Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-21932 State: PUBLISHED Published: 2022-01-11T20:23:26 Last Updated: 2025-01-02T18:22:49.850Z Severity: HIGH (CVSS 7.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:N/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft Dynamics 365 Customer Engagement V9.0 Problem Types: Spoofing Description: Microsoft Dynamics 365 Customer Engagement Cross-Site Scripting Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-21932
CVE ID: CVE-2022-21933 State: PUBLISHED Published: 2022-01-21T09:05:12.371715Z Last Updated: 2024-09-16T20:06:36.122Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: ASUS Products: VC65-C1, PB60V, PB60G, PB60S, PA90, PB50, PB60, PB61V, TS10, PN40, PN60, PN30, UN65U Problem Types: CWE-20 Description: ASUS VivoMini/Mini PC device has an improper input validation vulnerability. A local attacker with system privilege can use system management interrupt (SMI) to modify memory, resulting in arbitrary code execution for controlling the system or disrupting service. Additional Analyst Notes: - CVE Program Container: References: - https://www.twcert.org.tw/tw/cp-132-
isrupting service. Additional Analyst Notes: - CVE Program Container: References: - https://www.twcert.org.tw/tw/cp-132-5547-34bc4-1.html
CVE ID: CVE-2022-21934 State: PUBLISHED Published: 2022-05-06T15:55:23.784773Z Last Updated: 2024-09-16T18:24:30.056Z Severity: HIGH (CVSS 8 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Johnson Controls Products: Metasys ADS/ADX/OAS server Problem Types: CWE-620 Description: Under certain circumstances an authenticated user could lock other users out of the system or take over their accounts in Metasys ADS/ADX/OAS server 10 versions prior to 10.1.5 and Metasys ADS/ADX/OAS server 11 versions prior to 11.0.2. Additional Analyst Notes: - CVE Program Container: References: - https://www.johnsoncontrols.com/cyber-solutions/security-advisories - https://www.cisa.gov/uscert/ics/advisories
nces: - https://www.johnsoncontrols.com/cyber-solutions/security-advisories - https://www.cisa.gov/uscert/ics/advisories/icsa-22-125-01
CVE ID: CVE-2022-21935 State: PUBLISHED Published: 2022-06-15T19:57:01.029262Z Last Updated: 2024-09-16T19:57:26.166Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Johnson Controls Products: Metasys ADS/ADX/OAS server Problem Types: CWE-620 Description: A vulnerability in Metasys ADS/ADX/OAS 10 versions prior to 10.1.5 and Metasys ADS/ADX/OAS 11 versions prior to 11.0.2 allows unverified password change. Additional Analyst Notes: - CVE Program Container: References: - https://www.johnsoncontrols.com/cyber-solutions/security-advisories - https://www.cisa.gov/uscert/ics/advisories/icsa-22-165-01
CVE ID: CVE-2022-21936 State: PUBLISHED Published: 2022-10-07T17:39:32.661664Z Last Updated: 2024-09-16T19:40:07.058Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H) Vendors: n/a Products: n/a Problem Types: n/a Description: On Metasys ADX Server version 12.0 running MVE, an Active Directory user could execute validated actions without providing a valid password when using MVE SMP UI. Additional Analyst Notes: - CVE Program Container: References: - https://www.johnsoncontrols.com/cyber-solutions/security-advisories - https://www.cisa.gov/uscert/ics/advisories/icsa-22-277-01
CVE ID: CVE-2022-21937 State: PUBLISHED Published: 2022-06-15T19:37:55.529400Z Last Updated: 2024-09-16T18:23:37.977Z Severity: HIGH (CVSS 8.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N) Vendors: Johnson Controls Products: Metasys ADS/ADX/OAS server Problem Types: CWE-79 Description: Under certain circumstances, a vulnerability in Metasys ADS/ADX/OAS 10 versions prior to 10.1.5 and Metasys ADS/ADX/OAS 11 versions prior to 11.0.2 could allow a user to inject malicious code into the web interface. Additional Analyst Notes: - CVE Program Container: References: - https://www.johnsoncontrols.com/cyber-solutions/security-advisories - https://www.cisa.gov/uscert/ics/advisories/icsa-22-165-01
