CVE
Vendors
Products
Updated
CVSS v2
CVSS v3
Windows Client Server Run-Time Subsystem (CSRSS) Elevation of Privilege Vulnerability.
Windows Graphics Component Elevation of Privilege Vulnerability. This CVE ID is unique from CVE-2022-41121, CVE-2022-44680, CVE-2022-44697.
Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-44676.
The Search & Filter WordPress plugin before 1.2.16 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admin.
Windows Error Reporting Elevation of Privilege Vulnerability.
Windows Media Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-44667.
Windows Media Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-44668.
20007_office_system, 27mhz_wireless_keyboard, 365_apps, 3d_builder, 3d_viewer, Access, Accessibility_insights_for_android, Accessibility_insights_for_web, Access_multilingual_user_interface_pack, Active_directory
2023-02-20
N/A
7.8 HIGH
Windows Contacts Remote Code Execution Vulnerability.
Antivirus_+_security_2019, Internet_security_2019, Maximum_security_2019, Premium_security_2019, Ransom_buster, Control_manager, Endpoint_sensor, Im_security, Mobile_security, Officescan
2022-12-14
N/A
7.5 HIGH
Affected builds of Trend Micro Apex One and Apex One as a Service contain a monitor engine component that is complied without the /SAFESEH memory protection mechanism which helps to monitor for malicious payloads. The affected component's memory protection mechanism has been updated to enhance product security.
Antivirus_+_security_2019, Internet_security_2019, Maximum_security_2019, Premium_security_2019, Ransom_buster, Control_manager, Endpoint_sensor, Im_security, Mobile_security, Officescan
2022-12-14
N/A
7.8 HIGH
A security agent directory traversal vulnerability in Trend Micro Apex One and Apex One as a Service could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.