CVE-2022-21xxx records

Browse official CVE Program records with vulnerability descriptions, affected products, CVSS scores and source references. Browse by the year and numeric range in each CVE ID; publication and update dates appear on each record.

845 records · Page 1 of 9

• CVE-2022-21999: Windows Print Spooler Elevation of Privilege Vulnerability 7.8 High

  Windows Print Spooler Elevation of Privilege Vulnerability

  Updated 2025-10-21
• CVE-2022-21998: Windows Common Log File System Driver Information Disclosure Vulnerability 5.5 Medium

  Windows Common Log File System Driver Information Disclosure Vulnerability

  Updated 2025-01-02
• CVE-2022-21997: Windows Print Spooler Elevation of Privilege Vulnerability 7.1 High

  Windows Print Spooler Elevation of Privilege Vulnerability

  Updated 2025-01-02
• CVE-2022-21996: Win32k Elevation of Privilege Vulnerability 7.8 High

  Win32k Elevation of Privilege Vulnerability

  Updated 2025-01-02
• CVE-2022-21995: Windows Hyper-V Remote Code Execution Vulnerability 7.9 High

  Windows Hyper-V Remote Code Execution Vulnerability

  Updated 2025-01-02
• CVE-2022-21994: Windows DWM Core Library Elevation of Privilege Vulnerability 7.8 High

  Windows DWM Core Library Elevation of Privilege Vulnerability

  Updated 2025-01-02
• CVE-2022-21993: Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability 7.5 High

  Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability

  Updated 2025-01-02
• CVE-2022-21992: Windows Mobile Device Management Remote Code Execution Vulnerability 7.8 High

  Windows Mobile Device Management Remote Code Execution Vulnerability

  Updated 2025-01-02
• CVE-2022-21991: Visual Studio Code Remote Development Extension Remote Code Execution Vulnerability 8.1 High

  Visual Studio Code Remote Development Extension Remote Code Execution Vulnerability

  Updated 2026-10-08
• CVE-2022-21990: Remote Desktop Client Remote Code Execution Vulnerability 8.8 High

  Remote Desktop Client Remote Code Execution Vulnerability

  Updated 2025-07-08
• CVE-2022-21989: Windows Kernel Elevation of Privilege Vulnerability 7.8 High

  Windows Kernel Elevation of Privilege Vulnerability

  Updated 2025-01-02
• CVE-2022-21988: Microsoft Office Visio Remote Code Execution Vulnerability 7.8 High

  Microsoft Office Visio Remote Code Execution Vulnerability

  Updated 2025-01-02
• CVE-2022-21987: Microsoft SharePoint Server Spoofing Vulnerability 8.0 High

  Microsoft SharePoint Server Spoofing Vulnerability

  Updated 2025-01-02
• CVE-2022-21986: .NET Denial of Service Vulnerability 7.5 High

  .NET Denial of Service Vulnerability

  Updated 2026-10-08
• CVE-2022-21985: Windows Remote Access Connection Manager Information Disclosure Vulnerability 5.5 Medium

  Windows Remote Access Connection Manager Information Disclosure Vulnerability

  Updated 2025-01-02
• CVE-2022-21984: Windows DNS Server Remote Code Execution Vulnerability 8.8 High

  Windows DNS Server Remote Code Execution Vulnerability

  Updated 2025-01-02
• CVE-2022-21983: Win32 Stream Enumeration Remote Code Execution Vulnerability 7.5 High

  Win32 Stream Enumeration Remote Code Execution Vulnerability

  Updated 2025-01-02
• CVE-2022-21981: Windows Common Log File System Driver Elevation of Privilege Vulnerability 7.8 High

  Windows Common Log File System Driver Elevation of Privilege Vulnerability

  Updated 2025-01-02
• CVE-2022-21980: Microsoft Exchange Server Elevation of Privilege Vulnerability 8.0 High

  Microsoft Exchange Server Elevation of Privilege Vulnerability

  Updated 2025-01-02
• CVE-2022-21979: Microsoft Exchange Server Information Disclosure Vulnerability 4.8 Medium

  Microsoft Exchange Server Information Disclosure Vulnerability

  Updated 2025-01-02
• CVE-2022-21978: Microsoft Exchange Server Elevation of Privilege Vulnerability 8.2 High

  Microsoft Exchange Server Elevation of Privilege Vulnerability

  Updated 2025-01-02
• CVE-2022-21977: Media Foundation Information Disclosure Vulnerability 3.3 Low

  Media Foundation Information Disclosure Vulnerability

  Updated 2025-07-08
• CVE-2022-21975: Windows Hyper-V Denial of Service Vulnerability 4.7 Medium

  Windows Hyper-V Denial of Service Vulnerability

  Updated 2025-07-08
• CVE-2022-21974: Roaming Security Rights Management Services Remote Code Execution Vulnerability 7.8 High

  Roaming Security Rights Management Services Remote Code Execution Vulnerability

  Updated 2025-01-02
• CVE-2022-21973: Windows Media Center Update Denial of Service Vulnerability 5.5 Medium

  Windows Media Center Update Denial of Service Vulnerability

  Updated 2025-07-08
• CVE-2022-21972: Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability 8.1 High

  Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability

  Updated 2025-01-02
• CVE-2022-21971: Windows Runtime Remote Code Execution Vulnerability 7.8 High

  Windows Runtime Remote Code Execution Vulnerability

  Updated 2025-10-21
• CVE-2022-21970: Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability 6.1 Medium

  Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

  Updated 2025-01-02
• CVE-2022-21969: Microsoft Exchange Server Remote Code Execution Vulnerability 9.0 Critical

  Microsoft Exchange Server Remote Code Execution Vulnerability

  Updated 2025-01-02
• CVE-2022-21968: Microsoft SharePoint Server Security Feature Bypass Vulnerability 4.3 Medium

  Microsoft SharePoint Server Security Feature Bypass Vulnerability

  Updated 2025-01-02
• CVE-2022-21967: Xbox Live Auth Manager for Windows Elevation of Privilege Vulnerability 7.0 High

  Xbox Live Auth Manager for Windows Elevation of Privilege Vulnerability

  Updated 2025-07-08
• CVE-2022-21965: Microsoft Teams Denial of Service Vulnerability 7.5 High

  Microsoft Teams Denial of Service Vulnerability

  Updated 2025-01-02
• CVE-2022-21964: Remote Desktop Licensing Diagnoser Information Disclosure Vulnerability 5.5 Medium

  Remote Desktop Licensing Diagnoser Information Disclosure Vulnerability

  Updated 2025-01-02
• CVE-2022-21963: Windows Resilient File System (ReFS) Remote Code Execution Vulnerability 6.4 Medium

  Windows Resilient File System (ReFS) Remote Code Execution Vulnerability

  Updated 2025-01-02
• CVE-2022-21962: Windows Resilient File System (ReFS) Remote Code Execution Vulnerability 6.8 Medium

  Windows Resilient File System (ReFS) Remote Code Execution Vulnerability

  Updated 2025-01-02
• CVE-2022-21961: Windows Resilient File System (ReFS) Remote Code Execution Vulnerability 6.8 Medium

  Windows Resilient File System (ReFS) Remote Code Execution Vulnerability

  Updated 2025-01-02
• CVE-2022-21960: Windows Resilient File System (ReFS) Remote Code Execution Vulnerability 6.8 Medium

  Windows Resilient File System (ReFS) Remote Code Execution Vulnerability

  Updated 2025-01-02
• CVE-2022-21959: Windows Resilient File System (ReFS) Remote Code Execution Vulnerability 6.8 Medium

  Windows Resilient File System (ReFS) Remote Code Execution Vulnerability

  Updated 2025-01-02
• CVE-2022-21958: Windows Resilient File System (ReFS) Remote Code Execution Vulnerability 6.8 Medium

