cve.bz

Microsoft Patch Tuesday, October 2022: the CVEs

Filter

Microsoft Patch Tuesday October 2022: the CVEs Microsoft published on 11 October 2022, the second Tuesday of the month, with CVSS, EPSS, CISA KEV and public exploits to show what to patch first. Narrow it: in CISA KEV · critical. The same day: Adobe, SAP. Earlier: Sep 2022, Aug 2022, Jul 2022, Jun 2022, May 2022, Apr 2022, Mar 2022, Feb 2022, Jan 2022, Dec 2021, Nov 2021, Oct 2021. Other lists: CISA KEV list, CVE exploit search, Latest critical CVEs, Ransomware CVEs, New CVEs today, This week, Patch Tuesday

  1. 7.8CVE-2022-41083EPSS 0.7%

    Visual Studio Code Elevation of Privilege Vulnerability

  2. 8.1CVE-2022-41081EPSS 1.9%

    Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability

  3. 3.3CVE-2022-41043EPSS 0.9%

    Microsoft Office Information Disclosure Vulnerability

  4. 7.4CVE-2022-41042EPSS 2.5%

    Visual Studio Code Information Disclosure Vulnerability

  5. 8.8CVE-2022-41038EPSS 3.4%

    Microsoft SharePoint Server Remote Code Execution Vulnerability

  6. 8.8CVE-2022-41037EPSS 2.1%

    Microsoft SharePoint Server Remote Code Execution Vulnerability

  7. 8.8CVE-2022-41036EPSS 2.1%

    Microsoft SharePoint Server Remote Code Execution Vulnerability

  8. 5.3CVE-2022-41035EPSS 1.8%

    Microsoft Edge (Chromium-based) Spoofing Vulnerability

  9. 7.8CVE-2022-41034ExploitEPSS 67%

    Visual Studio Code Remote Code Execution Vulnerability

  10. 7.8CVE-2022-41033KEVEPSS 1.9%

    Windows COM+ Event System Service Elevation of Privilege Vulnerability

  11. 7.8CVE-2022-41032EPSS 1.3%

    NuGet Client Elevation of Privilege Vulnerability

  12. 7.8CVE-2022-41031EPSS 0.9%

    Microsoft Word Remote Code Execution Vulnerability

  13. 8.8CVE-2022-38053EPSS 76%

    Microsoft SharePoint Server Remote Code Execution Vulnerability

  14. 7.8CVE-2022-38051EPSS 7.3%

    Windows Graphics Component Elevation of Privilege Vulnerability

  15. 7.8CVE-2022-38050EPSS 7.3%

    Win32k Elevation of Privilege Vulnerability

  16. 7.8CVE-2022-38049EPSS 0.9%

    Microsoft Office Graphics Remote Code Execution Vulnerability

  17. 7.8CVE-2022-38048EPSS 1.7%

    Microsoft Office Remote Code Execution Vulnerability

  18. 8.1CVE-2022-38047EPSS 1.5%

    Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability

  19. 7.5CVE-2022-38046EPSS 2.3%

    Web Account Manager Information Disclosure Vulnerability

  20. 8.8CVE-2022-38045EPSS 2.8%

    Windows Server Service Elevation of Privilege Vulnerability

  21. 7.8CVE-2022-38044EPSS 56%

    Windows CD-ROM File System Driver Remote Code Execution Vulnerability

  22. 5.5CVE-2022-38043EPSS 0.6%

    Windows Security Support Provider Interface Information Disclosure Vulnerability

  23. 7.1CVE-2022-38042EPSS 1.8%

    Active Directory Domain Services Elevation of Privilege Vulnerability

  24. 7.5CVE-2022-38041EPSS 2.6%

    Windows Secure Channel Denial of Service Vulnerability

  25. 8.8CVE-2022-38040EPSS 2.0%

    Microsoft ODBC Driver Remote Code Execution Vulnerability

  26. 7.8CVE-2022-38039EPSS 0.7%

    Windows Kernel Elevation of Privilege Vulnerability

  27. 7.8CVE-2022-38038EPSS 1.1%

    Windows Kernel Elevation of Privilege Vulnerability

  28. 7.8CVE-2022-38037EPSS 1.1%

    Windows Kernel Elevation of Privilege Vulnerability

  29. 7.5CVE-2022-38036EPSS 2.7%

    Internet Key Exchange (IKE) Protocol Denial of Service Vulnerability

  30. 8.8CVE-2022-38034EPSS 4.0%

    Windows Workstation Service Elevation of Privilege Vulnerability

  31. 6.5CVE-2022-38033EPSS 2.1%

    Windows Server Remotely Accessible Registry Keys Information Disclosure Vulnerability

