CVEs published in October 2022
2,275 vulnerabilities, 287 critical, 9 exploited.
- microsoft windows 10 version 20h2, windows 10 version 21h1, windows 10 version 21h2 +5 more +7 moreWindows Local Session Manager (LSM) Denial of Service Vulnerability7.7 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +26 more +28 moreWindows Graphics Component Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +17 more +19 moreWindows Kernel Memory Information Disclosure Vulnerability5.5 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 20h2 +11 more +13 moreWindows Kernel Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +26 more +28 moreWindows Group Policy Preference Client Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +26 more +28 moreWindows Group Policy Preference Client Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +26 more +28 moreWindows Kernel Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +26 more +28 moreWindows Kernel Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +26 more +28 moreWindows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +26 more +28 moreWindows Kernel Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +26 more +28 moreWindows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +26 more +28 moreWindows Win32k Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +26 more +28 moreWindows Graphics Component Information Disclosure Vulnerability5.5 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +18 more +20 moreWindows WLAN Service Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1809, windows 10 version 20h2, windows 10 version 21h1 +8 more +10 moreMicrosoft DWM Core Library Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +26 more +28 moreMicrosoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability8.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +26 more +28 moreWindows Event Logging Service Denial of Service Vulnerability4.3 Medium
- microsoft windows 10 version 20h2, windows 10 version 21h1, windows 10 version 21h2 +5 more +7 moreWindows DHCP Client Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h1 +10 more +12 moreWindows Hyper-V Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +26 more +28 moreWindows Active Directory Certificate Services Security Feature Bypass7.5 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +26 more +28 moreLocal Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability6.5 Medium
- microsoft windows server 2008 service pack 2, windows server 2008 r2 service pack 1, windows server 2008 r2 service pack 1 (server core installation) +12 more +14 moreActive Directory Certificate Services Elevation of Privilege Vulnerability8.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +26 more +28 moreWindows Group Policy Elevation of Privilege Vulnerability8.8 High
- microsoft windows 10 version 21h1, windows 10 version 21h2, windows 11 version 21h2 +3 more +5 moreWindows Mixed Reality Developer Tools Information Disclosure Vulnerability6.5 Medium
- microsoft windows 10 version 20h2, windows 10 version 21h1, windows 10 version 21h2 +5 more +7 moreWindows Local Session Manager (LSM) Denial of Service Vulnerability7.7 High
- microsoft malware protection engineMicrosoft Windows Defender Elevation of Privilege Vulnerability7.1 High
- microsoft windows 10 version 1809, windows 10 version 20h2, windows 10 version 21h1 +8 more +10 moreWindows DWM Core Library Elevation of Privilege Vulnerability7.8 High
- microsoft azure stack edge, azure arc-enabled kubernetes, azure arc-enabled kubernetes cluster 1.5.8 +3 more +5 moreAzure Arc-enabled Kubernetes cluster Connect Elevation of Privilege Vulnerability10.0 Critical
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +18 more +20 moreWindows Point-to-Point Tunneling Protocol Denial of Service Vulnerability5.9 Medium
- siemens solid edgeA vulnerability has been identified in Solid Edge (All Versions < SE2022MP9). The affected...7.8 High
- browserify-shim project browserify-shimthlorenz browserify-shim vulnerable to prototype pollution9.8 Critical
- xmldom project xmldom, debian linux +1 moreWithdrawn: Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') in @xmldom/xmldom and xmldom9.8 Critical
- js-beautify project js-beautifyPrototype pollution vulnerability in beautify-web js-beautify 1.13.7 via the name variable in...9.8 Critical
- webpack.js loader-utilsloader-utils is vulnerable to Regular Expression Denial of Service (ReDoS)7.5 High
- siemens logo! 12/24rce, logo! 12/24rceo, logo! 230rce +15 more +17 moreA vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions)....5.3 Medium
- siemens logo! 12/24rce, logo! 12/24rceo, logo! 230rce +15 more +17 moreA vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions)....7.5 High
- siemens logo! 12/24rce, logo! 12/24rceo, logo! 230rce +15 more +17 moreA vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions)....9.8 Critical
- siemens logo! 8 bm (incl. siplus variants), logo\!8 bm fs-05 firmware, logo\! 8 bm firmware +2 moreA vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3)....7.5 High
- microsoft azure service fabric explorer, azure service fabric +1 moreService Fabric Explorer Spoofing Vulnerability6.2 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +26 more +28 moreWindows NTLM Spoofing Vulnerability6.5 Medium
- sap iq, sql anywhere +1 moreSAP SQL Anywhere - version 17.0, and SAP IQ - version 16.1, allows an attacker to leverage...9.8 Critical
- sap enable nowThe application SAP Enable Now does not sufficiently encode user-controlled inputs over the...5.4 Medium
- sap businessobjects business intelligence, sap se businessobjects business intelligence platform (version management system) +1 moreUnder certain conditions, the application SAP BusinessObjects Business Intelligence Platform ...4.9 Medium
- facebook hermesA write-what-where condition in hermes caused by an integer overflow, prior to commit...9.8 Critical
- sap data services, sap se data services management console +1 moreSAP Data Services Management allows an attacker to copy the data from a request and echoed into...6.1 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +25 more +27 moreWindows CryptoAPI Spoofing Vulnerability7.5 High
- book store management system project store management system, sourcecodester book store management system +1 moreSourceCodester Book Store Management System transcation.php cross site scripting3.5 Low
- book store management system project store management system, sourcecodester book store management system +1 moreSourceCodester Book Store Management System category.php cross site scripting3.5 Low
- xapiXAPI open file limit DoS It is possible for an unauthenticated client on the network to cause...5.3 Medium
- debian linux, fedoraproject fedora, xen +2 morelock order inversion in transitive grant copy handling As part of XSA-226 a missing cleanup call...5.6 Medium
- Show moreLoading…