  Windows Resilient File System (ReFS) Remote Code Execution Vulnerability

  Updated 2025-01-02
• CVE-2022-21957: Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability 7.2 High

  Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability

  Updated 2025-01-02
• CVE-2022-21954: Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability 6.1 Medium

  Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

  Updated 2025-01-02
• CVE-2022-21953: Authenticated user can gain unauthorized shell pod and kubectl access in the local cluster 7.4 High

  A Missing Authorization vulnerability in of SUSE Rancher allows authenticated user to create an unauthorized shell pod and kubectl access in the local cluster This issue affects: SUSE Rancher Rancher versions prior to 2.5.17; Rancher versions prior to 2.6.10; Rancher versions prior to 2.7.1.

  Updated 2025-03-25
• CVE-2022-21952: SUMA unauthenticated remote DoS via resource exhaustion 7.5 High

  A Missing Authentication for Critical Function vulnerability in spacewalk-java of SUSE Manager Server 4.1, SUSE Manager Server 4.2 allows remote attackers to easily exhaust available disk resources leading to DoS. This issue affects: SUSE Manager Server 4.1 spacewalk-java versions prior to 4.1.46. SUSE Manager Server 4.2 spacewalk-java versions prior to 4.2.37.

  Updated 2026-07-07
• CVE-2022-21951: Rancher: Weave CNI password is not set if RKE template is used with CNI value overridden 6.8 Medium

  A Cleartext Transmission of Sensitive Information vulnerability in SUSE Rancher, Rancher allows attackers on the network to read and change network data due to missing encryption of data transmitted via the network when a cluster is created from an RKE template with the CNI value overridden This issue affects: SUSE Rancher Rancher versions prior to 2.5.14; Rancher versions prior to 2.6.5.

  Updated 2024-09-16
• CVE-2022-21950: canna: unsafe handling of /tmp/.iroha_unix directory 5.3 Medium

  A Improper Access Control vulnerability in the systemd service of cana in openSUSE Backports SLE-15-SP3, openSUSE Backports SLE-15-SP4 allows local users to hijack the UNIX domain socket This issue affects: openSUSE Backports SLE-15-SP3 canna versions prior to canna-3.7p3-bp153.2.3.1. openSUSE Backports SLE-15-SP4 canna versions prior to 3.7p3-bp154.3.3.1. openSUSE Factory was also affected. Inste

  Updated 2024-09-17
• CVE-2022-21949: Multiple XXE vulnerabilities in OBS 8.8 High

  A Improper Restriction of XML External Entity Reference vulnerability in SUSE Open Build Service allows remote attackers to reference external entities in certain operations. This can be used to gain information from the server that can be abused to escalate to Admin privileges on OBS. This issue affects: SUSE Open Build Service Open Build Service versions prior to 2.10.13.

  Updated 2024-09-16
• CVE-2022-21948: paste: XSS on the image upload function 4.3 Medium

  An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in paste allows remote attackers to place Javascript into SVG files. This issue affects: openSUSE paste paste version b57b9f87e303a3db9465776e657378e96845493b and prior versions.

  Updated 2025-03-25
• CVE-2022-21947: rancher desktop: Dashboard API is network accessible 8.3 High

  A Exposure of Resource to Wrong Sphere vulnerability in Rancher Desktop of SUSE allows attackers in the local network to connect to the Dashboard API (steve) to carry out arbitrary actions. This issue affects: SUSE Rancher Desktop versions prior to V.

  Updated 2024-09-16
• CVE-2022-21946: suddoers configuration for cscreen not restrictive enough 5.3 Medium

  A Incorrect Permission Assignment for Critical Resource vulnerability in the sudoers configuration in cscreen of openSUSE Factory allows any local users to gain the privileges of the tty and dialout groups and access and manipulate any running cscreen seesion. This issue affects: openSUSE Factory cscreen version 1.2-1.3 and prior versions.

  Updated 2024-09-17
• CVE-2022-21945: cscreen: usage of fixed path /tmp/cscreen.debug 5.1 Medium

  A Insecure Temporary File vulnerability in cscreen of openSUSE Factory allows local attackers to cause DoS for cscreen and a system DoS for non-default systems. This issue affects: openSUSE Factory cscreen version 1.2-1.3 and prior versions.

  Updated 2024-09-17
• CVE-2022-21944: watchman: chown in watchman@.socket unit allows symlink attack 7.8 High

  A UNIX Symbolic Link (Symlink) Following vulnerability in the systemd service file for watchman of openSUSE Backports SLE-15-SP3, Factory allows local attackers to escalate to root. This issue affects: openSUSE Backports SLE-15-SP3 watchman versions prior to 4.9.0. openSUSE Factory watchman versions prior to 4.9.0-9.1.

  Updated 2024-09-16
• CVE-2022-21941: iSTAR Ultra 10.0 Critical

  All versions of iSTAR Ultra prior to version 6.8.9.CU01 are vulnerable to a command injection that could allow an unauthenticated user root access to the system.

  Updated 2024-09-17
• CVE-2022-21940: Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in System Configuration Tool (SCT) 7.5 High

  Sensitive Cookie in HTTPS Session Without 'Secure' Attribute vulnerability in Johnson Controls System Configuration Tool (SCT) version 14 prior to 14.2.3 and version 15 prior to 15.0.3 could allow access to the cookie.

  Updated 2025-03-24
• CVE-2022-21939: Sensitive cookie without 'HttpOnly' flag in System Configuration Tool (SCT) 7.5 High

  Sensitive Cookie Without 'HttpOnly' Flag vulnerability in Johnson Controls System Configuration Tool (SCT) version 14 prior to 14.2.3 and version 15 prior to 15.0.3 could allow access to the cookie.

  Updated 2025-03-24
• CVE-2022-21938: Metasys MUI Graphics XSS 8.1 High

  Under certain circumstances, a vulnerability in Metasys ADS/ADX/OAS 10 versions prior to 10.1.5 and Metasys ADS/ADX/OAS 11 versions prior to 11.0.2 could allow a user to inject malicious code into the MUI Graphics web interface.

  Updated 2024-09-16
• CVE-2022-21937: Metasys CSS 8.7 High

  Under certain circumstances, a vulnerability in Metasys ADS/ADX/OAS 10 versions prior to 10.1.5 and Metasys ADS/ADX/OAS 11 versions prior to 11.0.2 could allow a user to inject malicious code into the web interface.

  Updated 2024-09-16
• CVE-2022-21936: Metasys MVE 8.1 High

  On Metasys ADX Server version 12.0 running MVE, an Active Directory user could execute validated actions without providing a valid password when using MVE SMP UI.

  Updated 2024-09-16
• CVE-2022-21935: Metasys password guessing 7.5 High

  A vulnerability in Metasys ADS/ADX/OAS 10 versions prior to 10.1.5 and Metasys ADS/ADX/OAS 11 versions prior to 11.0.2 allows unverified password change.

  Updated 2024-09-16
• CVE-2022-21934: Metasys Unverified Password Change 8.0 High

  Under certain circumstances an authenticated user could lock other users out of the system or take over their accounts in Metasys ADS/ADX/OAS server 10 versions prior to 10.1.5 and Metasys ADS/ADX/OAS server 11 versions prior to 11.0.2.

  Updated 2024-09-16
• CVE-2022-21933: ASUS VivoMini/Mini PC - improper input validation 6.7 Medium

  ASUS VivoMini/Mini PC device has an improper input validation vulnerability. A local attacker with system privilege can use system management interrupt (SMI) to modify memory, resulting in arbitrary code execution for controlling the system or disrupting service.

  Updated 2024-09-16
• CVE-2022-21932: Microsoft Dynamics 365 Customer Engagement Cross-Site Scripting Vulnerability 7.6 High

  Microsoft Dynamics 365 Customer Engagement Cross-Site Scripting Vulnerability

  Updated 2025-01-02
• CVE-2022-21931: Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability 4.2 Medium

  Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

  Updated 2025-01-02
• CVE-2022-21930: Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability 4.2 Medium

  Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

  Updated 2025-01-02
• CVE-2022-21929: Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability 2.5 Low

  Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

  Updated 2025-01-02
• CVE-2022-21928: Windows Resilient File System (ReFS) Remote Code Execution Vulnerability 6.3 Medium

  Windows Resilient File System (ReFS) Remote Code Execution Vulnerability

  Updated 2025-01-02
• CVE-2022-21927: HEVC Video Extensions Remote Code Execution Vulnerability 7.8 High

  HEVC Video Extensions Remote Code Execution Vulnerability

  Updated 2025-01-02
• CVE-2022-21926: HEVC Video Extensions Remote Code Execution Vulnerability 7.8 High

  HEVC Video Extensions Remote Code Execution Vulnerability

  Updated 2025-01-02
• CVE-2022-21925: Windows BackupKey Remote Protocol Security Feature Bypass Vulnerability 5.3 Medium

  Windows BackupKey Remote Protocol Security Feature Bypass Vulnerability

  Updated 2025-01-02
• CVE-2022-21924: Workstation Service Remote Protocol Security Feature Bypass Vulnerability 5.3 Medium

  Workstation Service Remote Protocol Security Feature Bypass Vulnerability

  Updated 2025-01-02
• CVE-2022-21922: Remote Procedure Call Runtime Remote Code Execution Vulnerability 8.8 High

  Remote Procedure Call Runtime Remote Code Execution Vulnerability

  Updated 2025-01-02
• CVE-2022-21921: Windows Defender Credential Guard Security Feature Bypass Vulnerability 4.4 Medium

  Windows Defender Credential Guard Security Feature Bypass Vulnerability

  Updated 2025-01-02
• CVE-2022-21920: Windows Kerberos Elevation of Privilege Vulnerability 8.8 High

  Windows Kerberos Elevation of Privilege Vulnerability

  Updated 2025-01-02
• CVE-2022-21919: Windows User Profile Service Elevation of Privilege Vulnerability 7.0 High

  Windows User Profile Service Elevation of Privilege Vulnerability

  Updated 2025-10-21
• CVE-2022-21918: DirectX Graphics Kernel File Denial of Service Vulnerability 6.5 Medium

  DirectX Graphics Kernel File Denial of Service Vulnerability

  Updated 2025-01-02
• CVE-2022-21917: HEVC Video Extensions Remote Code Execution Vulnerability 7.8 High

  HEVC Video Extensions Remote Code Execution Vulnerability

  Updated 2025-01-02
• CVE-2022-21916: Windows Common Log File System Driver Elevation of Privilege Vulnerability 7.8 High

  Windows Common Log File System Driver Elevation of Privilege Vulnerability

  Updated 2025-01-02
• CVE-2022-21915: Windows GDI+ Information Disclosure Vulnerability 6.5 Medium

  Windows GDI+ Information Disclosure Vulnerability

  Updated 2025-01-02
• CVE-2022-21914: Windows Remote Access Connection Manager Elevation of Privilege Vulnerability 7.8 High

  Windows Remote Access Connection Manager Elevation of Privilege Vulnerability

  Updated 2025-01-02
• CVE-2022-21913: Local Security Authority (Domain Policy) Remote Protocol Security Feature Bypass 5.3 Medium

  Local Security Authority (Domain Policy) Remote Protocol Security Feature Bypass

  Updated 2025-01-02
• CVE-2022-21912: DirectX Graphics Kernel Remote Code Execution Vulnerability 7.8 High

  DirectX Graphics Kernel Remote Code Execution Vulnerability

  Updated 2025-01-02
• CVE-2022-21911: .NET Framework Denial of Service Vulnerability 7.5 High

  .NET Framework Denial of Service Vulnerability

  Updated 2025-01-02
• CVE-2022-21910: Microsoft Cluster Port Driver Elevation of Privilege Vulnerability 7.8 High

  Microsoft Cluster Port Driver Elevation of Privilege Vulnerability

  Updated 2025-01-02
• CVE-2022-21908: Windows Installer Elevation of Privilege Vulnerability 7.8 High

  Windows Installer Elevation of Privilege Vulnerability

  Updated 2025-01-02
• CVE-2022-21907: HTTP Protocol Stack Remote Code Execution Vulnerability 9.8 Critical

  HTTP Protocol Stack Remote Code Execution Vulnerability

  Updated 2025-01-02
• CVE-2022-21906: Windows Defender Application Control Security Feature Bypass Vulnerability 5.5 Medium

  Windows Defender Application Control Security Feature Bypass Vulnerability

  Updated 2025-01-02
• CVE-2022-21905: Windows Hyper-V Security Feature Bypass Vulnerability 4.6 Medium

  Windows Hyper-V Security Feature Bypass Vulnerability

  Updated 2025-01-02
• CVE-2022-21904: Windows GDI Information Disclosure Vulnerability 7.5 High

  Windows GDI Information Disclosure Vulnerability

  Updated 2025-01-02
• CVE-2022-21903: Windows GDI Elevation of Privilege Vulnerability 7.0 High

  Windows GDI Elevation of Privilege Vulnerability

  Updated 2025-01-02
• CVE-2022-21902: Windows DWM Core Library Elevation of Privilege Vulnerability 7.8 High

  Windows DWM Core Library Elevation of Privilege Vulnerability

  Updated 2025-01-02
• CVE-2022-21901: Windows Hyper-V Elevation of Privilege Vulnerability 9.0 Critical

  Windows Hyper-V Elevation of Privilege Vulnerability

  Updated 2025-01-02
• CVE-2022-21900: Windows Hyper-V Security Feature Bypass Vulnerability 4.6 Medium

  Windows Hyper-V Security Feature Bypass Vulnerability

  Updated 2025-01-02
• CVE-2022-21899: Windows Extensible Firmware Interface Security Feature Bypass Vulnerability 5.5 Medium

  Windows Extensible Firmware Interface Security Feature Bypass Vulnerability

  Updated 2025-01-02
• CVE-2022-21898: DirectX Graphics Kernel Remote Code Execution Vulnerability 7.8 High

  DirectX Graphics Kernel Remote Code Execution Vulnerability

  Updated 2025-01-02
• CVE-2022-21897: Windows Common Log File System Driver Elevation of Privilege Vulnerability 7.8 High

  Windows Common Log File System Driver Elevation of Privilege Vulnerability

  Updated 2025-01-02
• CVE-2022-21896: Windows DWM Core Library Elevation of Privilege Vulnerability 7.0 High

  Windows DWM Core Library Elevation of Privilege Vulnerability

  Updated 2025-01-02
• CVE-2022-21895: Windows User Profile Service Elevation of Privilege Vulnerability 7.8 High

  Windows User Profile Service Elevation of Privilege Vulnerability

  Updated 2025-01-02
• CVE-2022-21894: Secure Boot Security Feature Bypass Vulnerability 4.4 Medium

  Secure Boot Security Feature Bypass Vulnerability

  Updated 2025-01-02
• CVE-2022-21893: Remote Desktop Protocol Remote Code Execution Vulnerability 8.0 High

  Remote Desktop Protocol Remote Code Execution Vulnerability

  Updated 2025-01-02
• CVE-2022-21892: Windows Resilient File System (ReFS) Remote Code Execution Vulnerability 6.8 Medium

  Windows Resilient File System (ReFS) Remote Code Execution Vulnerability

  Updated 2025-01-02
• CVE-2022-21891: Microsoft Dynamics 365 (on-premises) Spoofing Vulnerability 7.6 High

  Microsoft Dynamics 365 (on-premises) Spoofing Vulnerability

  Updated 2025-01-02

Search a CVE ID or check dependency files →