CVE ID: CVE-2022-21938 State: PUBLISHED Published: 2022-06-15T20:15:35.912518Z Last Updated: 2024-09-16T17:19:16.453Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:N) Vendors: Johnson Controls Products: Metasys ADS/ADX/OAS server Problem Types: CWE-79 Description: Under certain circumstances, a vulnerability in Metasys ADS/ADX/OAS 10 versions prior to 10.1.5 and Metasys ADS/ADX/OAS 11 versions prior to 11.0.2 could allow a user to inject malicious code into the MUI Graphics web interface. Additional Analyst Notes: - CVE Program Container: References: - https://www.johnsoncontrols.com/cyber-solutions/security-advisories - https://www.cisa.gov/uscert/ics/advisories/icsa-2
https://www.johnsoncontrols.com/cyber-solutions/security-advisories - https://www.cisa.gov/uscert/ics/advisories/icsa-22-165-01
CVE ID: CVE-2022-21939 State: PUBLISHED Published: 2023-02-09T20:49:17.442Z Last Updated: 2025-03-24T18:19:12.535Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Johnson Controls Products: System Configuration Tool (SCT) Problem Types: CWE-1004 Description: Sensitive Cookie Without 'HttpOnly' Flag vulnerability in Johnson Controls System Configuration Tool (SCT) version 14 prior to 14.2.3 and version 15 prior to 15.0.3 could allow access to the cookie. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.johnsoncontrols.com/cyber-solutions/security-advisories - https://www.cisa.gov/uscert/ics/advisories/icsa-23
https://www.johnsoncontrols.com/cyber-solutions/security-advisories - https://www.cisa.gov/uscert/ics/advisories/icsa-23-040-03
CVE ID: CVE-2022-21940 State: PUBLISHED Published: 2023-02-09T20:54:02.226Z Last Updated: 2025-03-24T18:12:16.046Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Johnson Controls Products: System Configuration Tool (SCT) Problem Types: CWE-614 Description: Sensitive Cookie in HTTPS Session Without 'Secure' Attribute vulnerability in Johnson Controls System Configuration Tool (SCT) version 14 prior to 14.2.3 and version 15 prior to 15.0.3 could allow access to the cookie. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.johnsoncontrols.com/cyber-solutions/security-advisories - https://www.cisa.gov/uscert/ics
ent: References: - https://www.johnsoncontrols.com/cyber-solutions/security-advisories - https://www.cisa.gov/uscert/ics/advisories/icsa-23-040-03
CVE ID: CVE-2022-21941 State: PUBLISHED Published: 2022-08-31T15:59:33.979533Z Last Updated: 2024-09-17T01:51:30.183Z Severity: CRITICAL (CVSS 10 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: Johnson Controls Products: iSTAR Ultra Problem Types: CWE-77 Description: All versions of iSTAR Ultra prior to version 6.8.9.CU01 are vulnerable to a command injection that could allow an unauthenticated user root access to the system. Additional Analyst Notes: - CVE Program Container: References: - https://www.johnsoncontrols.com/cyber-solutions/security-advisories - https://www.cisa.gov/uscert/ics/advisories/icsa-22-242-11
CVE ID: CVE-2022-21944 State: PUBLISHED Published: 2022-01-26T09:10:09.842895Z Last Updated: 2024-09-16T16:43:44.172Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: openSUSE Products: openSUSE Backports SLE-15-SP3, Factory Problem Types: CWE-59 Description: A UNIX Symbolic Link (Symlink) Following vulnerability in the systemd service file for watchman of openSUSE Backports SLE-15-SP3, Factory allows local attackers to escalate to root. This issue affects: openSUSE Backports SLE-15-SP3 watchman versions prior to 4.9.0. openSUSE Factory watchman versions prior to 4.9.0-9.1. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.suse.c
an versions prior to 4.9.0-9.1. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.suse.com/show_bug.cgi?id=1194470
CVE ID: CVE-2022-21945 State: PUBLISHED Published: 2022-03-16T10:05:12.859323Z Last Updated: 2024-09-17T00:40:49.798Z Severity: MEDIUM (CVSS 5.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L) Vendors: openSUSE Products: Factory Problem Types: CWE-377 Description: A Insecure Temporary File vulnerability in cscreen of openSUSE Factory allows local attackers to cause DoS for cscreen and a system DoS for non-default systems. This issue affects: openSUSE Factory cscreen version 1.2-1.3 and prior versions. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.suse.com/show_bug.cgi?id=1196446
CVE ID: CVE-2022-21946 State: PUBLISHED Published: 2022-03-16T10:05:14.562889Z Last Updated: 2024-09-17T01:21:54.785Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: openSUSE Products: Factory Problem Types: CWE-732 Description: A Incorrect Permission Assignment for Critical Resource vulnerability in the sudoers configuration in cscreen of openSUSE Factory allows any local users to gain the privileges of the tty and dialout groups and access and manipulate any running cscreen seesion. This issue affects: openSUSE Factory cscreen version 1.2-1.3 and prior versions. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.suse.com/show
-1.3 and prior versions. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.suse.com/show_bug.cgi?id=1196451
CVE ID: CVE-2022-21947 State: PUBLISHED Published: 2022-04-01T06:40:10.168994Z Last Updated: 2024-09-16T19:20:21.598Z Severity: HIGH (CVSS 8.3 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L) Vendors: SUSE Products: Rancher Problem Types: CWE-668 Description: A Exposure of Resource to Wrong Sphere vulnerability in Rancher Desktop of SUSE allows attackers in the local network to connect to the Dashboard API (steve) to carry out arbitrary actions. This issue affects: SUSE Rancher Desktop versions prior to V. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.suse.com/show_bug.cgi?id=1197491
CVE ID: CVE-2022-21948 State: PUBLISHED Published: 2023-02-07T00:00:00.000Z Last Updated: 2025-03-25T17:34:02.566Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N) Vendors: openSUSE Products: paste Problem Types: CWE-79 Description: An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in paste allows remote attackers to place Javascript into SVG files. This issue affects: openSUSE paste paste version b57b9f87e303a3db9465776e657378e96845493b and prior versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugzilla.suse.com/show_bug.cgi?id=1197930
CVE ID: CVE-2022-21949 State: PUBLISHED Published: 2022-05-03T07:50:09.286381Z Last Updated: 2024-09-16T21:04:30.361Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: SUSE Products: Open Build Service Problem Types: CWE-611 Description: A Improper Restriction of XML External Entity Reference vulnerability in SUSE Open Build Service allows remote attackers to reference external entities in certain operations. This can be used to gain information from the server that can be abused to escalate to Admin privileges on OBS. This issue affects: SUSE Open Build Service Open Build Service versions prior to 2.10.13. Additional Analyst Notes: - CVE Program Container: Refe
Open Build Service Open Build Service versions prior to 2.10.13. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.suse.com/show_bug.cgi?id=1197928
CVE ID: CVE-2022-21950 State: PUBLISHED Published: 2022-09-07T08:40:10.110711Z Last Updated: 2024-09-17T02:32:53.607Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: openSUSE Products: openSUSE Backports SLE-15-SP3, openSUSE Backports SLE-15-SP4 Problem Types: CWE-284 Description: A Improper Access Control vulnerability in the systemd service of cana in openSUSE Backports SLE-15-SP3, openSUSE Backports SLE-15-SP4 allows local users to hijack the UNIX domain socket This issue affects: openSUSE Backports SLE-15-SP3 canna versions prior to canna-3.7p3-bp153.2.3.1. openSUSE Backports SLE-15-SP4 canna versions prior to 3.7p3-bp154.3.3.1. openSUSE Factory was also
na-3.7p3-bp153.2.3.1. openSUSE Backports SLE-15-SP4 canna versions prior to 3.7p3-bp154.3.3.1. openSUSE Factory was also affected. Instead of fixing the package it was deleted there. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.suse.com/show_bug.cgi?id=1199280
CVE ID: CVE-2022-21951 State: PUBLISHED Published: 2022-05-25T08:15:21.578349Z Last Updated: 2024-09-16T21:04:23.284Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N) Vendors: SUSE Products: Rancher Problem Types: CWE-319 Description: A Cleartext Transmission of Sensitive Information vulnerability in SUSE Rancher, Rancher allows attackers on the network to read and change network data due to missing encryption of data transmitted via the network when a cluster is created from an RKE template with the CNI value overridden This issue affects: SUSE Rancher Rancher versions prior to 2.5.14; Rancher versions prior to 2.6.5. Additional Analyst Notes: - CVE Program Container
her Rancher versions prior to 2.5.14; Rancher versions prior to 2.6.5. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.suse.com/show_bug.cgi?id=1199443 - https://github.com/rancher/rancher/security/advisories/GHSA-vrph-m5jj-c46c
CVE ID: CVE-2022-21952 State: PUBLISHED Published: 2022-06-22T10:05:11.864828Z Last Updated: 2024-09-16T18:54:14.410Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: SUSE Products: SUSE Manager Server 4.1, SUSE Manager Server 4.2 Problem Types: CWE-306 Description: A Missing Authentication for Critical Function vulnerability in spacewalk-java of SUSE Manager Server 4.1, SUSE Manager Server 4.2 allows remote attackers to easily exhaust available disk resources leading to DoS. This issue affects: SUSE Manager Server 4.1 spacewalk-java versions prior to 4.1.46. SUSE Manager Server 4.2 spacewalk-java versions prior to 4.2.37. Additional Analyst Notes: - CVE Progra
prior to 4.1.46. SUSE Manager Server 4.2 spacewalk-java versions prior to 4.2.37. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.suse.com/show_bug.cgi?id=1199512
CVE ID: CVE-2022-21953 State: PUBLISHED Published: 2023-02-07T00:00:00.000Z Last Updated: 2025-03-25T17:33:32.595Z Severity: HIGH (CVSS 7.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L) Vendors: SUSE Products: Rancher Problem Types: CWE-862 Description: A Missing Authorization vulnerability in of SUSE Rancher allows authenticated user to create an unauthorized shell pod and kubectl access in the local cluster This issue affects: SUSE Rancher Rancher versions prior to 2.5.17; Rancher versions prior to 2.6.10; Rancher versions prior to 2.7.1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugzilla.suse.com/show_bug.cgi?id=1199731
CVE ID: CVE-2022-21954 State: PUBLISHED Published: 2022-01-11T20:23:27 Last Updated: 2025-01-02T18:23:07.205Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft Edge (Chromium-based) Problem Types: Elevation of Privilege Description: Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-21954
CVE ID: CVE-2022-21957 State: PUBLISHED Published: 2022-02-09T16:36:21 Last Updated: 2025-01-02T18:28:02.590Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft Dynamics 365 (on-premises) version 9.0, Microsoft Dynamics 365 (on-premises) version 9.1 Problem Types: Remote Code Execution Description: Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-21957
CVE ID: CVE-2022-21958 State: PUBLISHED Published: 2022-01-11T20:23:28 Last Updated: 2025-01-02T18:22:40.847Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows 10 Version 1909, Windows 10 Version 21H1, Windows Server 2022, Windows 10 Version 20H2, Windows Server version 20H2, Windows 11 version 21H2, Windows 10 Version 21H2, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows 8.1, Windows Server 2012, Windows Server 2012 (Server Core installation), Wind
2016 (Server Core installation), Windows 8.1, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) Problem Types: Remote Code Execution Description: Windows Resilient File System (ReFS) Remote Code Execution Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-21958
CVE ID: CVE-2022-21959 State: PUBLISHED Published: 2022-01-11T20:23:29 Last Updated: 2025-01-02T18:22:41.422Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows 10 Version 1909, Windows 10 Version 21H1, Windows Server 2022, Windows 10 Version 20H2, Windows Server version 20H2, Windows 11 version 21H2, Windows 10 Version 21H2, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows 8.1, Windows Server 2012, Windows Server 2012 (Server Core installation), Wind
