Microsoft
Page 58 of 100 — Microsoft CVEs from a corpus of 26181, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-43447 | High | 8.1 | 2024-11-12 | Windows SMBv3 Server Remote Code Execution Vulnerability |
CVE-2024-38264 | Medium | 5.9 | 2024-11-12 | Microsoft Virtual Hard Disk (VHDX) Denial of Service Vulnerability |
CVE-2024-38255 | High | 8.8 | 2024-11-12 | SQL Server Native Client Remote Code Execution Vulnerability |
CVE-2024-38203 | Medium | 6.2 | 2024-11-12 | Windows Package Library Manager Information Disclosure Vulnerability |
CVE-2024-9842 | High | 7.3 | 2024-11-12 | Incorrect permissions in Ivanti Secure Access Client before version 22.7R4 allows a local authenticated attacker to create arbitrary folders. |
CVE-2024-8539 | High | 7.1 | 2024-11-12 | Improper authorization in Ivanti Secure Access Client before version 22.7R3 allows a local authenticated attacker to modify sensitive configuration files. |
CVE-2024-7571 | High | 7.8 | 2024-11-12 | Incorrect permissions in Ivanti Secure Access Client before 22.7R4 allows a local authenticated attacker to escalate their privileges. |
CVE-2024-49528 | High | 7.8 | 2024-11-12 | Animate versions 23.0.7, 24.0.4 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context o… |
CVE-2024-49527 | Medium | 5.5 | 2024-11-12 | Animate versions 23.0.7, 24.0.4 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker… |
CVE-2024-49526 | High | 7.8 | 2024-11-12 | Animate versions 23.0.7, 24.0.4 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the… |
CVE-2024-49514 | High | 7.8 | 2024-11-12 | Photoshop Desktop versions 24.7.3, 25.11 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in arbitrary cod… |
CVE-2024-47535 | Medium | 5.5 | 2024-11-12 | Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients. An unsaf… |
CVE-2024-10668 | High | 7.5 | 2024-11-07 | There exists an auth bypass in Google Quickshare where an attacker can upload an unknown file type to a victim. The root cause of the vulnerability lies in the… |
CVE-2024-51736 | Unrated | | 2024-11-06 | Symphony process is a module for the Symphony PHP framework which executes commands in sub-processes. On Windows, when an executable file named `cmd.exe` is lo… |
CVE-2024-9827 | High | 7.8 | 2024-10-29 | A maliciously crafted CATPART file when parsed in CC5Dll.dll through Autodesk AutoCAD can force an Out-of-Bounds Read vulnerability. A malicious actor can lev… |
CVE-2024-9826 | High | 7.8 | 2024-10-29 | A maliciously crafted 3DM file when parsed in atf_api.dll through Autodesk AutoCAD can force a Use-After-Free vulnerability. A malicious actor can leverage thi… |
CVE-2024-8600 | High | 7.8 | 2024-10-29 | A maliciously crafted SLDPRT file when parsed in odxsw_dll.dll through Autodesk AutoCAD can force a Memory Corruption vulnerability. A malicious actor can lev… |
CVE-2024-8599 | High | 7.8 | 2024-10-29 | A maliciously crafted STP file when parsed in ACTranslators.exe through Autodesk AutoCAD can force a Memory Corruption vulnerability. A malicious actor can lev… |
CVE-2024-8598 | High | 7.8 | 2024-10-29 | A maliciously crafted STP file when parsed in ACTranslators.exe through Autodesk AutoCAD can force a Memory Corruption vulnerability. A malicious actor can lev… |
CVE-2024-8597 | High | 7.8 | 2024-10-29 | A maliciously crafted STP file when parsed in ASMDATAX230A.dll through Autodesk AutoCAD can force a Memory Corruption vulnerability. A malicious actor can leve… |
CVE-2024-8596 | High | 7.8 | 2024-10-29 | A maliciously crafted MODEL file, when parsed in libodxdll.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability. A malicious actor may… |
CVE-2024-8595 | High | 7.8 | 2024-10-29 | A maliciously crafted MODEL file when parsed in libodxdll.dll through Autodesk AutoCAD can force a Use-After-Free vulnerability. A malicious actor can leverage… |
CVE-2024-8594 | High | 7.8 | 2024-10-29 | A maliciously crafted MODEL file when parsed in libodxdll.dll through Autodesk AutoCAD can force a Heap-Based Overflow vulnerability. A malicious actor can lev… |
CVE-2024-8593 | High | 7.8 | 2024-10-29 | A maliciously crafted CATPART file, when parsed in ASMKERN230A.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability. A malicious actor… |
CVE-2024-8592 | High | 7.8 | 2024-10-29 | A maliciously crafted CATPART file when parsed in AcTranslators.exe through Autodesk AutoCAD can force a Memory Corruption vulnerability. A malicious actor ca… |
CVE-2024-8591 | High | 7.8 | 2024-10-29 | A maliciously crafted 3DM file when parsed in AcTranslators.exe through Autodesk AutoCAD can force a Heap-Based Buffer Overflow vulnerability. A malicious act… |
CVE-2024-8590 | High | 7.8 | 2024-10-29 | A maliciously crafted 3DM file when parsed in atf_api.dll through Autodesk AutoCAD can force a Use-After-Free vulnerability. A malicious actor can leverage th… |
CVE-2024-8589 | High | 7.8 | 2024-10-29 | A maliciously crafted SLDPRT file when parsed in odxsw_dll.dll through Autodesk AutoCAD can force a Out-of-Bounds Read vulnerability. A malicious actor can le… |
CVE-2024-8588 | High | 7.8 | 2024-10-29 | A maliciously crafted SLDPRT file when parsed in odxsw_dll.dll through Autodesk AutoCAD can force a Out-of-Bounds Read vulnerability. A malicious actor can le… |
CVE-2024-49766 | Medium | 5.3 | 2024-10-25 | Werkzeug is a Web Server Gateway Interface web application library. On Python < 3.11 on Windows, os.path.isabs() does not catch UNC paths like //server/share… |
CVE-2024-9949 | Medium | 6.1 | 2024-10-23 | Denial of Service in Forescout SecureConnector 11.1.02.1019 on Windows allows Unprivileged user to corrupt the configuration file and cause Denial of Service i… |
CVE-2024-31880 | Medium | 5.3 | 2024-10-23 | IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to a denial of service, under specific configurations, as… |
CVE-2024-48903 | High | 7.8 | 2024-10-22 | An improper access control vulnerability in Trend Micro Deep Security Agent 20 could allow a local attacker to escalate privileges on affected installations. … |
CVE-2024-43577 | Medium | 4.3 | 2024-10-18 | Microsoft Edge (Chromium-based) Spoofing Vulnerability |
CVE-2024-49023 | Medium | 5.9 | 2024-10-18 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability |
CVE-2024-43596 | Medium | 6.5 | 2024-10-17 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability |
CVE-2024-43595 | Medium | 6.5 | 2024-10-17 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability |
CVE-2024-43587 | Medium | 5.9 | 2024-10-17 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability |
CVE-2024-43580 | Medium | 5.4 | 2024-10-17 | Microsoft Edge (Chromium-based) Spoofing Vulnerability |
CVE-2024-43579 | High | 7.6 | 2024-10-17 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability |
CVE-2024-43578 | High | 7.6 | 2024-10-17 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability |
CVE-2024-43566 | High | 7.5 | 2024-10-17 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability |
CVE-2024-45072 | Medium | 5.5 | 2024-10-16 | IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A privileged user could e… |
CVE-2024-45071 | Medium | 5.5 | 2024-10-16 | IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to stored cross-site scripting. This vulnerability allows a privileged user to embed arbitrary JavaS… |
CVE-2024-38204 | High | 7.5 | 2024-10-15 | Improper access control in Imagine Cup allows an authorized attacker to elevate privileges over a network. |
CVE-2024-38190 | High | 8.6 | 2024-10-15 | Missing authorization in Power Platform allows an unauthenticated attacker to view sensitive information through a network attack vector. |
CVE-2024-38139 | High | 8.7 | 2024-10-15 | Improper authentication in Microsoft Dataverse allows an authorized attacker to elevate privileges over a network. |
CVE-2024-9965 | High | 8.8 | 2024-10-15 | Insufficient data validation in DevTools in Google Chrome on Windows prior to 130.0.6723.58 allowed a remote attacker who convinced a user to engage in specifi… |
CVE-2024-49388 | Critical | 9.1 | 2024-10-15 | Sensitive information manipulation due to improper authorization. The following products are affected: Acronis Cyber Protect 16 (Linux, Windows) before build 3… |
CVE-2024-49387 | High | 7.5 | 2024-10-15 | Cleartext transmission of sensitive information in acep-collector service. The following products are affected: Acronis Cyber Protect 16 (Linux, Windows) befor… |
CVE-2024-49384 | Medium | 4.3 | 2024-10-15 | Excessive attack surface in acep-collector service due to binding to an unrestricted IP address. The following products are affected: Acronis Cyber Protect 16… |
CVE-2024-49383 | Medium | 4.3 | 2024-10-15 | Excessive attack surface in acep-importer service due to binding to an unrestricted IP address. The following products are affected: Acronis Cyber Protect 16 (… |
CVE-2024-49382 | Medium | 4.3 | 2024-10-15 | Excessive attack surface in archive-server service due to binding to an unrestricted IP address. The following products are affected: Acronis Cyber Protect 16… |
CVE-2024-0129 | Medium | 6.3 | 2024-10-15 | NVIDIA NeMo contains a vulnerability in SaveRestoreConnector where a user may cause a path traversal issue via an unsafe .tar file extraction. A successful exp… |
CVE-2024-45733 | High | 8.8 | 2024-10-14 | In Splunk Enterprise for Windows versions below 9.2.3 and 9.1.6, a low-privileged user that does not hold the "admin" or "power" Splunk roles could perform a R… |
CVE-2024-45731 | High | 8.0 | 2024-10-14 | In Splunk Enterprise for Windows versions below 9.3.1, 9.2.3, and 9.1.6, a low-privileged user that does not hold the "admin" or "power" Splunk roles could wri… |
CVE-2024-9469 | Medium | 5.5 | 2024-10-09 | A problem with a detection mechanism in the Palo Alto Networks Cortex XDR agent on Windows devices enables a user with Windows non-administrative privileges to… |
CVE-2024-43610 | High | 7.4 | 2024-10-09 | Exposure of Sensitive Information to an Unauthorized Actor in Copilot Studio allows a unauthenticated attacker to view sensitive information through network at… |
CVE-2024-47425 | High | 7.8 | 2024-10-09 | Adobe Framemaker versions 2020.6, 2022.4 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in arbitrary cod… |
CVE-2024-47424 | High | 7.8 | 2024-10-09 | Adobe Framemaker versions 2020.6, 2022.4 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execut… |
CVE-2024-47423 | High | 7.8 | 2024-10-09 | Adobe Framemaker versions 2020.6, 2022.4 and earlier are affected by an Unrestricted Upload of File with Dangerous Type vulnerability that could result in arbi… |
CVE-2024-47422 | High | 7.8 | 2024-10-09 | Adobe Framemaker versions 2020.6, 2022.4 and earlier are affected by an Untrusted Search Path vulnerability that could lead to arbitrary code execution. An att… |
CVE-2024-47421 | High | 7.8 | 2024-10-09 | Adobe Framemaker versions 2020.6, 2022.4 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a r… |
CVE-2024-45137 | High | 7.8 | 2024-10-09 | InDesign Desktop versions 19.4, 18.5.3 and earlier are affected by an Unrestricted Upload of File with Dangerous Type vulnerability that could result in arbitr… |
CVE-2024-45136 | High | 7.8 | 2024-10-09 | InCopy versions 19.4, 18.5.3 and earlier are affected by an Unrestricted Upload of File with Dangerous Type vulnerability that could result in arbitrary code e… |
CVE-2024-45152 | High | 7.8 | 2024-10-09 | Substance3D - Stager versions 3.0.3 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the conte… |
CVE-2024-45144 | High | 7.8 | 2024-10-09 | Substance3D - Stager versions 3.0.3 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the conte… |
CVE-2024-45143 | High | 7.8 | 2024-10-09 | Substance3D - Stager versions 3.0.3 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the… |
CVE-2024-45142 | High | 7.8 | 2024-10-09 | Substance3D - Stager versions 3.0.3 and earlier are affected by a Write-what-where Condition vulnerability that could allow an attacker to execute arbitrary co… |
CVE-2024-45141 | High | 7.8 | 2024-10-09 | Substance3D - Stager versions 3.0.3 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the conte… |
CVE-2024-45140 | High | 7.8 | 2024-10-09 | Substance3D - Stager versions 3.0.3 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the conte… |
CVE-2024-45139 | High | 7.8 | 2024-10-09 | Substance3D - Stager versions 3.0.3 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the… |
CVE-2024-45138 | High | 7.8 | 2024-10-09 | Substance3D - Stager versions 3.0.3 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of… |
CVE-2024-45720 | High | 8.2 | 2024-10-09 | On Windows platforms, a "best fit" character encoding conversion of command line arguments to Subversion's executables (e.g., svn.exe, etc.) may lead to unexpe… |
CVE-2024-47420 | Medium | 5.5 | 2024-10-09 | Animate versions 23.0.7, 24.0.4 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker… |
CVE-2024-47419 | Medium | 5.5 | 2024-10-09 | Animate versions 23.0.7, 24.0.4 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker… |
CVE-2024-47418 | High | 7.8 | 2024-10-09 | Animate versions 23.0.7, 24.0.4 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the… |
CVE-2024-47417 | High | 7.8 | 2024-10-09 | Animate versions 23.0.7, 24.0.4 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the con… |
CVE-2024-47416 | High | 7.8 | 2024-10-09 | Animate versions 23.0.7, 24.0.4 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in th… |
CVE-2024-47415 | High | 7.8 | 2024-10-09 | Animate versions 23.0.7, 24.0.4 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the… |
CVE-2024-47414 | High | 7.8 | 2024-10-09 | Animate versions 23.0.7, 24.0.4 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the… |
CVE-2024-47413 | High | 7.8 | 2024-10-09 | Animate versions 23.0.7, 24.0.4 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the… |
CVE-2024-47412 | High | 7.8 | 2024-10-09 | Animate versions 23.0.7, 24.0.4 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the… |
CVE-2024-47411 | High | 7.8 | 2024-10-09 | Animate versions 23.0.7, 24.0.4 and earlier are affected by an Access of Uninitialized Pointer vulnerability that could result in arbitrary code execution in t… |
CVE-2024-47410 | High | 7.8 | 2024-10-09 | Animate versions 23.0.7, 24.0.4 and earlier are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the co… |
CVE-2024-45150 | High | 7.8 | 2024-10-09 | Dimension versions 4.0.3 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the c… |
CVE-2024-45146 | High | 7.8 | 2024-10-09 | Dimension versions 4.0.3 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current… |
CVE-2024-43616 | High | 7.8 | 2024-10-08 | Microsoft Office Remote Code Execution Vulnerability |
CVE-2024-43615 | High | 7.1 | 2024-10-08 | Microsoft OpenSSH for Windows Remote Code Execution Vulnerability |
CVE-2024-43614 | Medium | 5.5 | 2024-10-08 | Relative path traversal in Microsoft Defender for Endpoint allows an authorized attacker to perform spoofing locally. |
CVE-2024-43612 | Medium | 6.9 | 2024-10-08 | Power BI Report Server Spoofing Vulnerability |
CVE-2024-43611 | High | 8.8 | 2024-10-08 | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
CVE-2024-43609 | Medium | 6.5 | 2024-10-08 | Microsoft Office Spoofing Vulnerability |
CVE-2024-43608 | High | 8.8 | 2024-10-08 | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
CVE-2024-43607 | High | 8.8 | 2024-10-08 | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
CVE-2024-43604 | Medium | 5.7 | 2024-10-08 | Outlook for Android Elevation of Privilege Vulnerability |
CVE-2024-43603 | Medium | 5.5 | 2024-10-08 | Visual Studio Collector Service Denial of Service Vulnerability |
CVE-2024-43601 | High | 7.8 | 2024-10-08 | Visual Studio Code for Linux Remote Code Execution Vulnerability |
CVE-2024-43599 | High | 8.8 | 2024-10-08 | Remote Desktop Client Remote Code Execution Vulnerability |
CVE-2024-43593 | High | 8.8 | 2024-10-08 | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |