Vulnerabilities > Microsoft > Critical

DATE CVE VULNERABILITY TITLE RISK
2023-02-14 CVE-2023-21692 Unspecified vulnerability in Microsoft products
Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability
network
low complexity
microsoft
critical
9.8
2023-02-14 CVE-2023-21716 Unspecified vulnerability in Microsoft products
Microsoft Word Remote Code Execution Vulnerability
network
low complexity
microsoft
critical
9.8
2023-02-14 CVE-2023-21803 Unspecified vulnerability in Microsoft products
Windows iSCSI Discovery Service Remote Code Execution Vulnerability
network
low complexity
microsoft
critical
9.8
2022-12-05 CVE-2022-43516 A Firewall Rule which allows all incoming TCP connections to all programs from any source and to all ports is created in Windows Firewall after Zabbix agent installation (MSI)
network
low complexity
zabbix microsoft
critical
9.8
2022-11-25 CVE-2022-4135 Out-of-bounds Write vulnerability in multiple products
Heap buffer overflow in GPU in Google Chrome prior to 107.0.5304.121 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
network
low complexity
google microsoft CWE-787
critical
9.6
2022-11-04 CVE-2022-39344 Classic Buffer Overflow vulnerability in Microsoft Azure Rtos Usbx
Azure RTOS USBX is a USB host, device, and on-the-go (OTG) embedded stack, that is fully integrated with Azure RTOS ThreadX.
network
low complexity
microsoft CWE-120
critical
9.8
2022-10-25 CVE-2022-39327 OS Command Injection vulnerability in Microsoft Azure Command-Line Interface
Azure CLI is the command-line interface for Microsoft Azure.
network
low complexity
microsoft CWE-78
critical
9.8
2022-10-13 CVE-2022-39293 Integer Underflow (Wrap or Wraparound) vulnerability in Microsoft Azure Rtos Usbx
Azure RTOS USBX is a high-performance USB host, device, and on-the-go (OTG) embedded stack, that is fully integrated with Azure RTOS ThreadX.
network
low complexity
microsoft CWE-191
critical
9.8
2022-10-11 CVE-2022-37968 Unspecified vulnerability in Microsoft Azure Arc-Enabled Kubernetes and Azure Stack Edge
Microsoft has identified a vulnerability affecting the cluster connect feature of Azure Arc-enabled Kubernetes clusters.
network
low complexity
microsoft
critical
10.0
2022-10-10 CVE-2022-36063 Improper Validation of Specified Quantity in Input vulnerability in Microsoft Azure Rtos Usbx
Azure RTOS USBx is a USB host, device, and on-the-go (OTG) embedded stack, fully integrated with Azure RTOS ThreadX and available for all Azure RTOS ThreadX–supported processors.
network
low complexity
microsoft CWE-1284
critical
9.8