stasvinokur/cve-and-cwe-dataset-1999-2025 huggingface dataset:
CVE-2022-35709 (severity: MEDIUM, weakness: CWE-416)
Adobe Bridge version 12.0.2 (and earlier) and 11.1.3 (and earlier) are affected by a Use After Free vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2022-35710 (severity: CRITICAL, weakness: CWE-121)
Adobe ColdFusion versions Update 14 (and earlier) and Update 4 (and earlier) are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue does not require user interaction, the vulnerability is triggered when a crafted network packet is sent to the server.
CVE-2022-35711 (severity: CRITICAL, weakness: CWE-122)
Adobe ColdFusion versions Update 14 (and earlier) and Update 4 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue does not require user interaction, the vulnerability is triggered when a crafted network packet is sent to the server.
CVE-2022-35712 (severity: CRITICAL, weakness: CWE-122)
Adobe ColdFusion versions Update 14 (and earlier) and Update 4 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue does not require user interaction, the vulnerability is triggered when a crafted network packet is sent to the server.
CVE-2022-35713 (severity: HIGH, weakness: CWE-787)
Adobe Photoshop versions 22.5.8 (and earlier) and 23.4.2 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2022-35714 (severity: MEDIUM, weakness: CWE-79)
IBM Maximo Asset Management 7.6.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 231116.
CVE-2022-35715 (severity: MEDIUM, weakness: CWE-209)
IBM InfoSphere Information Server 11.7 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in a stack trace. This information could be used in further attacks against the system. IBM X-Force ID: 231202.
CVE-2022-35716 (severity: MEDIUM, weakness: CWE-863)
IBM UrbanCode Deploy (UCD) 6.2.0.0 through 6.2.7.16, 7.0.0.0 through 7.0.5.11, 7.1.0.0 through 7.1.2.7, and 7.2.0.0 through 7.2.3.0 could allow an authenticated user to obtain sensitive information in some instances due to improper security checking. IBM X-Force ID: 231360.
CVE-2022-35717 (severity: HIGH, weakness: CWE-78)
"IBM InfoSphere Information Server 11.7 could allow a locally authenticated attacker to execute arbitrary commands on the system by sending a specially crafted request. IBM X-"Force ID: 231361.
CVE-2022-35719 (severity: MEDIUM, weakness: CWE-532)
IBM MQ Internet Pass-Thru 2.1, 9.2 LTS and 9.2 CD stores potentially sensitive information in trace files that could be read by a local user.
CVE-2022-3572 (severity: MEDIUM, weakness: CWE-79)
A cross-site scripting issue has been discovered in GitLab CE/EE affecting all versions from 13.5 prior to 15.3.5, 15.4 prior to 15.4.4, and 15.5 prior to 15.5.2. It was possible to exploit a vulnerability in setting the Jira Connect integration which could lead to a reflected XSS that allowed attackers to perform arbitrary actions on behalf of victims.
CVE-2022-35720 (severity: MEDIUM, weakness: CWE-327)
IBM Sterling External Authentication Server 6.1.0 and IBM Sterling Secure Proxy 6.0.3 uses weaker than expected cryptographic algorithms during installation that could allow a local attacker to decrypt sensitive information. IBM X-Force ID: 231373.
CVE-2022-35721 (severity: MEDIUM, weakness: CWE-79)
IBM Jazz for Service Management 1.1.3 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 231380.
CVE-2022-35722 (severity: MEDIUM, weakness: CWE-79)
IBM Jazz for Service Management is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 231381.
CVE-2022-35724 (severity: HIGH, weakness: CWE-20)
It is possible to provide data to be read that leads the reader to loop in cycles endlessly, consuming CPU. This issue affects Rust applications using Apache Avro Rust SDK prior to 0.14.0 (previously known as avro-rs). Users should update to apache-avro version 0.14.0 which addresses this issue.
