High

DATE	CVE	VULNERABILITY TITLE	RISK
2022-06-01	CVE-2022-30190	Externally Controlled Reference to a Resource in Another Sphere vulnerability in Microsoft products A remote code execution vulnerability exists when MSDT is called using the URL protocol from a calling application such as Word. local low complexity microsoft CWE-610	7.8
2022-05-10	CVE-2022-26923	Improper Certificate Validation vulnerability in Microsoft products Active Directory Domain Services Elevation of Privilege Vulnerability network low complexity microsoft CWE-295	8.8
2022-04-15	CVE-2022-24521	Unspecified vulnerability in Microsoft products Windows Common Log File System Driver Elevation of Privilege Vulnerability local low complexity microsoft	7.8
2022-04-15	CVE-2022-26904	Race Condition vulnerability in Microsoft products Windows User Profile Service Elevation of Privilege Vulnerability local high complexity microsoft CWE-362	7.0
2022-02-09	CVE-2022-21999	Link Following vulnerability in Microsoft products Windows Print Spooler Elevation of Privilege Vulnerability local low complexity microsoft CWE-59	7.8
2022-02-09	CVE-2022-22718	Unspecified vulnerability in Microsoft products Windows Print Spooler Elevation of Privilege Vulnerability local low complexity microsoft	7.8
2022-01-11	CVE-2022-21871	Unspecified vulnerability in Microsoft products Microsoft Diagnostics Hub Standard Collector Runtime Elevation of Privilege Vulnerability local low complexity microsoft	7.8
2022-01-11	CVE-2022-21919	Link Following vulnerability in Microsoft products Windows User Profile Service Elevation of Privilege Vulnerability local high complexity microsoft CWE-59	7.0
2021-10-13	CVE-2021-40449	Use After Free vulnerability in Microsoft products Win32k Elevation of Privilege Vulnerability local low complexity microsoft CWE-416	7.8
2021-09-15	CVE-2021-36955	Unspecified vulnerability in Microsoft products Windows Common Log File System Driver Elevation of Privilege Vulnerability local low complexity microsoft	7.8