Vulnerabilities

TI-2022-18022 CVE-2022-38396 · GHSA-4fqc-92ph-66xx

HP Factory Preinstalled Images on certain systems that shipped with Windows 10 versions…

LOW 36

HP Factory Preinstalled Images on certain systems that shipped with Windows 10 versions 20H2 and earlier OS versions might allow escalation of privilege via execution of certain files outside the restricted path.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00407 Published 2023-02-03 No fix listed

TI-2022-10165 CVE-2022-26934 · GHSA-38pr-c838-mh5j

Windows Graphics Component Information Disclosure Vulnerability

LOW 34

Windows Graphics Component Information Disclosure Vulnerability

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.03097 Published 2022-05-10 Fixed in 10.0.17763.2928, 10.0.18363.2274 +12

TI-2022-10156 CVE-2022-26925 · GHSA-jr4h-hc9r-9rr3

Windows LSA Spoofing Vulnerability

CRITICAL 92KEV

Windows LSA Spoofing Vulnerability

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.10476 Published 2022-05-10 Fixed in 10.0.17763.2928, 10.0.18363.2274 +10 CWE-306

TI-2022-10154 CVE-2022-26923 · GHSA-j9xf-76vv-4wcg

Active Directory Domain Services Elevation of Privilege Vulnerability

CRITICAL 97KEV

Active Directory Domain Services Elevation of Privilege Vulnerability

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.835 Published 2022-05-10 Fixed in 10.0.17763.4252, 10.0.18363.2274 +8 CWE-295

TI-2022-10137 CVE-2022-26904 · GHSA-cf7g-gj99-69w3

Windows User Profile Service Elevation of Privilege Vulnerability

CRITICAL 90KEV

Windows User Profile Service Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.16948 Published 2022-04-15 Fixed in 10.0.17763.2803, 10.0.18363.2212 +11 CWE-362

TI-2022-08387 CVE-2022-24521 · GHSA-59qr-cc8f-v837

Windows Common Log File System Driver Elevation of Privilege Vulnerability

CRITICAL 93KEV

Windows Common Log File System Driver Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.07134 Published 2022-04-15 Fixed in 10.0.17763.2803, 10.0.18363.2212 +11 CWE-787

TI-2022-06968 CVE-2022-22718 · GHSA-r854-85qm-m3f9

Windows Print Spooler Elevation of Privilege Vulnerability

CRITICAL 93KEV

Windows Print Spooler Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.18464 Published 2022-02-09 Fixed in 10.0.17763.2565, 10.0.18363.2094 +11

TI-2022-06356 CVE-2022-21999 · GHSA-9cr3-63pg-942x

Windows Print Spooler Elevation of Privilege Vulnerability

CRITICAL 93KEV

Windows Print Spooler Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.41007 Published 2022-02-09 Fixed in 10.0.17763.2565, 10.0.18363.2094 +11 CWE-22

TI-2022-06330 CVE-2022-21971 · GHSA-58gj-2v59-wxcq

Windows Runtime Remote Code Execution Vulnerability

CRITICAL 93KEV

Windows Runtime Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.53934 Published 2022-02-09 Fixed in 10.0.17763.2565, 10.0.18363.2094 +5 CWE-824

TI-2022-06284 CVE-2022-21919 · GHSA-wmfg-rc3x-58v3

Windows User Profile Service Elevation of Privilege Vulnerability

CRITICAL 90KEV

Windows User Profile Service Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.02567 Published 2022-01-11 Fixed in 10.0.17763.2452, 10.0.18363.2037 +10 CWE-59

TI-2022-06249 CVE-2022-21882 · GHSA-m3vx-53cf-jqv4

Win32k Elevation of Privilege Vulnerability

CRITICAL 93KEV

Win32k Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.59205 Published 2022-01-11 Fixed in 10.0.17763.2452, 10.0.18363.2037 +5 CWE-787

TI-2022-06238 CVE-2022-21871 · GHSA-96mc-ph6g-jw78

Microsoft Diagnostics Hub Standard Collector Runtime Elevation of Privilege Vulnerability

LOW 35

Microsoft Diagnostics Hub Standard Collector Runtime Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00696 Published 2022-01-11 Fixed in 10.0.17763.2452, 10.0.18363.2037 +10

TI-2021-19234 CVE-2021-43226 · GHSA-98jh-5xvm-p5ph

Windows Common Log File System Driver Elevation of Privilege Vulnerability

CRITICAL 93KEV

Windows Common Log File System Driver Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.03275 Published 2021-12-15 Fixed in 10.0.17763.2366, 10.0.18363.1977 +13

TI-2021-18198 CVE-2021-41379 · GHSA-hxf7-qh53-96j5

Windows Installer Elevation of Privilege Vulnerability

CRITICAL 93KEV

Windows Installer Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.19452 Published 2021-11-10 Fixed in 10.0.10240.19119, 10.0.14393.4770 +11 CWE-59

TI-2021-17500 CVE-2021-40450 · GHSA-v7qc-rhmv-f6j4

Win32k Elevation of Privilege Vulnerability

CRITICAL 93KEV

Win32k Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.01523 Published 2021-10-13 Fixed in 10.0.17763.2237, 10.0.18363.1854 +5

TI-2021-17499 CVE-2021-40449 · GHSA-qjf4-g2gg-w6pq

Win32k Elevation of Privilege Vulnerability

CRITICAL 93KEV

Win32k Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.81936 Published 2021-10-13 Fixed in 10.0.17763.2237, 10.0.18363.1854 +10 CWE-416

TI-2021-17496 CVE-2021-40444 · GHSA-2h32-fhf6-xhh5

Microsoft MSHTML Remote Code Execution Vulnerability

CRITICAL 97KEV

Microsoft is investigating reports of a remote code execution vulnerability in MSHTML that affects Microsoft Windows.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.9784 Published 2021-09-15 Fixed in 10.0.10240.19060, 10.0.14393.4651 +10 CWE-22

TI-2021-15031 CVE-2021-36955 · GHSA-g26f-6mx8-j24w

Windows Common Log File System Driver Elevation of Privilege Vulnerability

CRITICAL 93KEV

Windows Common Log File System Driver Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.04071 Published 2021-09-15 Fixed in 10.0.10240.19060, 10.0.14393.4651 +10

TI-2021-15025 CVE-2021-36948 · GHSA-fcr2-qx8m-pfhp

Windows Update Medic Service Elevation of Privilege Vulnerability

CRITICAL 93KEV

Windows Update Medic Service Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.2327 Published 2021-08-12 Fixed in 10.0.17763.2114, 10.0.18363.1734 +3

TI-2021-13514 CVE-2021-34486 · GHSA-793m-wq3j-whvr

Windows Event Tracing Elevation of Privilege Vulnerability

CRITICAL 93KEV

Windows Event Tracing Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.09328 Published 2021-08-12 Fixed in 10.0.17763.2114, 10.0.18363.1734 +3 CWE-416

TI-2021-13512 CVE-2021-34484 · GHSA-mp6h-cxp8-82j6

Windows User Profile Service Elevation of Privilege Vulnerability

CRITICAL 93KEV

Windows User Profile Service Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.21827 Published 2021-08-12 Fixed in 10.0.10240.19022, 10.0.14393.4583 +9

TI-2021-15014 CVE-2021-36934 · GHSA-x4m2-px5g-5q55

Windows Elevation of Privilege Vulnerability

CRITICAL 93KEV

An elevation of privilege vulnerability exists because of overly permissive Access Control Lists (ACLs) on multiple system files, including the Security Accounts Manager (SAM) database.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.67252 Published 2021-07-22 Fixed in 10.0.17763.2114, 10.0.18363.1734 +3

TI-2021-13480 CVE-2021-34448 · GHSA-6545-45rg-p2vp

Scripting Engine Memory Corruption Vulnerability

CRITICAL 97KEV

Scripting Engine Memory Corruption Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.40062 Published 2021-07-16 Fixed in 10.0.10240.19003, 10.0.14393.4530 +8 CWE-787

TI-2021-13141 CVE-2021-33771 · GHSA-jv37-xg37-jxgp

Windows Kernel Elevation of Privilege Vulnerability

CRITICAL 93KEV

Windows Kernel Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.10172 Published 2021-07-14 Fixed in 10.0.10240.19003, 10.0.14393.4530 +6

TI-2021-11966 CVE-2021-31979 · GHSA-rhcm-c7c7-5wq8

Windows Kernel Elevation of Privilege Vulnerability

CRITICAL 93KEV

Windows Kernel Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0454 Published 2021-07-14 Fixed in 10.0.10240.19003, 10.0.14393.4530 +9 CWE-119

Vulnerabilities

Filters