CVE-2022-26xxx records

Browse official CVE Program records with vulnerability descriptions, affected products, CVSS scores and source references. Browse by the year and numeric range in each CVE ID; publication and update dates appear on each record.

748 records · Page 2 of 8

• CVE-2022-26874: lib/Horde/Mime/Viewer/Ooo.php in Horde Mime_Viewer before 2.2.4 allows XSS via an OpenOffice document, leading to account takeover in Horde Groupware Webmail Edition. This occurs a Unscored

  lib/Horde/Mime/Viewer/Ooo.php in Horde Mime_Viewer before 2.2.4 allows XSS via an OpenOffice document, leading to account takeover in Horde Groupware Webmail Edition. This occurs after XSLT rendering.

  Updated 2024-10-19
• CVE-2022-26873: The stack buffer overflow vulnerability in PlatformInitAdvancedPreMem leads to arbitrary code execution during PEI phase. 8.2 High

  A potential attacker can execute an arbitrary code at the time of the PEI phase and influence the subsequent boot stages. This can lead to the mitigations bypassing, physical memory contents disclosure, discovery of any secrets from any Virtual Machines (VMs) and bypassing memory isolation and confidential computing boundaries. Additionally, an attacker can build a payload which can be injected in

  Updated 2025-05-27
• CVE-2022-26872: Password reset interception via API 8.3 High

  AMI Megarac Password reset interception via API

  Updated 2025-02-13
• CVE-2022-26871: An arbitrary file upload vulnerability in Trend Micro Apex Central could allow an unauthenticated remote attacker to upload an arbitrary file which could lead to remote code execut 9.8 Critical

  An arbitrary file upload vulnerability in Trend Micro Apex Central could allow an unauthenticated remote attacker to upload an arbitrary file which could lead to remote code execution.

  Updated 2025-10-21
• CVE-2022-26870: Dell PowerStore versions 2.1.0.x contain an Authentication bypass vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability under specific confi 7.0 High

  Dell PowerStore versions 2.1.0.x contain an Authentication bypass vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability under specific configuration. An attacker would gain unauthorized access upon successful exploit.

  Updated 2025-05-07
• CVE-2022-26869: Dell PowerStore versions 2.0.0.x, 2.0.1.x and 2.1.0.x contains an open port vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability, leading t 9.8 Critical

  Dell PowerStore versions 2.0.0.x, 2.0.1.x and 2.1.0.x contains an open port vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to information disclosure and arbitrary code execution.

  Updated 2024-09-16
• CVE-2022-26868: Dell EMC PowerStore versions 2.0.0.x, 2.0.1.x, and 2.1.0.x are vulnerable to a command injection flaw. An authenticated attacker could potentially exploit this vulnerability, leadi 6.4 Medium

  Dell EMC PowerStore versions 2.0.0.x, 2.0.1.x, and 2.1.0.x are vulnerable to a command injection flaw. An authenticated attacker could potentially exploit this vulnerability, leading to the execution of arbitrary OS commands on the application's underlying OS, with the privileges of the vulnerable application. Exploitation may lead to a system takeover by an attacker.

  Updated 2024-09-17
• CVE-2022-26867: PowerStore SW v2.1.1.0 supports the option to export data to either a CSV or an XLSX file. The data is taken as is, without any validation or sanitization. It allows a malicious, a 5.9 Medium

  PowerStore SW v2.1.1.0 supports the option to export data to either a CSV or an XLSX file. The data is taken as is, without any validation or sanitization. It allows a malicious, authenticated user to inject payloads that might get interpreted as formulas by the corresponding spreadsheet application that is being used to open the CSV/XLSX file.

  Updated 2024-09-16
• CVE-2022-26866: Dell PowerStore Versions before v2.1.1.0. contains a Stored Cross-Site Scripting vulnerability. A high privileged network attacker could potentially exploit this vulnerability, lea 5.5 Medium

  Dell PowerStore Versions before v2.1.1.0. contains a Stored Cross-Site Scripting vulnerability. A high privileged network attacker could potentially exploit this vulnerability, leading to the storage of malicious HTML or JavaScript codes in a trusted application data store. When a victim user accesses the data store through their browsers, the malicious code gets executed by the web browser in the

  Updated 2024-09-17
• CVE-2022-26865: Dell Support Assist OS Recovery versions before 5.5.2 contain an Authentication Bypass vulnerability. An unauthenticated attacker with physical access to the system may exploit thi 6.8 Medium

  Dell Support Assist OS Recovery versions before 5.5.2 contain an Authentication Bypass vulnerability. An unauthenticated attacker with physical access to the system may exploit this vulnerability by bypassing OS Recovery authentication in order to run arbitrary code on the system as Administrator.

  Updated 2024-09-16
• CVE-2022-26864: Prior Dell BIOS versions contain an Input Validation vulnerability. A locally authenticated malicious user could potentially exploit this vulnerability by sending malicious input t 6.3 Medium

  Prior Dell BIOS versions contain an Input Validation vulnerability. A locally authenticated malicious user could potentially exploit this vulnerability by sending malicious input to an SMI in order to bypass security controls in SMM.

  Updated 2024-09-16
• CVE-2022-26863: Prior Dell BIOS versions contain an Input Validation vulnerability. A locally authenticated malicious user could potentially exploit this vulnerability by sending malicious input t 6.3 Medium

  Prior Dell BIOS versions contain an Input Validation vulnerability. A locally authenticated malicious user could potentially exploit this vulnerability by sending malicious input to an SMI in order to bypass security controls in SMM.

  Updated 2024-09-16
• CVE-2022-26862: Prior Dell BIOS versions contain an Input Validation vulnerability. A locally authenticated malicious user could potentially exploit this vulnerability by sending malicious input t 6.3 Medium

  Prior Dell BIOS versions contain an Input Validation vulnerability. A locally authenticated malicious user could potentially exploit this vulnerability by sending malicious input to an SMI in order to bypass security controls in SMM.

  Updated 2024-09-16
• CVE-2022-26861: Dell BIOS versions contain an Insecure Automated Optimization vulnerability. A local authenticated malicious user could exploit this vulnerability by sending malicious input via SM 7.9 High

  Dell BIOS versions contain an Insecure Automated Optimization vulnerability. A local authenticated malicious user could exploit this vulnerability by sending malicious input via SMI to obtain arbitrary code execution during SMM.

  Updated 2026-05-27
• CVE-2022-26860: Dell BIOS versions contain a stack-based buffer overflow vulnerability. A local attacker could exploit this vulnerability by sending malicious input via SMI to bypass security chec 7.5 High

  Dell BIOS versions contain a stack-based buffer overflow vulnerability. A local attacker could exploit this vulnerability by sending malicious input via SMI to bypass security checks resulting in arbitrary code execution in SMM.

  Updated 2026-05-27
• CVE-2022-26859: Dell BIOS contains a race condition vulnerability. A local attacker could exploit this vulnerability by sending malicious input via SMI in order to bypass security checks during SM 6.1 Medium

  Dell BIOS contains a race condition vulnerability. A local attacker could exploit this vulnerability by sending malicious input via SMI in order to bypass security checks during SMM.

  Updated 2026-05-27
• CVE-2022-26858: Dell BIOS versions contain an Improper Authentication vulnerability. A locally authenticated malicious user could potentially exploit this vulnerability by sending malicious input 6.1 Medium

  Dell BIOS versions contain an Improper Authentication vulnerability. A locally authenticated malicious user could potentially exploit this vulnerability by sending malicious input to an SMI in order to bypass security controls.

