38:41 Last Updated: 2025-07-08T15:36:44.611Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: Microsoft Products: Azure Site Recovery VMWare to Azure Problem Types: Elevation of Privilege Description: Azure Site Recovery Elevation of Privilege Vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33675
CVE ID: CVE-2022-33676 State: PUBLISHED Published: 2022-07-12T22:38:42 Last Updated: 2025-07-08T15:36:45.357Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: Microsoft Products: Azure Site Recovery VMWare to Azure Problem Types: Remote Code Execution Description: Azure Site Recovery Remote Code Execution Vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33676
CVE ID: CVE-2022-33677 State: PUBLISHED Published: 2022-07-12T22:38:44 Last Updated: 2025-07-08T15:36:45.919Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Azure Site Recovery VMWare to Azure Problem Types: Elevation of Privilege Description: Azure Site Recovery Elevation of Privilege Vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33677
CVE ID: CVE-2022-33678 State: PUBLISHED Published: 2022-07-12T22:38:45 Last Updated: 2025-07-08T15:36:46.396Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Azure Site Recovery VMWare to Azure Problem Types: Remote Code Execution Description: Azure Site Recovery Remote Code Execution Vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33678
CVE ID: CVE-2022-33679 State: PUBLISHED Published: 2022-09-13T18:41:31 Last Updated: 2025-03-11T16:10:19.234Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: Microsoft Products: Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows
Service Pack 1 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) Problem Types: Elevation of Privilege Description: Windows Kerberos Elevation of Privilege Vulnerability Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33679
CVE ID: CVE-2022-33680 State: PUBLISHED Published: 2022-07-07T20:00:14 Last Updated: 2025-01-02T19:03:18.707Z Severity: HIGH (CVSS 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft Edge (Chromium-based) Problem Types: Elevation of Privilege Description: Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33680
CVE ID: CVE-2022-33681 State: PUBLISHED Published: 2022-09-23T09:25:13.000Z Last Updated: 2025-05-22T20:37:29.107Z Vendors: Apache Software Foundation Products: Apache Pulsar Problem Types: CWE-295 Description: Delayed TLS hostname verification in the Pulsar Java Client and the Pulsar Proxy make each client vulnerable to a man in the middle attack. Connections from the Pulsar Java Client to the Pulsar Broker/Proxy and connections from the Pulsar Proxy to the Pulsar Broker are vulnerable. Authentication data is sent before verifying the server’s TLS certificate matches the hostname, which means authentication data could be exposed to an attacker. An attacker can only take advantage of this vu
ostname, which means authentication data could be exposed to an attacker. An attacker can only take advantage of this vulnerability by taking control of a machine 'between' the client and the server. The attacker must then actively manipulate traffic to perform the attack by providing the client with a cryptographically valid certificate for an unrelated host. Because the client sends authentication data before performing hostname verification, an attacker could gain access to the client’s authentication data. The client eventually closes the connection when it verifies the hostname and identifies the targeted hostname does not match a hostname on the certificate. Because the client eventual
hostname and identifies the targeted hostname does not match a hostname on the certificate. Because the client eventually closes the connection, the value of the intercepted authentication data depends on the authentication method used by the client. Token based authentication and username/password authentication methods are vulnerable because the authentication data can be used to impersonate the client in a separate session. This issue affects Apache Pulsar Java Client versions 2.7.0 to 2.7.4; 2.8.0 to 2.8.3; 2.9.0 to 2.9.2; 2.10.0; 2.6.4 and earlier. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://lists.apache.org/thread/fpo6x10trvn20hlk0
Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://lists.apache.org/thread/fpo6x10trvn20hlk0dmnr5vlz5v4kl3d
CVE ID: CVE-2022-33682 State: PUBLISHED Published: 2022-09-23T09:25:14.000Z Last Updated: 2025-05-27T14:46:07.468Z Vendors: Apache Software Foundation Products: Apache Pulsar Problem Types: CWE-295 Description: TLS hostname verification cannot be enabled in the Pulsar Broker's Java Client, the Pulsar Broker's Java Admin Client, the Pulsar WebSocket Proxy's Java Client, and the Pulsar Proxy's Admin Client leaving intra-cluster connections and geo-replication connections vulnerable to man in the middle attacks, which could leak credentials, configuration data, message data, and any other data sent by these clients. The vulnerability is for both the pulsar+ssl protocol and HTTPS. An attacker ca
nd any other data sent by these clients. The vulnerability is for both the pulsar+ssl protocol and HTTPS. An attacker can only take advantage of this vulnerability by taking control of a machine 'between' the client and the server. The attacker must then actively manipulate traffic to perform the attack by providing the client with a cryptographically valid certificate for an unrelated host. This issue affects Apache Pulsar Broker, Proxy, and WebSocket Proxy versions 2.7.0 to 2.7.4; 2.8.0 to 2.8.3; 2.9.0 to 2.9.2; 2.10.0; 2.6.4 and earlier. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://lists.apache.org/thread/l0ynfl161qghwfcgbbl8ld9hzbl9t3y
rogram Container: - CISA ADP Vulnrichment: References: - https://lists.apache.org/thread/l0ynfl161qghwfcgbbl8ld9hzbl9t3yx