Microsoft
Page 55 of 100 — Microsoft CVEs from a corpus of 26181, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-20455 | Low | 3.7 | 2025-01-07 | IBM Cognos Controller 11.0.0 through 11.0.1 and IBM Controller 11.1.0 could allow a remote attacker to obtain sensitive information when a detailed technical e… |
CVE-2024-31914 | Medium | 6.4 | 2025-01-06 | IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.2.5 and 6.2.0.0 through 6.2.0.2 is vulnerable to stored cross-site scripting. This vulnerabili… |
CVE-2024-41768 | Medium | 6.5 | 2025-01-04 | IBM Engineering Lifecycle Optimization - Publishing 7.0.2 and 7.0.3 could allow a remote attacker to cause an unhandled SSL exception which could leave the con… |
CVE-2024-41767 | High | 7.3 | 2025-01-04 | IBM Engineering Lifecycle Optimization - Publishing 7.0.2 and 7.0.3 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statemen… |
CVE-2024-41766 | High | 7.5 | 2025-01-04 | IBM Engineering Lifecycle Optimization - Publishing 7.0.2 and 7.0.3 could allow a remote attacker to cause a denial of service using a complex regular express… |
CVE-2024-41765 | Medium | 6.5 | 2025-01-04 | IBM Engineering Lifecycle Optimization - Publishing 7.0.2 and 7.0.3 could allow a remote attacker to traverse directories on the system. An attacker could send… |
CVE-2024-41763 | Medium | 5.9 | 2025-01-04 | IBM Engineering Lifecycle Optimization - Publishing 7.0.2 and 7.0.3 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt… |
CVE-2024-5591 | Medium | 4.3 | 2025-01-03 | IBM Jazz Foundation 7.0.2, 7.0.3, and 7.1.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned i… |
CVE-2024-41780 | Medium | 4.2 | 2025-01-03 | IBM Jazz Foundation 7.0.2, 7.0.3, and 7.1.0 could could allow a physical user to obtain sensitive information due to not masking passwords during entry. |
CVE-2024-9950 | High | 7.8 | 2025-01-02 | A vulnerability in Forescout SecureConnector v11.3.07.0109 on Windows allows unauthenticated user to modify compliance scripts due to insecure temporary dire… |
CVE-2024-55543 | High | 7.8 | 2025-01-02 | Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect 16 (Windows) before build 39169. |
CVE-2024-55541 | Medium | 6.1 | 2025-01-02 | Stored cross-site scripting (XSS) vulnerability due to missing origin validation in postMessage. The following products are affected: Acronis Cyber Protect 16… |
CVE-2024-55540 | High | 7.8 | 2025-01-02 | Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect 16 (Windows) before build 39169. |
CVE-2024-55955 | Medium | 6.7 | 2024-12-31 | An incorrect permissions assignment vulnerability in Trend Micro Deep Security 20.0 agents between versions 20.0.1-9400 and 20.0.1-23340 could allow a local at… |
CVE-2024-12108 | Critical | 9.6 | 2024-12-31 | In WhatsUp Gold versions released before 2024.0.2, an attacker can gain access to the WhatsUp Gold server via the public API. |
CVE-2024-12753 | High | 7.3 | 2024-12-30 | Foxit PDF Reader Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installa… |
CVE-2024-12752 | High | 7.8 | 2024-12-30 | Foxit PDF Reader AcroForm Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affect… |
CVE-2024-12751 | High | 7.8 | 2024-12-30 | Foxit PDF Reader AcroForm Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affec… |
CVE-2024-12672 | High | 7.3 | 2024-12-19 | A third-party vulnerability exists in the Rockwell Automation Arena® that could allow a threat actor to write beyond the boundaries of allocated memory in a DO… |
CVE-2024-11364 | High | 7.3 | 2024-12-19 | Another “uninitialized variable” code execution vulnerability exists in the Rockwell Automation Arena® that could allow a threat actor to craft a DOE file and… |
CVE-2024-52897 | Medium | 6.2 | 2024-12-19 | IBM MQ 9.2 LTS, 9.3 LTS, 9.3 CD, 9.4 LTS, and 9.4 CD web console could allow a remote attacker to obtain sensitive information when a detailed technical error… |
CVE-2024-52896 | Medium | 6.2 | 2024-12-19 | IBM MQ 9.2 LTS, 9.3 LTS, 9.3 CD, 9.4 LTS, and 9.4 CD web console could allow a remote attacker to obtain sensitive information when a detailed technical error… |
CVE-2024-38864 | Low | 3.3 | 2024-12-19 | Incorrect permissions on the Checkmk Windows Agent's data directory in Checkmk < 2.3.0p23, < 2.2.0p38 and <= 2.1.0p49 (EOL) allows a local attacker to read sen… |
CVE-2023-30443 | Medium | 5.3 | 2024-12-19 | IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to denial of service with a specially crafted query. |
CVE-2022-33954 | Medium | 4.6 | 2024-12-19 | IBM Robotic Process Automation 21.0.1, 21.0.2, and 21.0.3 could allow a user with psychical access to the system to obtain sensitive information due to insuffi… |
CVE-2023-21586 | Medium | 5.5 | 2024-12-19 | Adobe Acrobat Reader versions 22.003.20282 (and earlier), 22.003.20281 (and earlier) and 20.005.30418 (and earlier) are affected by a NULL Pointer Dereference… |
CVE-2022-44520 | High | 7.8 | 2024-12-19 | Acrobat Reader DC version 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by a use-after-free vulnerability… |
CVE-2022-44519 | Medium | 5.5 | 2024-12-19 | Acrobat Reader DC version 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by a use-after-free vulnerability… |
CVE-2022-44518 | High | 7.8 | 2024-12-19 | Acrobat Reader DC version 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by a use-after-free vulnerability… |
CVE-2022-44517 | Medium | 5.5 | 2024-12-19 | Acrobat Reader DC version 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by an out-of-bounds read vulnerabi… |
CVE-2022-44516 | Medium | 5.5 | 2024-12-19 | Acrobat Reader DC version 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by an out-of-bounds read vulnerabi… |
CVE-2022-44515 | Medium | 5.5 | 2024-12-19 | Acrobat Reader DC version 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by an out-of-bounds read vulnerabi… |
CVE-2022-44514 | High | 7.8 | 2024-12-19 | Acrobat Reader DC version 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by a use-after-free vulnerability… |
CVE-2022-44513 | High | 7.8 | 2024-12-19 | Acrobat Reader DC version 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by an out-of-bounds write vulnerab… |
CVE-2022-44512 | High | 7.8 | 2024-12-19 | Acrobat Reader DC version 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by an out-of-bounds write vulnerab… |
CVE-2021-29827 | Medium | 5.2 | 2024-12-19 | IBM InfoSphere Information Server 11.7 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious W… |
CVE-2024-43106 | High | 7.1 | 2024-12-18 | A library injection vulnerability exists in Microsoft Excel 16.83 for macOS. A specially crafted library can leverage Excel's access privileges, leading to a p… |
CVE-2024-42220 | High | 7.1 | 2024-12-18 | A library injection vulnerability exists in Microsoft Outlook 16.83.3 for macOS. A specially crafted library can leverage Outlook's access privileges, leading… |
CVE-2024-42004 | High | 7.1 | 2024-12-18 | A library injection vulnerability exists in Microsoft Teams (work or school) 24046.2813.2770.1094 for macOS. A specially crafted library can leverage Teams's a… |
CVE-2024-41165 | High | 7.1 | 2024-12-18 | A library injection vulnerability exists in Microsoft Word 16.83 for macOS. A specially crafted library can leverage Word's access privileges, leading to a per… |
CVE-2024-41159 | High | 7.1 | 2024-12-18 | A library injection vulnerability exists in Microsoft OneNote 16.83 for macOS. A specially crafted library can leverage OneNote's access privileges, leading to… |
CVE-2024-41145 | High | 7.1 | 2024-12-18 | A library injection vulnerability exists in the WebView.app helper app of Microsoft Teams (work or school) 24046.2813.2770.1094 for macOS. A specially crafted… |
CVE-2024-41138 | High | 7.1 | 2024-12-18 | A library injection vulnerability exists in the com.microsoft.teams2.modulehost.app helper app of Microsoft Teams (work or school) 24046.2813.2770.1094 for mac… |
CVE-2024-39804 | High | 7.1 | 2024-12-18 | A library injection vulnerability exists in Microsoft PowerPoint 16.83 for macOS. A specially crafted library can leverage PowerPoint's access privileges, lead… |
CVE-2022-40733 | Medium | 5.0 | 2024-12-18 | An access violation vulnerability exists in the DirectComposition functionality win32kbase.sys driver version 10.0.22000.593 as part of Windows 11 version 2200… |
CVE-2022-40732 | Medium | 5.0 | 2024-12-18 | An access violation vulnerability exists in the DirectComposition functionality win32kbase.sys driver version 10.0.22000.593 as part of Windows 11 version 2200… |
CVE-2024-49576 | High | 8.8 | 2024-12-18 | A use-after-free vulnerability exists in the way Foxit Reader 2024.3.0.26795 handles a checkbox CBF_Widget object. A specially crafted Javascript code inside a… |
CVE-2024-47810 | High | 8.8 | 2024-12-18 | A use-after-free vulnerability exists in the way Foxit Reader 2024.3.0.26795 handles a 3D page object. A specially crafted Javascript code inside a malicious P… |
CVE-2024-49147 | Critical | 9.3 | 2024-12-12 | Deserialization of untrusted data in Microsoft Update Catalog allows an unauthorized attacker to elevate privileges on the website’s webserver. |
CVE-2024-49071 | Medium | 6.5 | 2024-12-12 | Improper authorization of an index that contains sensitive information from a Global Files search in Windows Defender allows an authorized attacker to disclose… |
CVE-2024-49142 | High | 7.8 | 2024-12-12 | Microsoft Access Remote Code Execution Vulnerability |
CVE-2024-49138 | High | 7.8 | 2024-12-12 | Windows Common Log File System Driver Elevation of Privilege Vulnerability |
CVE-2024-49132 | High | 8.1 | 2024-12-12 | Windows Remote Desktop Services Remote Code Execution Vulnerability |
CVE-2024-49129 | High | 7.5 | 2024-12-12 | Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability |
CVE-2024-49128 | High | 8.1 | 2024-12-12 | Sensitive data storage in improperly locked memory in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network. |
CVE-2024-49127 | High | 8.1 | 2024-12-12 | Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability |
CVE-2024-49126 | High | 8.1 | 2024-12-12 | Windows Local Security Authority Subsystem Service (LSASS) Remote Code Execution Vulnerability |
CVE-2024-49125 | High | 8.8 | 2024-12-12 | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
CVE-2024-49124 | High | 8.1 | 2024-12-12 | Lightweight Directory Access Protocol (LDAP) Client Remote Code Execution Vulnerability |
CVE-2024-49123 | High | 8.1 | 2024-12-12 | Windows Remote Desktop Services Remote Code Execution Vulnerability |
CVE-2024-49122 | High | 8.1 | 2024-12-12 | Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability |
CVE-2024-49121 | High | 7.5 | 2024-12-12 | Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability |
CVE-2024-49120 | High | 8.1 | 2024-12-12 | Windows Remote Desktop Services Remote Code Execution Vulnerability |
CVE-2024-49119 | High | 8.1 | 2024-12-12 | Windows Remote Desktop Services Remote Code Execution Vulnerability |
CVE-2024-49118 | High | 8.1 | 2024-12-12 | Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability |
CVE-2024-49117 | High | 8.8 | 2024-12-12 | Windows Hyper-V Remote Code Execution Vulnerability |
CVE-2024-49116 | High | 8.1 | 2024-12-12 | Windows Remote Desktop Services Remote Code Execution Vulnerability |
CVE-2024-49115 | High | 8.1 | 2024-12-12 | Windows Remote Desktop Services Remote Code Execution Vulnerability |
CVE-2024-49114 | High | 7.8 | 2024-12-12 | Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability |
CVE-2024-49113 | High | 7.5 | 2024-12-12 | Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability |
CVE-2024-49112 | Critical | 9.8 | 2024-12-12 | Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability |
CVE-2024-49111 | Medium | 6.6 | 2024-12-12 | Wireless Wide Area Network Service (WwanSvc) Elevation of Privilege Vulnerability |
CVE-2024-49110 | Medium | 6.8 | 2024-12-12 | Windows Mobile Broadband Driver Elevation of Privilege Vulnerability |
CVE-2024-49109 | Medium | 6.6 | 2024-12-12 | Wireless Wide Area Network Service (WwanSvc) Elevation of Privilege Vulnerability |
CVE-2024-49108 | High | 8.1 | 2024-12-12 | Windows Remote Desktop Services Remote Code Execution Vulnerability |
CVE-2024-49107 | High | 7.3 | 2024-12-12 | WmsRepair Service Elevation of Privilege Vulnerability |
CVE-2024-49106 | High | 8.1 | 2024-12-12 | Windows Remote Desktop Services Remote Code Execution Vulnerability |
CVE-2024-49105 | High | 8.4 | 2024-12-12 | Remote Desktop Client Remote Code Execution Vulnerability |
CVE-2024-49104 | High | 8.8 | 2024-12-12 | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
CVE-2024-49103 | Medium | 4.3 | 2024-12-12 | Windows Wireless Wide Area Network Service (WwanSvc) Information Disclosure Vulnerability |
CVE-2024-49102 | High | 8.8 | 2024-12-12 | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
CVE-2024-49101 | Medium | 6.6 | 2024-12-12 | Wireless Wide Area Network Service (WwanSvc) Elevation of Privilege Vulnerability |
CVE-2024-49099 | Medium | 4.3 | 2024-12-12 | Windows Wireless Wide Area Network Service (WwanSvc) Information Disclosure Vulnerability |
CVE-2024-49098 | Medium | 4.3 | 2024-12-12 | Windows Wireless Wide Area Network Service (WwanSvc) Information Disclosure Vulnerability |
CVE-2024-49097 | High | 7.0 | 2024-12-12 | Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability |
CVE-2024-49096 | High | 7.5 | 2024-12-12 | Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability |
CVE-2024-49095 | High | 7.0 | 2024-12-12 | Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability |
CVE-2024-49094 | Medium | 6.6 | 2024-12-12 | Wireless Wide Area Network Service (WwanSvc) Elevation of Privilege Vulnerability |
CVE-2024-49093 | High | 8.8 | 2024-12-12 | Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability |
CVE-2024-49092 | Medium | 6.8 | 2024-12-12 | Windows Mobile Broadband Driver Elevation of Privilege Vulnerability |
CVE-2024-49091 | High | 7.2 | 2024-12-12 | Windows Domain Name Service Remote Code Execution Vulnerability |
CVE-2024-49090 | High | 7.8 | 2024-12-12 | Windows Common Log File System Driver Elevation of Privilege Vulnerability |
CVE-2024-49089 | High | 7.2 | 2024-12-12 | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
CVE-2024-49088 | High | 7.8 | 2024-12-12 | Windows Common Log File System Driver Elevation of Privilege Vulnerability |
CVE-2024-49087 | Medium | 4.6 | 2024-12-12 | Windows Mobile Broadband Driver Information Disclosure Vulnerability |
CVE-2024-49086 | High | 8.8 | 2024-12-12 | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
CVE-2024-49085 | High | 8.8 | 2024-12-12 | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
CVE-2024-49084 | High | 7.0 | 2024-12-12 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2024-49083 | Medium | 6.8 | 2024-12-12 | Windows Mobile Broadband Driver Elevation of Privilege Vulnerability |
CVE-2024-49082 | Medium | 6.8 | 2024-12-12 | Windows File Explorer Information Disclosure Vulnerability |