deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-28842
Published: 2022-06-15
Description: Adobe Bridge version 12.0.1 (and earlier versions) is affected by a Use-After-Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://helpx.adobe.com/security/products/bridge/apsb22-25.html; https://helpx.adobe.com/security/products/bridge/apsb22-25.html
CVE: CVE-2022-28843
Published: 2022-06-15
Description: Adobe Bridge version 12.0.1 (and earlier versions) is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://helpx.adobe.com/security/products/bridge/apsb22-25.html; https://helpx.adobe.com/security/products/bridge/apsb22-25.html
CVE: CVE-2022-28844
Published: 2022-06-15
Description: Adobe Bridge version 12.0.1 (and earlier versions) is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://helpx.adobe.com/security/products/bridge/apsb22-25.html; https://helpx.adobe.com/security/products/bridge/apsb22-25.html
CVE: CVE-2022-28845
Published: 2022-06-15
Description: Adobe Bridge version 12.0.1 (and earlier versions) is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://helpx.adobe.com/security/products/bridge/apsb22-25.html; https://helpx.adobe.com/security/products/bridge/apsb22-25.html
CVE: CVE-2022-28846
Published: 2022-06-15
Description: Adobe Bridge version 12.0.1 (and earlier versions) is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://helpx.adobe.com/security/products/bridge/apsb22-25.html; https://helpx.adobe.com/security/products/bridge/apsb22-25.html
CVE: CVE-2022-28847
Published: 2022-06-15
Description: Adobe Bridge version 12.0.1 (and earlier versions) is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://helpx.adobe.com/security/products/bridge/apsb22-25.html; https://helpx.adobe.com/security/products/bridge/apsb22-25.html
CVE: CVE-2022-28848
Published: 2022-06-15
Description: Adobe Bridge version 12.0.1 (and earlier versions) is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://helpx.adobe.com/security/products/bridge/apsb22-25.html; https://helpx.adobe.com/security/products/bridge/apsb22-25.html
CVE: CVE-2022-28849
Published: 2022-06-15
Description: Adobe Bridge version 12.0.1 (and earlier versions) is affected by a Use-After-Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://helpx.adobe.com/security/products/bridge/apsb22-25.html; https://helpx.adobe.com/security/products/bridge/apsb22-25.html
CVE: CVE-2022-28850
Published: 2022-06-15
Description: Adobe Bridge version 12.0.1 (and earlier versions) is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/bridge/apsb22-25.html; https://helpx.adobe.com/security/products/bridge/apsb22-25.html
CVE: CVE-2022-29452
Published: 2022-06-15
Description: Authenticated (editor or higher user role) Stored Cross-Site Scripting (XSS) vulnerability in Export All URLs plugin <= 4.1 at WordPress.
CVSS Score: 3.4 (LOW)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/export-all-urls/wordpress-export-all-urls-plugin-4-1-authenticated-stored-cross-site-scripting-xss-vulnerability; https://wordpress.org/plugins/export-all-urls/#developers; https://patchstack.com/database/vulnerability/export-all-urls/wordpress-export-all-urls-plugin-4-1-authenticated-stored-cross-site-scripting-xss-vulnerability
CVE: CVE-2022-32280
Published: 2022-06-15
Description: Authenticated (contributor or higher user role) Stored Cross-Site Scripting (XSS) vulnerability in Xakuro's XO Slider plugin <= 3.3.2 at WordPress.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/xo-liteslider/wordpress-xo-slider-plugin-3-3-2-authenticated-stored-cross-site-scripting-xss-vulnerability; https://wordpress.org/plugins/xo-liteslider/#developers; https://patchstack.com/database/vulnerability/xo-liteslider/wordpress-xo-slider-plugin-3-3-2-authenticated-stored-cross-site-scripting-xss-vulnerability
CVE: CVE-2022-32368
Published: 2022-06-15
Description: itsourcecode Advanced School Management System v1.0 is vulnerable to SQL Injection via /school/model/get_grade.php?id=.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89
References: https://github.com/k0xx11/bug_report/blob/main/vendors/itsourcecode.com/advanced-school-management-system/SQLi-3.md; https://github.com/k0xx11/bug_report/blob/main/vendors/itsourcecode.com/advanced-school-management-system/SQLi-3.md
CVE: CVE-2022-32373
Published: 2022-06-15
Description: itsourcecode Advanced School Management System v1.0 is vulnerable to SQL Injection via /school/model/get_exam.php?id=.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89
References: https://github.com/k0xx11/bug_report/blob/main/vendors/itsourcecode.com/advanced-school-management-system/SQLi-7.md; https://github.com/k0xx11/bug_report/blob/main/vendors/itsourcecode.com/advanced-school-management-system/SQLi-7.md
CVE: CVE-2022-32374
Published: 2022-06-15
Description: itsourcecode Advanced School Management System v1.0 is vulnerable to SQL Injection via /school/model/get_subject_routing.php?id=.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89
References: https://github.com/k0xx11/bug_report/blob/main/vendors/itsourcecode.com/advanced-school-management-system/SQLi-5.md; https://github.com/k0xx11/bug_report/blob/main/vendors/itsourcecode.com/advanced-school-management-system/SQLi-5.md
CVE: CVE-2022-21166
Published: 2022-06-15
Description: Incomplete cleanup in specific special register write operations for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-459, CWE-459
References: http://www.openwall.com/lists/oss-security/2022/06/16/1; https://lists.debian.org/debian-lts-announce/2022/07/msg00000.html; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FHTEW3RXU2GW6S3RCPQG4VNCZGI3TOSV/
CVE: CVE-2022-21180
Published: 2022-06-15
Description: Improper input validation for some Intel(R) Processors may allow an authenticated user to potentially cause a denial of service via local access.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20, CWE-20
References: http://www.openwall.com/lists/oss-security/2022/06/16/1; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00645.html
CVE: CVE-2022-21938
Published: 2022-06-15
Description: Under certain circumstances, a vulnerability in Metasys ADS/ADX/OAS 10 versions prior to 10.1.5 and Metasys ADS/ADX/OAS 11 versions prior to 11.0.2 could allow a user to inject malicious code into the MUI Graphics web interface.
CVSS Score: 8.1 (HIGH)
CWE: CWE-79, CWE-79
References: https://www.cisa.gov/uscert/ics/advisories/icsa-22-165-01; https://www.johnsoncontrols.com/cyber-solutions/security-advisories; https://www.cisa.gov/uscert/ics/advisories/icsa-22-165-01
CVE: CVE-2022-22788
Published: 2022-06-15
Description: The Zoom Opener installer is downloaded by a user from the Launch meeting page, when attempting to join a meeting without having the Zoom Meeting Client installed. The Zoom Opener installer for Zoom Client for Meetings before version 5.10.3 and Zoom Rooms for Conference Room for Windows before version 5.10.3 are susceptible to a DLL injection attack. This vulnerability could be used to run arbitrary code on the victims host.
CVSS Score: 7.1 (HIGH)
CWE: CWE-427
References: https://explore.zoom.us/en/trust/security/security-bulletin/; https://explore.zoom.us/en/trust/security/security-bulletin/
CVE: CVE-2022-24436
Published: 2022-06-15
Description: Observable behavioral in power management throttling for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via network access.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-203, CWE-203
References: https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00698.html; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2022-24946
Published: 2022-06-15
Description: Improper Resource Locking vulnerability in Mitsubishi Electric MELSEC iQ-R Series R12CCPU-V firmware versions "16" and prior, Mitsubishi Electric MELSEC-Q Series Q03UDECPU the first 5 digits of serial No. "24061" and prior, Mitsubishi Electric MELSEC-Q Series Q04/06/10/13/20/26/50/100UDEHCPU the first 5 digits of serial No. "24061" and prior, Mitsubishi Electric MELSEC-Q Series Q03/04/06/13/26UDVCPU the first 5 digits of serial number "24051" and prior, Mitsubishi Electric MELSEC-Q Series Q04/06/13/26UDPVCPU the first 5 digits of serial number "24051" and prior, Mitsubishi Electric MELSEC-Q Series Q12DCCPU-V all versions, Mitsubishi Electric MELSEC-Q Series Q24DHCCPU-V(G) all versions, Mitsubishi Electric MELSEC-Q Series Q24/26DHCCPU-LS all versions, Mitsubishi Electric MELSEC-L series L02/06/26CPU(-P) the first 5 digits of serial number "24051" and prior, Mitsubishi Electric MELSEC-L series L26CPU-(P)BT the first 5 digits of serial number "24051" and prior and Mitsubishi Electric MELIPC Series MI5122-VW firmware versions "05" and prior allows a remote unauthenticated attacker to cause a denial of service (DoS) condition in Ethernet communications by sending specially crafted packets. A system reset of the products is required for recovery.
CVSS Score: 7.5 (HIGH)
CWE: CWE-667
References: https://jvn.jp/vu/JVNVU90895626/index.html; https://www.cisa.gov/uscert/ics/advisories/icsa-22-172-01; https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2022-007_en.pdf
CVE: CVE-2022-28749
Published: 2022-06-15
Description: Zooms On-Premise Meeting Connector MMR before version 4.8[PII_REDACTED]6 fails to properly check the permissions of a Zoom meeting attendee. As a result, a threat actor in the Zooms waiting room can join the meeting without the consent of the host.
CVSS Score: 6.5 (MEDIUM)
References: https://explore.zoom.us/en/trust/security/security-bulletin/; https://explore.zoom.us/en/trust/security/security-bulletin/
CVE: CVE-2022-30647
Published: 2022-06-15
Description: Adobe Illustrator versions 26.0.2 (and earlier) and 25.4.5 (and earlier) are affected by a Use-After-Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://helpx.adobe.com/security/products/illustrator/apsb22-26.html; https://helpx.adobe.com/security/products/illustrator/apsb22-26.html
CVE: CVE-2022-30648
Published: 2022-06-15
Description: Adobe Illustrator versions 26.0.2 (and earlier) and 25.4.5 (and earlier) are affected by a Use-After-Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://helpx.adobe.com/security/products/illustrator/apsb22-26.html; https://helpx.adobe.com/security/products/illustrator/apsb22-26.html
CVE: CVE-2022-30649
Published: 2022-06-15
Description: Adobe Illustrator versions 26.0.2 (and earlier) and 25.4.5 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://helpx.adobe.com/security/products/illustrator/apsb22-26.html; https://helpx.adobe.com/security/products/illustrator/apsb22-26.html
CVE: CVE-2022-30666
Published: 2022-06-15
Description: Adobe Illustrator versions 26.0.2 (and earlier) and 25.4.5 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/illustrator/apsb22-26.html; https://helpx.adobe.com/security/products/illustrator/apsb22-26.html
CVE: CVE-2022-30667
Published: 2022-06-15
Description: Adobe Illustrator versions 26.0.2 (and earlier) and 25.4.5 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/illustrator/apsb22-26.html; https://helpx.adobe.com/security/products/illustrator/apsb22-26.html
CVE: CVE-2022-30668
Published: 2022-06-15
Description: Adobe Illustrator versions 26.0.2 (and earlier) and 25.4.5 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/illustrator/apsb22-26.html; https://helpx.adobe.com/security/products/illustrator/apsb22-26.html
CVE: CVE-2022-30669
Published: 2022-06-15
Description: Adobe Illustrator versions 26.0.2 (and earlier) and 25.4.5 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://helpx.adobe.com/security/products/illustrator/apsb22-26.html; https://helpx.adobe.com/security/products/illustrator/apsb22-26.html
CVE: CVE-2022-32370
Published: 2022-06-15
Description: itsourcecode Advanced School Management System v1.0 is vulnerable to SQL Injection via /school/model/get_classroom.php?id=.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89
References: https://github.com/k0xx11/bug_report/blob/main/vendors/itsourcecode.com/advanced-school-management-system/SQLi-2.md; https://github.com/k0xx11/bug_report/blob/main/vendors/itsourcecode.com/advanced-school-management-system/SQLi-2.md
CVE: CVE-2022-32371
Published: 2022-06-15
Description: itsourcecode Advanced School Management System v1.0 is vulnerable to SQL Injection via /school/model/get_teacher.php?id=.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89
References: https://github.com/k0xx11/bug_report/blob/main/vendors/itsourcecode.com/advanced-school-management-system/SQLi-1.md; https://github.com/k0xx11/bug_report/blob/main/vendors/itsourcecode.com/advanced-school-management-system/SQLi-1.md
CVE: CVE-2022-32372
Published: 2022-06-15
Description: itsourcecode Advanced School Management System v1.0 is vulnerable to SQL Injection via /school/model/get_subject.php?id=.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89
References: https://github.com/k0xx11/bug_report/blob/main/vendors/itsourcecode.com/advanced-school-management-system/SQLi-4.md; https://github.com/k0xx11/bug_report/blob/main/vendors/itsourcecode.com/advanced-school-management-system/SQLi-4.md
CVE: CVE-2021-41403
Published: 2022-06-15
Description: flatCore-CMS version 2.0.8 calls dangerous functions, causing server-side request forgery vulnerabilities.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-918
References: https://github.com/flatCore/flatCore-CMS/issues/60; https://github.com/flatCore/flatCore-CMS/issues/60
CVE: CVE-2022-20203
Published: 2022-06-15
Description: In multiple locations of the nanopb library, there is a possible way to corrupt memory when decoding untrusted protobuf files. This could lead to local escalation of privilege,with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://source.android.com/security/bulletin/android-12l; https://source.android.com/security/bulletin/android-12l
CVE: CVE-2022-22018
Published: 2022-06-15
Description: HEVC Video Extensions Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-22018; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-22018
CVE: CVE-2022-22021
Published: 2022-06-15
Description: Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
CVSS Score: 8.3 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-22021; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-22021; https://security.gentoo.org/glsa/202208-25
CVE: CVE-2022-29111
Published: 2022-06-15
Description: HEVC Video Extensions Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-29111; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-29111
CVE: CVE-2022-29119
Published: 2022-06-15
Description: HEVC Video Extensions Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-29119; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-29119
CVE: CVE-2022-29143
Published: 2022-06-15
Description: Microsoft SQL Server Remote Code Execution Vulnerability
CVSS Score: 7.5 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-29143; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-29143
CVE: CVE-2022-29149
Published: 2022-06-15
Description: Open Management Infrastructure (OMI) Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-29149; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-29149
CVE: CVE-2022-30131
Published: 2022-06-15
Description: Windows Container Isolation FS Filter Driver Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-30131; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-30131
CVE: CVE-2022-30132
Published: 2022-06-15
Description: Windows Container Manager Service Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-30132; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-30132
CVE: CVE-2022-30135
Published: 2022-06-15
Description: Windows Media Center Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-30135; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-30135
CVE: CVE-2022-30136
Published: 2022-06-15
Description: Windows Network File System Remote Code Execution Vulnerability
CVSS Score: 9.8 (CRITICAL)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-30136; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-30136
CVE: CVE-2022-30137
Published: 2022-06-15
Description: Executive Summary
An Elevation of Privilege (EOP) vulnerability has been identified within Service Fabric clusters that run Docker containers.  Exploitation of this EOP vulnerability requires an attacker to gain remote code execution within a container.  All Service Fabric and Docker versions are impacted.
CVSS Score: 6.7 (MEDIUM)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-30137; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-30137
CVE: CVE-2022-30139
Published: 2022-06-15
Description: Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
CVSS Score: 7.5 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-30139; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-30139
CVE: CVE-2022-30140
Published: 2022-06-15
Description: Windows iSCSI Discovery Service Remote Code Execution Vulnerability
CVSS Score: 7.5 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-30140; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-30140
CVE: CVE-2022-30141
Published: 2022-06-15
Description: Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
CVSS Score: 8.1 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-30141; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-30141
CVE: CVE-2022-30142
Published: 2022-06-15
Description: Windows File History Remote Code Execution Vulnerability
CVSS Score: 7.5 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-30142; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-30142
CVE: CVE-2022-30143
Published: 2022-06-15
Description: Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
CVSS Score: 7.5 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-30143; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-30143
CVE: CVE-2022-30145
Published: 2022-06-15
Description: Windows Encrypting File System (EFS) Remote Code Execution Vulnerability
CVSS Score: 7.5 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-30145; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-30145
CVE: CVE-2022-30146
Published: 2022-06-15
Description: Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
CVSS Score: 7.5 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-30146; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-30146
CVE: CVE-2022-30147
Published: 2022-06-15
Description: Windows Installer Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-30147; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-30147