CVE Database and Vulnerability Search
Search CVE and GHSA vulnerability records by identifier, title, vendor, product, package, or CWE. Filter by severity, CISA KEV, ransomware association, linked artifacts, and Nuclei templates; sort by publication date, CVSS, or EPSS.
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2022-35759MEDIUM | Windows Local Security Authority (LSA) Denial of Service VulnerabilityWindows Local Security Authority (LSA) Denial of Service Vulnerability May 31, 2023 | CVSS6.5v3.1 | EPSS1.7% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2022-35758MEDIUM | Windows Kernel Memory Information Disclosure VulnerabilityWindows Kernel Memory Information Disclosure Vulnerability May 31, 2023 | CVSS5.5v3.1 | EPSS0.497% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2022-35756HIGH | Windows Kerberos Elevation of Privilege VulnerabilityWindows Kerberos Elevation of Privilege Vulnerability May 31, 2023 | CVSS7.8v3.1 | EPSS11.3% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2022-35755HIGH | Windows Print Spooler Elevation of Privilege VulnerabilityWindows Print Spooler Elevation of Privilege Vulnerability May 31, 2023 | CVSS7.3v3.1 | EPSS9.8% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2022-35754MEDIUM | Unified Write Filter Elevation of Privilege VulnerabilityUnified Write Filter Elevation of Privilege Vulnerability May 31, 2023 | CVSS6.7v3.1 | EPSS0.41% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2022-35753HIGH | Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution VulnerabilityWindows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability May 31, 2023 | CVSS8.1v3.1 | EPSS1.23% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2022-35752HIGH | Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution VulnerabilityWindows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability May 31, 2023 | CVSS8.1v3.1 | EPSS1.23% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2022-35751HIGH | Windows Hyper-V Elevation of Privilege VulnerabilityWindows Hyper-V Elevation of Privilege Vulnerability May 31, 2023 | CVSS7.8v3.1 | EPSS5.46% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2022-35750HIGH | Win32k Elevation of Privilege VulnerabilityWin32k Elevation of Privilege Vulnerability May 31, 2023 | CVSS7.8v3.1 | EPSS6.48% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2022-35749HIGH | Windows Digital Media Receiver Elevation of Privilege VulnerabilityWindows Digital Media Receiver Elevation of Privilege Vulnerability May 31, 2023 | CVSS7.8v3.1 | EPSS0.545% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2022-35747MEDIUM | Windows Point-to-Point Protocol (PPP) Denial of Service VulnerabilityWindows Point-to-Point Protocol (PPP) Denial of Service Vulnerability May 31, 2023 | CVSS5.9v3.1 | EPSS1.68% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2022-35746HIGH | Windows Digital Media Receiver Elevation of Privilege VulnerabilityWindows Digital Media Receiver Elevation of Privilege Vulnerability May 31, 2023 | CVSS7.8v3.1 | EPSS0.545% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2022-35745HIGH | Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution VulnerabilityWindows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability May 31, 2023 | CVSS8.1v3.1 | EPSS1.23% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2022-35744CRITICAL | Windows Point-to-Point Protocol (PPP) Remote Code Execution VulnerabilityWindows Point-to-Point Protocol (PPP) Remote Code Execution Vulnerability May 31, 2023 | CVSS9.8v3.1 | EPSS1.98% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2022-35743HIGH | Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution VulnerabilityMicrosoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability CWE-94May 31, 2023 | CVSS7.8v3.1 | EPSS1.45% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2023-21712HIGH | Windows Point-to-Point Tunneling Protocol Remote Code Execution VulnerabilityWindows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability CWE-362Apr 27, 2023 | CVSS8.1v3.1 | EPSS0.993% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2023-21677HIGH | Windows Internet Key Exchange (IKE) Extension Denial of Service VulnerabilityWindows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability. This CVE ID is unique from CVE-2023-21683, CVE-2023-21758. CWE-822Jan 10, 2023 | CVSS7.5v3.1 | EPSS1.98% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2023-21674HIGH | Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege VulnerabilityWindows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability. CWE-416Jan 10, 2023 | CVSS8.8v3.1 | EPSS41.8% | PoCs1 | SignalsListed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2023-21556HIGH | Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution VulnerabilityWindows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2023-21543, CVE-2023-21546, CVE-2023-21555, CVE-2023-21679. CWE-191Jan 10, 2023 | CVSS8.1v3.1 | EPSS1.46% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2023-21748HIGH | Windows Kernel Elevation of Privilege VulnerabilityWindows Kernel Elevation of Privilege Vulnerability. This CVE ID is unique from CVE-2023-21675, CVE-2023-21747, CVE-2023-21749, CVE-2023-21750, CVE-2023-21754, CVE-2023-21755, CVE-2023-21772, CVE-2023-21773, CVE-2023-21774. Jan 10, 2023 | CVSS7.8v3.1 | EPSS0.826% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2023-21535HIGH | Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution VulnerabilityWindows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2023-21548. | CVSS8.1v3.1 | EPSS1.08% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2023-21682MEDIUM | Windows Point-to-Point Protocol (PPP) Information Disclosure VulnerabilityWindows Point-to-Point Protocol (PPP) Information Disclosure Vulnerability. CWE-125Jan 10, 2023 | CVSS5.3v3.1 | EPSS1.37% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2023-21773HIGH | Windows Kernel Elevation of Privilege VulnerabilityWindows Kernel Elevation of Privilege Vulnerability. This CVE ID is unique from CVE-2023-21675, CVE-2023-21747, CVE-2023-21748, CVE-2023-21749, CVE-2023-21750, CVE-2023-21754, CVE-2023-21755, CVE-2023-21772, CVE-2023-21774. | CVSS7.8v3.1 | EPSS0.702% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2023-21557HIGH | Windows Lightweight Directory Access Protocol (LDAP) Denial of Service VulnerabilityWindows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability. | CVSS7.5v3.1 | EPSS2.03% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2023-21678HIGH | Windows Print Spooler Elevation of Privilege VulnerabilityWindows Print Spooler Elevation of Privilege Vulnerability. This CVE ID is unique from CVE-2023-21760, CVE-2023-21765. CWE-59Jan 10, 2023 | CVSS7.8v3.1 | EPSS0.58% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |