# Vulnerabilities published in 2022


- [CVE-2022-24528](https://insights.sbomify.com/CVE-2022-24528/): Remote Procedure Call Runtime Remote Code Execution Vulnerability (high 8.8)
- [CVE-2022-24527](https://insights.sbomify.com/CVE-2022-24527/): Microsoft Endpoint Configuration Manager Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2022-24526](https://insights.sbomify.com/CVE-2022-24526/): Visual Studio Code Spoofing Vulnerability (medium 6.1)
- [CVE-2022-24525](https://insights.sbomify.com/CVE-2022-24525/): Windows Update Stack Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2022-24523](https://insights.sbomify.com/CVE-2022-24523/): Microsoft Edge (Chromium-based) Spoofing Vulnerability (medium 4.3)
- [CVE-2022-24522](https://insights.sbomify.com/CVE-2022-24522/): Skype Extension for Chrome Information Disclosure Vulnerability (medium 6.5)
- [CVE-2022-24521](https://insights.sbomify.com/CVE-2022-24521/): Microsoft Windows CLFS Driver Privilege Escalation (high 7.8, exploited in the wild)
- [CVE-2022-24520](https://insights.sbomify.com/CVE-2022-24520/): Azure Site Recovery Remote Code Execution Vulnerability (high 7.2)
- [CVE-2022-24519](https://insights.sbomify.com/CVE-2022-24519/): Azure Site Recovery Elevation of Privilege Vulnerability (medium 6.5)
- [CVE-2022-24518](https://insights.sbomify.com/CVE-2022-24518/): Azure Site Recovery Elevation of Privilege Vulnerability (medium 6.5)
- [CVE-2022-24517](https://insights.sbomify.com/CVE-2022-24517/): Azure Site Recovery Remote Code Execution Vulnerability (high 7.2)
- [CVE-2022-24516](https://insights.sbomify.com/CVE-2022-24516/): Microsoft Exchange Server Elevation of Privilege Vulnerability (high 8.0)
- [CVE-2022-24515](https://insights.sbomify.com/CVE-2022-24515/): Azure Site Recovery Elevation of Privilege Vulnerability (medium 6.5)
- [CVE-2022-24513](https://insights.sbomify.com/CVE-2022-24513/): Visual Studio Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2022-24512](https://insights.sbomify.com/CVE-2022-24512/): .NET and Visual Studio Remote Code Execution Vulnerability (medium 6.3)
- [CVE-2022-24511](https://insights.sbomify.com/CVE-2022-24511/): Microsoft Office Word Tampering Vulnerability (medium 5.5)
- [CVE-2022-24510](https://insights.sbomify.com/CVE-2022-24510/): Microsoft Office Visio Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-24509](https://insights.sbomify.com/CVE-2022-24509/): Microsoft Office Visio Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-24508](https://insights.sbomify.com/CVE-2022-24508/): Win32 File Enumeration Remote Code Execution Vulnerability (high 8.8)
- [CVE-2022-24507](https://insights.sbomify.com/CVE-2022-24507/): Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2022-24506](https://insights.sbomify.com/CVE-2022-24506/): Azure Site Recovery Elevation of Privilege Vulnerability (medium 6.5)
- [CVE-2022-24505](https://insights.sbomify.com/CVE-2022-24505/): Windows ALPC Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2022-24504](https://insights.sbomify.com/CVE-2022-24504/): Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability (high 8.1)
- [CVE-2022-24503](https://insights.sbomify.com/CVE-2022-24503/): Remote Desktop Protocol Client Information Disclosure Vulnerability (medium 5.4)
- [CVE-2022-24502](https://insights.sbomify.com/CVE-2022-24502/): Windows HTML Platforms Security Feature Bypass Vulnerability (medium 4.3)
- [CVE-2022-24501](https://insights.sbomify.com/CVE-2022-24501/): VP9 Video Extensions Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-24500](https://insights.sbomify.com/CVE-2022-24500/): Windows SMB Remote Code Execution Vulnerability (high 8.8)
- [CVE-2022-2450](https://insights.sbomify.com/CVE-2022-2450/): reSmush.it Image Optimizer < 0.4.4 - Subscriber+ AJAX Calls (medium 4.3)
- [CVE-2022-24499](https://insights.sbomify.com/CVE-2022-24499/): Windows Installer Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2022-24498](https://insights.sbomify.com/CVE-2022-24498/): Windows iSCSI Target Service Information Disclosure Vulnerability (medium 6.5)
- [CVE-2022-24497](https://insights.sbomify.com/CVE-2022-24497/): Windows Network File System Remote Code Execution Vulnerability (critical 9.8)
- [CVE-2022-24496](https://insights.sbomify.com/CVE-2022-24496/): Windows Local Security Authority (LSA) Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2022-24495](https://insights.sbomify.com/CVE-2022-24495/): Windows Direct Show Remote Code Execution Vulnerability (high 7.0)
- [CVE-2022-24494](https://insights.sbomify.com/CVE-2022-24494/): Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2022-24493](https://insights.sbomify.com/CVE-2022-24493/): Microsoft Local Security Authority (LSA) Server Information Disclosure Vulnerability (medium 5.5)
- [CVE-2022-24492](https://insights.sbomify.com/CVE-2022-24492/): Remote Procedure Call Runtime Remote Code Execution Vulnerability (high 8.8)
- [CVE-2022-24491](https://insights.sbomify.com/CVE-2022-24491/): Windows Network File System Remote Code Execution Vulnerability (critical 9.8)
- [CVE-2022-24490](https://insights.sbomify.com/CVE-2022-24490/): Windows Hyper-V Shared Virtual Hard Disks Information Disclosure Vulnerability (high 8.1)
- [CVE-2022-2449](https://insights.sbomify.com/CVE-2022-2449/): reSmush.it Image Optimizer < 0.4.7 - Multiple CSRF (medium 6.5)
- [CVE-2022-24489](https://insights.sbomify.com/CVE-2022-24489/): Cluster Client Failover (CCF) Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2022-24488](https://insights.sbomify.com/CVE-2022-24488/): Windows Desktop Bridge Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2022-24487](https://insights.sbomify.com/CVE-2022-24487/): Windows Local Security Authority Subsystem Service (LSASS) Remote Code Execution Vulnerability (high 8.8)
- [CVE-2022-24486](https://insights.sbomify.com/CVE-2022-24486/): Windows Kerberos Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2022-24485](https://insights.sbomify.com/CVE-2022-24485/): Win32 File Enumeration Remote Code Execution Vulnerability (high 7.5)
- [CVE-2022-24484](https://insights.sbomify.com/CVE-2022-24484/): Windows Cluster Shared Volume (CSV) Denial of Service Vulnerability (medium 5.5)
- [CVE-2022-24483](https://insights.sbomify.com/CVE-2022-24483/): Windows Kernel Information Disclosure Vulnerability (medium 5.5)
- [CVE-2022-24482](https://insights.sbomify.com/CVE-2022-24482/): Windows ALPC Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2022-24481](https://insights.sbomify.com/CVE-2022-24481/): Windows Common Log File System Driver Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2022-24480](https://insights.sbomify.com/CVE-2022-24480/): Outlook for Android Elevation of Privilege Vulnerability (medium 6.3)
- [CVE-2022-2448](https://insights.sbomify.com/CVE-2022-2448/): reSmush.it Image Optimizer < 0.4.6 - Admin+ Cross-Site Scripting (medium 4.8)
- [CVE-2022-24479](https://insights.sbomify.com/CVE-2022-24479/): Connected User Experiences and Telemetry Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2022-24477](https://insights.sbomify.com/CVE-2022-24477/): Microsoft Exchange Server Elevation of Privilege Vulnerability (high 8.0)
- [CVE-2022-24475](https://insights.sbomify.com/CVE-2022-24475/): Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability (high 8.3)
- [CVE-2022-24474](https://insights.sbomify.com/CVE-2022-24474/): Windows Win32k Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2022-24473](https://insights.sbomify.com/CVE-2022-24473/): Microsoft Excel Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-24472](https://insights.sbomify.com/CVE-2022-24472/): Microsoft SharePoint Server Spoofing Vulnerability (high 8.0)
- [CVE-2022-24471](https://insights.sbomify.com/CVE-2022-24471/): Azure Site Recovery Remote Code Execution Vulnerability (high 7.2)
- [CVE-2022-24470](https://insights.sbomify.com/CVE-2022-24470/): Azure Site Recovery Remote Code Execution Vulnerability (high 7.2)
- [CVE-2022-2447](https://insights.sbomify.com/CVE-2022-2447/): Security feature bypass in openstack-keystone (medium 6.6)
- [CVE-2022-24469](https://insights.sbomify.com/CVE-2022-24469/): Azure Site Recovery Elevation of Privilege Vulnerability (high 8.1)
- [CVE-2022-24468](https://insights.sbomify.com/CVE-2022-24468/): Azure Site Recovery Remote Code Execution Vulnerability (high 7.2)
- [CVE-2022-24467](https://insights.sbomify.com/CVE-2022-24467/): Azure Site Recovery Remote Code Execution Vulnerability (high 7.2)
- [CVE-2022-24466](https://insights.sbomify.com/CVE-2022-24466/): Windows Hyper-V Security Feature Bypass Vulnerability (medium 4.1)
- [CVE-2022-24465](https://insights.sbomify.com/CVE-2022-24465/): Microsoft Intune Portal for iOS Security Feature Bypass Vulnerability (low 3.3)
- [CVE-2022-24464](https://insights.sbomify.com/CVE-2022-24464/): .NET and Visual Studio Denial of Service Vulnerability (high 7.5)
- [CVE-2022-24463](https://insights.sbomify.com/CVE-2022-24463/): Microsoft Exchange Server Spoofing Vulnerability (medium 6.5)
- [CVE-2022-24462](https://insights.sbomify.com/CVE-2022-24462/): Microsoft Word Security Feature Bypass Vulnerability (medium 5.5)
- [CVE-2022-24461](https://insights.sbomify.com/CVE-2022-24461/): Microsoft Office Visio Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-24460](https://insights.sbomify.com/CVE-2022-24460/): Tablet Windows User Interface Application Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2022-2446](https://insights.sbomify.com/CVE-2022-2446/): WP Editor <= 1.2.9 - Authenticated (Admin+) PHAR Deserialization (high 7.2)
- [CVE-2022-24459](https://insights.sbomify.com/CVE-2022-24459/): Windows Fax and Scan Service Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2022-24457](https://insights.sbomify.com/CVE-2022-24457/): HEIF Image Extensions Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-24456](https://insights.sbomify.com/CVE-2022-24456/): HEVC Video Extensions Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-24455](https://insights.sbomify.com/CVE-2022-24455/): Windows CD-ROM Driver Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2022-24454](https://insights.sbomify.com/CVE-2022-24454/): Windows Security Support Provider Interface Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2022-24453](https://insights.sbomify.com/CVE-2022-24453/): HEVC Video Extensions Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-24452](https://insights.sbomify.com/CVE-2022-24452/): HEVC Video Extensions Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-24451](https://insights.sbomify.com/CVE-2022-24451/): VP9 Video Extensions Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-24450](https://insights.sbomify.com/CVE-2022-24450/): Incorrect Authorization in NATS nats-server (high 8.8)
- [CVE-2022-24449](https://insights.sbomify.com/CVE-2022-24449/): XML external entity in rt-solar:solar appscreener (critical 9.8)
- [CVE-2022-24448](https://insights.sbomify.com/CVE-2022-24448/): Information disclosure in debian:debian linux (low 3.3)
- [CVE-2022-24447](https://insights.sbomify.com/CVE-2022-24447/): Missing authorization in zohocorp:manageengine key manager plus (medium 6.5)
- [CVE-2022-24446](https://insights.sbomify.com/CVE-2022-24446/): Missing authorization in zohocorp:manageengine key manager plus (medium 4.3)
- [CVE-2022-24444](https://insights.sbomify.com/CVE-2022-24444/): Hybridsessions does not expire session id on logout (medium 6.5)
- [CVE-2022-24442](https://insights.sbomify.com/CVE-2022-24442/): Code injection in jetbrains:youtrack (critical 9.8)
- [CVE-2022-24441](https://insights.sbomify.com/CVE-2022-24441/): Code Injection (medium 5.8)
- [CVE-2022-24440](https://insights.sbomify.com/CVE-2022-24440/): Command Injection (high 8.1)
- [CVE-2022-2444](https://insights.sbomify.com/CVE-2022-2444/): Visualizer: Tables and Charts Manager for WordPress <= 3.7.9 - Authenticated (Contributor+) PHAR Deserialization (high 8.8)
- [CVE-2022-24439](https://insights.sbomify.com/CVE-2022-24439/): Remote Code Execution (RCE) (high 8.1)
- [CVE-2022-24437](https://insights.sbomify.com/CVE-2022-24437/): Command Injection (critical 9.8)
- [CVE-2022-24436](https://insights.sbomify.com/CVE-2022-24436/): Information disclosure in Intel(R) Processors (medium 6.5)
- [CVE-2022-24435](https://insights.sbomify.com/CVE-2022-24435/): Cross-site scripting in phpUploader (medium 6.1)
- [CVE-2022-24434](https://insights.sbomify.com/CVE-2022-24434/): Denial of Service (DoS) (high 7.5)
- [CVE-2022-24433](https://insights.sbomify.com/CVE-2022-24433/): Command Injection (high 8.1)
- [CVE-2022-24432](https://insights.sbomify.com/CVE-2022-24432/): ICSA-22-062-01 IPCOMM ipDIO (medium 5.5)
- [CVE-2022-24431](https://insights.sbomify.com/CVE-2022-24431/): Command Injection (high 7.4)
- [CVE-2022-2443](https://insights.sbomify.com/CVE-2022-2443/): FreeMind WP Browser <= 1.2 - Cross-Site Request Forgery to Cross-Site Scripting (high 8.8)
- [CVE-2022-24429](https://insights.sbomify.com/CVE-2022-24429/): Arbitrary Code Injection (high 7.5)
- [CVE-2022-24428](https://insights.sbomify.com/CVE-2022-24428/): Privilege escalation in PowerScale OneFS (medium 6.3)
- [CVE-2022-24426](https://insights.sbomify.com/CVE-2022-24426/): Privilege escalation in Dell Command Update (DCU) (high 7.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2022/page/373/