Vulnerabilities (CVE)

Filtered by vendor Microsoft Subscribe
Total 22863 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2022-35762 1 Microsoft 4 Windows 10, Windows Server 2016, Windows Server 2019 and 1 more 2025-05-29 N/A 7.8 HIGH
Storage Spaces Direct Elevation of Privilege Vulnerability
CVE-2022-35761 1 Microsoft 5 Windows 10, Windows 11, Windows Server 2016 and 2 more 2025-05-29 N/A 7.8 HIGH
Windows Kernel Elevation of Privilege Vulnerability
CVE-2022-34716 1 Microsoft 3 .net, .net Core, Powershell 2025-05-29 N/A 5.9 MEDIUM
.NET Spoofing Vulnerability
CVE-2022-37347 2 Microsoft, Trendmicro 2 Windows, Security 2025-05-29 N/A 5.5 MEDIUM
Trend Micro Security 2021 and 2022 (Consumer) is vulnerable to an Out-Of-Bounds Read Information Disclosure Vulnerability that could allow an attacker to read sensitive information from other memory locations and cause a crash on an affected machine. This vulnerability is similar to, but not the same as CVE-2022-35234.
CVE-2022-35782 1 Microsoft 1 Azure Site Recovery Vmware To Azure 2025-05-29 N/A 6.5 MEDIUM
Azure Site Recovery Elevation of Privilege Vulnerability
CVE-2022-35781 1 Microsoft 1 Azure Site Recovery Vmware To Azure 2025-05-29 N/A 6.5 MEDIUM
Azure Site Recovery Elevation of Privilege Vulnerability
CVE-2022-35780 1 Microsoft 1 Azure Site Recovery Vmware To Azure 2025-05-29 N/A 6.5 MEDIUM
Azure Site Recovery Elevation of Privilege Vulnerability
CVE-2022-35779 1 Microsoft 1 Azure Real Time Operating System Guix Studio 2025-05-29 N/A 7.8 HIGH
Azure RTOS GUIX Studio Remote Code Execution Vulnerability
CVE-2022-35777 1 Microsoft 4 Visual Studio, Visual Studio 2017, Visual Studio 2019 and 1 more 2025-05-29 N/A 8.8 HIGH
Visual Studio Remote Code Execution Vulnerability
CVE-2022-35776 1 Microsoft 1 Azure Site Recovery Vmware To Azure 2025-05-29 N/A 6.2 MEDIUM
Azure Site Recovery Denial of Service Vulnerability
CVE-2022-35775 1 Microsoft 1 Azure Site Recovery Vmware To Azure 2025-05-29 N/A 6.5 MEDIUM
Azure Site Recovery Elevation of Privilege Vulnerability
CVE-2022-35774 1 Microsoft 1 Azure Site Recovery Vmware To Azure 2025-05-29 N/A 4.9 MEDIUM
Azure Site Recovery Elevation of Privilege Vulnerability
CVE-2022-35773 1 Microsoft 1 Azure Real Time Operating System Guix Studio 2025-05-29 N/A 7.8 HIGH
Azure RTOS GUIX Studio Remote Code Execution Vulnerability
CVE-2024-23940 2 Microsoft, Trendmicro 6 Windows, Air Support, Antivirus \+ Security and 3 more 2025-05-29 N/A 7.8 HIGH
Trend Micro uiAirSupport, included in the Trend Micro Security 2023 family of consumer products, version 6.0.2092 and below is vulnerable to a DLL hijacking/proxying vulnerability, which if exploited could allow an attacker to impersonate and modify a library to execute code on the system and ultimately escalate privileges on an affected system.
CVE-2025-21224 1 Microsoft 8 Windows 10 21h2, Windows 10 22h2, Windows 11 22h2 and 5 more 2025-05-29 N/A 8.1 HIGH
Windows Line Printer Daemon (LPD) Service Remote Code Execution Vulnerability
CVE-2022-29800 1 Microsoft 1 Windows Defender For Endpoint 2025-05-28 N/A 4.7 MEDIUM
A time-of-check-time-of-use (TOCTOU) race condition vulnerability was found in networkd-dispatcher. This flaw exists because there is a certain time between the scripts being discovered and them being run. An attacker can abuse this vulnerability to replace scripts that networkd-dispatcher believes to be owned by root with ones that are not.
CVE-2022-29799 1 Microsoft 1 Windows Defender For Endpoint 2025-05-27 N/A 5.5 MEDIUM
A vulnerability was found in networkd-dispatcher. This flaw exists because no functions are sanitized by the OperationalState or the AdministrativeState of networkd-dispatcher. This attack leads to a directory traversal to escape from the “/etc/networkd-dispatcher” base directory.
CVE-2024-24278 2 Microsoft, Teamwire 2 Windows, Teamwire 2025-05-23 N/A 7.5 HIGH
An issue in Teamwire Windows desktop client v.2.0.1 through v.2.4.0 allows a remote attacker to obtain sensitive information via a crafted payload to the message function.
CVE-2023-35622 1 Microsoft 6 Windows Server 2008, Windows Server 2012, Windows Server 2016 and 3 more 2025-05-22 N/A 7.5 HIGH
Windows DNS Spoofing Vulnerability
CVE-2022-35721 3 Ibm, Linux, Microsoft 4 Aix, Jazz For Service Management, Linux Kernel and 1 more 2025-05-22 N/A 5.4 MEDIUM
IBM Jazz for Service Management 1.1.3 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 231380.