Security Vulnerabilities - CVEs Published In 2022
Windows Photo Import API Elevation of Privilege Vulnerability
CVSS Score
7.0
EPSS Score
0.008
Published
2022-09-13
.NET Framework Remote Code Execution Vulnerability
CVSS Score
7.8
EPSS Score
0.016
Published
2022-09-13
Windows Credential Roaming Service Elevation of Privilege Vulnerability
CVSS Score
7.3
EPSS Score
0.017
Published
2022-09-13
Windows Secure Channel Denial of Service Vulnerability
CVSS Score
8.2
EPSS Score
0.021
Published
2022-09-13
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
CVSS Score
7.8
EPSS Score
0.013
Published
2022-09-13
Windows Kerberos Elevation of Privilege Vulnerability
CVSS Score
8.1
EPSS Score
0.023
Published
2022-09-13
Windows Kerberos Elevation of Privilege Vulnerability
CVSS Score
8.1
EPSS Score
0.119
Published
2022-09-13
A vulnerability was discovered in the Crestron AirMedia Windows Application, version 4.3.1.39, in which a low-privileged user can gain a SYSTEM level command prompt by pre-staging a file structure prior to the installation of a trusted service executable and change permissions on that file structure during a repair operation.
CVSS Score
8.8
EPSS Score
0.012
Published
2022-09-13
Microsoft Dynamics CRM (on-premises) Remote Code Execution Vulnerability
CVSS Score
8.8
EPSS Score
0.038
Published
2022-09-13
TYPO3 is an open source PHP based web content management system released under the GNU GPL. It has been discovered that the expiration time of a password reset link for TYPO3 backend users has never been evaluated. As a result, a password reset link could be used to perform a password reset even if the default expiry time of two hours has been exceeded. Update to TYPO3 version 10.4.32 or 11.5.16 that fix the problem. There are no known workarounds for this issue.
CVSS Score
5.4
EPSS Score
0.01
Published
2022-09-13