  32. 6.6CVE-2022-38032EPSS 0.7%

    Windows Portable Device Enumerator Service Security Feature Bypass Vulnerability

  33. 8.8CVE-2022-38031EPSS 2.0%

    Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

  34. 4.3CVE-2022-38030EPSS 0.8%

    Windows USB Serial Driver Information Disclosure Vulnerability

  35. 7.0CVE-2022-38029EPSS 0.8%

    Windows ALPC Elevation of Privilege Vulnerability

  36. 7.8CVE-2022-38028KEVEPSS 15%

    Windows Print Spooler Elevation of Privilege Vulnerability

  37. 7.0CVE-2022-38027EPSS 0.4%

    Windows Storage Elevation of Privilege Vulnerability

  38. 5.5CVE-2022-38026EPSS 0.6%

    Windows DHCP Client Information Disclosure Vulnerability

  39. 5.5CVE-2022-38025EPSS 0.6%

    Windows Distributed File System (DFS) Information Disclosure Vulnerability

  40. 3.3CVE-2022-38022EPSS 0.7%

    Windows Kernel Elevation of Privilege Vulnerability

  41. 7.0CVE-2022-38021EPSS 0.4%

    Connected User Experiences and Telemetry Elevation of Privilege Vulnerability

  42. 6.8CVE-2022-38017EPSS 0.7%

    StorSimple 8000 Series Elevation of Privilege Vulnerability

  43. 8.8CVE-2022-38016EPSS 0.5%

    Windows Local Security Authority (LSA) Elevation of Privilege Vulnerability

  44. 7.8CVE-2022-38003EPSS 0.6%

    Windows Resilient File System Elevation of Privilege

  45. 6.5CVE-2022-38001EPSS 1.9%

    Microsoft Office Spoofing Vulnerability

  46. 8.1CVE-2022-38000EPSS 1.6%

    Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability

  47. 7.8CVE-2022-37999EPSS 0.7%

    Windows Group Policy Preference Client Elevation of Privilege Vulnerability

  48. 7.7CVE-2022-37998EPSS 3.8%

    Windows Local Session Manager (LSM) Denial of Service Vulnerability

  49. 7.8CVE-2022-37997EPSS 0.7%

    Windows Graphics Component Elevation of Privilege Vulnerability

  50. 5.5CVE-2022-37996EPSS 0.6%

    Windows Kernel Memory Information Disclosure Vulnerability

  51. 7.8CVE-2022-37995EPSS 0.6%

    Windows Kernel Elevation of Privilege Vulnerability

  52. 7.8CVE-2022-37994EPSS 0.7%

    Windows Group Policy Preference Client Elevation of Privilege Vulnerability

  53. 7.8CVE-2022-37993EPSS 0.7%

    Windows Group Policy Preference Client Elevation of Privilege Vulnerability

  54. 7.8CVE-2022-37991EPSS 1.1%

    Windows Kernel Elevation of Privilege Vulnerability

  55. 7.8CVE-2022-37990EPSS 0.7%

    Windows Kernel Elevation of Privilege Vulnerability

  56. 7.8CVE-2022-37989EPSS 9.3%

    Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability

  57. 7.8CVE-2022-37988EPSS 1.1%

    Windows Kernel Elevation of Privilege Vulnerability

  58. 7.8CVE-2022-37987EPSS 9.1%

    Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability

  59. 7.8CVE-2022-37986EPSS 0.6%

    Windows Win32k Elevation of Privilege Vulnerability

  60. 5.5CVE-2022-37985EPSS 39%

    Windows Graphics Component Information Disclosure Vulnerability

  61. 7.8CVE-2022-37984EPSS 0.5%

    Windows WLAN Service Elevation of Privilege Vulnerability

  62. 7.8CVE-2022-37983EPSS 0.5%

    Microsoft DWM Core Library Elevation of Privilege Vulnerability

  63. 8.8CVE-2022-37982EPSS 2.0%

    Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

  64. 4.3CVE-2022-37981EPSS 2.9%

    Windows Event Logging Service Denial of Service Vulnerability

  65. 7.8CVE-2022-37980EPSS 0.6%

    Windows DHCP Client Elevation of Privilege Vulnerability

  66. 7.8CVE-2022-37979EPSS 0.6%

    Windows Hyper-V Elevation of Privilege Vulnerability

  67. 7.5CVE-2022-37978EPSS 1.8%

    Windows Active Directory Certificate Services Security Feature Bypass

  68. 6.5CVE-2022-37977EPSS 2.3%

    Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability

  69. 8.8CVE-2022-37976EPSS 2.4%

    Active Directory Certificate Services Elevation of Privilege Vulnerability

  70. 8.8CVE-2022-37975EPSS 1.9%

    Windows Group Policy Elevation of Privilege Vulnerability

  71. 6.5CVE-2022-37974EPSS 36%

    Windows Mixed Reality Developer Tools Information Disclosure Vulnerability

  72. 7.7CVE-2022-37973EPSS 3.8%

    Windows Local Session Manager (LSM) Denial of Service Vulnerability

  73. 7.1CVE-2022-37971EPSS 0.7%

    Microsoft Windows Defender Elevation of Privilege Vulnerability

  74. 7.8CVE-2022-37970EPSS 9.8%

    Windows DWM Core Library Elevation of Privilege Vulnerability

  75. 10.0CVE-2022-37968EPSS 3.0%

    Microsoft has identified a vulnerability affecting the cluster connect feature of Azure Arc-enabled Kubernetes clusters. This vulnerability could allow an unauthenticated user to elevate their privileges and potentially gain administrative…

  76. 5.9CVE-2022-37965EPSS 1.9%

    Windows Point-to-Point Tunneling Protocol Denial of Service Vulnerability

  77. 4.8CVE-2022-35829EPSS 18%

    Service Fabric Explorer Spoofing Vulnerability

  78. 6.5CVE-2022-35770EPSS 2.1%

    Windows NTLM Spoofing Vulnerability

  79. 7.5CVE-2022-34689EPSS 38%

    Windows CryptoAPI Spoofing Vulnerability

  80. 7.5CVE-2022-33645EPSS 2.6%

    Windows TCP/IP Driver Denial of Service Vulnerability

  81. 7.8CVE-2022-33635EPSS 1.1%

    Windows GDI+ Remote Code Execution Vulnerability

  82. 8.1CVE-2022-33634EPSS 1.5%

    Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability

  83. 8.1CVE-2022-30198EPSS 1.5%

    Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability

  84. 8.1CVE-2022-24504EPSS 1.5%

    Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability

  85. 8.1CVE-2022-22035EPSS 1.6%

    Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability