# Vulnerabilities published in 2022


- [CVE-2022-41064](https://insights.sbomify.com/CVE-2022-41064/): .NET Framework Information Disclosure Vulnerability (medium 5.8)
- [CVE-2022-41063](https://insights.sbomify.com/CVE-2022-41063/): Microsoft Excel Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-41062](https://insights.sbomify.com/CVE-2022-41062/): Microsoft SharePoint Server Remote Code Execution Vulnerability (high 8.8)
- [CVE-2022-41061](https://insights.sbomify.com/CVE-2022-41061/): Microsoft Word Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-41060](https://insights.sbomify.com/CVE-2022-41060/): Microsoft Word Information Disclosure Vulnerability (medium 5.5)
- [CVE-2022-4106](https://insights.sbomify.com/CVE-2022-4106/): Wholesale Market for WooCommerce < 1.0.7 - Unauthenticated Arbitrary File Download (high 7.5)
- [CVE-2022-41058](https://insights.sbomify.com/CVE-2022-41058/): Windows Network Address Translation (NAT) Denial of Service Vulnerability (high 7.5)
- [CVE-2022-41057](https://insights.sbomify.com/CVE-2022-41057/): Windows HTTP.sys Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2022-41056](https://insights.sbomify.com/CVE-2022-41056/): Network Policy Server (NPS) RADIUS Protocol Denial of Service Vulnerability (high 7.5)
- [CVE-2022-41055](https://insights.sbomify.com/CVE-2022-41055/): Windows Human Interface Device Information Disclosure Vulnerability (medium 5.5)
- [CVE-2022-41054](https://insights.sbomify.com/CVE-2022-41054/): Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2022-41053](https://insights.sbomify.com/CVE-2022-41053/): Windows Kerberos Denial of Service Vulnerability (high 7.5)
- [CVE-2022-41052](https://insights.sbomify.com/CVE-2022-41052/): Windows Graphics Component Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-41051](https://insights.sbomify.com/CVE-2022-41051/): Azure RTOS GUIX Studio Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-41050](https://insights.sbomify.com/CVE-2022-41050/): Windows Extensible File Allocation Table Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2022-4105](https://insights.sbomify.com/CVE-2022-4105/): Cross-site Scripting (XSS) - Stored in kiwitcms/kiwi (high 7.1)
- [CVE-2022-41049](https://insights.sbomify.com/CVE-2022-41049/): Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass (medium 5.4, exploited in the wild)
- [CVE-2022-41048](https://insights.sbomify.com/CVE-2022-41048/): Microsoft ODBC Driver Remote Code Execution Vulnerability (high 8.8)
- [CVE-2022-41047](https://insights.sbomify.com/CVE-2022-41047/): Microsoft ODBC Driver Remote Code Execution Vulnerability (high 8.8)
- [CVE-2022-41045](https://insights.sbomify.com/CVE-2022-41045/): Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2022-41044](https://insights.sbomify.com/CVE-2022-41044/): Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability (high 8.1)
- [CVE-2022-41043](https://insights.sbomify.com/CVE-2022-41043/): Microsoft Office Information Disclosure Vulnerability (low 3.3)
- [CVE-2022-41042](https://insights.sbomify.com/CVE-2022-41042/): Visual Studio Code Information Disclosure Vulnerability (high 7.4)
- [CVE-2022-41040](https://insights.sbomify.com/CVE-2022-41040/): Microsoft Exchange Server Server-Side Request Forgery (high 8.8, exploited in the wild)
- [CVE-2022-4104](https://insights.sbomify.com/CVE-2022-4104/): Denial of service in Dropbox Lepton (medium 5.5)
- [CVE-2022-41039](https://insights.sbomify.com/CVE-2022-41039/): Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability (high 8.1)
- [CVE-2022-41038](https://insights.sbomify.com/CVE-2022-41038/): Microsoft SharePoint Server Remote Code Execution Vulnerability (high 8.8)
- [CVE-2022-41037](https://insights.sbomify.com/CVE-2022-41037/): Microsoft SharePoint Server Remote Code Execution Vulnerability (high 8.8)
- [CVE-2022-41036](https://insights.sbomify.com/CVE-2022-41036/): Microsoft SharePoint Server Remote Code Execution Vulnerability (high 8.8)
- [CVE-2022-41035](https://insights.sbomify.com/CVE-2022-41035/): Microsoft Edge (Chromium-based) Spoofing Vulnerability (medium 5.3)
- [CVE-2022-41034](https://insights.sbomify.com/CVE-2022-41034/): Visual Studio Code Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-41033](https://insights.sbomify.com/CVE-2022-41033/): Microsoft Windows COM+ Event System Service Privilege Escalation (high 7.8, exploited in the wild)
- [CVE-2022-41032](https://insights.sbomify.com/CVE-2022-41032/): NuGet Client Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2022-41031](https://insights.sbomify.com/CVE-2022-41031/): Microsoft Word Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-41030](https://insights.sbomify.com/CVE-2022-41030/): Memory corruption in QUARTZ-GOLD (high 7.2)
- [CVE-2022-4103](https://insights.sbomify.com/CVE-2022-4103/): Royal Elementor Addons < 1.3.56 - Subscriber+ Arbitrary Post Creation (medium 4.3)
- [CVE-2022-41029](https://insights.sbomify.com/CVE-2022-41029/): Memory corruption in QUARTZ-GOLD (high 7.2)
- [CVE-2022-41028](https://insights.sbomify.com/CVE-2022-41028/): Memory corruption in QUARTZ-GOLD (high 7.2)
- [CVE-2022-41027](https://insights.sbomify.com/CVE-2022-41027/): Memory corruption in QUARTZ-GOLD (high 7.2)
- [CVE-2022-41026](https://insights.sbomify.com/CVE-2022-41026/): Memory corruption in QUARTZ-GOLD (high 7.2)
- [CVE-2022-41025](https://insights.sbomify.com/CVE-2022-41025/): Memory corruption in QUARTZ-GOLD (high 7.2)
- [CVE-2022-41024](https://insights.sbomify.com/CVE-2022-41024/): Memory corruption in QUARTZ-GOLD (high 7.2)
- [CVE-2022-41023](https://insights.sbomify.com/CVE-2022-41023/): Memory corruption in QUARTZ-GOLD (high 7.2)
- [CVE-2022-41022](https://insights.sbomify.com/CVE-2022-41022/): Memory corruption in QUARTZ-GOLD (high 7.2)
- [CVE-2022-41021](https://insights.sbomify.com/CVE-2022-41021/): Memory corruption in QUARTZ-GOLD (high 7.2)
- [CVE-2022-41020](https://insights.sbomify.com/CVE-2022-41020/): Memory corruption in QUARTZ-GOLD (high 7.2)
- [CVE-2022-4102](https://insights.sbomify.com/CVE-2022-4102/): Royal Elementor Addons < 1.3.56 - Subscriber+ Arbitrary Post Deletion (low 3.1)
- [CVE-2022-41019](https://insights.sbomify.com/CVE-2022-41019/): Memory corruption in QUARTZ-GOLD (high 7.2)
