Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-26864 State: PUBLISHED Published: 2022-06-23T17:55:15.134018Z Last Updated: 2024-09-16T20:11:27.156Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:L) Vendors: Dell Products: CPG BIOS Problem Types: CWE-20 Description: Prior Dell BIOS versions contain an Input Validation vulnerability. A locally authenticated malicious user could potentially exploit this vulnerability by sending malicious input to an SMI in order to bypass security controls in SMM. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/en-us/000200568/dsa-2022-096
CVE ID: CVE-2022-26865 State: PUBLISHED Published: 2022-05-26T15:20:24.958627Z Last Updated: 2024-09-16T23:16:58.684Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Dell Products: Dell OS Recovery Tool Problem Types: CWE-288 Description: Dell Support Assist OS Recovery versions before 5.5.2 contain an Authentication Bypass vulnerability. An unauthenticated attacker with physical access to the system may exploit this vulnerability by bypassing OS Recovery authentication in order to run arbitrary code on the system as Administrator. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/en-us/000198780/dsa-2022-102
CVE ID: CVE-2022-26866 State: PUBLISHED Published: 2022-06-02T21:00:23.868089Z Last Updated: 2024-09-17T01:56:07.095Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N) Vendors: Dell Products: PowerStore Problem Types: CWE-79 Description: Dell PowerStore Versions before v2.1.1.0. contains a Stored Cross-Site Scripting vulnerability. A high privileged network attacker could potentially exploit this vulnerability, leading to the storage of malicious HTML or JavaScript codes in a trusted application data store. When a victim user accesses the data store through their browsers, the malicious code gets executed by the web browser in the context of the vulnerable web applicat
hrough their browsers, the malicious code gets executed by the web browser in the context of the vulnerable web application. Exploitation may lead to information disclosure, session theft, or client-side request forgery. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/000196367
CVE ID: CVE-2022-26867 State: PUBLISHED Published: 2022-06-02T21:00:25.273503Z Last Updated: 2024-09-16T17:03:58.884Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) Vendors: Dell Products: PowerStore Problem Types: CWE-1236 Description: PowerStore SW v2.1.1.0 supports the option to export data to either a CSV or an XLSX file. The data is taken as is, without any validation or sanitization. It allows a malicious, authenticated user to inject payloads that might get interpreted as formulas by the corresponding spreadsheet application that is being used to open the CSV/XLSX file. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/supp
ed to open the CSV/XLSX file. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/000196367
CVE ID: CVE-2022-26868 State: PUBLISHED Published: 2022-06-02T21:00:26.788234Z Last Updated: 2024-09-17T04:25:11.617Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Dell Products: PowerStore Problem Types: CWE-78 Description: Dell EMC PowerStore versions 2.0.0.x, 2.0.1.x, and 2.1.0.x are vulnerable to a command injection flaw. An authenticated attacker could potentially exploit this vulnerability, leading to the execution of arbitrary OS commands on the application's underlying OS, with the privileges of the vulnerable application. Exploitation may lead to a system takeover by an attacker. Additional Analyst Notes: - CVE Program Container: References: - htt
ation may lead to a system takeover by an attacker. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/000196367
CVE ID: CVE-2022-26869 State: PUBLISHED Published: 2022-06-02T21:00:28.124591Z Last Updated: 2024-09-16T18:14:38.650Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Dell Products: PowerStore Problem Types: CWE-200 Description: Dell PowerStore versions 2.0.0.x, 2.0.1.x and 2.1.0.x contains an open port vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to information disclosure and arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/000196367
CVE ID: CVE-2022-26870 State: PUBLISHED Published: 2022-10-21T18:05:25.181Z Last Updated: 2025-05-07T15:54:42.817Z Severity: HIGH (CVSS 7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H) Vendors: Dell Products: PowerStore Problem Types: CWE-288 Description: Dell PowerStore versions 2.1.0.x contain an Authentication bypass vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability under specific configuration. An attacker would gain unauthorized access upon successful exploit. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/000196367
CVE ID: CVE-2022-26871 State: PUBLISHED Published: 2022-03-29T20:45:20.000Z Last Updated: 2025-10-21T23:15:43.109Z Vendors: Trend Micro Products: Trend Micro Apex Central Problem Types: Arbitrary File Upload Description: An arbitrary file upload vulnerability in Trend Micro Apex Central could allow an unauthenticated remote attacker to upload an arbitrary file which could lead to remote code execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://success.trendmicro.com/solution/000290678 - https://success.trendmicro.com/jp/solution/000290660 - https://www.jpcert.or.jp/english/at/2022/at220008.html - https://jvn.jp/vu/JVNVU99107357 - https:
p/solution/000290660 - https://www.jpcert.or.jp/english/at/2022/at220008.html - https://jvn.jp/vu/JVNVU99107357 - https://appweb.trendmicro.com/supportNews/NewsDetail.aspx?id=4435
CVE ID: CVE-2022-26872 State: PUBLISHED Published: 2023-01-30T15:55:38.826Z Last Updated: 2025-02-13T16:32:31.221Z Severity: HIGH (CVSS 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H) Vendors: AMI Products: MegaRAC SPx-12, MegaRAC SPx-13 Problem Types: CWE-640 Description: AMI Megarac Password reset interception via API Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://9443417.fs1.hubspotusercontent-na1.net/hubfs/9443417/Security%20Advisories/AMI-SA-2023001.pdf - https://security.netapp.com/advisory/ntap-20230731-0008/
CVE ID: CVE-2022-26873 State: PUBLISHED Published: 2022-09-20T17:35:31.328Z Last Updated: 2025-05-27T18:11:04.620Z Vendors: AMI Products: Aptio Problem Types: CWE-121 Description: A potential attacker can execute an arbitrary code at the time of the PEI phase and influence the subsequent boot stages. This can lead to the mitigations bypassing, physical memory contents disclosure, discovery of any secrets from any Virtual Machines (VMs) and bypassing memory isolation and confidential computing boundaries. Additionally, an attacker can build a payload which can be injected into the SMRAM memory. This issue affects: Module name: PlatformInitAdvancedPreMem SHA256: 644044fdb8daea30a7820e0f5f88dbf
to the SMRAM memory. This issue affects: Module name: PlatformInitAdvancedPreMem SHA256: 644044fdb8daea30a7820e0f5f88dbf5cd460af72fbf70418e9d2e47efed8d9b Module GUID: EEEE611D-F78F-4FB9-B868-55907F169280 This issue affects: AMI Aptio 5.x. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00712.html - https://www.binarly.io/advisories/BRLY-2022-027 - https://www.ami.com/security-center/
CVE ID: CVE-2022-26874 State: PUBLISHED Published: 2022-03-11T06:02:56 Last Updated: 2024-10-19T18:02:57.612Z Vendors: n/a Products: n/a Problem Types: n/a Description: lib/Horde/Mime/Viewer/Ooo.php in Horde Mime_Viewer before 2.2.4 allows XSS via an OpenOffice document, leading to account takeover in Horde Groupware Webmail Edition. This occurs after XSLT rendering. Additional Analyst Notes: - CVE Program Container: References: - https://blog.sonarsource.com/horde-webmail-account-takeover-via-email/ - https://github.com/horde/Mime_Viewer/commit/02b46cec1a7e8f1a6835b628850cd56b85963bb5 - https://lists.debian.org/debian-lts-announce/2022/06/msg00007.html - https://lists.debian.org/debian-lts-
d56b85963bb5 - https://lists.debian.org/debian-lts-announce/2022/06/msg00007.html - https://lists.debian.org/debian-lts-announce/2022/08/msg00021.html
CVE ID: CVE-2022-26877 State: PUBLISHED Published: 2022-04-09T00:17:35 Last Updated: 2024-08-03T05:18:38.006Z Vendors: n/a Products: n/a Problem Types: n/a Description: Asana Desktop before 1.6.0 allows remote attackers to exfiltrate local files if they can trick the Asana desktop app into loading a malicious web page. Additional Analyst Notes: - CVE Program Container: References: - https://asana.com - https://forum.asana.com/t/asana-desktop-app-security-update/160477
CVE ID: CVE-2022-26878 State: PUBLISHED Published: 2022-03-11T06:22:01 Last Updated: 2024-08-03T05:18:38.070Z Vendors: n/a Products: n/a Problem Types: n/a Description: drivers/bluetooth/virtio_bt.c in the Linux kernel before 5.16.3 has a memory leak (socket buffers have memory allocated but not freed). Additional Analyst Notes: - CVE Program Container: References: - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=1d0688421449718c6c5f46e458a378c9b530ba18 - https://lore.kernel.org/linux-bluetooth/1A203F5E-FB5E-430C-BEA3-86B191D69D58%40holtmann.org/ - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.16.3 - https://cdn.kernel.org/pub/linux/kernel/v5.x/Chang
rg/ - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.16.3 - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.17 - http://www.openwall.com/lists/oss-security/2022/03/11/1
CVE ID: CVE-2022-26884 State: PUBLISHED Published: 2022-10-28T00:00:00.000Z Last Updated: 2025-05-07T15:36:46.343Z Vendors: Apache Software Foundation Products: Apache DolphinScheduler Problem Types: CWE-22 Description: Users can read any files by log server, Apache DolphinScheduler users should upgrade to version 2.0.6 or higher. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://lists.apache.org/thread/xfdst5y4hnrm2ntmc5jzrgmw2htyyb9c - http://www.openwall.com/lists/oss-security/2022/10/28/2
CVE ID: CVE-2022-26885 State: PUBLISHED Published: 2022-11-24T00:00:00.000Z Last Updated: 2025-04-25T18:17:36.266Z Vendors: Apache Software Foundation Products: Apache DolphinScheduler Problem Types: config file read by task risk Description: When using tasks to read config files, there is a risk of database password disclosure. We recommend you upgrade to version 2.0.6 or higher. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://lists.apache.org/thread/z7084r9cs2r26cszkkgjqpb5bhnxqssp
CVE ID: CVE-2022-26887 State: PUBLISHED Published: 2022-03-29T16:37:10.562Z Last Updated: 2025-04-16T16:35:54.819Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Delta Electronics Products: DIAEnergie Problem Types: CWE-89 Description: Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in DIAE_loopmapHandler.ashx. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-22-081-01
CVE ID: CVE-2022-26888 State: PUBLISHED Published: 2023-02-16T19:59:55.687Z Last Updated: 2025-01-27T18:22:17.567Z Severity: LOW (CVSS 2.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N) Vendors: n/a Products: Intel(R) Quartus Prime Pro and Standard edition software Problem Types: information disclosure Description: Cross-site scripting in the Intel(R) Quartus Prime Pro and Standard edition software may allow an authenticated user to potentially enable information disclosure via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00714.html
CVE ID: CVE-2022-26889 State: PUBLISHED Published: 2022-05-06T16:37:56 Last Updated: 2024-08-03T05:18:38.088Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Splunk Products: Splunk Enterprise Problem Types: CWE-20 Description: In Splunk Enterprise versions before 8.1.2, the uri path to load a relative resource within a web page is vulnerable to path traversal. It allows an attacker to potentially inject arbitrary content into the web page (e.g., HTML Injection, XSS) or bypass SPL safeguards for risky commands. The attack is browser-based. An attacker cannot exploit the attack at will and requires the attacker to initiate a request within the victim's browser
attacker cannot exploit the attack at will and requires the attacker to initiate a request within the victim's browser (e.g., phishing). Additional Analyst Notes: - CVE Program Container: References: - https://www.splunk.com/en_us/product-security/announcements/svd-2022-0506.html - https://research.splunk.com/application/path_traversal_spl_injection/
CVE ID: CVE-2022-26890 State: PUBLISHED Published: 2022-05-05T16:06:28.626601Z Last Updated: 2024-09-16T17:03:22.543Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: F5 Products: BIG-IP Advanced WAF, ASM, and APM Problem Types: CWE-670 Description: On F5 BIG-IP Advanced WAF, ASM, and APM 16.1.x versions prior to 16.1.2.1, 15.1.x versions prior to 15.1.5, 14.1.x versions prior to 14.1.4.6, and 13.1.x versions prior to 13.1.5, when ASM or Advanced WAF, as well as APM, are configured on a virtual server, the ASM policy is configured with Session Awareness, and the "Use APM Username and Session ID" option is enabled, undisclosed requests can cause the bd process t
Awareness, and the "Use APM Username and Session ID" option is enabled, undisclosed requests can cause the bd process to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K03442392
CVE ID: CVE-2022-26891 State: PUBLISHED Published: 2022-04-05T20:05:26 Last Updated: 2025-01-02T18:51:35.648Z Severity: HIGH (CVSS 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft Edge (Chromium-based) Problem Types: Elevation of Privilege Description: Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-26891
CVE ID: CVE-2022-26894 State: PUBLISHED Published: 2022-04-05T20:05:27 Last Updated: 2025-01-02T18:51:36.275Z Severity: HIGH (CVSS 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft Edge (Chromium-based) Problem Types: Elevation of Privilege Description: Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-26894
CVE ID: CVE-2022-26895 State: PUBLISHED Published: 2022-04-05T20:05:29 Last Updated: 2025-01-02T18:51:36.827Z Severity: HIGH (CVSS 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft Edge (Chromium-based) Problem Types: Elevation of Privilege Description: Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-26895
CVE ID: CVE-2022-26896 State: PUBLISHED Published: 2022-04-15T19:05:33 Last Updated: 2025-01-02T18:51:37.429Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C) Vendors: Microsoft Products: Azure Site Recovery VMWare to Azure Problem Types: Information Disclosure Description: Azure Site Recovery Information Disclosure Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-26896
CVE ID: CVE-2022-26897 State: PUBLISHED Published: 2022-04-15T19:05:35 Last Updated: 2025-01-02T18:51:38.153Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C) Vendors: Microsoft Products: Azure Site Recovery VMWare to Azure Problem Types: Information Disclosure Description: Azure Site Recovery Information Disclosure Vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-26897
CVE ID: CVE-2022-26898 State: PUBLISHED Published: 2022-04-15T19:05:37 Last Updated: 2025-01-02T18:51:38.602Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Azure Site Recovery VMWare to Azure Problem Types: Remote Code Execution Description: Azure Site Recovery Remote Code Execution Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-26898
CVE ID: CVE-2022-26899 State: PUBLISHED Published: 2023-06-29T01:22:25.237Z Last Updated: 2025-07-08T15:31:59.630Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft Edge (Chromium-based) Problem Types: Elevation of Privilege Description: Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-26899
CVE ID: CVE-2022-26900 State: PUBLISHED Published: 2022-04-05T20:05:30 Last Updated: 2025-01-02T18:52:16.879Z Severity: HIGH (CVSS 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft Edge (Chromium-based) Problem Types: Elevation of Privilege Description: Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-26900
CVE ID: CVE-2022-26901 State: PUBLISHED Published: 2022-04-15T19:05:39 Last Updated: 2025-01-02T18:51:39.168Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft Office 2019 for Mac, Microsoft Office Online Server, Microsoft 365 Apps for Enterprise, Microsoft Office LTSC for Mac 2021, Microsoft Office LTSC 2021, Microsoft Excel 2016, Microsoft Office 2016, Microsoft Excel 2013 Service Pack 1, Microsoft Office 2013 Service Pack 1, Microsoft Office Web Apps Server 2013 Service Pack 1 Problem Types: Remote Code Execution Description: Microsoft Excel Remote Code Execution Vulnerability Additional Analyst Notes: - CVE Program
Code Execution Description: Microsoft Excel Remote Code Execution Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-26901
CVE ID: CVE-2022-26903 State: PUBLISHED Published: 2022-04-15T19:05:40 Last Updated: 2025-01-02T18:52:15.805Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows 10 Version 1909, Windows 10 Version 21H1, Windows Server 2022, Windows 10 Version 20H2, Windows Server version 20H2, Windows 10 Version 21H2, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows 7, Windows 7 Service Pack 1, Windows 8.1, Windows Server 2008 Service Pack 2, Windows Server 2008 Service
tion), Windows 7, Windows 7 Service Pack 1, Windows 8.1, Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Microsoft Excel for Android, Microsoft PowerPoint for Android, Microsoft Word for Android, Microsoft Word Mobile, Microsoft Excel Mobile, Microsoft PowerPoint Mobile Problem Types: Remote Code Execution Description: Windows Graphics Component Remote Code Exec
icrosoft PowerPoint Mobile Problem Types: Remote Code Execution Description: Windows Graphics Component Remote Code Execution Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-26903
CVE ID: CVE-2022-26904 State: PUBLISHED Published: 2022-04-15T19:05:42.000Z Last Updated: 2025-10-21T23:15:41.848Z Severity: HIGH (CVSS 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows 10 Version 1909, Windows 10 Version 21H1, Windows Server 2022, Windows 10 Version 20H2, Windows Server version 20H2, Windows 11 version 21H2, Windows 10 Version 21H2, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows 7, Windows 7 Service Pack 1, Windows 8.1, Windows Server 2008 Service Pack 2,
lity Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-26904
CVE ID: CVE-2022-26905 State: PUBLISHED Published: 2022-06-01T20:10:13 Last Updated: 2025-01-02T18:58:24.232Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft Edge (Chromium-based) Problem Types: Spoofing Description: Microsoft Edge (Chromium-based) Spoofing Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-26905
CVE ID: CVE-2022-26907 State: PUBLISHED Published: 2022-04-15T19:05:43 Last Updated: 2025-01-02T18:52:16.339Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C) Vendors: Microsoft Products: Azure SDK for .Net Problem Types: Defense in Depth Description: Azure SDK for .NET Information Disclosure Vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-26907
CVE ID: CVE-2022-26908 State: PUBLISHED Published: 2022-04-05T20:05:32 Last Updated: 2025-01-02T18:52:17.434Z Severity: HIGH (CVSS 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft Edge (Chromium-based) Problem Types: Elevation of Privilege Description: Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-26908
CVE ID: CVE-2022-26909 State: PUBLISHED Published: 2022-04-05T20:05:33 Last Updated: 2025-01-02T18:52:18.135Z Severity: HIGH (CVSS 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft Edge (Chromium-based) Problem Types: Elevation of Privilege Description: Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-26909