CVE-2022-35725 (severity: MEDIUM, weakness: CWE-79)
Authenticated (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Hans Matzen's wp-forecast plugin <= 7.5 at WordPress.
CVE-2022-35726 (severity: CRITICAL, weakness: CWE-287)
Broken Authentication vulnerability in yotuwp Video Gallery plugin <= 1.3.4.5 at WordPress.
CVE-2022-35728 (severity: CRITICAL, weakness: CWE-613)
In BIG-IP Versions 17.0.x before 17.0.0.1, 16.1.x before 16.1.3.1, 15.1.x before 15.1.6.1, 14.1.x before 14.1.5.1, and all versions of 13.1.x, and BIG-IQ version 8.x before 8.2.0 and all versions of 7.x, an authenticated user's iControl REST token may remain valid for a limited time after logging out from the Configuration utility. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
CVE-2022-35729 (severity: HIGH, weakness: CWE-125)
Out of bounds read in firmware for OpenBMC in some Intel(R) platforms before version 0.72 may allow unauthenticated user to potentially enable denial of service via network access.
CVE-2022-3573 (severity: MEDIUM, weakness: CWE-79)
An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.4 before 15.5.7, all versions starting from 15.6 before 15.6.4, all versions starting from 15.7 before 15.7.2. Due to the improper filtering of query parameters in the wiki changes page, an attacker can execute arbitrary JavaScript on the self-hosted instances running without strict CSP.
CVE-2022-35730 (severity: MEDIUM, weakness: CWE-352)
Cross-Site Request Forgery (CSRF) vulnerability in Oceanwp sticky header plugin <= 1.0.8 on WordPress.
CVE-2022-35733 (severity: CRITICAL, weakness: CWE-306)
Missing authentication for critical function vulnerability in UNIMO Technology digital video recorders (UDR-JA1004/JA1008/JA1016 firmware versions v1.0.20.13 and earlier, and UDR-JA1016 firmware versions v2.0.20.13 and earlier) allows a remote unauthenticated attacker to execute an arbitrary OS command by sending a specially crafted request to the affected device web interface.
CVE-2022-35734 (severity: HIGH, weakness: CWE-798)
'Hulu / フールー' App for Android from version 3.0.47 to the version prior to 3.1.2 uses a hard-coded API key for an external service. By exploiting this vulnerability, API key for an external service may be obtained by analyzing data in the app.
CVE-2022-35735 (severity: HIGH, weakness: CWE-74)
In BIG-IP Versions 16.1.x before 16.1.3.1, 15.1.x before 15.1.6.1, 14.1.x before 14.1.5.1, and all versions of 13.1.x, an authenticated attacker with Resource Administrator or Manager privileges can create or modify existing monitor objects in the Configuration utility in an undisclosed manner leading to a privilege escalation. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
CVE-2022-35737 (severity: HIGH, weakness: CWE-129)
SQLite 1.0.12 through 3.39.x before 3.39.2 sometimes allows an array-bounds overflow if billions of bytes are used in a string argument to a C API.
CVE-2022-35739 (severity: MEDIUM, weakness: CWE-79)
PRTG Network Monitor through 22.2.77.2204 does not prevent custom input for a device’s icon, which can be modified to insert arbitrary content into the style tag for that device. When the device page loads, the arbitrary Cascading Style Sheets (CSS) data is inserted into the style tag, loading malicious content. Due to PRTG Network Monitor preventing “characters, and from modern browsers disabling JavaScript support in style tags, this vulnerability could not be escalated into a Cross-Site Scripting vulnerability.
CVE-2022-3574 (severity: CRITICAL, weakness: CWE-1236)
The WPForms Pro WordPress plugin before 1.7.7 does not validate its form data when generating the exported CSV, which could lead to CSV injection.
CVE-2022-35740 (severity: MEDIUM, weakness: CWE-79)
dotCMS before 22.06 allows remote attackers to bypass intended access control and obtain sensitive information by using a semicolon in a URL to introduce a matrix parameter. (This is also fixed in 5.3.8.12, 21.06.9, and 22.03.2 for LTS users.) Some Java application frameworks, including those used by Spring or Tomcat, allow the use of matrix parameters: these are URI parameters separated by semicolons. Through precise semicolon placement in a URI, it is possible to exploit this feature to avoid dotCMS's path-based XSS prevention (such as "require login" filters), and consequently access restricted resources. For example, an attacker could place a semicolon immediately before a / character that separates elements of a filesystem path. This could reveal file content that is ordinarily only visible to signed-in users. This issue can be chained with other exploit code to achieve XSS attacks against dotCMS.
CVE-2022-35741 (severity: CRITICAL, weakness: CWE-611)
Apache CloudStack version 4.5.0 and later has a SAML 2.0 authentication Service Provider plugin which is found to be vulnerable to XML external entity (XXE) injection. This plugin is not enabled by default and the attacker would require that this plugin be enabled to exploit the vulnerability. When the SAML 2.0 plugin is enabled in affected versions of Apache CloudStack could potentially allow the exploitation of XXE vulnerabilities. The SAML 2.0 messages constructed during the authentication flow in Apache CloudStack are XML-based and the XML data is parsed by various standard libraries that are now understood to be vulnerable to XXE injection attacks such as arbitrary file reading, possible denial of service, server-side request forgery (SSRF) on the CloudStack management server.
CVE-2022-35742 (severity: HIGH, weakness: NVD-CWE-Other)
Microsoft Outlook Denial of Service Vulnerability
CVE-2022-35743 (severity: HIGH, weakness: CWE-94)
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
CVE-2022-35744 (severity: CRITICAL, weakness: NVD-CWE-Other)
Windows Point-to-Point Protocol (PPP) Remote Code Execution Vulnerability
CVE-2022-35745 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
CVE-2022-35746 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Digital Media Receiver Elevation of Privilege Vulnerability
CVE-2022-35747 (severity: MEDIUM, weakness: NVD-CWE-Other)
Windows Point-to-Point Protocol (PPP) Denial of Service Vulnerability
CVE-2022-35748 (severity: HIGH, weakness: NVD-CWE-Other)
HTTP.sys Denial of Service Vulnerability
CVE-2022-35749 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Digital Media Receiver Elevation of Privilege Vulnerability
CVE-2022-3575 (severity: CRITICAL, weakness: CWE-434)
Frauscher Sensortechnik GmbH FDS102 for FAdC R2 and FAdCi R2 v2.8.0 to v2.9.1 are vulnerable to malicious code upload without authentication by using the configuration upload function. This could lead to a complete compromise of the FDS102 device.
CVE-2022-35750 (severity: HIGH, weakness: NVD-CWE-Other)
Win32k Elevation of Privilege Vulnerability
CVE-2022-35751 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Hyper-V Elevation of Privilege Vulnerability
CVE-2022-35752 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
CVE-2022-35753 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
CVE-2022-35754 (severity: MEDIUM, weakness: NVD-CWE-Other)
Unified Write Filter Elevation of Privilege Vulnerability
CVE-2022-35755 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Print Spooler Elevation of Privilege Vulnerability
CVE-2022-35756 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Kerberos Elevation of Privilege Vulnerability
CVE-2022-35757 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
CVE-2022-35758 (severity: MEDIUM, weakness: NVD-CWE-Other)
Windows Kernel Memory Information Disclosure Vulnerability
CVE-2022-35759 (severity: MEDIUM, weakness: NVD-CWE-Other)
Windows Local Security Authority (LSA) Denial of Service Vulnerability
CVE-2022-3576 (severity: HIGH, weakness: CWE-125)
A vulnerability regarding out-of-bounds read is found in the session processing functionality of Out-of-Band (OOB) Management. This allows remote attackers to obtain sensitive information via unspecified vectors. The following models with Synology DiskStation Manager (DSM) versions before 7.1.1-42962-2 may be affected: DS3622xs+, FS3410, and HD6500.
