Security
Headlines
HeadlinesLatestCVEs

Tag

#microsoft

CVE-2022-23276: SQL Server for Linux Containers Elevation of Privilege Vulnerability

**If I'm running SQL Server 2019 on premise, am I vulnerable to this CVE?** This vulnerability only exists in the containerized version of SQL Server 2019 for Linux. If you are running that version, Microsoft recommends applying the update.

Microsoft Security Response Center
#sql#vulnerability#microsoft#linux#SQL Server#Security Vulnerability
CVE-2022-22716: Microsoft Excel Information Disclosure Vulnerability

**What type of information could be disclosed by this vulnerability?** The type of information that could be disclosed if an attacker successfully exploited this vulnerability is uninitialized memory.

CVE-2022-21968: Microsoft SharePoint Server Security Feature BypassVulnerability

**What privileges are required to exploit this vulnerability?** The attacker needs read access to the target site within SharePoint.

CVE-2022-21957: Microsoft Dynamics 365 (on-premises) Remote Code Execution Vulnerability

**Are the updates for the Microsoft Dynamics 365 (on-premises) versions listed in this vulnerability currently available?** The security update for Microsoft Dynamics 365 (on-premises) version 8.2 and Microsoft Dynamics 365 (on-premises) version 9.1 are not immediately available. The updates will be released as soon as possible, and when they are available, customers will be notified via a revision to this CVE information.

CVE-2022-23262

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

CVE-2022-23261

Microsoft Edge (Chromium-based) Tampering Vulnerability

CVE-2022-23263

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

CVE-2022-23263

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability. This CVE ID is unique from CVE-2022-23262.

CVE-2022-23262

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability. This CVE ID is unique from CVE-2022-23263.