Microsoft
Page 100 of 100 — Microsoft CVEs from a corpus of 27226, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-22230 | High | 7.8 | 2023-02-17 | Adobe Bridge versions 12.0.3 (and earlier) and 13.0.1 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code ex… |
CVE-2023-22229 | High | 7.8 | 2023-02-17 | Adobe Bridge versions 12.0.3 (and earlier) and 13.0.1 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code ex… |
CVE-2023-22228 | High | 7.8 | 2023-02-17 | Adobe Bridge versions 12.0.3 (and earlier) and 13.0.1 (and earlier) are affected by an Improper Input Validation vulnerability that could result in arbitrary c… |
CVE-2023-22227 | High | 7.8 | 2023-02-17 | Adobe Bridge versions 12.0.3 (and earlier) and 13.0.1 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code ex… |
CVE-2023-22226 | High | 7.8 | 2023-02-17 | Adobe Bridge versions 12.0.3 (and earlier) and 13.0.1 (and earlier) are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary… |
CVE-2023-21622 | High | 7.8 | 2023-02-17 | FrameMaker 2020 Update 4 (and earlier), 2022 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution i… |
CVE-2023-21621 | High | 7.8 | 2023-02-17 | FrameMaker 2020 Update 4 (and earlier), 2022 (and earlier) are affected by an Improper Input Validation vulnerability that could result in arbitrary code execu… |
CVE-2023-21620 | Medium | 5.5 | 2023-02-17 | FrameMaker 2020 Update 4 (and earlier), 2022 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memor… |
CVE-2023-21619 | High | 7.8 | 2023-02-17 | FrameMaker 2020 Update 4 (and earlier), 2022 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution i… |
CVE-2023-21593 | Medium | 5.5 | 2023-02-17 | Adobe InDesign versions ID18.1 (and earlier) and ID17.4 (and earlier) are affected by a NULL Pointer Dereference vulnerability. An unauthenticated attacker cou… |
CVE-2023-21584 | Medium | 5.5 | 2023-02-17 | FrameMaker 2020 Update 4 (and earlier), 2022 (and earlier) are affected by a Use After Free vulnerability that could lead to disclosure of sensitive memory. An… |
CVE-2023-21583 | Medium | 5.5 | 2023-02-17 | Adobe Bridge versions 12.0.3 (and earlier) and 13.0.1 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensit… |
CVE-2023-21578 | Medium | 5.5 | 2023-02-17 | Photoshop version 23.5.3 (and earlier), 24.1 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memor… |
CVE-2023-21577 | Medium | 5.5 | 2023-02-17 | Photoshop version 23.5.3 (and earlier), 24.1 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memor… |
CVE-2023-21576 | High | 7.8 | 2023-02-17 | Photoshop version 23.5.3 (and earlier), 24.1 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution i… |
CVE-2023-21575 | High | 7.8 | 2023-02-17 | Photoshop version 23.5.3 (and earlier), 24.1 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution i… |
CVE-2023-21574 | High | 7.8 | 2023-02-17 | Photoshop version 23.5.3 (and earlier), 24.1 (and earlier) are affected by an Improper Input Validation vulnerability that could result in arbitrary code execu… |
CVE-2023-24960 | High | 7.5 | 2023-02-17 | IBM InfoSphere Information Server 11.7 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL requ… |
CVE-2022-43579 | Medium | 4.6 | 2023-02-17 | IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.7 and 6.1.0.0 through 6.1.2.0 is vulnerable to cross-site scripting. This vulnerability allo… |
CVE-2022-40231 | Medium | 4.3 | 2023-02-17 | IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.7 and 6.1.0.0 through 6.1.2.0 could allow an authenticated user to perform unauthorized acti… |
CVE-2023-26020 | Medium | 5.7 | 2023-02-17 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Crafter Studio on Linux, MacOS, Windows, x86, ARM, 64 bit… |
CVE-2022-43930 | Medium | 6.2 | 2023-02-17 | IBM Db2 for Linux, UNIX and Windows 10.5, 11.1, and 11.5 is vulnerable to an Information Disclosure as sensitive information may be included in a log file. IB… |
CVE-2022-40232 | Medium | 6.3 | 2023-02-17 | IBM Sterling B2B Integrator Standard Edition 6.1.0.0 through 6.1.1.1, and 6.1.2.0 could allow an authenticated user to perform actions they should not have ac… |
CVE-2023-24964 | Medium | 6.2 | 2023-02-17 | IBM InfoSphere Information Server 11.7 could allow a local user to obtain sensitive information from a log files. IBM X-Force ID: 246463. |
CVE-2023-22868 | Medium | 5.4 | 2023-02-17 | IBM Aspera Faspex 4.4.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering t… |
CVE-2022-43929 | Medium | 4.9 | 2023-02-17 | IBM Db2 for Linux, UNIX and Windows 11.1 and 11.5 may be vulnerable to a Denial of Service when executing a specially crafted 'Load' command. IBM X-Force ID… |
CVE-2022-43927 | Medium | 5.9 | 2023-02-17 | IBM Db2 for Linux, UNIX and Windows 10.5, 11.1, and 11.5 is vulnerable to information Disclosure due to improper privilege management when a specially crafted… |
CVE-2022-47986 | Critical | 9.8 | 2023-02-17 | IBM Aspera Faspex 4.4.2 Patch Level 1 and earlier could allow a remote attacker to execute arbitrary code on the system, caused by a YAML deserialization flaw… |
CVE-2023-0882 | High | 8.8 | 2023-02-17 | Improper Input Validation, Authorization Bypass Through User-Controlled Key vulnerability in Kron Tech Single Connect on Windows allows Privilege Abuse. This i… |
CVE-2022-27808 | Medium | 6.3 | 2023-02-16 | Insufficient control flow management in some Intel(R) Ethernet Controller Administrative Tools drivers for Windows before version 1.5.0.2 may allow an authenti… |
CVE-2022-34849 | Medium | 4.4 | 2023-02-16 | Uncaught exception in the Intel(R) Iris(R) Xe MAX drivers for Windows before version 100.0.5.1436(v2) may allow a privileged user to potentially enable denial… |
CVE-2022-30531 | Medium | 4.4 | 2023-02-16 | Out-of-bounds read in the Intel(R) Iris(R) Xe MAX drivers for Windows before version 100.0.5.1474 may allow a privileged user to potentially enable information… |
CVE-2022-26841 | Low | 2.5 | 2023-02-16 | Insufficient control flow management for the Intel(R) SGX SDK software for Linux before version 2.16.100.1 may allow an authenticated user to potentially enabl… |
CVE-2022-26509 | Low | 2.5 | 2023-02-16 | Improper conditions check in the Intel(R) SGX SDK software may allow a privileged user to potentially enable information disclosure via local access. |
CVE-2023-24483 | High | 7.8 | 2023-02-16 | A vulnerability has been identified that, if exploited, could result in a local user elevating their privilege level to NT AUTHORITY\SYSTEM on a Citrix Virtual… |
CVE-2023-23459 | Critical | 9.1 | 2023-02-15 | Priority Windows may allow Command Execution via SQL Injection using an unspecified method. |
CVE-2023-22368 | High | 7.8 | 2023-02-15 | Untrusted search path vulnerability in ELECOM Camera Assistant 1.00 and QuickFileDealer Ver.1.2.1 and earlier allows an attacker to gain privileges via a Troja… |
