A code injection vulnerability exists in the Active Storage >= v5.2.0 that could allow an attacker to execute code via image_processing arguments.
CWE-94
CVE-2022-21837
Microsoft SharePoint Server Remote Code Execution Vulnerability.
CVE-2022-21840
Microsoft Office Remote Code Execution Vulnerability.
CVE-2022-21842
Microsoft Word Remote Code Execution Vulnerability.
CVE-2022-21846
Microsoft Exchange Server Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-21855, CVE-2022-21969.
CVE-2022-21874
Windows Security Center API Remote Code Execution Vulnerability.