Vulnerabilities > Microsoft > Critical

DATE CVE VULNERABILITY TITLE RISK
2022-10-11 CVE-2022-37968 Unspecified vulnerability in Microsoft Azure Arc-Enabled Kubernetes and Azure Stack Edge
Microsoft has identified a vulnerability affecting the cluster connect feature of Azure Arc-enabled Kubernetes clusters.
network
low complexity
microsoft
critical
10.0
2022-10-10 CVE-2022-36063 Improper Validation of Specified Quantity in Input vulnerability in Microsoft Azure Rtos Usbx
Azure RTOS USBx is a USB host, device, and on-the-go (OTG) embedded stack, fully integrated with Azure RTOS ThreadX and available for all Azure RTOS ThreadX–supported processors.
network
low complexity
microsoft CWE-1284
critical
9.8
2022-08-09 CVE-2022-30133 Unspecified vulnerability in Microsoft products
Windows Point-to-Point Protocol (PPP) Remote Code Execution Vulnerability
network
low complexity
microsoft
critical
9.8
2022-08-09 CVE-2022-33649 Unspecified vulnerability in Microsoft Edge Chromium
Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
network
low complexity
microsoft
critical
9.6
2022-08-09 CVE-2022-34715 Unspecified vulnerability in Microsoft Windows Server 2022
Windows Network File System Remote Code Execution Vulnerability
network
low complexity
microsoft
critical
9.8
2022-06-15 CVE-2022-30136 Unspecified vulnerability in Microsoft products
Windows Network File System Remote Code Execution Vulnerability
network
low complexity
microsoft
critical
9.8
2022-05-13 CVE-2022-25865 Argument Injection or Modification vulnerability in Microsoft Workspace-Tools
The package workspace-tools before 0.18.4 are vulnerable to Command Injection via git argument injection.
network
low complexity
microsoft CWE-88
critical
9.8
2022-05-10 CVE-2022-22012 Unspecified vulnerability in Microsoft products
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
network
low complexity
microsoft
critical
9.8
2022-05-10 CVE-2022-26937 Unspecified vulnerability in Microsoft products
Windows Network File System Remote Code Execution Vulnerability
network
low complexity
microsoft
critical
9.8
2022-05-10 CVE-2022-29130 Unspecified vulnerability in Microsoft products
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
network
low complexity
microsoft
critical
9.8