CVE-2022-35760 (severity: HIGH, weakness: NVD-CWE-Other)
Microsoft ATA Port Driver Elevation of Privilege Vulnerability
CVE-2022-35761 (severity: HIGH, weakness: CWE-269)
Windows Kernel Elevation of Privilege Vulnerability
CVE-2022-35762 (severity: HIGH, weakness: CWE-269)
Storage Spaces Direct Elevation of Privilege Vulnerability
CVE-2022-35763 (severity: HIGH, weakness: CWE-269)
Storage Spaces Direct Elevation of Privilege Vulnerability
CVE-2022-35764 (severity: HIGH, weakness: CWE-269)
Storage Spaces Direct Elevation of Privilege Vulnerability
CVE-2022-35765 (severity: HIGH, weakness: CWE-269)
Storage Spaces Direct Elevation of Privilege Vulnerability
CVE-2022-35766 (severity: HIGH, weakness: CWE-94)
Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
CVE-2022-35767 (severity: HIGH, weakness: CWE-94)
Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
CVE-2022-35768 (severity: HIGH, weakness: CWE-269)
Windows Kernel Elevation of Privilege Vulnerability
CVE-2022-35769 (severity: HIGH, weakness: CWE-400)
Windows Point-to-Point Protocol (PPP) Denial of Service Vulnerability
CVE-2022-3577 (severity: HIGH, weakness: CWE-401)
An out-of-bounds memory write flaw was found in the Linux kernel’s Kid-friendly Wired Controller driver. This flaw allows a local user to crash or potentially escalate their privileges on the system. It is in bigben_probe of drivers/hid/hid-bigbenff.c. The reason is incorrect assumption - bigben devices all have inputs. However, malicious devices can break this assumption, leaking to out-of-bound write.
CVE-2022-35770 (severity: MEDIUM, weakness: CWE-290)
Windows NTLM Spoofing Vulnerability
CVE-2022-35771 (severity: HIGH, weakness: CWE-269)
Windows Defender Credential Guard Elevation of Privilege Vulnerability
CVE-2022-35772 (severity: HIGH, weakness: CWE-94)
Azure Site Recovery Remote Code Execution Vulnerability
CVE-2022-35773 (severity: HIGH, weakness: CWE-20)
Azure RTOS GUIX Studio Remote Code Execution Vulnerability
CVE-2022-35774 (severity: MEDIUM, weakness: CWE-269)
Azure Site Recovery Elevation of Privilege Vulnerability
CVE-2022-35775 (severity: MEDIUM, weakness: CWE-269)
Azure Site Recovery Elevation of Privilege Vulnerability
CVE-2022-35776 (severity: MEDIUM, weakness: CWE-400)
Azure Site Recovery Denial of Service Vulnerability
CVE-2022-35777 (severity: HIGH, weakness: CWE-94)
Visual Studio Remote Code Execution Vulnerability
CVE-2022-35779 (severity: HIGH, weakness: CWE-94)
Azure RTOS GUIX Studio Remote Code Execution Vulnerability
CVE-2022-3578 (severity: MEDIUM, weakness: CWE-79)
The ProfileGrid WordPress plugin before 5.1.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting
CVE-2022-35780 (severity: MEDIUM, weakness: CWE-269)
Azure Site Recovery Elevation of Privilege Vulnerability
CVE-2022-35781 (severity: MEDIUM, weakness: CWE-269)
Azure Site Recovery Elevation of Privilege Vulnerability
CVE-2022-35782 (severity: MEDIUM, weakness: CWE-269)
Azure Site Recovery Elevation of Privilege Vulnerability
CVE-2022-35783 (severity: MEDIUM, weakness: NVD-CWE-Other)
Azure Site Recovery Elevation of Privilege Vulnerability
CVE-2022-35784 (severity: MEDIUM, weakness: NVD-CWE-Other)
Azure Site Recovery Elevation of Privilege Vulnerability
CVE-2022-35785 (severity: MEDIUM, weakness: NVD-CWE-Other)
Azure Site Recovery Elevation of Privilege Vulnerability
CVE-2022-35786 (severity: MEDIUM, weakness: NVD-CWE-Other)
Azure Site Recovery Elevation of Privilege Vulnerability
CVE-2022-35787 (severity: MEDIUM, weakness: NVD-CWE-Other)
Azure Site Recovery Elevation of Privilege Vulnerability
CVE-2022-35788 (severity: MEDIUM, weakness: NVD-CWE-Other)
Azure Site Recovery Elevation of Privilege Vulnerability
CVE-2022-35789 (severity: MEDIUM, weakness: NVD-CWE-Other)
Azure Site Recovery Elevation of Privilege Vulnerability
CVE-2022-3579 (severity: CRITICAL, weakness: CWE-707)
A vulnerability classified as critical was found in SourceCodester Cashier Queuing System 1.0. This vulnerability affects unknown code of the file /queuing/login.php of the component Login Page. The manipulation of the argument username/password leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-211186 is the identifier assigned to this vulnerability.
CVE-2022-35790 (severity: MEDIUM, weakness: NVD-CWE-Other)
Azure Site Recovery Elevation of Privilege Vulnerability
CVE-2022-35791 (severity: MEDIUM, weakness: NVD-CWE-Other)
Azure Site Recovery Elevation of Privilege Vulnerability
CVE-2022-35792 (severity: HIGH, weakness: NVD-CWE-Other)
Storage Spaces Direct Elevation of Privilege Vulnerability
CVE-2022-35793 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Print Spooler Elevation of Privilege Vulnerability
CVE-2022-35794 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
CVE-2022-35795 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Error Reporting Service Elevation of Privilege Vulnerability
CVE-2022-35796 (severity: HIGH, weakness: CWE-362)
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
CVE-2022-35797 (severity: MEDIUM, weakness: NVD-CWE-Other)
Windows Hello Security Feature Bypass Vulnerability
CVE-2022-35798 (severity: LOW, weakness: NVD-CWE-Other)
Azure Arc Jumpstart Information Disclosure Vulnerability
CVE-2022-35799 (severity: MEDIUM, weakness: NVD-CWE-Other)
Azure Site Recovery Elevation of Privilege Vulnerability
CVE-2022-3580 (severity: MEDIUM, weakness: CWE-707)
A vulnerability, which was classified as problematic, has been found in SourceCodester Cashier Queuing System 1.0.1. This issue affects some unknown processing of the component User Creation Handler. The manipulation leads to cross site scripting. The attack may be initiated remotely. The associated identifier of this vulnerability is VDB-211187.
CVE-2022-35800 (severity: MEDIUM, weakness: NVD-CWE-Other)
Azure Site Recovery Elevation of Privilege Vulnerability
CVE-2022-35801 (severity: MEDIUM, weakness: NVD-CWE-Other)
Azure Site Recovery Elevation of Privilege Vulnerability
CVE-2022-35802 (severity: HIGH, weakness: NVD-CWE-Other)
Azure Site Recovery Elevation of Privilege Vulnerability
CVE-2022-35803 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVE-2022-35804 (severity: HIGH, weakness: NVD-CWE-Other)
SMB Client and Server Remote Code Execution Vulnerability
CVE-2022-35805 (severity: HIGH, weakness: NVD-CWE-Other)
Microsoft Dynamics CRM (on-premises) Remote Code Execution Vulnerability
CVE-2022-35806 (severity: HIGH, weakness: NVD-CWE-Other)
Azure RTOS GUIX Studio Remote Code Execution Vulnerability
CVE-2022-35807 (severity: MEDIUM, weakness: NVD-CWE-Other)
Azure Site Recovery Elevation of Privilege Vulnerability
CVE-2022-35808 (severity: MEDIUM, weakness: NVD-CWE-Other)
Azure Site Recovery Elevation of Privilege Vulnerability
CVE-2022-35809 (severity: MEDIUM, weakness: NVD-CWE-Other)
Azure Site Recovery Elevation of Privilege Vulnerability
CVE-2022-3581 (severity: MEDIUM, weakness: CWE-707)
A vulnerability, which was classified as problematic, was found in SourceCodester Cashier Queuing System 1.0. Affected is an unknown function of the component Cashiers Tab. The manipulation of the argument Name leads to cross site scripting. It is possible to launch the attack remotely. The identifier of this vulnerability is VDB-211188.
CVE-2022-35810 (severity: MEDIUM, weakness: NVD-CWE-Other)
Azure Site Recovery Elevation of Privilege Vulnerability
CVE-2022-35811 (severity: MEDIUM, weakness: NVD-CWE-Other)
Azure Site Recovery Elevation of Privilege Vulnerability
CVE-2022-35812 (severity: MEDIUM, weakness: NVD-CWE-Other)
Azure Site Recovery Elevation of Privilege Vulnerability
CVE-2022-35813 (severity: MEDIUM, weakness: NVD-CWE-Other)
Azure Site Recovery Elevation of Privilege Vulnerability
CVE-2022-35814 (severity: MEDIUM, weakness: NVD-CWE-Other)
Azure Site Recovery Elevation of Privilege Vulnerability
CVE-2022-35815 (severity: MEDIUM, weakness: NVD-CWE-Other)
Azure Site Recovery Elevation of Privilege Vulnerability
CVE-2022-35816 (severity: MEDIUM, weakness: NVD-CWE-Other)
Azure Site Recovery Elevation of Privilege Vulnerability
CVE-2022-35817 (severity: MEDIUM, weakness: NVD-CWE-Other)
Azure Site Recovery Elevation of Privilege Vulnerability
CVE-2022-35818 (severity: MEDIUM, weakness: NVD-CWE-Other)
Azure Site Recovery Elevation of Privilege Vulnerability
CVE-2022-35819 (severity: MEDIUM, weakness: NVD-CWE-Other)
Azure Site Recovery Elevation of Privilege Vulnerability
CVE-2022-3582 (severity: LOW, weakness: CWE-863)
A vulnerability has been found in SourceCodester Simple Cold Storage Management System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality. The manipulation of the argument change password leads to cross-site request forgery. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-211189 was assigned to this vulnerability.
CVE-2022-35820 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Bluetooth Driver Elevation of Privilege Vulnerability
CVE-2022-35821 (severity: MEDIUM, weakness: NVD-CWE-Other)
Azure Sphere Information Disclosure Vulnerability
CVE-2022-35822 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Defender Credential Guard Security Feature Bypass Vulnerability
CVE-2022-35823 (severity: HIGH, weakness: NVD-CWE-Other)
Microsoft SharePoint Remote Code Execution Vulnerability
CVE-2022-35824 (severity: HIGH, weakness: NVD-CWE-Other)
Azure Site Recovery Remote Code Execution Vulnerability
CVE-2022-35825 (severity: HIGH, weakness: NVD-CWE-Other)
Visual Studio Remote Code Execution Vulnerability
CVE-2022-35826 (severity: HIGH, weakness: NVD-CWE-Other)
Visual Studio Remote Code Execution Vulnerability
CVE-2022-35827 (severity: HIGH, weakness: NVD-CWE-Other)
Visual Studio Remote Code Execution Vulnerability
CVE-2022-35828 (severity: HIGH, weakness: NVD-CWE-Other)
Microsoft Defender for Endpoint for Mac Elevation of Privilege Vulnerability
CVE-2022-35829 (severity: MEDIUM, weakness: NVD-CWE-Other)
Service Fabric Explorer Spoofing Vulnerability