Security
Headlines
HeadlinesLatestCVEs

Tag

#microsoft

CVE-2022-21965: Microsoft Teams Denial of Service Vulnerability

**How do I get the update for Microsoft Teams for iOS?** 1. Tap the **Settings** icon 2. Tap the\*\* iTunes & App Store\*\* 3. Turn on AUTOMATIC DOWNLOADS for Apps **Alternatively** 1. Tap the\*\* App Store\*\* icon 2. Scroll down to find Microsoft Teams 3. Tap the **Update** button

Microsoft Security Response Center
#vulnerability#ios#microsoft#dos#Microsoft Teams#Security Vulnerability
CVE-2022-22005: Microsoft SharePoint Server Remote Code Execution Vulnerability

**What privileges are required to exploit this vulnerability?** The attacker must be authenticated and possess the permissions for page creation to be able to exploit this vulnerability.

CVE-2022-23276: SQL Server for Linux Containers Elevation of Privilege Vulnerability

**If I'm running SQL Server 2019 on premise, am I vulnerable to this CVE?** This vulnerability only exists in the containerized version of SQL Server 2019 for Linux. If you are running that version, Microsoft recommends applying the update.

CVE-2022-22716: Microsoft Excel Information Disclosure Vulnerability

**What type of information could be disclosed by this vulnerability?** The type of information that could be disclosed if an attacker successfully exploited this vulnerability is uninitialized memory.

CVE-2022-21968: Microsoft SharePoint Server Security Feature BypassVulnerability

**What privileges are required to exploit this vulnerability?** The attacker needs read access to the target site within SharePoint.

CVE-2022-21957: Microsoft Dynamics 365 (on-premises) Remote Code Execution Vulnerability

**Are the updates for the Microsoft Dynamics 365 (on-premises) versions listed in this vulnerability currently available?** The security update for Microsoft Dynamics 365 (on-premises) version 8.2 and Microsoft Dynamics 365 (on-premises) version 9.1 are not immediately available. The updates will be released as soon as possible, and when they are available, customers will be notified via a revision to this CVE information.

CVE-2022-23262

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

CVE-2022-23261

Microsoft Edge (Chromium-based) Tampering Vulnerability