Security Vulnerabilities - CVEs Published In 2022
Windows Kernel Memory Information Disclosure Vulnerability
CVSS Score
5.5
EPSS Score
0.006
Published
2022-10-11
Microsoft has identified a vulnerability affecting the cluster connect feature of Azure Arc-enabled Kubernetes clusters. This vulnerability could allow an unauthenticated user to elevate their privileges and potentially gain administrative control over the Kubernetes cluster. Additionally, because Azure Stack Edge allows customers to deploy Kubernetes workloads on their devices via Azure Arc, Azure Stack Edge devices are also vulnerable to this vulnerability.
CVSS Score
10.0
EPSS Score
0.03
Published
2022-10-11
Windows DWM Core Library Elevation of Privilege Vulnerability
CVSS Score
7.8
EPSS Score
0.098
Published
2022-10-11
Microsoft Windows Defender Elevation of Privilege Vulnerability
CVSS Score
7.1
EPSS Score
0.007
Published
2022-10-11
Windows Local Session Manager (LSM) Denial of Service Vulnerability
CVSS Score
7.7
EPSS Score
0.038
Published
2022-10-11
Windows Mixed Reality Developer Tools Information Disclosure Vulnerability
CVSS Score
6.5
EPSS Score
0.365
Published
2022-10-11
Windows Group Policy Elevation of Privilege Vulnerability
CVSS Score
8.8
EPSS Score
0.019
Published
2022-10-11
Active Directory Certificate Services Elevation of Privilege Vulnerability
CVSS Score
8.8
EPSS Score
0.024
Published
2022-10-11
Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability
CVSS Score
6.5
EPSS Score
0.023
Published
2022-10-11
Windows Active Directory Certificate Services Security Feature Bypass
CVSS Score
7.5
EPSS Score
0.018
Published
2022-10-11