57.971 CVE seguite
788 Sfruttate ora
188 Usate dai ransomware
Ultima sincronia
CVE Tracker
57.971 CVE
Dieci fornitori seguiti per identificativo CPE, non per parola chiave: una CVE compare qui quando NVD dichiara quali prodotti tocca, di solito qualche giorno dopo la pubblicazione.
| Identificativo | Gravità, ordina dal più alto | Prodotto e difetto | EPSS, ordina dal più alto | In KEV dal, ordinato dal più alto |
|---|---|---|---|---|
| CVE-2022-21848 | HIGH 7.5 | microsoft windows_10 Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability | 4,2% | — |
| CVE-2022-21847 | MED 6.5 | microsoft windows_10 Windows Hyper-V Denial of Service Vulnerability | 1,0% | — |
| CVE-2022-21846 | CRIT 9.0 | microsoft exchange_server Microsoft Exchange Server Remote Code Execution Vulnerability | 1,1% | — |
| CVE-2022-21845 | MED 4.7 | microsoft windows_10 Windows Kernel Information Disclosure Vulnerability | 0,7% | — |
| CVE-2022-21844 | HIGH 7.8 | microsoft hevc_video_extensions HEVC Video Extensions Remote Code Execution Vulnerability | 2,3% | — |
| CVE-2022-21843 | HIGH 7.5 | microsoft windows_10 Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability | 3,4% | — |
| CVE-2022-21842 | HIGH 7.8 | microsoft sharepoint_enterprise_server Microsoft Word Remote Code Execution Vulnerability | 2,3% | — |
| CVE-2022-21841 | HIGH 7.8 | microsoft 365_apps Microsoft Excel Remote Code Execution Vulnerability | 2,6% | — |
| CVE-2022-21840 | HIGH 8.8 | microsoft excel Microsoft Office Remote Code Execution Vulnerability | 3,1% | — |
| CVE-2022-21839 | MED 6.1 | microsoft windows_10 Windows Event Tracing Discretionary Access Control List Denial of Service Vulnerability | 1,5% | — |
| CVE-2022-21838 | MED 5.5 | microsoft windows_10 Windows Cleanup Manager Elevation of Privilege Vulnerability | 1,5% | — |
| CVE-2022-21837 | HIGH 8.3 | microsoft sharepoint_foundation Microsoft SharePoint Server Remote Code Execution Vulnerability | 3,0% | — |
| CVE-2022-21836 | HIGH 7.8 | microsoft windows_10 Windows Certificate Spoofing Vulnerability | 0,7% | — |
| CVE-2022-21835 | HIGH 7.8 | microsoft windows_10 Microsoft Cryptographic Services Elevation of Privilege Vulnerability | 0,7% | — |
| CVE-2022-21834 | HIGH 7.0 | microsoft windows_10 Windows User-mode Driver Framework Reflector Driver Elevation of Privilege Vulnerability | 0,6% | — |
| CVE-2022-21833 | HIGH 7.8 | microsoft windows_10 Virtual Machine IDE Drive Elevation of Privilege Vulnerability | 0,6% | — |
| CVE-2022-21827 | HIGH 7.1 | citrix gateway_plug-in An improper privilege vulnerability has been discovered in Citrix Gateway Plug-in for Windows (Citrix Secure Access for Windows) <21.9.1.2 what could allow an attacker who has gained local access to a computer with Citrix Gateway Plug-in installed, to corrupt | 0,2% | — |
| CVE-2022-21825 | HIGH 7.8 | citrix workspace An Improper Access Control vulnerability exists in Citrix Workspace App for Linux 2012 - 2111 with App Protection installed that can allow an attacker to perform local privilege escalation. | 0,2% | — |
| CVE-2022-21821 | HIGH 7.8 | nvidia cuda_toolkit NVIDIA CUDA Toolkit SDK contains an integer overflow vulnerability in cuobjdump.To exploit this vulnerability, a remote attacker would require a local user to download a specially crafted, corrupted file and locally execute cuobjdump against the file. Such an | 2,1% | — |
| CVE-2022-21820 | MED 6.3 | nvidia data_center_gpu_manager NVIDIA DCGM contains a vulnerability in nvhostengine, where a network user can cause detection of error conditions without action, which may lead to limited code execution, some denial of service, escalation of privileges, and limited impacts to both data conf | 16,5% | — |
| CVE-2022-21817 | CRIT 9.3 | nvidia omniverse_launcher NVIDIA Omniverse Launcher contains a Cross-Origin Resource Sharing (CORS) vulnerability which can allow an unprivileged remote attacker, if they can get user to browse malicious site, to acquire access tokens allowing them to access resources in other security | 1,7% | — |
| CVE-2022-21815 | MED 5.5 | nvidia cloud_gaming_guest NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for private IOCTLs where a NULL pointer dereference in the kernel, created within user mode code, may lead to a denial of service in the form of a sy | 0,2% | — |
| CVE-2022-21813 | MED 6.1 | nvidia cloud_gaming_guest NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel driver, where improper handling of insufficient permissions or privileges may allow an unprivileged local user limited write access to protected memory, which can lead to denial of serv | 0,2% | — |
| CVE-2022-21793 | MED 5.5 | vmware i40en Insufficient control flow management in the Intel(R) Ethernet 500 Series Controller drivers for VMWare before version 1.11.4.0 and in the Intel(R) Ethernet 700 Series Controller drivers for VMWare before version 2.1.5.0 may allow an authenticated user to poten | 0,2% | — |
| CVE-2022-2170 | MED 4.8 | microsoft microsoft_advertising_universal_event_tracking The Microsoft Advertising Universal Event Tracking (UET) WordPress plugin before 1.0.4 does not sanitise and escape its settings, allowing high privilege users such as admin to perform Cross-Site Scripting attacks even when the unfiltered_html capability is di | 1,4% | — |