- [CVE-2022-41018](https://insights.sbomify.com/CVE-2022-41018/): Memory corruption in QUARTZ-GOLD (high 7.2)
- [CVE-2022-41017](https://insights.sbomify.com/CVE-2022-41017/): Memory corruption in QUARTZ-GOLD (high 7.2)
- [CVE-2022-41016](https://insights.sbomify.com/CVE-2022-41016/): Memory corruption in QUARTZ-GOLD (high 7.2)
- [CVE-2022-41015](https://insights.sbomify.com/CVE-2022-41015/): Memory corruption in QUARTZ-GOLD (high 7.2)
- [CVE-2022-41014](https://insights.sbomify.com/CVE-2022-41014/): Memory corruption in QUARTZ-GOLD (high 7.2)
- [CVE-2022-41013](https://insights.sbomify.com/CVE-2022-41013/): Memory corruption in QUARTZ-GOLD (high 7.2)
- [CVE-2022-41012](https://insights.sbomify.com/CVE-2022-41012/): Memory corruption in QUARTZ-GOLD (high 7.2)
- [CVE-2022-41011](https://insights.sbomify.com/CVE-2022-41011/): Memory corruption in QUARTZ-GOLD (high 7.2)
- [CVE-2022-41010](https://insights.sbomify.com/CVE-2022-41010/): Memory corruption in QUARTZ-GOLD (high 7.2)
- [CVE-2022-4101](https://insights.sbomify.com/CVE-2022-4101/): Images Optimize and Upload CF7 <= 2.1.4 - Unauthenticated Arbitrary File Deletion (critical 9.1)
- [CVE-2022-41009](https://insights.sbomify.com/CVE-2022-41009/): Memory corruption in QUARTZ-GOLD (high 7.2)
- [CVE-2022-41008](https://insights.sbomify.com/CVE-2022-41008/): Memory corruption in QUARTZ-GOLD (high 7.2)
- [CVE-2022-41007](https://insights.sbomify.com/CVE-2022-41007/): Memory corruption in QUARTZ-GOLD (high 7.2)
- [CVE-2022-41006](https://insights.sbomify.com/CVE-2022-41006/): Memory corruption in QUARTZ-GOLD (high 7.2)
- [CVE-2022-41005](https://insights.sbomify.com/CVE-2022-41005/): Memory corruption in QUARTZ-GOLD (high 7.2)
- [CVE-2022-41004](https://insights.sbomify.com/CVE-2022-41004/): Memory corruption in QUARTZ-GOLD (high 7.2)
- [CVE-2022-41003](https://insights.sbomify.com/CVE-2022-41003/): Memory corruption in QUARTZ-GOLD (high 7.2)
- [CVE-2022-41002](https://insights.sbomify.com/CVE-2022-41002/): Memory corruption in QUARTZ-GOLD (high 7.2)
- [CVE-2022-41001](https://insights.sbomify.com/CVE-2022-41001/): Memory corruption in QUARTZ-GOLD (high 7.2)
- [CVE-2022-41000](https://insights.sbomify.com/CVE-2022-41000/): Memory corruption in QUARTZ-GOLD (high 7.2)
- [CVE-2022-4100](https://insights.sbomify.com/CVE-2022-4100/): WP Cerber Security <= 9.4 - IP Protection Bypass (medium 5.3)
- [CVE-2022-40999](https://insights.sbomify.com/CVE-2022-40999/): Memory corruption in QUARTZ-GOLD (high 7.2)
- [CVE-2022-40998](https://insights.sbomify.com/CVE-2022-40998/): Memory corruption in QUARTZ-GOLD (high 7.2)
- [CVE-2022-40997](https://insights.sbomify.com/CVE-2022-40997/): Memory corruption in QUARTZ-GOLD (high 7.2)
- [CVE-2022-40996](https://insights.sbomify.com/CVE-2022-40996/): Memory corruption in QUARTZ-GOLD (high 7.2)
- [CVE-2022-40995](https://insights.sbomify.com/CVE-2022-40995/): Memory corruption in QUARTZ-GOLD (high 7.2)
- [CVE-2022-40994](https://insights.sbomify.com/CVE-2022-40994/): Memory corruption in QUARTZ-GOLD (high 7.2)
- [CVE-2022-40993](https://insights.sbomify.com/CVE-2022-40993/): Memory corruption in QUARTZ-GOLD (high 7.2)
- [CVE-2022-40992](https://insights.sbomify.com/CVE-2022-40992/): Memory corruption in QUARTZ-GOLD (high 7.2)
- [CVE-2022-40991](https://insights.sbomify.com/CVE-2022-40991/): Memory corruption in QUARTZ-GOLD (high 7.2)
- [CVE-2022-40990](https://insights.sbomify.com/CVE-2022-40990/): Memory corruption in QUARTZ-GOLD (high 7.2)
- [CVE-2022-4099](https://insights.sbomify.com/CVE-2022-4099/): Joy Of Text Lite < 2.3.1 - Unauthenticated SQLi (critical 9.8)
- [CVE-2022-40989](https://insights.sbomify.com/CVE-2022-40989/): Memory corruption in QUARTZ-GOLD (high 7.2)
- [CVE-2022-40988](https://insights.sbomify.com/CVE-2022-40988/): Memory corruption in QUARTZ-GOLD (high 7.2)
- [CVE-2022-40987](https://insights.sbomify.com/CVE-2022-40987/): Memory corruption in QUARTZ-GOLD (high 7.2)
- [CVE-2022-40986](https://insights.sbomify.com/CVE-2022-40986/): Memory corruption in QUARTZ-GOLD (high 7.2)
- [CVE-2022-40985](https://insights.sbomify.com/CVE-2022-40985/): Memory corruption in QUARTZ-GOLD (high 7.2)
- [CVE-2022-40984](https://insights.sbomify.com/CVE-2022-40984/): Memory corruption in WTViewerE series (critical 9.8)
- [CVE-2022-40983](https://insights.sbomify.com/CVE-2022-40983/): Integer overflow in Qt (high 8.8)
- [CVE-2022-40982](https://insights.sbomify.com/CVE-2022-40982/): Information disclosure in Intel(R) Processors (medium 6.5)
- [CVE-2022-40981](https://insights.sbomify.com/CVE-2022-40981/): ETIC Telecom Remote Access Server Unrestricted Upload of File with Dangerous Type (medium 5.9)
- [CVE-2022-40980](https://insights.sbomify.com/CVE-2022-40980/): Missing authorization in Trend Micro Mobile Security for Enterprise (critical 9.1)
- [CVE-2022-4098](https://insights.sbomify.com/CVE-2022-4098/): Wiesemann & Theis: Multiple products prone to missing authentication through spoofing (high 8.0)
- [CVE-2022-40979](https://insights.sbomify.com/CVE-2022-40979/): Information disclosure in TeamCity (medium 4.4)
- [CVE-2022-40978](https://insights.sbomify.com/CVE-2022-40978/): Other in IntelliJ IDEA (high 7.5)
- [CVE-2022-40977](https://insights.sbomify.com/CVE-2022-40977/): PILZ: PASvisu and PMI affected by ZipSlip (high 7.5)
- [CVE-2022-40976](https://insights.sbomify.com/CVE-2022-40976/): PILZ: Multiple products affected by ZipSlip (medium 5.5)
- [CVE-2022-40975](https://insights.sbomify.com/CVE-2022-40975/): WordPress Post Slider plugin <= 1.6.7 - Broken Access Control vulnerability (medium 5.4)
- [CVE-2022-40974](https://insights.sbomify.com/CVE-2022-40974/): Information disclosure in Intel(R) IPP Cryptography software (low 1.8)
- [CVE-2022-40972](https://insights.sbomify.com/CVE-2022-40972/): Privilege escalation in Intel(R) QAT drivers for Windows (medium 6.7)
- [CVE-2022-40971](https://insights.sbomify.com/CVE-2022-40971/): Misconfiguration in Intel(R) HDMI Firmware Update Tool for NUC (medium 6.7)
- [CVE-2022-4097](https://insights.sbomify.com/CVE-2022-4097/): All In One WP Security & Firewall < 5.0.8 - IP Spoofing (medium 5.3)

---
From sbomify Insights: https://insights.sbomify.com/years/2022/page/246/