Complete feed
Action required
Critical/high still unreviewed, or CISA KEV listed
Android app · Google Play
Take your CVE monitoring with you.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 32 official vendor sources and 160+ reviewed platform categories.
High [CVE-2023-21718] Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability Affected products named by the advisory: Microsoft SQL Server 2008 R2 Service Pack 3 (QFE); Microsoft SQL Server 2008 Service Pack 4 (QFE); Microsoft SQL Server 2012 for x64-based Systems Service Pack 4 (QFE); Microsoft SQL Server 2012 Service Pack 4 (QFE); and 9 more. Affected products named by the advisory: Microsoft SQL Server 2014 Service Pack 3 (CU 4); Microsoft SQL Server 2014 Service Pack 3 (GDR); Microsoft SQL Server 2016 Service Pack 3 (GDR); Microsoft SQL Server 2016 Service Pack 3 Azure Connect Feature Pack; and 5 more. Affected products named by the advisory: Microsoft SQL Server 2017 (CU 31); Microsoft SQL Server 2017 (GDR); Microsoft SQL Server 2019 (CU 18); Microsoft SQL Server 2019 (GDR); and 1 more.
High [CVE-2023-21704] Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability Affected products named by the advisory: Microsoft SQL Server 2014 Service Pack 3 (CU 4); Microsoft SQL Server 2014 Service Pack 3 (GDR); Microsoft SQL Server 2016 Service Pack 3 (GDR); Microsoft SQL Server 2016 Service Pack 3 Azure Connect Feature Pack; and 5 more. Affected products named by the advisory: Microsoft SQL Server 2017 (CU 31); Microsoft SQL Server 2017 (GDR); Microsoft SQL Server 2019 (CU 18); Microsoft SQL Server 2019 (GDR); and 1 more.
High [CVE-2023-21528] Microsoft SQL Server Remote Code Execution Vulnerability
Microsoft SQL Server Remote Code Execution Vulnerability Affected products named by the advisory: Microsoft SQL Server 2008 R2 Service Pack 3 (QFE); Microsoft SQL Server 2008 Service Pack 4 (QFE); Microsoft SQL Server 2012 for x64-based Systems Service Pack 4 (QFE); Microsoft SQL Server 2012 Service Pack 4 (QFE); and 9 more. Affected products named by the advisory: Microsoft SQL Server 2014 Service Pack 3 (CU 4); Microsoft SQL Server 2014 Service Pack 3 (GDR); Microsoft SQL Server 2016 Service Pack 3 (GDR); Microsoft SQL Server 2016 Service Pack 3 Azure Connect Feature Pack; and 5 more. Affected products named by the advisory: Microsoft SQL Server 2017 (CU 31); Microsoft SQL Server 2017 (GDR); Microsoft SQL Server 2019 (CU 18); Microsoft SQL Server 2019 (GDR); and 1 more.
High [CVE-2022-38023] Netlogon RPC Elevation of Privilege Vulnerability
Netlogon RPC Elevation of Privilege Vulnerability Affected products named by the advisory: Windows Server 2008 Service Pack 2; Windows Server 2008 R2 Service Pack 1; Windows Server 2008 R2 Service Pack 1 (Server Core installation); Windows Server 2008 Service Pack 2 (Server Core installation); and 9 more. Affected products named by the advisory: Windows Server 2012 (Server Core installation); Windows Server 2012 R2 (Server Core installation); Windows Server 2016 (Server Core installation); Windows Server 2019 (Server Core installation); and 1 more.
High [CVE-2022-37992] Windows Group Policy Elevation of Privilege Vulnerability
Windows Group Policy Elevation of Privilege Vulnerability Affected products named by the advisory: Windows Server 2008 Service Pack 2; Windows Server 2008 R2 Service Pack 1; Windows Server 2008 R2 Service Pack 1 (Server Core installation); Windows Server 2008 Service Pack 2 (Server Core installation); and 9 more. Affected products named by the advisory: Windows Server 2012 (Server Core installation); Windows Server 2012 R2 (Server Core installation); Windows Server 2016 (Server Core installation); Windows Server 2019 (Server Core installation); and 1 more.
High [CVE-2022-41100] Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability
Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability Affected products named by the advisory: Windows Server 2012 R2; Windows Server 2012 R2 (Server Core installation); Windows Server 2016; Windows Server 2016 (Server Core installation); and 3 more. Affected products named by the advisory: Windows Server 2019 (Server Core installation); Windows Server 2022.
High [CVE-2022-41058] Windows Network Address Translation (NAT) Denial of Service Vulnerability
Windows Network Address Translation (NAT) Denial of Service Vulnerability Affected products named by the advisory: Windows Server 2008 Service Pack 2; Windows Server 2008 R2 Service Pack 1; Windows Server 2008 R2 Service Pack 1 (Server Core installation); Windows Server 2008 Service Pack 2 (Server Core installation); and 9 more. Affected products named by the advisory: Windows Server 2012 (Server Core installation); Windows Server 2012 R2 (Server Core installation); Windows Server 2016 (Server Core installation); Windows Server 2019 (Server Core installation); and 1 more.
High [CVE-2022-41101] Windows Overlay Filter Elevation of Privilege Vulnerability
Windows Overlay Filter Elevation of Privilege Vulnerability Affected products named by the advisory: Windows Server 2016; Windows Server 2016 (Server Core installation); Windows Server 2019; Windows Server 2019 (Server Core installation); and 1 more. Affected products named by the advisory: Windows Server 2022.
High [CVE-2022-41078] Microsoft Exchange Server Spoofing Vulnerability
Microsoft Exchange Server Spoofing Vulnerability Affected products named by the advisory: Microsoft Exchange Server 2013 Cumulative Update 23; Microsoft Exchange Server 2016 Cumulative Update 22; Microsoft Exchange Server 2016 Cumulative Update 23; Microsoft Exchange Server 2019 Cumulative Update 11; and 1 more. Affected products named by the advisory: Microsoft Exchange Server 2019 Cumulative Update 12.
High [CVE-2022-41123] Microsoft Exchange Server Elevation of Privilege Vulnerability
Microsoft Exchange Server Elevation of Privilege Vulnerability Affected products named by the advisory: Microsoft Exchange Server 2016 Cumulative Update 22; Microsoft Exchange Server 2016 Cumulative Update 23; Microsoft Exchange Server 2019 Cumulative Update 11; Microsoft Exchange Server 2019 Cumulative Update 12.
High [CVE-2022-41080] Microsoft Exchange Server Elevation of Privilege Vulnerability
Microsoft Exchange Server Elevation of Privilege Vulnerability Affected products named by the advisory: Microsoft Exchange Server 2013 Cumulative Update 23; Microsoft Exchange Server 2016 Cumulative Update 22; Microsoft Exchange Server 2016 Cumulative Update 23; Microsoft Exchange Server 2019 Cumulative Update 11; and 1 more. Affected products named by the advisory: Microsoft Exchange Server 2019 Cumulative Update 12.
High [CVE-2022-41128] Windows Scripting Languages Remote Code Execution Vulnerability
Windows Scripting Languages Remote Code Execution Vulnerability Affected products named by the advisory: Windows Server 2008 R2 Service Pack 1; Windows Server 2012; Windows Server 2012 R2; Windows Server 2016; and 2 more. Affected products named by the advisory: Windows Server 2019; Windows Server 2022.
High [CVE-2022-37966] Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability
Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability Affected products named by the advisory: Windows Server 2008 Service Pack 2; Windows Server 2008 R2 Service Pack 1; Windows Server 2008 R2 Service Pack 1 (Server Core installation); Windows Server 2008 Service Pack 2 (Server Core installation); and 9 more. Affected products named by the advisory: Windows Server 2012 (Server Core installation); Windows Server 2012 R2 (Server Core installation); Windows Server 2016 (Server Core installation); Windows Server 2019 (Server Core installation); and 1 more.
High [CVE-2022-41039] Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability
Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability Affected products named by the advisory: Windows Server 2008 R2 Service Pack 1; Windows Server 2008 R2 Service Pack 1 (Server Core installation); Windows Server 2012; Windows Server 2012 (Server Core installation); and 7 more. Affected products named by the advisory: Windows Server 2012 R2 (Server Core installation); Windows Server 2016 (Server Core installation); Windows Server 2019 (Server Core installation); Windows Server 2022.
High [CVE-2022-41044] Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability
Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability Affected products named by the advisory: Windows Server 2008 Service Pack 2; Windows Server 2008 R2 Service Pack 1; Windows Server 2008 R2 Service Pack 1 (Server Core installation); Windows Server 2008 Service Pack 2 (Server Core installation).
High [CVE-2022-41088] Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability
Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability Affected products named by the advisory: Windows Server 2012; Windows Server 2012 (Server Core installation); Windows Server 2012 R2; Windows Server 2012 R2 (Server Core installation); and 5 more. Affected products named by the advisory: Windows Server 2016 (Server Core installation); Windows Server 2019 (Server Core installation); Windows Server 2022.
High [CVE-2022-41045] Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability
Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability Affected products named by the advisory: Windows Server 2008 Service Pack 2; Windows Server 2008 R2 Service Pack 1; Windows Server 2008 R2 Service Pack 1 (Server Core installation); Windows Server 2008 Service Pack 2 (Server Core installation); and 9 more. Affected products named by the advisory: Windows Server 2012 (Server Core installation); Windows Server 2012 R2 (Server Core installation); Windows Server 2016 (Server Core installation); Windows Server 2019 (Server Core installation); and 1 more.
High [CVE-2022-41092] Windows Win32k Elevation of Privilege Vulnerability
Windows Win32k Elevation of Privilege Vulnerability Affected product named by the advisory: Windows Server 2022.
High [CVE-2022-41050] Windows Extensible File Allocation Table Elevation of Privilege Vulnerability
Windows Extensible File Allocation Table Elevation of Privilege Vulnerability Affected products named by the advisory: Windows Server 2016; Windows Server 2016 (Server Core installation); Windows Server 2019; Windows Server 2019 (Server Core installation); and 1 more. Affected products named by the advisory: Windows Server 2022.
High [CVE-2022-41052] Windows Graphics Component Remote Code Execution Vulnerability
Windows Graphics Component Remote Code Execution Vulnerability Affected products named by the advisory: Windows Server 2016; Windows Server 2016 (Server Core installation); Windows Server 2019; Windows Server 2019 (Server Core installation); and 1 more. Affected products named by the advisory: Windows Server 2022.