CVE-2022-35836

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected software

No affected versions have been published.

Timeline

Published
Sep 13, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-358376.5Windows Graphics Component Information Disclosure VulnerabilityCVE-2022-358387.5HTTP V3 Denial of Service VulnerabilityCVE-2022-35848.8A vulnerability was found in SourceCodester Canteen Management System 1.0. It has been rated as critical. This issue affects some unknown prCVE-2022-358408.8Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution VulnerabilityCVE-2022-358418.8Windows Enterprise App Management Service Remote Code Execution VulnerabilityCVE-2022-358427.5An exposure of sensitive information to an unauthorized actor vulnerabiltiy [CWE-200] in FortiOS SSL-VPN versions 7.2.0, versions 7.0.0 throCVE-2022-358439.8An authentication bypass by assumed-immutable data vulnerability [CWE-302] in the FortiOS SSH login component 7.2.0, 7.0.0 through 7.0.7, CVE-2022-358447.2An improper neutralization of special elements used in an OS command vulnerability [CWE-78] in the management interface of FortiTester 2.3.0CVE-2022-358458.8Multiple improper neutralization of special elements used in an OS Command ('OS Command Injection') vulnerabilities [CWE-78] in FortiTester CVE-2022-358469.8An improper restriction of excessive authentication attempts vulnerability [CWE-307] in FortiTester Telnet port 2.3.0 through 3.9.1, 4.0.0 tCVE-2022-358478.8An improper neutralization of special elements used in a template engine vulnerability [CWE-1336] in FortiSOAR management interface 7.2.0, 7CVE-2022-358498.8An improper neutralization of special elements used in an OS command vulnerability [CWE-78] in the management interface of FortiADC 7.1.0 th
CVE-2022-35836: High severity, CVSS 8.8 | Vulnix