CVE-2023-23381 | High | 7.8 | 2023-02-14 | Visual Studio Remote Code Execution Vulnerability |
CVE-2023-21823 | High | 7.8 | 2023-02-14 | Windows Graphics Component Remote Code Execution Vulnerability |
CVE-2023-21815 | High | 7.8 | 2023-02-14 | Visual Studio Remote Code Execution Vulnerability |
CVE-2023-21808 | High | 7.8 | 2023-02-14 | .NET and Visual Studio Remote Code Execution Vulnerability |
CVE-2023-21778 | High | 8.0 | 2023-02-14 | Microsoft Dynamics Unified Service Desk Remote Code Execution Vulnerability |
CVE-2023-21567 | Medium | 5.6 | 2023-02-14 | Visual Studio Denial of Service Vulnerability |
CVE-2023-21566 | High | 7.8 | 2023-02-14 | Visual Studio Elevation of Privilege Vulnerability |
CVE-2023-21553 | High | 7.5 | 2023-02-14 | Azure DevOps Server Remote Code Execution Vulnerability |
CVE-2023-23390 | High | 7.8 | 2023-02-14 | 3D Builder Remote Code Execution Vulnerability |
CVE-2023-23382 | Medium | 6.5 | 2023-02-14 | Azure Machine Learning Compute Instance Information Disclosure Vulnerability |
CVE-2023-23379 | High | 7.8 | 2023-02-14 | Microsoft Defender for IoT Elevation of Privilege Vulnerability |
CVE-2023-23378 | High | 7.8 | 2023-02-14 | Print 3D Remote Code Execution Vulnerability |
CVE-2023-23377 | High | 7.8 | 2023-02-14 | 3D Builder Remote Code Execution Vulnerability |
CVE-2023-23376 | High | 7.8 | 2023-02-14 | Windows Common Log File System Driver Elevation of Privilege Vulnerability |
CVE-2023-23374 | High | 8.3 | 2023-02-14 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability |
CVE-2023-21822 | High | 7.8 | 2023-02-14 | Windows Graphics Component Elevation of Privilege Vulnerability |
CVE-2023-21820 | High | 7.4 | 2023-02-14 | Windows Distributed File System (DFS) Remote Code Execution Vulnerability |
CVE-2023-21819 | High | 7.5 | 2023-02-14 | Windows Secure Channel Denial of Service Vulnerability |
CVE-2023-21818 | High | 7.5 | 2023-02-14 | Windows Secure Channel Denial of Service Vulnerability |
CVE-2023-21817 | High | 7.8 | 2023-02-14 | Windows Kerberos Elevation of Privilege Vulnerability |
CVE-2023-21816 | High | 7.5 | 2023-02-14 | Windows Active Directory Domain Services API Denial of Service Vulnerability |
CVE-2023-21813 | High | 7.5 | 2023-02-14 | Windows Secure Channel Denial of Service Vulnerability |
CVE-2023-21812 | High | 7.8 | 2023-02-14 | Windows Common Log File System Driver Elevation of Privilege Vulnerability |
CVE-2023-21811 | High | 7.5 | 2023-02-14 | Windows iSCSI Service Denial of Service Vulnerability |
CVE-2023-21809 | High | 7.8 | 2023-02-14 | Microsoft Defender for Endpoint Security Feature Bypass Vulnerability |
CVE-2023-21807 | Medium | 6.5 | 2023-02-14 | Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability |
CVE-2023-21806 | High | 8.2 | 2023-02-14 | Power BI Report Server Spoofing Vulnerability |
CVE-2023-21805 | High | 7.8 | 2023-02-14 | Windows MSHTML Platform Remote Code Execution Vulnerability |
CVE-2023-21804 | High | 7.8 | 2023-02-14 | Windows Graphics Component Elevation of Privilege Vulnerability |
CVE-2023-21803 | Critical | 9.8 | 2023-02-14 | Windows iSCSI Discovery Service Remote Code Execution Vulnerability |
CVE-2023-21802 | High | 7.8 | 2023-02-14 | Windows Media Remote Code Execution Vulnerability |
CVE-2023-21801 | High | 7.8 | 2023-02-14 | Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability |
CVE-2023-21800 | High | 7.8 | 2023-02-14 | Windows Installer Elevation of Privilege Vulnerability |
CVE-2023-21799 | High | 8.8 | 2023-02-14 | Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability |
CVE-2023-21798 | High | 8.8 | 2023-02-14 | Microsoft ODBC Driver Remote Code Execution Vulnerability |
CVE-2023-21797 | High | 8.8 | 2023-02-14 | Microsoft ODBC Driver Remote Code Execution Vulnerability |
CVE-2023-21794 | Medium | 4.3 | 2023-02-14 | Microsoft Edge (Chromium-based) Spoofing Vulnerability |
CVE-2023-21777 | High | 8.7 | 2023-02-14 | Azure App Service on Azure Stack Hub Elevation of Privilege Vulnerability |
CVE-2023-21722 | Medium | 5.0 | 2023-02-14 | .NET Framework Denial of Service Vulnerability |
CVE-2023-21721 | Medium | 6.5 | 2023-02-14 | Microsoft OneNote Elevation of Privilege Vulnerability |
CVE-2023-21720 | Medium | 5.3 | 2023-02-14 | Microsoft Edge (Chromium-based) Tampering Vulnerability |
CVE-2023-21718 | High | 7.8 | 2023-02-14 | Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability |
CVE-2023-21717 | High | 8.8 | 2023-02-14 | Microsoft SharePoint Server Elevation of Privilege Vulnerability |
CVE-2023-21716 | Critical | 9.8 | 2023-02-14 | Microsoft Word Remote Code Execution Vulnerability |
CVE-2023-21715 | High | 7.3 | 2023-02-14 | Microsoft Publisher Security Feature Bypass Vulnerability |
CVE-2023-21714 | Medium | 5.5 | 2023-02-14 | Microsoft Office Information Disclosure Vulnerability |
CVE-2023-21713 | High | 8.8 | 2023-02-14 | Microsoft SQL Server Remote Code Execution Vulnerability |
CVE-2023-21710 | High | 7.2 | 2023-02-14 | Microsoft Exchange Server Remote Code Execution Vulnerability |
CVE-2023-21707 | High | 8.8 | 2023-02-14 | Microsoft Exchange Server Remote Code Execution Vulnerability |
CVE-2023-21706 | High | 8.8 | 2023-02-14 | Microsoft Exchange Server Remote Code Execution Vulnerability |
CVE-2023-21705 | High | 8.8 | 2023-02-14 | Microsoft SQL Server Remote Code Execution Vulnerability |
CVE-2023-21704 | High | 7.8 | 2023-02-14 | Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability |
CVE-2023-21703 | Medium | 6.5 | 2023-02-14 | Azure Data Box Gateway Remote Code Execution Vulnerability |
CVE-2023-21702 | High | 7.5 | 2023-02-14 | Windows iSCSI Service Denial of Service Vulnerability |
CVE-2023-21701 | High | 7.5 | 2023-02-14 | Microsoft Protected Extensible Authentication Protocol (PEAP) Denial of Service Vulnerability |
CVE-2023-21700 | High | 7.5 | 2023-02-14 | Windows iSCSI Discovery Service Denial of Service Vulnerability |
CVE-2023-21699 | Medium | 5.3 | 2023-02-14 | Windows Internet Storage Name Service (iSNS) Server Information Disclosure Vulnerability |
CVE-2023-21697 | Medium | 6.2 | 2023-02-14 | Windows Internet Storage Name Service (iSNS) Server Information Disclosure Vulnerability |
CVE-2023-21695 | High | 7.5 | 2023-02-14 | Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability |
CVE-2023-21694 | Medium | 6.8 | 2023-02-14 | Windows Fax Service Remote Code Execution Vulnerability |
CVE-2023-21693 | Medium | 5.7 | 2023-02-14 | Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability |
CVE-2023-21692 | Critical | 9.8 | 2023-02-14 | Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability |
CVE-2023-21691 | High | 7.5 | 2023-02-14 | Microsoft Protected Extensible Authentication Protocol (PEAP) Information Disclosure Vulnerability |