Microsoft
Page 60 of 100 — Microsoft CVEs from a corpus of 26181, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-37979 | Medium | 6.7 | 2024-10-08 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2024-37976 | Medium | 6.7 | 2024-10-08 | Windows Resume Extensible Firmware Interface Security Feature Bypass Vulnerability |
CVE-2024-30092 | High | 8.0 | 2024-10-08 | Windows Hyper-V Remote Code Execution Vulnerability |
CVE-2024-20659 | High | 7.1 | 2024-10-08 | Windows Hyper-V Security Feature Bypass Vulnerability |
CVE-2024-25707 | Medium | 4.8 | 2024-10-04 | There is a reflected cross site scripting in Esri Portal for ArcGIS 11.1 and below on Windows and Linux x64 allows a remote authenticated attacker with adminis… |
CVE-2024-0125 | Low | 3.3 | 2024-10-03 | NVIDIA CUDA Toolkit for Windows and Linux contains a vulnerability in the nvdisam command line tool, where a user can cause a NULL pointer dereference by runni… |
CVE-2024-0124 | Low | 3.3 | 2024-10-03 | NVIDIA CUDA Toolkit for Windows and Linux contains a vulnerability in the nvdisam command line tool, where a user can cause nvdisasm to read freed memory by ru… |
CVE-2024-0123 | Low | 3.3 | 2024-10-03 | NVIDIA CUDA toolkit for Windows and Linux contains a vulnerability in the nvdisasm command line tool where an attacker may cause an improper validation in inpu… |
CVE-2024-47604 | High | 8.2 | 2024-10-01 | NuGet Gallery is a package repository that powers nuget.org. The NuGetGallery has a security vulnerability in its handling of HTML element attributes, which al… |
CVE-2024-9194 | Critical | 9.8 | 2024-09-30 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Linux and Microsoft Windows Octopus Server on Windows, Li… |
CVE-2024-45073 | Medium | 4.8 | 2024-09-30 | IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to stored cross-site scripting. This vulnerability allows a privileged user to embed arbitrary JavaS… |
CVE-2024-6769 | Medium | 6.7 | 2024-09-26 | A DLL Hijacking caused by drive remapping combined with a poisoning of the activation cache in Microsoft Windows 10, Windows 11, Windows Server 2016, Windows S… |
CVE-2024-47083 | High | 7.5 | 2024-09-25 | Power Platform Terraform Provider allows managing environments and other resources within Power Platform. Versions prior to 3.0.0 have an issue in the Power Pl… |
CVE-2024-8996 | High | 7.3 | 2024-09-25 | Unquoted Search Path or Element vulnerability in Grafana Agent (Flow mode) on Windows allows Privilege Escalation from Local User to SYSTEM This issue affects… |
CVE-2024-8975 | High | 7.3 | 2024-09-25 | Unquoted Search Path or Element vulnerability in Grafana Alloy on Windows allows Privilege Escalation from Local User to SYSTEM This issue affects Alloy: befor… |
CVE-2024-9120 | High | 8.8 | 2024-09-25 | Use after free in Dawn in Google Chrome on Windows prior to 129.0.6668.70 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML p… |
CVE-2022-43845 | Low | 3.7 | 2024-09-25 | IBM Aspera Console 3.4.0 through 3.4.4 could allow a remote attacker to obtain sensitive information, caused by the failure to set the HTTPOnly flag. A remote… |
CVE-2021-38963 | High | 8.0 | 2024-09-25 | IBM Aspera Console 3.4.0 through 3.4.4 could allow a remote authenticated attacker to execute arbitrary code on the system, caused by a CSV injection vulnerabi… |
CVE-2024-7023 | High | 8.8 | 2024-09-23 | Insufficient data validation in Updater in Google Chrome prior to 128.0.6537.0 allowed a remote attacker to perform privilege escalation via a malicious file… |
CVE-2024-43496 | Medium | 6.5 | 2024-09-19 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability |
CVE-2024-43489 | Medium | 6.5 | 2024-09-19 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability |
CVE-2024-38221 | Medium | 4.3 | 2024-09-19 | Microsoft Edge (Chromium-based) Spoofing Vulnerability |
CVE-2024-38016 | High | 7.8 | 2024-09-19 | Microsoft Office Visio Remote Code Execution Vulnerability |
CVE-2024-37985 | Medium | 5.9 | 2024-09-17 | Windows Kernel Information Disclosure Vulnerability |
CVE-2024-43460 | High | 8.1 | 2024-09-17 | Improper authorization in Dynamics 365 Business Central resulted in a vulnerability that allows an authenticated attacker to elevate privileges over a network. |
CVE-2024-38183 | Critical | 9.8 | 2024-09-17 | An improper access control vulnerability in GroupMe allows an a unauthenticated attacker to elevate privileges over a network. |
CVE-2024-8752 | High | 7.5 | 2024-09-16 | The Windows version of WebIQ 2.15.9 is affected by a directory traversal vulnerability that allows remote attackers to read any file on the system. |
CVE-2024-45109 | High | 7.8 | 2024-09-13 | Photoshop Desktop versions 24.7.4, 25.11 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the… |
CVE-2024-45108 | High | 7.8 | 2024-09-13 | Photoshop Desktop versions 24.7.4, 25.11 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the… |
CVE-2024-43760 | High | 7.8 | 2024-09-13 | Photoshop Desktop versions 24.7.4, 25.11 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the… |
CVE-2024-43756 | High | 7.8 | 2024-09-13 | Photoshop Desktop versions 24.7.4, 25.11 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution i… |
CVE-2024-45112 | High | 7.8 | 2024-09-13 | Acrobat Reader versions 24.002.21005, 24.001.30159, 20.005.30655, 24.003.20054 and earlier are affected by a Type Confusion vulnerability that could result in… |
CVE-2024-45111 | Medium | 5.5 | 2024-09-13 | Illustrator versions 28.6, 27.9.5 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacke… |
CVE-2024-43759 | Medium | 5.5 | 2024-09-13 | Illustrator versions 28.6, 27.9.5 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to an application denial-of-service (DoS… |
CVE-2024-43758 | High | 7.8 | 2024-09-13 | Illustrator versions 28.6, 27.9.5 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of th… |
CVE-2024-41869 | High | 7.8 | 2024-09-13 | Acrobat Reader versions 24.002.21005, 24.001.30159, 20.005.30655, 24.003.20054 and earlier are affected by a Use After Free vulnerability that could result in… |
CVE-2024-41867 | Medium | 5.5 | 2024-09-13 | After Effects versions 23.6.6, 24.5 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attac… |
CVE-2024-41859 | High | 7.8 | 2024-09-13 | After Effects versions 23.6.6, 24.5 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the conte… |
CVE-2024-41857 | High | 7.8 | 2024-09-13 | Illustrator versions 28.6, 27.9.5 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in arbitrary code execu… |
CVE-2024-39385 | Medium | 5.5 | 2024-09-13 | Premiere Pro versions 24.5, 23.6.8 and earlier are affected by a Use After Free vulnerability that could lead to disclosure of sensitive memory. An attacker co… |
CVE-2024-39384 | High | 7.8 | 2024-09-13 | Premiere Pro versions 24.5, 23.6.8 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the contex… |
CVE-2024-39382 | Medium | 5.5 | 2024-09-13 | After Effects versions 23.6.6, 24.5 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attac… |
CVE-2024-39381 | High | 7.8 | 2024-09-13 | After Effects versions 23.6.6, 24.5 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the conte… |
CVE-2024-39380 | High | 7.8 | 2024-09-13 | After Effects versions 23.6.6, 24.5 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the… |
CVE-2024-34121 | High | 7.8 | 2024-09-13 | Illustrator versions 28.6, 27.9.5 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in… |
CVE-2024-41873 | Medium | 5.5 | 2024-09-13 | Media Encoder versions 24.5, 23.6.8 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attac… |
CVE-2024-41872 | Medium | 5.5 | 2024-09-13 | Media Encoder versions 24.5, 23.6.8 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attac… |
CVE-2024-41871 | Medium | 5.5 | 2024-09-13 | Media Encoder versions 24.5, 23.6.8 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attac… |
CVE-2024-41870 | Medium | 5.5 | 2024-09-13 | Media Encoder versions 24.5, 23.6.8 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attac… |
CVE-2024-39377 | High | 7.8 | 2024-09-13 | Media Encoder versions 24.5, 23.6.8 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the conte… |
CVE-2024-45383 | Medium | 5.0 | 2024-09-12 | A mishandling of IRP requests vulnerability exists in the HDAudBus_DMA interface of Microsoft High Definition Audio Bus Driver 10.0.19041.3636 (WinBuild.160101… |
CVE-2024-45182 | Medium | 5.5 | 2024-09-12 | An issue was discovered in WibuKey64.sys in WIBU-SYSTEMS WibuKey before v6.70 and fixed in v.6.70 An improper bounds check allows specially crafted packets to… |
CVE-2024-45181 | High | 7.8 | 2024-09-12 | An issue was discovered in WibuKey64.sys in WIBU-SYSTEMS WibuKey before v6.70 and fixed in v.6.70. An improper bounds check allows crafted packets to cause an… |
CVE-2024-38222 | Medium | 6.5 | 2024-09-12 | Microsoft Edge (Chromium-based) Information Disclosure Vulnerability |
CVE-2024-8690 | Medium | 4.4 | 2024-09-11 | A problem with a detection mechanism in the Palo Alto Networks Cortex XDR agent on Windows devices enables a user with Windows administrator privileges to disa… |
CVE-2024-5760 | High | 7.8 | 2024-09-11 | The Samsung Universal Print Driver for Windows is potentially vulnerable to escalation of privilege allowing the creation of a reverse shell in the tool. This… |
CVE-2024-41868 | Medium | 5.5 | 2024-09-11 | Audition versions 24.4.1, 23.6.6 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker… |
CVE-2024-39378 | High | 7.8 | 2024-09-11 | Audition versions 24.4.1, 23.6.6 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context… |
CVE-2024-1656 | Low | 2.6 | 2024-09-11 | Affected versions of Octopus Server had a weak content security policy. |
CVE-2024-43495 | High | 7.3 | 2024-09-10 | Windows libarchive Remote Code Execution Vulnerability |
CVE-2024-43492 | High | 7.8 | 2024-09-10 | Microsoft AutoUpdate (MAU) Elevation of Privilege Vulnerability |
CVE-2024-43491 | Critical | 9.8 | 2024-09-10 | Microsoft is aware of a vulnerability in Servicing Stack that has rolled back the fixes for some vulnerabilities affecting Optional Components on Windows 10, v… |
CVE-2024-43487 | Medium | 6.5 | 2024-09-10 | Windows Mark of the Web Security Feature Bypass Vulnerability |
CVE-2024-43482 | Medium | 6.5 | 2024-09-10 | Microsoft Outlook for iOS Information Disclosure Vulnerability |
CVE-2024-43479 | High | 8.5 | 2024-09-10 | Microsoft Power Automate Desktop Remote Code Execution Vulnerability |
CVE-2024-43476 | High | 7.6 | 2024-09-10 | Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability |
CVE-2024-43475 | High | 7.3 | 2024-09-10 | Microsoft Windows Admin Center Information Disclosure Vulnerability |
CVE-2024-43474 | High | 7.6 | 2024-09-10 | Microsoft SQL Server Information Disclosure Vulnerability |
CVE-2024-43470 | High | 7.3 | 2024-09-10 | Azure Network Watcher VM Agent Elevation of Privilege Vulnerability |
CVE-2024-43469 | High | 8.8 | 2024-09-10 | Azure CycleCloud Remote Code Execution Vulnerability |
CVE-2024-43467 | High | 7.5 | 2024-09-10 | Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability |
CVE-2024-43466 | Medium | 6.5 | 2024-09-10 | Microsoft SharePoint Server Denial of Service Vulnerability |
CVE-2024-43465 | High | 7.8 | 2024-09-10 | Microsoft Excel Elevation of Privilege Vulnerability |
CVE-2024-43464 | High | 7.2 | 2024-09-10 | Microsoft SharePoint Server Remote Code Execution Vulnerability |
CVE-2024-43463 | High | 7.8 | 2024-09-10 | Microsoft Office Visio Remote Code Execution Vulnerability |
CVE-2024-43461 | High | 8.8 | 2024-09-10 | Windows MSHTML Platform Spoofing Vulnerability |
CVE-2024-43458 | High | 7.7 | 2024-09-10 | Windows Networking Information Disclosure Vulnerability |
CVE-2024-43457 | High | 7.8 | 2024-09-10 | Windows Setup and Deployment Elevation of Privilege Vulnerability |
CVE-2024-43455 | High | 8.8 | 2024-09-10 | Windows Remote Desktop Licensing Service Spoofing Vulnerability |
CVE-2024-43454 | High | 7.1 | 2024-09-10 | Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability |
CVE-2024-38263 | High | 7.5 | 2024-09-10 | Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability |
CVE-2024-38260 | High | 8.8 | 2024-09-10 | Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability |
CVE-2024-38259 | High | 8.8 | 2024-09-10 | Microsoft Management Console Remote Code Execution Vulnerability |
CVE-2024-38258 | Medium | 6.5 | 2024-09-10 | Windows Remote Desktop Licensing Service Information Disclosure Vulnerability |
CVE-2024-38257 | High | 7.5 | 2024-09-10 | Microsoft AllJoyn API Information Disclosure Vulnerability |
CVE-2024-38256 | Medium | 5.5 | 2024-09-10 | Windows Kernel-Mode Driver Information Disclosure Vulnerability |
CVE-2024-38254 | Medium | 5.5 | 2024-09-10 | Windows Authentication Information Disclosure Vulnerability |
CVE-2024-38253 | High | 7.8 | 2024-09-10 | Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability |
CVE-2024-38252 | High | 7.8 | 2024-09-10 | Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability |
CVE-2024-38250 | High | 7.8 | 2024-09-10 | Windows Graphics Component Elevation of Privilege Vulnerability |
CVE-2024-38249 | High | 7.8 | 2024-09-10 | Windows Graphics Component Elevation of Privilege Vulnerability |
CVE-2024-38248 | High | 7.0 | 2024-09-10 | Windows Storage Elevation of Privilege Vulnerability |
CVE-2024-38247 | High | 7.8 | 2024-09-10 | Windows Graphics Component Elevation of Privilege Vulnerability |
CVE-2024-38246 | High | 7.0 | 2024-09-10 | Win32k Elevation of Privilege Vulnerability |
CVE-2024-38245 | High | 7.8 | 2024-09-10 | Kernel Streaming Service Driver Elevation of Privilege Vulnerability |
CVE-2024-38244 | High | 7.8 | 2024-09-10 | Kernel Streaming Service Driver Elevation of Privilege Vulnerability |
CVE-2024-38243 | High | 7.8 | 2024-09-10 | Kernel Streaming Service Driver Elevation of Privilege Vulnerability |
CVE-2024-38242 | High | 7.8 | 2024-09-10 | Kernel Streaming Service Driver Elevation of Privilege Vulnerability |
CVE-2024-38241 | High | 7.8 | 2024-09-10 | Kernel Streaming Service Driver Elevation of Privilege Vulnerability |
CVE-2024-38240 | High | 8.1 | 2024-09-10 | Windows Remote Access Connection Manager Elevation of Privilege Vulnerability |