# Vulnerabilities published in 2022


- [CVE-2022-38056](https://insights.sbomify.com/CVE-2022-38056/): Privilege escalation in Intel(R) EMA software (low 3.8)
- [CVE-2022-38055](https://insights.sbomify.com/CVE-2022-38055/): WordPress wpForo Forum plugin <= 2.0.9 - Auth. HTML Injection vulnerability (medium 4.3)
- [CVE-2022-38054](https://insights.sbomify.com/CVE-2022-38054/): Session Fixation (critical 9.8)
- [CVE-2022-38053](https://insights.sbomify.com/CVE-2022-38053/): Microsoft SharePoint Server Remote Code Execution Vulnerability (high 8.8)
- [CVE-2022-38051](https://insights.sbomify.com/CVE-2022-38051/): Windows Graphics Component Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2022-38050](https://insights.sbomify.com/CVE-2022-38050/): Win32k Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2022-3805](https://insights.sbomify.com/CVE-2022-3805/): Jeg Elementor Kit <= 2.5.6 - Unauthenticated Authorization Bypass (high 8.6)
- [CVE-2022-38049](https://insights.sbomify.com/CVE-2022-38049/): Microsoft Office Graphics Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-38048](https://insights.sbomify.com/CVE-2022-38048/): Microsoft Office Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-38047](https://insights.sbomify.com/CVE-2022-38047/): Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability (high 8.1)
- [CVE-2022-38046](https://insights.sbomify.com/CVE-2022-38046/): Web Account Manager Information Disclosure Vulnerability (high 7.5)
- [CVE-2022-38045](https://insights.sbomify.com/CVE-2022-38045/): Windows Server Service Elevation of Privilege Vulnerability (high 8.8)
- [CVE-2022-38044](https://insights.sbomify.com/CVE-2022-38044/): Windows CD-ROM File System Driver Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-38043](https://insights.sbomify.com/CVE-2022-38043/): Windows Security Support Provider Interface Information Disclosure Vulnerability (medium 5.5)
- [CVE-2022-38042](https://insights.sbomify.com/CVE-2022-38042/): Active Directory Domain Services Elevation of Privilege Vulnerability (high 7.1)
- [CVE-2022-38041](https://insights.sbomify.com/CVE-2022-38041/): Windows Secure Channel Denial of Service Vulnerability (high 7.5)
- [CVE-2022-38040](https://insights.sbomify.com/CVE-2022-38040/): Microsoft ODBC Driver Remote Code Execution Vulnerability (high 8.8)
- [CVE-2022-3804](https://insights.sbomify.com/CVE-2022-3804/): eolinker apinto-dashboard login cross site scripting (medium 4.3)
- [CVE-2022-38039](https://insights.sbomify.com/CVE-2022-38039/): Windows Kernel Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2022-38038](https://insights.sbomify.com/CVE-2022-38038/): Windows Kernel Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2022-38037](https://insights.sbomify.com/CVE-2022-38037/): Windows Kernel Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2022-38036](https://insights.sbomify.com/CVE-2022-38036/): Internet Key Exchange (IKE) Protocol Denial of Service Vulnerability (high 7.5)
- [CVE-2022-38034](https://insights.sbomify.com/CVE-2022-38034/): Windows Workstation Service Elevation of Privilege Vulnerability (high 8.8)
- [CVE-2022-38033](https://insights.sbomify.com/CVE-2022-38033/): Windows Server Remotely Accessible Registry Keys Information Disclosure Vulnerability (medium 6.5)
- [CVE-2022-38032](https://insights.sbomify.com/CVE-2022-38032/): Windows Portable Device Enumerator Service Security Feature Bypass Vulnerability (medium 6.6)
- [CVE-2022-38031](https://insights.sbomify.com/CVE-2022-38031/): Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability (high 8.8)
- [CVE-2022-38030](https://insights.sbomify.com/CVE-2022-38030/): Windows USB Serial Driver Information Disclosure Vulnerability (medium 4.3)
- [CVE-2022-3803](https://insights.sbomify.com/CVE-2022-3803/): eolinker apinto-dashboard cross site scripting (low 3.5)
- [CVE-2022-38029](https://insights.sbomify.com/CVE-2022-38029/): Windows ALPC Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2022-38028](https://insights.sbomify.com/CVE-2022-38028/): Microsoft Windows Print Spooler Privilege Escalation Vulnerability (high 7.8, exploited in the wild)
- [CVE-2022-38027](https://insights.sbomify.com/CVE-2022-38027/): Windows Storage Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2022-38026](https://insights.sbomify.com/CVE-2022-38026/): Windows DHCP Client Information Disclosure Vulnerability (medium 5.5)
- [CVE-2022-38025](https://insights.sbomify.com/CVE-2022-38025/): Windows Distributed File System (DFS) Information Disclosure Vulnerability (medium 5.5)
- [CVE-2022-38023](https://insights.sbomify.com/CVE-2022-38023/): Netlogon RPC Elevation of Privilege Vulnerability (high 8.1)
- [CVE-2022-38022](https://insights.sbomify.com/CVE-2022-38022/): Windows Kernel Elevation of Privilege Vulnerability (low 3.3)
- [CVE-2022-38021](https://insights.sbomify.com/CVE-2022-38021/): Connected User Experiences and Telemetry Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2022-38020](https://insights.sbomify.com/CVE-2022-38020/): Visual Studio Code Elevation of Privilege Vulnerability (high 7.3)
- [CVE-2022-3802](https://insights.sbomify.com/CVE-2022-3802/): IBAX go-ibax rowsInfo sql injection (medium 6.3)
- [CVE-2022-38019](https://insights.sbomify.com/CVE-2022-38019/): AV1 Video Extension Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-38017](https://insights.sbomify.com/CVE-2022-38017/): StorSimple 8000 Series Elevation of Privilege Vulnerability (medium 6.8)
- [CVE-2022-38016](https://insights.sbomify.com/CVE-2022-38016/): Windows Local Security Authority (LSA) Elevation of Privilege Vulnerability (high 8.8)
- [CVE-2022-38015](https://insights.sbomify.com/CVE-2022-38015/): Windows Hyper-V Denial of Service Vulnerability (medium 6.5)
- [CVE-2022-38014](https://insights.sbomify.com/CVE-2022-38014/): Windows Subsystem for Linux (WSL2) Kernel Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2022-38013](https://insights.sbomify.com/CVE-2022-38013/): .NET Core and Visual Studio Denial of Service Vulnerability (high 7.5)
- [CVE-2022-38012](https://insights.sbomify.com/CVE-2022-38012/): Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability (high 7.7)
- [CVE-2022-38011](https://insights.sbomify.com/CVE-2022-38011/): Raw Image Extension Remote Code Execution Vulnerability (high 7.3)
- [CVE-2022-38010](https://insights.sbomify.com/CVE-2022-38010/): Microsoft Office Visio Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-3801](https://insights.sbomify.com/CVE-2022-3801/): IBAX go-ibax rowsInfo sql injection (medium 6.3)
- [CVE-2022-38009](https://insights.sbomify.com/CVE-2022-38009/): Microsoft SharePoint Server Remote Code Execution Vulnerability (high 8.8)
- [CVE-2022-38008](https://insights.sbomify.com/CVE-2022-38008/): Microsoft SharePoint Server Remote Code Execution Vulnerability (high 8.8)
- [CVE-2022-38007](https://insights.sbomify.com/CVE-2022-38007/): Azure Guest Configuration and Azure Arc-enabled servers Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2022-38006](https://insights.sbomify.com/CVE-2022-38006/): Windows Graphics Component Information Disclosure Vulnerability (medium 6.5)
- [CVE-2022-38005](https://insights.sbomify.com/CVE-2022-38005/): Windows Print Spooler Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2022-38004](https://insights.sbomify.com/CVE-2022-38004/): Windows Fax Service Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-38003](https://insights.sbomify.com/CVE-2022-38003/): Windows Resilient File System Elevation of Privilege (high 7.8)
- [CVE-2022-38001](https://insights.sbomify.com/CVE-2022-38001/): Microsoft Office Spoofing Vulnerability (medium 6.5)
- [CVE-2022-38000](https://insights.sbomify.com/CVE-2022-38000/): Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability (high 8.1)
- [CVE-2022-3800](https://insights.sbomify.com/CVE-2022-3800/): IBAX go-ibax rowsInfo sql injection (medium 6.3)
- [CVE-2022-37999](https://insights.sbomify.com/CVE-2022-37999/): Windows Group Policy Preference Client Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2022-37998](https://insights.sbomify.com/CVE-2022-37998/): Windows Local Session Manager (LSM) Denial of Service Vulnerability (high 7.7)
- [CVE-2022-37997](https://insights.sbomify.com/CVE-2022-37997/): Windows Graphics Component Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2022-37996](https://insights.sbomify.com/CVE-2022-37996/): Windows Kernel Memory Information Disclosure Vulnerability (medium 5.5)
- [CVE-2022-37995](https://insights.sbomify.com/CVE-2022-37995/): Windows Kernel Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2022-37994](https://insights.sbomify.com/CVE-2022-37994/): Windows Group Policy Preference Client Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2022-37993](https://insights.sbomify.com/CVE-2022-37993/): Windows Group Policy Preference Client Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2022-37992](https://insights.sbomify.com/CVE-2022-37992/): Windows Group Policy Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2022-37991](https://insights.sbomify.com/CVE-2022-37991/): Windows Kernel Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2022-37990](https://insights.sbomify.com/CVE-2022-37990/): Windows Kernel Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2022-3799](https://insights.sbomify.com/CVE-2022-3799/): IBAX go-ibax tablesInfo sql injection (medium 6.3)
- [CVE-2022-37989](https://insights.sbomify.com/CVE-2022-37989/): Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2022-37988](https://insights.sbomify.com/CVE-2022-37988/): Windows Kernel Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2022-37987](https://insights.sbomify.com/CVE-2022-37987/): Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2022-37986](https://insights.sbomify.com/CVE-2022-37986/): Windows Win32k Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2022-37985](https://insights.sbomify.com/CVE-2022-37985/): Windows Graphics Component Information Disclosure Vulnerability (medium 5.5)
- [CVE-2022-37984](https://insights.sbomify.com/CVE-2022-37984/): Windows WLAN Service Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2022-37983](https://insights.sbomify.com/CVE-2022-37983/): Microsoft DWM Core Library Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2022-37982](https://insights.sbomify.com/CVE-2022-37982/): Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability (high 8.8)
- [CVE-2022-37981](https://insights.sbomify.com/CVE-2022-37981/): Windows Event Logging Service Denial of Service Vulnerability (medium 4.3)
- [CVE-2022-37980](https://insights.sbomify.com/CVE-2022-37980/): Windows DHCP Client Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2022-3798](https://insights.sbomify.com/CVE-2022-3798/): IBAX go-ibax tablesInfo sql injection (medium 6.3)
- [CVE-2022-37979](https://insights.sbomify.com/CVE-2022-37979/): Windows Hyper-V Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2022-37978](https://insights.sbomify.com/CVE-2022-37978/): Windows Active Directory Certificate Services Security Feature Bypass (high 7.5)
- [CVE-2022-37977](https://insights.sbomify.com/CVE-2022-37977/): Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability (medium 6.5)
- [CVE-2022-37976](https://insights.sbomify.com/CVE-2022-37976/): Active Directory Certificate Services Elevation of Privilege Vulnerability (high 8.8)
- [CVE-2022-37975](https://insights.sbomify.com/CVE-2022-37975/): Windows Group Policy Elevation of Privilege Vulnerability (high 8.8)
- [CVE-2022-37974](https://insights.sbomify.com/CVE-2022-37974/): Windows Mixed Reality Developer Tools Information Disclosure Vulnerability (medium 6.5)
- [CVE-2022-37973](https://insights.sbomify.com/CVE-2022-37973/): Windows Local Session Manager (LSM) Denial of Service Vulnerability (high 7.7)
- [CVE-2022-37972](https://insights.sbomify.com/CVE-2022-37972/): Microsoft Endpoint Configuration Manager Spoofing Vulnerability (high 7.5)
- [CVE-2022-37971](https://insights.sbomify.com/CVE-2022-37971/): Microsoft Windows Defender Elevation of Privilege Vulnerability (high 7.1)
- [CVE-2022-37970](https://insights.sbomify.com/CVE-2022-37970/): Windows DWM Core Library Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2022-3797](https://insights.sbomify.com/CVE-2022-3797/): eolinker apinto-dashboard login redirect (medium 6.3)
- [CVE-2022-37969](https://insights.sbomify.com/CVE-2022-37969/): Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation (high 7.8, exploited in the wild)
- [CVE-2022-37968](https://insights.sbomify.com/CVE-2022-37968/): Azure Arc-enabled Kubernetes cluster Connect Elevation of Privilege Vulnerability (critical 10.0)
- [CVE-2022-37967](https://insights.sbomify.com/CVE-2022-37967/): Windows Kerberos Elevation of Privilege Vulnerability (high 7.2)
- [CVE-2022-37966](https://insights.sbomify.com/CVE-2022-37966/): Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability (high 8.1)
- [CVE-2022-37965](https://insights.sbomify.com/CVE-2022-37965/): Windows Point-to-Point Tunneling Protocol Denial of Service Vulnerability (medium 5.9)
- [CVE-2022-37964](https://insights.sbomify.com/CVE-2022-37964/): Windows Kernel Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2022-37963](https://insights.sbomify.com/CVE-2022-37963/): Microsoft Office Visio Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-37962](https://insights.sbomify.com/CVE-2022-37962/): Microsoft PowerPoint Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-37961](https://insights.sbomify.com/CVE-2022-37961/): Microsoft SharePoint Server Remote Code Execution Vulnerability (high 8.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2022/page/267/