Microsoft
Page 52 of 100 — Microsoft CVEs from a corpus of 26181, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-49344 | Medium | 4.3 | 2025-02-20 | IBM OpenPages with Watson 8.3 and 9.0 IBM OpenPages with Watson Assistant chat feature enabled the application establishes a session when a user logs in an… |
CVE-2024-49337 | Medium | 5.4 | 2025-02-20 | IBM OpenPages with Watson 8.3 and 9.0 IBM OpenPages is vulnerable to HTML injection, caused by improper validation of user-supplied input of text fields… |
CVE-2024-49782 | Medium | 6.8 | 2025-02-20 | IBM OpenPages with Watson 8.3 and 9.0 could allow a remote attacker to spoof mail server identity when using SSL/TLS security. An attacker could exploit th… |
CVE-2024-49780 | Medium | 5.3 | 2025-02-20 | IBM OpenPages with Watson 8.3 and 9.0 IBM OpenPages could allow a remote attacker to traverse directories on the system. An attacker with privileges to perform… |
CVE-2024-49355 | Medium | 5.3 | 2025-02-20 | IBM OpenPages with Watson 8.3 and 9.0 may write improperly neutralized data to server log files when the tracing is enabled per the System Tracing feature. |
CVE-2024-43196 | Medium | 4.3 | 2025-02-20 | IBM OpenPages with Watson 8.3 and 9.0 application could allow an authenticated user to manipulate data in the Questionnaires application allowing the user to… |
CVE-2025-24989 | High | 8.2 | 2025-02-19 | An improper access control vulnerability in Power Pages allows an unauthorized attacker to elevate privileges over a network potentially bypassing the user reg… |
CVE-2025-21355 | High | 8.6 | 2025-02-19 | Missing Authentication for Critical Function in Microsoft Bing allows an unauthorized attacker to execute code over a network |
CVE-2023-47160 | High | 8.2 | 2025-02-19 | IBM Cognos Controller 11.0.0 through 11.0.1 FP3 and IBM Controller 11.1.0 is vulnerable to an XML External Entity Injection (XXE) attack when processing… |
CVE-2024-45084 | High | 8.0 | 2025-02-19 | IBM Cognos Controller 11.0.0 through 11.0.1 FP3 and IBM Controller 11.1.0 could allow an authenticated attacker to conduct formula injection. An attacker cou… |
CVE-2024-45081 | Medium | 6.5 | 2025-02-19 | IBM Cognos Controller 11.0.0 through 11.0.1 FP3 and IBM Controller 11.1.0 could allow an authenticated user to modify restricted content due to incorrect a… |
CVE-2024-28780 | Medium | 5.9 | 2025-02-19 | IBM Cognos Controller 11.0.0 through 11.0.1 FP3 and IBM Controller 11.1.0 Rich Client uses weaker than expected cryptographic algorithms that could allow… |
CVE-2024-28777 | High | 8.8 | 2025-02-19 | IBM Cognos Controller 11.0.0 through 11.0.1 FP3 and IBM Controller 11.1.0 is vulnerable to unrestricted deserialization. This vulnerability allows users to… |
CVE-2024-28776 | Medium | 5.4 | 2025-02-19 | IBM Cognos Controller 11.0.0 through 11.0.1 FP3 and IBM Controller 11.1.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arb… |
CVE-2024-52902 | High | 8.8 | 2025-02-19 | IBM Cognos Controller 11.0.0 through 11.0.1 FP3 and IBM Controller 11.1.0 client application contains hard coded database passwords in source code which could… |
CVE-2025-21401 | Medium | 4.5 | 2025-02-15 | Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability |
CVE-2025-25199 | High | 7.5 | 2025-02-12 | go-crypto-winnative Go crypto backend for Windows using Cryptography API: Next Generation (CNG). Prior to commit f49c8e1379ea4b147d5bff1b3be5b0ff45792e41, call… |
CVE-2024-53880 | Medium | 4.9 | 2025-02-12 | NVIDIA Triton Inference Server contains a vulnerability in the model loading API, where a user could cause an integer overflow or wraparound error by loading a… |
CVE-2025-24042 | High | 7.3 | 2025-02-11 | Visual Studio Code JS Debug Extension Elevation of Privilege Vulnerability |
CVE-2025-24039 | High | 7.3 | 2025-02-11 | Visual Studio Code Elevation of Privilege Vulnerability |
CVE-2025-24036 | High | 7.0 | 2025-02-11 | Microsoft AutoUpdate (MAU) Elevation of Privilege Vulnerability |
CVE-2025-21420 | High | 7.8 | 2025-02-11 | Windows Disk Cleanup Tool Elevation of Privilege Vulnerability |
CVE-2025-21419 | High | 7.1 | 2025-02-11 | Windows Setup Files Cleanup Elevation of Privilege Vulnerability |
CVE-2025-21418 | High | 7.8 | 2025-02-11 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability |
CVE-2025-21414 | High | 7.0 | 2025-02-11 | Windows Core Messaging Elevation of Privileges Vulnerability |
CVE-2025-21410 | High | 8.8 | 2025-02-11 | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
CVE-2025-21407 | High | 8.8 | 2025-02-11 | Windows Telephony Service Remote Code Execution Vulnerability |
CVE-2025-21406 | High | 8.8 | 2025-02-11 | Windows Telephony Service Remote Code Execution Vulnerability |
CVE-2025-21400 | High | 8.0 | 2025-02-11 | Microsoft SharePoint Server Remote Code Execution Vulnerability |
CVE-2025-21397 | High | 7.8 | 2025-02-11 | Microsoft Office Remote Code Execution Vulnerability |
CVE-2025-21394 | High | 7.8 | 2025-02-11 | Microsoft Excel Remote Code Execution Vulnerability |
CVE-2025-21392 | High | 7.8 | 2025-02-11 | Microsoft Office Remote Code Execution Vulnerability |
CVE-2025-21391 | High | 7.1 | 2025-02-11 | Windows Storage Elevation of Privilege Vulnerability |
CVE-2025-21390 | High | 7.8 | 2025-02-11 | Microsoft Excel Remote Code Execution Vulnerability |
CVE-2025-21387 | High | 7.8 | 2025-02-11 | Microsoft Excel Remote Code Execution Vulnerability |
CVE-2025-21386 | High | 7.8 | 2025-02-11 | Microsoft Excel Remote Code Execution Vulnerability |
CVE-2025-21383 | High | 7.8 | 2025-02-11 | Microsoft Excel Information Disclosure Vulnerability |
CVE-2025-21381 | High | 7.8 | 2025-02-11 | Microsoft Excel Remote Code Execution Vulnerability |
CVE-2025-21379 | High | 7.1 | 2025-02-11 | DHCP Client Service Remote Code Execution Vulnerability |
CVE-2025-21377 | Medium | 6.5 | 2025-02-11 | NTLM Hash Disclosure Spoofing Vulnerability |
CVE-2025-21376 | High | 8.1 | 2025-02-11 | Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability |
CVE-2025-21375 | High | 7.8 | 2025-02-11 | Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability |
CVE-2025-21373 | High | 7.8 | 2025-02-11 | Windows Installer Elevation of Privilege Vulnerability |
CVE-2025-21371 | High | 8.8 | 2025-02-11 | Windows Telephony Service Remote Code Execution Vulnerability |
CVE-2025-21369 | High | 8.8 | 2025-02-11 | Microsoft Digest Authentication Remote Code Execution Vulnerability |
CVE-2025-21368 | High | 8.8 | 2025-02-11 | Microsoft Digest Authentication Remote Code Execution Vulnerability |
CVE-2025-21367 | High | 7.8 | 2025-02-11 | Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability |
CVE-2025-21359 | High | 7.8 | 2025-02-11 | Windows Kernel Security Feature Bypass Vulnerability |
CVE-2025-21358 | High | 7.8 | 2025-02-11 | Windows Core Messaging Elevation of Privileges Vulnerability |
CVE-2025-21352 | Medium | 6.5 | 2025-02-11 | Internet Connection Sharing (ICS) Denial of Service Vulnerability |
CVE-2025-21351 | High | 7.5 | 2025-02-11 | Windows Active Directory Domain Services API Denial of Service Vulnerability |
CVE-2025-21350 | Medium | 5.9 | 2025-02-11 | Windows Kerberos Denial of Service Vulnerability |
CVE-2025-21349 | Medium | 6.8 | 2025-02-11 | Windows Remote Desktop Configuration Service Tampering Vulnerability |
CVE-2025-21347 | Medium | 6.0 | 2025-02-11 | Windows Deployment Services Denial of Service Vulnerability |
CVE-2025-21337 | Low | 3.3 | 2025-02-11 | Windows NTFS Elevation of Privilege Vulnerability |
CVE-2025-21322 | High | 7.8 | 2025-02-11 | Microsoft PC Manager Elevation of Privilege Vulnerability |
CVE-2025-21259 | Medium | 5.3 | 2025-02-11 | Microsoft Outlook Spoofing Vulnerability |
CVE-2025-21254 | Medium | 6.5 | 2025-02-11 | Internet Connection Sharing (ICS) Denial of Service Vulnerability |
CVE-2025-21216 | Medium | 6.5 | 2025-02-11 | Internet Connection Sharing (ICS) Denial of Service Vulnerability |
CVE-2025-21212 | Medium | 6.5 | 2025-02-11 | Internet Connection Sharing (ICS) Denial of Service Vulnerability |
CVE-2025-21208 | High | 8.8 | 2025-02-11 | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
CVE-2025-21206 | High | 7.3 | 2025-02-11 | Visual Studio Installer Elevation of Privilege Vulnerability |
CVE-2025-21201 | High | 8.8 | 2025-02-11 | Windows Telephony Server Remote Code Execution Vulnerability |
CVE-2025-21200 | High | 8.8 | 2025-02-11 | Windows Telephony Service Remote Code Execution Vulnerability |
CVE-2025-21198 | Critical | 9.0 | 2025-02-11 | Microsoft High Performance Compute (HPC) Pack Remote Code Execution Vulnerability |
CVE-2025-21194 | High | 7.1 | 2025-02-11 | Microsoft Surface Security Feature Bypass Vulnerability |
CVE-2025-21190 | High | 8.8 | 2025-02-11 | Windows Telephony Service Remote Code Execution Vulnerability |
CVE-2025-21188 | Medium | 6.0 | 2025-02-11 | Azure Network Watcher VM Extension Elevation of Privilege Vulnerability |
CVE-2025-21184 | High | 7.0 | 2025-02-11 | Windows Core Messaging Elevation of Privileges Vulnerability |
CVE-2025-21183 | High | 7.4 | 2025-02-11 | Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege Vulnerability |
CVE-2025-21182 | High | 7.4 | 2025-02-11 | Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege Vulnerability |
CVE-2025-21181 | High | 7.5 | 2025-02-11 | Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability |
CVE-2025-21179 | Medium | 4.8 | 2025-02-11 | DHCP Client Service Denial of Service Vulnerability |
CVE-2025-21163 | High | 7.8 | 2025-02-11 | Illustrator versions 29.1, 28.7.3 and earlier are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the… |
CVE-2025-21160 | High | 7.8 | 2025-02-11 | Illustrator versions 29.1, 28.7.3 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in arbitrary code execu… |
CVE-2025-21159 | High | 7.8 | 2025-02-11 | Illustrator versions 29.1, 28.7.3 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of th… |
CVE-2025-21156 | High | 7.8 | 2025-02-11 | InCopy versions 20.0, 19.5.1 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in arbitrary code execution… |
CVE-2025-21155 | Medium | 5.5 | 2025-02-11 | Substance3D - Stager versions 3.1.0 and earlier are affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service… |
CVE-2025-21158 | High | 7.8 | 2025-02-11 | InDesign Desktop versions ID20.0, ID19.5.1 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in arbitrary c… |
CVE-2025-21157 | High | 7.8 | 2025-02-11 | InDesign Desktop versions ID20.0, ID19.5.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in th… |
CVE-2025-21126 | Medium | 5.5 | 2025-02-11 | InDesign Desktop versions ID20.0, ID19.5.1 and earlier are affected by an Improper Input Validation vulnerability that could result in an application denial-of… |
CVE-2025-21125 | Medium | 5.5 | 2025-02-11 | InDesign Desktop versions ID20.0, ID19.5.1 and earlier are affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-s… |
CVE-2025-21124 | Medium | 5.5 | 2025-02-11 | InDesign Desktop versions ID20.0, ID19.5.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. A… |
CVE-2025-21123 | High | 7.8 | 2025-02-11 | InDesign Desktop versions ID20.0, ID19.5.1 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution… |
CVE-2025-21121 | High | 7.8 | 2025-02-11 | InDesign Desktop versions ID20.0, ID19.5.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in th… |
CVE-2025-0588 | Medium | 4.9 | 2025-02-11 | In affected versions of Octopus Server it was possible for a user with sufficient access to set custom headers in all server responses. By submitting a specifi… |
CVE-2025-0526 | Medium | 5.4 | 2025-02-11 | In affected versions of Octopus Deploy it was possible to upload files to unexpected locations on the host using an API endpoint. The field lacked validation w… |
CVE-2025-0513 | Medium | 5.4 | 2025-02-11 | In affected versions of Octopus Server error messages were handled unsafely on the error page. If an adversary could control any part of the error message they… |
CVE-2025-0525 | High | 7.5 | 2025-02-11 | In affected versions of Octopus Server the preview import feature could be leveraged to identify the existence of a target file. This could provide an adversar… |
CVE-2025-0589 | Medium | 5.3 | 2025-02-11 | In affected versions of Octopus Deploy where customers are using Active Directory for authentication it was possible for an unauthenticated user to make an API… |
CVE-2025-25193 | Medium | 5.5 | 2025-02-10 | Netty, an asynchronous, event-driven network application framework, has a vulnerability in versions up to and including 4.1.118.Final. An unsafe reading of env… |
CVE-2025-21408 | High | 8.8 | 2025-02-06 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability |
CVE-2025-21404 | Medium | 4.3 | 2025-02-06 | Microsoft Edge (Chromium-based) Spoofing Vulnerability |
CVE-2025-21342 | High | 8.8 | 2025-02-06 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability |
CVE-2025-21283 | Medium | 6.5 | 2025-02-06 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability |
CVE-2025-21279 | Medium | 6.5 | 2025-02-06 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability |
CVE-2025-21267 | Medium | 4.4 | 2025-02-06 | Microsoft Edge (Chromium-based) Spoofing Vulnerability |
CVE-2025-21253 | Medium | 5.3 | 2025-02-06 | Microsoft Edge for IOS and Android Spoofing Vulnerability |
CVE-2025-21177 | High | 8.7 | 2025-02-06 | Server-side request forgery (ssrf) in Microsoft Dynamics 365 Sales allows an authorized attacker to elevate privileges over a network. |
CVE-2025-0158 | Medium | 5.5 | 2025-02-06 | IBM EntireX 11.1 could allow a local user to cause a denial of service due to an unhandled error and fault isolation. |