CVEs published in November 2022
3,183 vulnerabilities, 267 critical, 13 exploited.
- microsoft windows 10 version 1809, windows 10 version 20h2, windows 10 version 21h1 +9 more +11 moreMicrosoft DWM Core Library Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +26 more +28 moreWindows Digital Media Receiver Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +17 more +19 moreWindows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 20h2, windows 10 version 21h1, windows 10 version 21h2 +6 more +8 moreWindows Win32k Elevation of Privilege Vulnerability7.8 High
- microsoft windows, windows 10 version 1507, windows 10 version 1607 +21 more +23 moreWindows Mark of the Web Security Feature Bypass Vulnerability5.4 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +23 more +25 moreWindows Point-to-Point Tunneling Protocol Denial of Service Vulnerability5.9 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +18 more +20 moreWindows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability8.1 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +26 more +28 moreWindows Group Policy Elevation of Privilege Vulnerability6.4 Medium
- microsoft azure cyclecloud, azure cyclecloud 7, azure cyclecloud 8.0.0 +2 moreAzure CycleCloud Elevation of Privilege Vulnerability7.5 High
- microsoft exchange server, exchange server 2013 cumulative update 23, exchange server 2016 cumulative update 22 +3 more +5 moreMicrosoft Exchange Server Elevation of Privilege Vulnerability8.8 High
- microsoft exchange server, exchange server 2013 cumulative update 23, exchange server 2016 cumulative update 22 +3 more +5 moreMicrosoft Exchange Server Spoofing Vulnerability8.0 High
- microsoft exchange server, exchange server 2013 cumulative update 23, exchange server 2016 cumulative update 22 +3 more +5 moreMicrosoft Exchange Server Spoofing Vulnerability8.0 High
- microsoft windows, windows 10 version 1507, windows 10 version 1607 +34 more +36 moreWindows Print Spooler Elevation of Privilege Vulnerability7.8 High
- microsoft dynamics 365 business central spring 2019 update, dynamics 365 business central 2019, dynamics 365 business central 2021 +6 more +8 moreMicrosoft Dynamics Business Central Information Disclosure Vulnerability4.4 Medium
- microsoft excel, 365 apps, 365 apps for enterprise +9 more +11 moreMicrosoft Excel Remote Code Execution Vulnerability7.8 High
- microsoft sharepoint server, sharepoint enterprise server 2013 service pack 1, sharepoint enterprise server 2016 +5 more +7 moreMicrosoft SharePoint Server Remote Code Execution Vulnerability8.8 High
- microsoft word, 365 apps, 365 apps for enterprise +16 more +18 moreMicrosoft Word Remote Code Execution Vulnerability7.8 High
- microsoft word, 365 apps, 365 apps for enterprise +15 more +17 moreMicrosoft Word Information Disclosure Vulnerability5.5 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +26 more +28 moreWindows Network Address Translation (NAT) Denial of Service Vulnerability7.5 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +26 more +28 moreWindows HTTP.sys Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +26 more +28 moreNetwork Policy Server (NPS) RADIUS Protocol Denial of Service Vulnerability7.5 High
- microsoft windows 10 version 1809, windows 10 version 20h2, windows 10 version 21h1 +9 more +11 moreWindows Human Interface Device Information Disclosure Vulnerability5.5 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 20h2 +12 more +14 moreWindows Resilient File System (ReFS) Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +26 more +28 moreWindows Kerberos Denial of Service Vulnerability7.5 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +12 more +14 moreWindows Graphics Component Remote Code Execution Vulnerability7.8 High
- microsoft azure rtos guix studioAzure RTOS GUIX Studio Remote Code Execution Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +13 more +15 moreWindows Extensible File Allocation Table Elevation of Privilege Vulnerability7.8 High
- microsoft windows, windows 10 version 1507, windows 10 version 1607 +21 more +23 moreWindows Mark of the Web Security Feature Bypass Vulnerability5.4 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +27 more +29 moreMicrosoft ODBC Driver Remote Code Execution Vulnerability8.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +27 more +29 moreMicrosoft ODBC Driver Remote Code Execution Vulnerability8.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +27 more +29 moreWindows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability7.8 High
- microsoft windows 7, windows 7 service pack 1, windows server 2008 service pack 2 +5 more +7 moreWindows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability8.1 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +24 more +26 moreWindows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability8.1 High
- roxyfileman roxy filemanRoxy Fileman 1.4.6 allows Remote Code Execution via a .phar upload, because the default...9.8 Critical
- samsung galaxy buds pro manage, samsung mobile galaxy buds pro manager +1 moreSensitive information exposure vulnerability in FmmBaseModel in Galaxy Buds Pro Manage prior to...3.3 Low
- samsung passImproper access control in Samsung Pass prior to version 4.0.05.1 allows attackers to...3.6 Low
- samsung editor liteHeap overflow vulnerability in parse_pce function in libsavsaudio.so in Editor Lite prior to...4.3 Medium
- samsung billingImproper Authorization in Samsung Billing prior to version 5.0.56.0 allows attacker to get...6.2 Medium
- samsung galaxywatch4pluginImproper access control vulnerability in GalaxyWatch4Plugin prior to versions 2.2.11.22101351 and...4.0 Medium
- google android, samsung mobile devices +1 moreImproper access control vulnerability in clearAllGlobalProxy in MiscPolicy prior to SMR Nov-2022...4.3 Medium
- google android, samsung mobile devices +1 moreImproper access control vulnerability in IpcRxServiceModeBigDataInfo in RIL prior to SMR Nov-2022...5.9 Medium
- google android, samsung mobile devices +1 moreImproper access control vulnerability in BootCompletedReceiver_CMCC in DeviceManagement prior to...5.9 Medium
- google android, samsung mobile devices +1 moreImproper access control vulnerability in IImsService prior to SMR Nov-2022 Release 1 allows local...4.3 Medium
- google android, samsung mobile devices +1 moreImproper authorization vulnerability in StorageManagerService prior to SMR Nov-2022 Release 1...4.0 Medium
- google android, samsung mobile devices +1 moreHeap overflow vulnerability in sflacf_fal_bytes_peek function in libsmat.so library prior to SMR...8.0 High
- samsung exynos firmware, samsung mobile devices +1 moreImproper input validation vulnerability for processing SIB12 PDU in Exynos modems prior to SMR...5.3 Medium
- google android, samsung mobile devices +1 moreImproper input validation vulnerability in DualOutFocusViewer prior to SMR Nov-2022 Release 1...7.1 High
- google android, samsung mobile devices +1 moreImproper authorization vulnerability in?CallBGProvider prior to SMR Nov-2022 Release 1 allows...5.9 Medium
- eclipse californiumCalifornium Failing DTLS handshakes causes Data Loss due to throttling blocking processing of records8.2 High
- grafanaGrafana subject to Exposure of Sensitive Information resulting in User enumeration via forget password6.7 Medium
- Show moreLoading…