  Updated 2026-05-27
• CVE-2022-26857: Dell OpenManage Enterprise Versions 3.8.3 and prior contain an improper authorization vulnerability. A remote authenticated malicious user with low privileges may potentially explo 9.0 Critical

  Dell OpenManage Enterprise Versions 3.8.3 and prior contain an improper authorization vulnerability. A remote authenticated malicious user with low privileges may potentially exploit this vulnerability to bypass blocked functionalities and perform unauthorized actions.

  Updated 2024-09-17
• CVE-2022-26856: Dell EMC Repository Manager version 3.4.0 contains a plain-text password storage vulnerability. A local attacker could potentially exploit this vulnerability, leading to the disclo 8.2 High

  Dell EMC Repository Manager version 3.4.0 contains a plain-text password storage vulnerability. A local attacker could potentially exploit this vulnerability, leading to the disclosure of certain user credentials. The attacker may be able to use the exposed credentials to access the vulnerable application's database with privileges of the compromised account.

  Updated 2024-09-16
• CVE-2022-26855: Dell PowerScale OneFS, versions 8.2.x-9.3.0.x, contains an incorrect default permissions vulnerability. A local malicious user could potentially exploit this vulnerability, leading 5.5 Medium

  Dell PowerScale OneFS, versions 8.2.x-9.3.0.x, contains an incorrect default permissions vulnerability. A local malicious user could potentially exploit this vulnerability, leading to a denial of service.

  Updated 2024-09-17
• CVE-2022-26854: Dell PowerScale OneFS, versions 8.2.x-9.2.x, contain risky cryptographic algorithms. A remote unprivileged malicious attacker could potentially exploit this vulnerability, leading 8.1 High

  Dell PowerScale OneFS, versions 8.2.x-9.2.x, contain risky cryptographic algorithms. A remote unprivileged malicious attacker could potentially exploit this vulnerability, leading to full system access

  Updated 2024-09-17
• CVE-2022-26853: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none. Rejected

  DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none.

  Updated 2023-05-12 · Rejected record
• CVE-2022-26852: Dell PowerScale OneFS, versions 8.2.x-9.3.x, contain a predictable seed in pseudo-random number generator. A remote unauthenticated attacker could potentially exploit this vulnerab 8.1 High

  Dell PowerScale OneFS, versions 8.2.x-9.3.x, contain a predictable seed in pseudo-random number generator. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to an account compromise.

  Updated 2024-09-17
• CVE-2022-26851: Dell PowerScale OneFS, 8.2.2-9.3.x, contains a predictable file name from observable state vulnerability. An unprivileged network attacker could potentially exploit this vulnerabil 9.1 Critical

  Dell PowerScale OneFS, 8.2.2-9.3.x, contains a predictable file name from observable state vulnerability. An unprivileged network attacker could potentially exploit this vulnerability, leading to data loss.

  Updated 2024-09-16
• CVE-2022-26850: Insufficiently protected credentials Unscored

  When creating or updating credentials for single-user access, Apache NiFi wrote a copy of the Login Identity Providers configuration to the operating system temporary directory. On most platforms, the operating system temporary directory has global read permissions. NiFi immediately moved the temporary file to the final configuration directory, which significantly limited the window of opportunity

  Updated 2024-08-03
• CVE-2022-26847: SPIP before 3.2.14 and 4.x before 4.0.5 allows unauthenticated access to information about editorial objects. Unscored

  SPIP before 3.2.14 and 4.x before 4.0.5 allows unauthenticated access to information about editorial objects.

  Updated 2024-08-03
• CVE-2022-26846: SPIP before 3.2.14 and 4.x before 4.0.5 allows remote authenticated editors to execute arbitrary code. Unscored

  SPIP before 3.2.14 and 4.x before 4.0.5 allows remote authenticated editors to execute arbitrary code.

  Updated 2024-08-03
• CVE-2022-26845: Improper authentication in firmware for Intel(R) AMT before versions 11.8.93, 11.22.93, 11.12.93, 12.0.92, 14.1.67, 15.0.42, 16.1.25 may allow an unauthenticated user to potentiall 8.7 High

  Improper authentication in firmware for Intel(R) AMT before versions 11.8.93, 11.22.93, 11.12.93, 12.0.92, 14.1.67, 15.0.42, 16.1.25 may allow an unauthenticated user to potentially enable escalation of privilege via network access.

  Updated 2025-02-05
• CVE-2022-26844: Insufficiently protected credentials in the installation binaries for Intel(R) SEAPI in all versions may allow an authenticated user to potentially enable escalation of privilege v 7.8 High

  Insufficiently protected credentials in the installation binaries for Intel(R) SEAPI in all versions may allow an authenticated user to potentially enable escalation of privilege via local access.

  Updated 2025-02-25
• CVE-2022-26843: Insufficient visual distinction of homoglyphs presented to user in the Intel(R) oneAPI DPC++/C++ Compiler before version 2022.1 for Intel(R) oneAPI Toolkits before version 2022.2 m 8.3 High

  Insufficient visual distinction of homoglyphs presented to user in the Intel(R) oneAPI DPC++/C++ Compiler before version 2022.1 for Intel(R) oneAPI Toolkits before version 2022.2 may allow an unauthenticated user to potentially enable escalation of privilege via network access.

  Updated 2025-01-27
• CVE-2022-26842: A reflected cross-site scripting (xss) vulnerability exists in the charts tab selection functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP r 9.6 Critical

  A reflected cross-site scripting (xss) vulnerability exists in the charts tab selection functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead to arbitrary Javascript execution. An attacker can get an authenticated user to send a crafted HTTP request to trigger this vulnerability.

  Updated 2025-04-15
• CVE-2022-26841: Insufficient control flow management for the Intel(R) SGX SDK software for Linux before version 2.16.100.1 may allow an authenticated user to potentially enable information disclos 2.5 Low

  Insufficient control flow management for the Intel(R) SGX SDK software for Linux before version 2.16.100.1 may allow an authenticated user to potentially enable information disclosure via local access.

  Updated 2025-01-27
• CVE-2022-26840: Improper neutralization in the Intel(R) Quartus Prime Pro and Standard edition software may allow an authenticated user to potentially enable escalation of privilege via local acce 7.3 High

  Improper neutralization in the Intel(R) Quartus Prime Pro and Standard edition software may allow an authenticated user to potentially enable escalation of privilege via local access.

  Updated 2025-01-27
• CVE-2022-26839: Delta Electronics DIAEnergie Incorrect Default Permissions 7.8 High

  Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) is vulnerable to an incorrect default permission in the DIAEnergie application, which may allow an attacker to plant new files (such as DLLs) or replace existing executable files.

  Updated 2025-04-16
• CVE-2022-26838: Path traversal vulnerability in Importing Mobile Device Data of Cybozu Remote Service 3.1.2 allows a remote authenticated attacker to cause a denial-of-service (DoS) condition. Unscored

  Path traversal vulnerability in Importing Mobile Device Data of Cybozu Remote Service 3.1.2 allows a remote authenticated attacker to cause a denial-of-service (DoS) condition.

  Updated 2024-10-17
• CVE-2022-26837: Improper input validation in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access. 7.5 High

  Improper input validation in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.

  Updated 2025-01-27
• CVE-2022-26836: Delta Electronics DIAEnergie SQL Injection in HandlerExport.ashx/Calendar.ashx 9.8 Critical

  Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability that exists in HandlerExport.ashx/Calendar. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands.

  Updated 2025-04-16
• CVE-2022-26835: On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x versions prior to 13.1.5, and all versions of 12.1.x an 4.9 Medium

  On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x versions prior to 13.1.5, and all versions of 12.1.x and 11.6.x, directory traversal vulnerabilities exist in undisclosed iControl REST endpoints and TMOS Shell (tmsh) commands in F5 BIG-IP Guided Configuration, which may allow an authenticated attacker with at least resourc

  Updated 2024-09-17
• CVE-2022-26834: Improper access control vulnerability in Rakuten Casa version AP_F_V1_4_1 or AP_F_V2_0_0 allows a remote attacker to obtain the information stored in the product because the produc Unscored

  Improper access control vulnerability in Rakuten Casa version AP_F_V1_4_1 or AP_F_V2_0_0 allows a remote attacker to obtain the information stored in the product because the product is set to accept HTTP connections from the WAN side by default.

  Updated 2024-08-03
• CVE-2022-26833: An improper authentication vulnerability exists in the REST API functionality of Open Automation Software OAS Platform V16.00.0121. A specially-crafted series of HTTP requests can 9.4 Critical

  An improper authentication vulnerability exists in the REST API functionality of Open Automation Software OAS Platform V16.00.0121. A specially-crafted series of HTTP requests can lead to unauthenticated use of the REST API. An attacker can send a series of HTTP requests to trigger this vulnerability.

  Updated 2024-09-16
• CVE-2022-26832: .NET Framework Denial of Service Vulnerability 7.5 High

  .NET Framework Denial of Service Vulnerability

  Updated 2025-01-02
• CVE-2022-26831: Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability 7.5 High

  Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability

  Updated 2025-01-02
• CVE-2022-26830: DiskUsage.exe Remote Code Execution Vulnerability 7.5 High

  DiskUsage.exe Remote Code Execution Vulnerability

  Updated 2025-01-02
• CVE-2022-26829: Windows DNS Server Remote Code Execution Vulnerability 6.6 Medium

  Windows DNS Server Remote Code Execution Vulnerability

  Updated 2025-01-02
• CVE-2022-26828: Windows Bluetooth Driver Elevation of Privilege Vulnerability 7.0 High

  Windows Bluetooth Driver Elevation of Privilege Vulnerability

  Updated 2025-01-02
• CVE-2022-26827: Windows File Server Resource Management Service Elevation of Privilege Vulnerability 7.0 High

  Windows File Server Resource Management Service Elevation of Privilege Vulnerability

  Updated 2025-01-02
• CVE-2022-26826: Windows DNS Server Remote Code Execution Vulnerability 7.2 High

  Windows DNS Server Remote Code Execution Vulnerability

  Updated 2026-06-02
• CVE-2022-26825: Windows DNS Server Remote Code Execution Vulnerability 7.2 High

  Windows DNS Server Remote Code Execution Vulnerability

  Updated 2025-01-02
• CVE-2022-26824: Windows DNS Server Remote Code Execution Vulnerability 7.2 High

  Windows DNS Server Remote Code Execution Vulnerability

  Updated 2025-01-02
• CVE-2022-26823: Windows DNS Server Remote Code Execution Vulnerability 7.2 High

  Windows DNS Server Remote Code Execution Vulnerability

  Updated 2025-01-02
• CVE-2022-26822: Windows DNS Server Remote Code Execution Vulnerability 6.6 Medium

  Windows DNS Server Remote Code Execution Vulnerability

  Updated 2025-01-02
• CVE-2022-26821: Windows DNS Server Remote Code Execution Vulnerability 6.6 Medium

  Windows DNS Server Remote Code Execution Vulnerability

  Updated 2025-01-02
• CVE-2022-26820: Windows DNS Server Remote Code Execution Vulnerability 6.6 Medium

  Windows DNS Server Remote Code Execution Vulnerability

  Updated 2025-01-02
• CVE-2022-26819: Windows DNS Server Remote Code Execution Vulnerability 6.6 Medium

  Windows DNS Server Remote Code Execution Vulnerability

  Updated 2025-01-02
• CVE-2022-26818: Windows DNS Server Remote Code Execution Vulnerability 6.6 Medium

  Windows DNS Server Remote Code Execution Vulnerability

  Updated 2025-01-02
• CVE-2022-26817: Windows DNS Server Remote Code Execution Vulnerability 6.6 Medium

  Windows DNS Server Remote Code Execution Vulnerability

  Updated 2025-01-02
• CVE-2022-26816: Windows DNS Server Information Disclosure Vulnerability 6.5 Medium

  Windows DNS Server Information Disclosure Vulnerability

  Updated 2025-01-02
• CVE-2022-26815: Windows DNS Server Remote Code Execution Vulnerability 7.2 High

  Windows DNS Server Remote Code Execution Vulnerability

  Updated 2025-01-02
• CVE-2022-26814: Windows DNS Server Remote Code Execution Vulnerability 6.6 Medium

  Windows DNS Server Remote Code Execution Vulnerability

  Updated 2025-01-02
• CVE-2022-26813: Windows DNS Server Remote Code Execution Vulnerability 7.2 High

  Windows DNS Server Remote Code Execution Vulnerability

  Updated 2025-01-02
• CVE-2022-26812: Windows DNS Server Remote Code Execution Vulnerability 7.2 High

  Windows DNS Server Remote Code Execution Vulnerability

  Updated 2025-01-02
• CVE-2022-26811: Windows DNS Server Remote Code Execution Vulnerability 7.2 High

  Windows DNS Server Remote Code Execution Vulnerability

  Updated 2025-01-02
• CVE-2022-26810: Windows File Server Resource Management Service Elevation of Privilege Vulnerability 7.8 High

  Windows File Server Resource Management Service Elevation of Privilege Vulnerability

  Updated 2025-01-02
• CVE-2022-26809: Remote Procedure Call Runtime Remote Code Execution Vulnerability 9.8 Critical

  Remote Procedure Call Runtime Remote Code Execution Vulnerability

  Updated 2025-01-02
• CVE-2022-26808: Windows File Explorer Elevation of Privilege Vulnerability 7.0 High

  Windows File Explorer Elevation of Privilege Vulnerability

  Updated 2025-01-02
• CVE-2022-26807: Windows Work Folder Service Elevation of Privilege Vulnerability 7.0 High

  Windows Work Folder Service Elevation of Privilege Vulnerability

  Updated 2025-12-16
• CVE-2022-26806: Microsoft Office Graphics Remote Code Execution Vulnerability 7.8 High

  Microsoft Office Graphics Remote Code Execution Vulnerability

  Updated 2025-07-22
• CVE-2022-26805: Microsoft Office Graphics Remote Code Execution Vulnerability 7.8 High

  Microsoft Office Graphics Remote Code Execution Vulnerability

  Updated 2025-07-22
• CVE-2022-26804: Microsoft Office Graphics Remote Code Execution Vulnerability 7.8 High

  Microsoft Office Graphics Remote Code Execution Vulnerability

  Updated 2025-07-22
• CVE-2022-26803: Windows Print Spooler Elevation of Privilege Vulnerability 7.8 High

  Windows Print Spooler Elevation of Privilege Vulnerability

  Updated 2025-01-02
• CVE-2022-26802: Windows Print Spooler Elevation of Privilege Vulnerability 7.8 High

  Windows Print Spooler Elevation of Privilege Vulnerability

  Updated 2025-01-02
• CVE-2022-26801: Windows Print Spooler Elevation of Privilege Vulnerability 7.8 High

  Windows Print Spooler Elevation of Privilege Vulnerability

  Updated 2025-01-02
• CVE-2022-26798: Windows Print Spooler Elevation of Privilege Vulnerability 7.8 High

  Windows Print Spooler Elevation of Privilege Vulnerability

  Updated 2025-01-02
• CVE-2022-26797: Windows Print Spooler Elevation of Privilege Vulnerability 7.8 High

  Windows Print Spooler Elevation of Privilege Vulnerability

  Updated 2025-01-02
• CVE-2022-26796: Windows Print Spooler Elevation of Privilege Vulnerability 7.8 High

  Windows Print Spooler Elevation of Privilege Vulnerability

  Updated 2025-01-02
• CVE-2022-26795: Windows Print Spooler Elevation of Privilege Vulnerability 7.8 High

  Windows Print Spooler Elevation of Privilege Vulnerability

  Updated 2026-06-02
• CVE-2022-26794: Windows Print Spooler Elevation of Privilege Vulnerability 7.8 High

  Windows Print Spooler Elevation of Privilege Vulnerability

  Updated 2025-01-02
• CVE-2022-26793: Windows Print Spooler Elevation of Privilege Vulnerability 7.8 High

  Windows Print Spooler Elevation of Privilege Vulnerability

  Updated 2025-01-02
• CVE-2022-26792: Windows Print Spooler Elevation of Privilege Vulnerability 7.8 High

  Windows Print Spooler Elevation of Privilege Vulnerability

  Updated 2025-01-02
• CVE-2022-26791: Windows Print Spooler Elevation of Privilege Vulnerability 7.8 High

  Windows Print Spooler Elevation of Privilege Vulnerability

  Updated 2025-01-02
• CVE-2022-26790: Windows Print Spooler Elevation of Privilege Vulnerability 7.8 High

  Windows Print Spooler Elevation of Privilege Vulnerability

  Updated 2025-01-02
• CVE-2022-26789: Windows Print Spooler Elevation of Privilege Vulnerability 7.8 High

  Windows Print Spooler Elevation of Privilege Vulnerability

  Updated 2025-01-02
• CVE-2022-26788: PowerShell Elevation of Privilege Vulnerability 7.8 High

  PowerShell Elevation of Privilege Vulnerability

  Updated 2025-01-02
• CVE-2022-26787: Windows Print Spooler Elevation of Privilege Vulnerability 7.8 High

  Windows Print Spooler Elevation of Privilege Vulnerability

  Updated 2025-01-02
• CVE-2022-26786: Windows Print Spooler Elevation of Privilege Vulnerability 7.8 High

  Windows Print Spooler Elevation of Privilege Vulnerability

  Updated 2025-01-02
• CVE-2022-26785: Windows Hyper-V Shared Virtual Hard Disks Information Disclosure Vulnerability 6.5 Medium

  Windows Hyper-V Shared Virtual Hard Disks Information Disclosure Vulnerability

  Updated 2025-01-02
• CVE-2022-26784: Windows Cluster Shared Volume (CSV) Denial of Service Vulnerability 6.5 Medium

  Windows Cluster Shared Volume (CSV) Denial of Service Vulnerability

  Updated 2025-12-09
• CVE-2022-26783: Windows Hyper-V Shared Virtual Hard Disks Information Disclosure Vulnerability 6.5 Medium

  Windows Hyper-V Shared Virtual Hard Disks Information Disclosure Vulnerability

  Updated 2025-01-02
• CVE-2022-26782: Multiple improper input validation vulnerabilities exists in the libnvram.so nvram_import functionality of InHand Networks InRouter302 V3.5.4. A specially-crafted file can lead to 9.9 Critical

  Multiple improper input validation vulnerabilities exists in the libnvram.so nvram_import functionality of InHand Networks InRouter302 V3.5.4. A specially-crafted file can lead to remote code execution. An attacker can send a sequence of requests to trigger this vulnerability.An improper input validation vulnerability exists in the `httpd`'s `user_define_set_item` function. Controlling the `user_d

  Updated 2025-04-15
• CVE-2022-26781: Multiple improper input validation vulnerabilities exists in the libnvram.so nvram_import functionality of InHand Networks InRouter302 V3.5.4. A specially-crafted file can lead to 9.9 Critical

  Multiple improper input validation vulnerabilities exists in the libnvram.so nvram_import functionality of InHand Networks InRouter302 V3.5.4. A specially-crafted file can lead to remote code execution. An attacker can send a sequence of requests to trigger this vulnerability.An improper input validation vulnerability exists in the `httpd`'s `user_define_print` function. Controlling the `user_defi

  Updated 2025-04-15
• CVE-2022-26780: Multiple improper input validation vulnerabilities exists in the libnvram.so nvram_import functionality of InHand Networks InRouter302 V3.5.4. A specially-crafted file can lead to 9.9 Critical

  Multiple improper input validation vulnerabilities exists in the libnvram.so nvram_import functionality of InHand Networks InRouter302 V3.5.4. A specially-crafted file can lead to remote code execution. An attacker can send a sequence of requests to trigger this vulnerability.An improper input validation vulnerability exists in the `httpd`'s `user_define_init` function. Controlling the `user_defin

  Updated 2025-04-15
• CVE-2022-26779: Apache Cloudstack insecure random number generation affects project email invitation Unscored

  Apache CloudStack prior to 4.16.1.0 used insecure random number generation for project invitation tokens. If a project invite is created based only on an email address, a random token is generated. An attacker with knowledge of the project ID and the fact that the invite is sent, could generate time deterministic tokens and brute force attempt to use them prior to the legitimate receiver accepting

  Updated 2024-08-03
• CVE-2022-26778: Veritas System Recovery (VSR) 18 and 21 stores a network destination password in the Windows registry during configuration of the backup configuration. This could allow a Windows u 5.3 Medium

  Veritas System Recovery (VSR) 18 and 21 stores a network destination password in the Windows registry during configuration of the backup configuration. This could allow a Windows user (who has sufficient privileges) to access a network file system that they were not authorized to access.

  Updated 2024-08-03
• CVE-2022-26777: Zoho ManageEngine Remote Access Plus before 10.1.2137.15 allows guest users to view license details. Unscored

  Zoho ManageEngine Remote Access Plus before 10.1.2137.15 allows guest users to view license details.

  Updated 2024-08-03
• CVE-2022-26776: This issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.4, macOS Big Sur 11.6.6. An attacker may be able to cause unexpected application termination 9.8 Critical

  This issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.4, macOS Big Sur 11.6.6. An attacker may be able to cause unexpected application termination or arbitrary code execution.

  Updated 2025-05-30
• CVE-2022-26775: An integer overflow was addressed with improved input validation. This issue is fixed in Security Update 2022-004 Catalina, macOS Monterey 12.4. An attacker may be able to cause un 9.8 Critical

  An integer overflow was addressed with improved input validation. This issue is fixed in Security Update 2022-004 Catalina, macOS Monterey 12.4. An attacker may be able to cause unexpected application termination or arbitrary code execution.

  Updated 2025-05-30
• CVE-2022-26774: A logic issue was addressed with improved state management. This issue is fixed in iTunes 12.12.4 for Windows. A local attacker may be able to elevate their privileges. 7.8 High

  A logic issue was addressed with improved state management. This issue is fixed in iTunes 12.12.4 for Windows. A local attacker may be able to elevate their privileges.

  Updated 2025-05-30
• CVE-2022-26773: A logic issue was addressed with improved state management. This issue is fixed in iTunes 12.12.4 for Windows. An application may be able to delete files for which it does not have 7.1 High

  A logic issue was addressed with improved state management. This issue is fixed in iTunes 12.12.4 for Windows. An application may be able to delete files for which it does not have permission.

  Updated 2025-05-30
• CVE-2022-26772: A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.4. An application may be able to execute arbitrary code with kernel 7.8 High

  A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.4. An application may be able to execute arbitrary code with kernel privileges.

  Updated 2025-05-30
• CVE-2022-26771: A memory corruption issue was addressed with improved state management. This issue is fixed in watchOS 8.6, tvOS 15.5, iOS 15.5 and iPadOS 15.5. A malicious application may be able 7.8 High

  A memory corruption issue was addressed with improved state management. This issue is fixed in watchOS 8.6, tvOS 15.5, iOS 15.5 and iPadOS 15.5. A malicious application may be able to execute arbitrary code with kernel privileges.

  Updated 2025-05-30

Search a CVE ID or check dependency files →