2016 (Server Core installation), Windows 8.1, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) Problem Types: Remote Code Execution Description: Windows Resilient File System (ReFS) Remote Code Execution Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-21959
CVE ID: CVE-2022-21960 State: PUBLISHED Published: 2022-01-11T20:23:30 Last Updated: 2025-01-02T18:22:41.983Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows 10 Version 1909, Windows 10 Version 21H1, Windows Server 2022, Windows 10 Version 20H2, Windows Server version 20H2, Windows 11 version 21H2, Windows 10 Version 21H2, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows 8.1, Windows Server 2012, Windows Server 2012 (Server Core installation), Wind
2016 (Server Core installation), Windows 8.1, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) Problem Types: Remote Code Execution Description: Windows Resilient File System (ReFS) Remote Code Execution Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-21960
CVE ID: CVE-2022-21961 State: PUBLISHED Published: 2022-01-11T20:23:31 Last Updated: 2025-01-02T18:22:42.524Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows 10 Version 1909, Windows 10 Version 21H1, Windows Server 2022, Windows 10 Version 20H2, Windows Server version 20H2, Windows 11 version 21H2, Windows 10 Version 21H2, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows 8.1, Windows Server 2012, Windows Server 2012 (Server Core installation), Wind
2016 (Server Core installation), Windows 8.1, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) Problem Types: Remote Code Execution Description: Windows Resilient File System (ReFS) Remote Code Execution Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-21961
CVE ID: CVE-2022-21962 State: PUBLISHED Published: 2022-01-11T20:23:31 Last Updated: 2025-01-02T18:22:42.979Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows 10 Version 1909, Windows 10 Version 21H1, Windows Server 2022, Windows 10 Version 20H2, Windows Server version 20H2, Windows 11 version 21H2, Windows 10 Version 21H2, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows 8.1, Windows Server 2012, Windows Server 2012 (Server Core installation), Wind
2016 (Server Core installation), Windows 8.1, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) Problem Types: Remote Code Execution Description: Windows Resilient File System (ReFS) Remote Code Execution Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-21962
CVE ID: CVE-2022-21963 State: PUBLISHED Published: 2022-01-11T20:23:32 Last Updated: 2025-01-02T18:22:43.534Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows 10 Version 1909, Windows 10 Version 21H1, Windows Server 2022, Windows 10 Version 20H2, Windows Server version 20H2, Windows 11 version 21H2, Windows 10 Version 21H2, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows 8.1, Windows Server 2012, Windows Server 2012 (Server Core installation), Wind
2016 (Server Core installation), Windows 8.1, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) Problem Types: Remote Code Execution Description: Windows Resilient File System (ReFS) Remote Code Execution Vulnerability Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-21963
CVE ID: CVE-2022-21964 State: PUBLISHED Published: 2022-01-11T20:23:33 Last Updated: 2025-01-02T18:22:44.165Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1607 Problem Types: Information Disclosure Description: Remote Desktop Licensing Diagnoser Information Disclosure Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-21964
CVE ID: CVE-2022-21965 State: PUBLISHED Published: 2022-02-09T16:36:22 Last Updated: 2025-01-02T18:28:03.225Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft Teams for iOS, Microsoft Teams for Android, Microsoft Teams Admin Center Problem Types: Denial of Service Description: Microsoft Teams Denial of Service Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-21965