CVSS: 10.0EPSS: 2%CPEs: 21EXPL: 0CVE-2022-41048 – Microsoft ODBC Driver Remote Code Execution Vulnerability
https://notcve.org/view.php?id=CVE-2022-41048
09 Nov 2022 — Microsoft ODBC Driver Remote Code Execution Vulnerability Vulnerabilidad de Ejecución de Código Remota de Microsoft ODBC Driver • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41048 •
CVSS: 7.8EPSS: 0%CPEs: 21EXPL: 0CVE-2022-37992 – Windows Group Policy Elevation of Privilege Vulnerability
https://notcve.org/view.php?id=CVE-2022-37992
09 Nov 2022 — Windows Group Policy Elevation of Privilege Vulnerability Vulnerabilidad de elevación de privilegios en la política de grupo de Windows • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-37992 •
CVSS: 7.8EPSS: 0%CPEs: 21EXPL: 0CVE-2022-41045 – Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability
https://notcve.org/view.php?id=CVE-2022-41045
09 Nov 2022 — Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability Vulnerabilidad de elevación de privilegios en el Windows Advanced Local Procedure Call (ALPC) • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41045 • CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') •
CVSS: 8.1EPSS: 0%CPEs: 20EXPL: 0CVE-2022-41039 – Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability
https://notcve.org/view.php?id=CVE-2022-41039
09 Nov 2022 — Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability Vulnerabilidad de ejecución remota de código del Windows Point-to-Point Tunneling Protocol • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41039 • CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') •
CVSS: 10.0EPSS: 2%CPEs: 21EXPL: 0CVE-2022-41047 – Microsoft ODBC Driver Remote Code Execution Vulnerability
https://notcve.org/view.php?id=CVE-2022-41047
09 Nov 2022 — Microsoft ODBC Driver Remote Code Execution Vulnerability Vulnerabilidad de ejecución remota de código del Microsoft ODBC Driver Remote • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41047 •
CVSS: 5.8EPSS: 0%CPEs: 76EXPL: 0CVE-2022-41064 – .NET Framework Information Disclosure Vulnerability
https://notcve.org/view.php?id=CVE-2022-41064
09 Nov 2022 — .NET Framework Information Disclosure Vulnerability Vulnerabilidad de divulgación de información de .NET Framework • https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-41064 •
CVSS: 6.8EPSS: 3%CPEs: 25EXPL: 0CVE-2022-41097 – Network Policy Server (NPS) RADIUS Protocol Information Disclosure Vulnerability
https://notcve.org/view.php?id=CVE-2022-41097
09 Nov 2022 — Network Policy Server (NPS) RADIUS Protocol Information Disclosure Vulnerability Vulnerabilidad de divulgación de información del protocolo RADIUS del servidor de políticas de red (NPS) • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41097 •
CVSS: 7.8EPSS: 24%CPEs: 20EXPL: 0CVE-2022-38044 – Windows CD-ROM File System Driver Remote Code Execution Vulnerability
https://notcve.org/view.php?id=CVE-2022-38044
11 Oct 2022 — Windows CD-ROM File System Driver Remote Code Execution Vulnerability Una vulnerabilidad de Ejecución de Código Remota en Windows CD-ROM File System Driver This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of ISO files. The issue results from the lack of proper validat... • https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-38044 •
CVSS: 7.8EPSS: 18%CPEs: 31EXPL: 0CVE-2022-34689 – Windows CryptoAPI Spoofing Vulnerability
https://notcve.org/view.php?id=CVE-2022-34689
11 Oct 2022 — Windows CryptoAPI Spoofing Vulnerability Una Vulnerabilidad de Suplantación en Windows CryptoAPI • https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-34689 • CWE-290: Authentication Bypass by Spoofing •
CVSS: 7.8EPSS: 0%CPEs: 33EXPL: 0CVE-2022-37986 – Windows Win32k Elevation of Privilege Vulnerability
https://notcve.org/view.php?id=CVE-2022-37986
11 Oct 2022 — Windows Win32k Elevation of Privilege Vulnerability Una Vulnerabilidad de Elevación de Privilegios en Windows Win32k This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute code at low integrity on the target system in order to exploit this vulnerability. The specific flaw exists within the user-mode print driver host process. The issue results from insufficient validation of the origin of commands.... • https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-37986 •