Microsoft

Page 53 of 100 — Microsoft CVEs from a corpus of 26181, newest first, with CVSS severity and publication dates.

Microsoft CVEs — newest first (page 53 of 100)
CVESeverityScorePublishedSummary
CVE-2024-56467Low3.32025-02-06IBM EntireX 11.1 could allow a local user to obtain sensitive information when a detailed technical error message is returned. This information could be used…
CVE-2024-54171High7.12025-02-06IBM EntireX 11.1 is vulnerable to an XML external entity injection (XXE) attack when processing XML data. An authenticated attacker could exploit this vulnerab…
CVE-2025-23415Low3.12025-02-05An insufficient verification of data authenticity vulnerability exists in BIG-IP APM Access Policy endpoint inspection that may allow an attacker to bypass end…
CVE-2025-21107High7.82025-01-30Dell NetWorker, version(s) prior to 19.11.0.3, all versions of 19.10 & prior versions contain(s) an Unquoted Search Path or Element vulnerability. A low privil…
CVE-2025-21415Critical9.92025-01-29Authentication bypass by spoofing in Azure AI Face Service allows an authorized attacker to elevate privileges over a network.
CVE-2025-21396High8.22025-01-29Missing authorization in Microsoft Account allows an unauthorized attacker to elevate privileges over a network.
CVE-2025-24789High7.82025-01-29Snowflake JDBC provides a JDBC type 4 driver that supports core functionality, allowing Java program to connect to Snowflake. Snowflake discovered and remediat…
CVE-2025-23084Medium5.52025-01-28A vulnerability has been identified in Node.js, specifically affecting the handling of drive names in the Windows environment. Certain Node.js functions do not…
CVE-2024-38320Medium5.92025-01-27IBM Storage Protect for Virtual Environments: Data Protection for VMware and Storage Protect Backup-Archive Client 8.1.0.0 through 8.1.23.0 uses weaker than ex…
CVE-2024-37527Medium5.42025-01-27IBM OpenPages with Watson 8.3 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code…
CVE-2023-50946Medium6.52025-01-26IBM Common Licensing 9.0 could allow an authenticated user to modify a configuration file that they should not have access to due to a broken authorization me…
CVE-2023-50945Medium6.22025-01-26IBM Common Licensing 9.0 stores user credentials in plain clear text which can be read by a local user.
CVE-2025-21262Medium5.42025-01-24User Interface (UI) Misrepresentation of Critical Information in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a net…
CVE-2024-40706Medium5.32025-01-24IBM InfoSphere Information Server 11.7 could allow a remote user to obtain sensitive version information that could aid in further attacks against the system.
CVE-2025-23227Medium6.42025-01-23IBM Tivoli Application Dependency Discovery Manager 7.3.0.0 through 7.3.0.11 is vulnerable to stored cross-site scripting. This vulnerability allows authentica…
CVE-2024-41783Critical9.12025-01-19IBM Sterling Secure Proxy 6.0.0.0, 6.0.0.1, 6.0.0.2, 6.0.0.3, 6.1.0.0, and 6.2.0.0 could allow a privileged user to inject commands into the underlying operati…
CVE-2024-38337Critical9.12025-01-19IBM Sterling Secure Proxy 6.0.0.0, 6.0.0.1, 6.0.0.2, 6.0.0.3, 6.1.0.0, and 6.2.0.0 could allow an unauthorized attacker to retrieve or alter sensitive informat…
CVE-2024-49338Medium4.42025-01-18IBM App Connect Enterprise 12.0.1.0 through 12.0.7.0and 13.0.1.0 under certain configurations could allow a privileged user to obtain JMS credentials.
CVE-2025-21399High7.42025-01-17Microsoft Edge (Chromium-based) Update Elevation of Privilege Vulnerability
CVE-2025-21185Medium6.52025-01-17Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
CVE-2024-52363Medium6.52025-01-17IBM InfoSphere Information Server 11.7 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL requ…
CVE-2025-21325High7.82025-01-17Windows Secure Kernel Mode Elevation of Privilege Vulnerability
CVE-2024-54540Medium4.32025-01-15The issue was addressed with improved input sanitization. This issue is fixed in Apple Music 1.5.0.152 for Windows. Processing maliciously crafted web content…
CVE-2025-0502Critical9.12025-01-15Transmission of Private Resources into a New Sphere ('Resource Leak') vulnerability in CrafterCMS Engine on Linux, MacOS, x86, Windows, 64 bit, ARM allows Dire…
CVE-2025-0440Medium6.52025-01-15Inappropriate implementation in Fullscreen in Google Chrome on Windows prior to 132.0.6834.83 allowed a remote attacker to perform UI spoofing via a crafted HT…
CVE-2025-21135High7.82025-01-14Animate versions 24.0.6, 23.0.9 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in arbitrary code executi…
CVE-2025-21132High7.82025-01-14Substance3D - Stager versions 3.0.4 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the conte…
CVE-2025-21131High7.82025-01-14Substance3D - Stager versions 3.0.4 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the conte…
CVE-2025-21130High7.82025-01-14Substance3D - Stager versions 3.0.4 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the conte…
CVE-2025-21129High7.82025-01-14Substance3D - Stager versions 3.0.4 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the…
CVE-2025-21128High7.82025-01-14Substance3D - Stager versions 3.0.4 and earlier are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in th…
CVE-2025-21127High7.82025-01-14Photoshop Desktop versions 25.12, 26.1 and earlier are affected by an Uncontrolled Search Path Element vulnerability that could lead to arbitrary code executio…
CVE-2025-21122High7.82025-01-14Photoshop Desktop versions 25.12, 26.1 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in arbitrary code…
CVE-2025-21417High8.82025-01-14Windows Telephony Service Remote Code Execution Vulnerability
CVE-2025-21413High8.82025-01-14Windows Telephony Service Remote Code Execution Vulnerability
CVE-2025-21411High8.82025-01-14Windows Telephony Service Remote Code Execution Vulnerability
CVE-2025-21409High8.82025-01-14Windows Telephony Service Remote Code Execution Vulnerability
CVE-2025-21405High7.32025-01-14Visual Studio Elevation of Privilege Vulnerability
CVE-2025-21403Medium6.42025-01-14On-Premises Data Gateway Information Disclosure Vulnerability
CVE-2025-21402High7.82025-01-14Microsoft Office OneNote Remote Code Execution Vulnerability
CVE-2025-21395High7.82025-01-14Microsoft Access Remote Code Execution Vulnerability
CVE-2025-21393Medium6.32025-01-14Microsoft SharePoint Server Spoofing Vulnerability
CVE-2025-21389High7.52025-01-14Uncontrolled resource consumption in Windows Universal Plug and Play (UPnP) Device Host allows an unauthorized attacker to deny service over a network.
CVE-2025-21382High7.82025-01-14Windows Graphics Component Elevation of Privilege Vulnerability
CVE-2025-21378High7.82025-01-14Windows CSC Service Elevation of Privilege Vulnerability
CVE-2025-21374Medium5.52025-01-14Windows CSC Service Information Disclosure Vulnerability
CVE-2025-21372High7.82025-01-14Microsoft Brokering File System Elevation of Privilege Vulnerability
CVE-2025-21370High7.82025-01-14Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability
CVE-2025-21366High7.82025-01-14Microsoft Access Remote Code Execution Vulnerability
CVE-2025-21365High7.82025-01-14Microsoft Office Remote Code Execution Vulnerability
CVE-2025-21364High7.82025-01-14Microsoft Excel Security Feature Bypass Vulnerability
CVE-2025-21363High7.82025-01-14Microsoft Word Remote Code Execution Vulnerability
CVE-2025-21362High8.42025-01-14Microsoft Excel Remote Code Execution Vulnerability
CVE-2025-21361High7.82025-01-14Microsoft Outlook Remote Code Execution Vulnerability
CVE-2025-21360High7.82025-01-14Microsoft AutoUpdate (MAU) Elevation of Privilege Vulnerability
CVE-2025-21357Medium6.72025-01-14Microsoft Outlook Remote Code Execution Vulnerability
CVE-2025-21356High7.82025-01-14Microsoft Office Visio Remote Code Execution Vulnerability
CVE-2025-21354High8.42025-01-14Microsoft Excel Remote Code Execution Vulnerability
CVE-2025-21348High7.22025-01-14Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2025-21346High7.12025-01-14Microsoft Office Security Feature Bypass Vulnerability
CVE-2025-21345High7.82025-01-14Microsoft Office Visio Remote Code Execution Vulnerability
CVE-2025-21344High7.82025-01-14Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2025-21343High7.52025-01-14Windows Web Threat Defense User Service Information Disclosure Vulnerability
CVE-2025-21341Medium6.62025-01-14Windows Digital Media Elevation of Privilege Vulnerability
CVE-2025-21340Medium5.52025-01-14Windows Virtualization-Based Security (VBS) Security Feature Bypass Vulnerability
CVE-2025-21339High8.82025-01-14Windows Telephony Service Remote Code Execution Vulnerability
CVE-2025-21338High7.82025-01-14GDI+ Remote Code Execution Vulnerability
CVE-2025-21336Medium5.62025-01-14Windows Cryptographic Information Disclosure Vulnerability
CVE-2025-21335High7.82025-01-14Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability
CVE-2025-21334High7.82025-01-14Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability
CVE-2025-21333High7.82025-01-14Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability
CVE-2025-21332Medium4.32025-01-14MapUrlToZone Security Feature Bypass Vulnerability
CVE-2025-21331High7.32025-01-14Windows Installer Elevation of Privilege Vulnerability
CVE-2025-21330High7.52025-01-14Windows Remote Desktop Services Denial of Service Vulnerability
CVE-2025-21329Medium4.32025-01-14MapUrlToZone Security Feature Bypass Vulnerability
CVE-2025-21328Medium4.32025-01-14MapUrlToZone Security Feature Bypass Vulnerability
CVE-2025-21327Medium6.62025-01-14Windows Digital Media Elevation of Privilege Vulnerability
CVE-2025-21326High7.82025-01-14Internet Explorer Remote Code Execution Vulnerability
CVE-2025-21324Medium6.62025-01-14Windows Digital Media Elevation of Privilege Vulnerability
CVE-2025-21323Medium5.52025-01-14Windows Kernel Memory Information Disclosure Vulnerability
CVE-2025-21321Medium5.52025-01-14Windows Kernel Memory Information Disclosure Vulnerability
CVE-2025-21320Medium5.52025-01-14Windows Kernel Memory Information Disclosure Vulnerability
CVE-2025-21319Medium5.52025-01-14Windows Kernel Memory Information Disclosure Vulnerability
CVE-2025-21318Medium5.52025-01-14Windows Kernel Memory Information Disclosure Vulnerability
CVE-2025-21317Medium5.52025-01-14Windows Kernel Memory Information Disclosure Vulnerability
CVE-2025-21316Medium5.52025-01-14Windows Kernel Memory Information Disclosure Vulnerability
CVE-2025-21315High7.82025-01-14Microsoft Brokering File System Elevation of Privilege Vulnerability
CVE-2025-21314Medium6.52025-01-14Windows SmartScreen Spoofing Vulnerability
CVE-2025-21313Medium6.52025-01-14Windows Security Account Manager (SAM) Denial of Service Vulnerability
CVE-2025-21312Low2.42025-01-14Windows Smart Card Reader Information Disclosure Vulnerability
CVE-2025-21311Critical9.82025-01-14Windows NTLM V1 Elevation of Privilege Vulnerability
CVE-2025-21310Medium6.62025-01-14Windows Digital Media Elevation of Privilege Vulnerability
CVE-2025-21309High8.12025-01-14Windows Remote Desktop Services Remote Code Execution Vulnerability
CVE-2025-21308Medium6.52025-01-14Windows Themes Spoofing Vulnerability
CVE-2025-21307Critical9.82025-01-14Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability
CVE-2025-21306High8.82025-01-14Windows Telephony Service Remote Code Execution Vulnerability
CVE-2025-21305High8.82025-01-14Windows Telephony Service Remote Code Execution Vulnerability
CVE-2025-21304High7.82025-01-14Microsoft DWM Core Library Elevation of Privilege Vulnerability
CVE-2025-21303High8.82025-01-14Windows Telephony Service Remote Code Execution Vulnerability
CVE-2025-21302High8.82025-01-14Windows Telephony Service Remote Code Execution Vulnerability