Microsoft Windows Server 2022

Windows Kernel Elevation of Privilege Vulnerability

Windows Key Guard Elevation of Privilege Vulnerability

Windows Cryptographic Services Information Disclosure Vulnerability

Virtual Hard Disk (VHD) Miniport Driver Remote Code Execution Vulnerability

Windows Network Connections Service Elevation of Privilege Vulnerability

Windows Win32k Elevation of Privilege Vulnerability

Windows Push Notifications Elevation of Privilege Vulnerability

Windows Push Notifications Elevation of Privilege Vulnerability

Windows Push Notifications Elevation of Privilege Vulnerability

Windows Push Notifications Elevation of Privilege Vulnerability

Windows Wireless Network Manager Elevation of Privilege Vulnerability

Windows User Interface Core Elevation of Privilege Vulnerability

Windows User Interface Core Elevation of Privilege Vulnerability

Windows User Interface Core Elevation of Privilege Vulnerability

Windows Push Notifications Elevation of Privilege Vulnerability

Windows Push Notifications Elevation of Privilege Vulnerability

Windows Push Notifications Elevation of Privilege Vulnerability

Windows Push Notifications Elevation of Privilege Vulnerability

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

Windows User Interface Core Elevation of Privilege Vulnerability

Windows Management Services Elevation of Privilege Vulnerability

A CWE-732: Incorrect Permission Assignment for Critical Resource vulnerability exists that could cause local privilege escalation when a local attacker modifies the webroot directory. Affected Products: APC Easy UPS Online Monitoring Software (Windows 7, 10, 11 & Windows Server 2016, 2019, 2022 - Versions prior to V2.5-GA), APC Easy UPS Online Monitoring Software (Windows 11, Windows Server 2019, 2022 - Versions prior to V2.5-GA-01-22261), Schneider Electric Easy UPS Online Monitoring Software (Windows 7, 10, 11 & Windows Server 2016, 2019, 2022 - Versions prior to V2.5-GS), Schneider Electric Easy UPS Online Monitoring Software (Windows 11, Windows Server 2019, 2022 - Versions prior to V2.5-GS-01-22261)

A CWE-798: Use of Hard-coded Credentials vulnerability exists that could cause local privilege escalation when local attacker connects to the database. Affected Products: APC Easy UPS Online Monitoring Software (Windows 7, 10, 11 & Windows Server 2016, 2019, 2022 - Versions prior to V2.5-GA), APC Easy UPS Online Monitoring Software (Windows 11, Windows Server 2019, 2022 - Versions prior to V2.5-GA-01-22261), Schneider Electric Easy UPS Online Monitoring Software (Windows 7, 10, 11 & Windows Server 2016, 2019, 2022 - Versions prior to V2.5-GS), Schneider Electric Easy UPS Online Monitoring Software (Windows 11, Windows Server 2019, 2022 - Versions prior to V2.5-GS-01-22261)

Windows Local Session Manager (LSM) Denial of Service Vulnerability

Windows Local Session Manager (LSM) Denial of Service Vulnerability

Windows Network Address Translation (NAT) Denial of Service Vulnerability

Data Sharing Service Spoofing Vulnerability

Windows Hello Tampering Vulnerability

Windows Hello Tampering Vulnerability

Microsoft Virtual Machine Bus (VMBus) Remote Code Execution Vulnerability

Windows BitLocker Security Feature Bypass Vulnerability

Windows SmartScreen Security Feature Bypass Vulnerability

Windows File History Remote Code Execution Vulnerability

Windows Server Service Security Feature Bypass Vulnerability

The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.

Certain DNSSEC aspects of the DNS protocol (in RFC 4033, 4034, 4035, 6840, and related RFCs) allow remote attackers to cause a denial of service (CPU consumption) via one or more DNSSEC responses, aka the "KeyTrap" issue. One of the concerns is that, when there is a zone with many DNSKEY and RRSIG records, the protocol specification implies that an algorithm must evaluate all combinations of DNSKEY and RRSIG records.

Windows Search Remote Code Execution Vulnerability

.NET Framework Information Disclosure Vulnerability

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability