Microsoft
Page 61 of 100 — Microsoft CVEs from a corpus of 26181, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-38239 | High | 7.2 | 2024-09-10 | Windows Kerberos Elevation of Privilege Vulnerability |
CVE-2024-38238 | High | 7.8 | 2024-09-10 | Kernel Streaming Service Driver Elevation of Privilege Vulnerability |
CVE-2024-38237 | High | 7.8 | 2024-09-10 | Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability |
CVE-2024-38236 | High | 7.5 | 2024-09-10 | DHCP Server Service Denial of Service Vulnerability |
CVE-2024-38235 | Medium | 6.5 | 2024-09-10 | Windows Hyper-V Denial of Service Vulnerability |
CVE-2024-38234 | Medium | 6.5 | 2024-09-10 | Windows Networking Denial of Service Vulnerability |
CVE-2024-38233 | High | 7.5 | 2024-09-10 | Windows Networking Denial of Service Vulnerability |
CVE-2024-38232 | High | 7.5 | 2024-09-10 | Windows Networking Denial of Service Vulnerability |
CVE-2024-38231 | Medium | 6.5 | 2024-09-10 | Windows Remote Desktop Licensing Service Denial of Service Vulnerability |
CVE-2024-38230 | Medium | 6.5 | 2024-09-10 | Windows Standards-Based Storage Management Service Denial of Service Vulnerability |
CVE-2024-38228 | High | 7.2 | 2024-09-10 | Microsoft SharePoint Server Remote Code Execution Vulnerability |
CVE-2024-38227 | High | 7.2 | 2024-09-10 | Microsoft SharePoint Server Remote Code Execution Vulnerability |
CVE-2024-38226 | High | 7.3 | 2024-09-10 | Microsoft Publisher Security Feature Bypass Vulnerability |
CVE-2024-38225 | High | 8.8 | 2024-09-10 | Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability |
CVE-2024-38220 | Critical | 9.0 | 2024-09-10 | Azure Stack Hub Elevation of Privilege Vulnerability |
CVE-2024-38217 | Medium | 5.4 | 2024-09-10 | Windows Mark of the Web Security Feature Bypass Vulnerability |
CVE-2024-38216 | High | 8.2 | 2024-09-10 | Azure Stack Hub Elevation of Privilege Vulnerability |
CVE-2024-38194 | High | 8.4 | 2024-09-10 | An authenticated attacker can exploit an improper authorization vulnerability in Azure Web Apps to elevate privileges over a network. |
CVE-2024-38188 | High | 7.1 | 2024-09-10 | Azure Network Watcher VM Agent Elevation of Privilege Vulnerability |
CVE-2024-38119 | High | 7.5 | 2024-09-10 | Windows Network Address Translation (NAT) Remote Code Execution Vulnerability |
CVE-2024-38046 | High | 7.8 | 2024-09-10 | PowerShell Elevation of Privilege Vulnerability |
CVE-2024-38045 | High | 8.1 | 2024-09-10 | Windows TCP/IP Remote Code Execution Vulnerability |
CVE-2024-38018 | High | 8.8 | 2024-09-10 | Microsoft SharePoint Server Remote Code Execution Vulnerability |
CVE-2024-38014 | High | 7.8 | 2024-09-10 | Windows Installer Elevation of Privilege Vulnerability |
CVE-2024-37980 | High | 8.8 | 2024-09-10 | Microsoft SQL Server Elevation of Privilege Vulnerability |
CVE-2024-37966 | High | 7.1 | 2024-09-10 | Microsoft SQL Server Native Scoring Information Disclosure Vulnerability |
CVE-2024-37965 | High | 8.8 | 2024-09-10 | Microsoft SQL Server Elevation of Privilege Vulnerability |
CVE-2024-37342 | High | 7.1 | 2024-09-10 | Microsoft SQL Server Native Scoring Information Disclosure Vulnerability |
CVE-2024-37341 | High | 8.8 | 2024-09-10 | Microsoft SQL Server Elevation of Privilege Vulnerability |
CVE-2024-37340 | High | 8.8 | 2024-09-10 | Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability |
CVE-2024-37339 | High | 8.8 | 2024-09-10 | Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability |
CVE-2024-37338 | High | 8.8 | 2024-09-10 | Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability |
CVE-2024-37337 | High | 7.1 | 2024-09-10 | Microsoft SQL Server Native Scoring Information Disclosure Vulnerability |
CVE-2024-37335 | High | 8.8 | 2024-09-10 | Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability |
CVE-2024-30073 | High | 7.8 | 2024-09-10 | Windows Security Zone Mapping Security Feature Bypass Vulnerability |
CVE-2024-26191 | High | 8.8 | 2024-09-10 | Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability |
CVE-2024-26186 | High | 8.8 | 2024-09-10 | Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability |
CVE-2024-21416 | High | 8.1 | 2024-09-10 | Windows TCP/IP Remote Code Execution Vulnerability |
CVE-2024-45107 | Medium | 5.5 | 2024-09-05 | Acrobat Reader versions 20.005.30636, 24.002.20964, 24.001.30123, 24.002.20991 and earlier are affected by a Use After Free vulnerability that could lead to di… |
CVE-2024-39747 | High | 8.1 | 2024-08-31 | IBM Sterling Connect:Direct Web Services 6.0, 6.1, 6.2, and 6.3 uses default credentials for potentially critical functionality. |
CVE-2024-8260 | Medium | 6.1 | 2024-08-30 | A SMB force-authentication vulnerability exists in all versions of OPA for Windows prior to v0.68.0. The vulnerability exists because of improper input validat… |
CVE-2024-2881 | Medium | 6.7 | 2024-08-30 | Fault Injection vulnerability in wc_ed25519_sign_msg function in wolfssl/wolfcrypt/src/ed25519.c in WolfSSL wolfssl5.6.6 on Linux/Windows allows remote attacke… |
CVE-2024-1545 | Medium | 5.9 | 2024-08-29 | Fault Injection vulnerability in RsaPrivateDecryption function in wolfssl/wolfcrypt/src/rsa.c in WolfSSL wolfssl5.6.6 on Linux/Windows allows remote attacker c… |
CVE-2024-6053 | Medium | 4.3 | 2024-08-28 | Improper access control in the clipboard synchronization feature in TeamViewer Full Client prior version 15.57 and TeamViewer Meeting prior version 15.55.3 can… |
CVE-2024-41879 | High | 7.8 | 2024-08-26 | Acrobat Reader versions 127.0.2651.105 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the co… |
CVE-2024-38207 | Medium | 6.3 | 2024-08-23 | Microsoft Edge (HTML-based) Memory Corruption Vulnerability |
CVE-2024-43477 | High | 7.5 | 2024-08-23 | Improper access control in Decentralized Identity Services resulted in a vulnerability that allows an unauthenticated attacker to disable Verifiable ID's on an… |
CVE-2024-38210 | High | 7.8 | 2024-08-22 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability |
CVE-2024-38209 | High | 7.8 | 2024-08-22 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability |
CVE-2024-38208 | Medium | 6.1 | 2024-08-22 | Microsoft Edge for Android Spoofing Vulnerability |
CVE-2024-39746 | Medium | 5.9 | 2024-08-22 | IBM Sterling Connect:Direct Web Services 6.0, 6.1, 6.2, and 6.3 could allow a remote attacker to obtain sensitive information, caused by the failure to properl… |
CVE-2024-39745 | Medium | 5.9 | 2024-08-22 | IBM Sterling Connect:Direct Web Services 6.0, 6.1, 6.2, and 6.3 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt high… |
CVE-2024-39744 | Medium | 4.3 | 2024-08-22 | IBM Sterling Connect:Direct Web Services 6.0, 6.1, 6.2, and 6.3 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious… |
CVE-2024-43033 | High | 8.8 | 2024-08-22 | JPress through 5.1.1 on Windows has an arbitrary file upload vulnerability that could cause arbitrary code execution via ::$DATA to AttachmentController, such… |
CVE-2024-8035 | Medium | 4.3 | 2024-08-21 | Inappropriate implementation in Extensions in Google Chrome on Windows prior to 128.0.6613.84 allowed a remote attacker to perform UI spoofing via a crafted HT… |
CVE-2024-8033 | Medium | 4.3 | 2024-08-21 | Inappropriate implementation in WebApp Installs in Google Chrome on Windows prior to 128.0.6613.84 allowed an attacker who convinced a user to install a malici… |
CVE-2024-7980 | High | 7.8 | 2024-08-21 | Insufficient data validation in Installer in Google Chrome on Windows prior to 128.0.6613.84 allowed a local attacker to perform privilege escalation via a cra… |
CVE-2024-7979 | High | 7.8 | 2024-08-21 | Insufficient data validation in Installer in Google Chrome on Windows prior to 128.0.6613.84 allowed a local attacker to perform privilege escalation via a cra… |
CVE-2024-7977 | High | 7.8 | 2024-08-21 | Insufficient data validation in Installer in Google Chrome on Windows prior to 128.0.6613.84 allowed a local attacker to perform privilege escalation via a mal… |
CVE-2024-7971 | Critical | 9.6 | 2024-08-21 | Type confusion in V8 in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to exploit heap corruption via a crafted HTML page. (Chromium security s… |
CVE-2024-7965 | High | 8.8 | 2024-08-21 | Inappropriate implementation in V8 in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML… |
CVE-2024-7998 | Low | 2.6 | 2024-08-21 | In affected versions of Octopus Server OIDC cookies were using the wrong expiration time which could result in them using the maximum lifespan. |
CVE-2024-38175 | Critical | 9.6 | 2024-08-20 | An improper access control vulnerability in the Azure Managed Instance for Apache Cassandra allows an authenticated attacker to elevate privileges over a netwo… |
CVE-2024-43472 | Medium | 5.8 | 2024-08-16 | Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability |
CVE-2024-7263 | High | 7.8 | 2024-08-15 | Improper path validation in promecefpluginhost.exe in Kingsoft WPS Office version ranging from 12.2.0.13110 to 12.2.0.17115 (exclusive) on Windows allows an at… |
CVE-2024-7262 | High | 7.8 | 2024-08-15 | Improper path validation in promecefpluginhost.exe in Kingsoft WPS Office version ranging from 12.2.0.13110 to 12.2.0.16412 (exclusive) on Windows allows an at… |
CVE-2024-43373 | High | 7.7 | 2024-08-15 | webcrack is a tool for reverse engineering javascript. An arbitrary file write vulnerability exists in the webcrack module when processing specifically crafted… |
CVE-2024-41866 | Medium | 5.5 | 2024-08-14 | InDesign Desktop versions ID19.4, ID18.5.2 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to an application denial-of-ser… |
CVE-2024-41856 | High | 7.8 | 2024-08-14 | Illustrator versions 28.5, 27.9.4, 28.6, 27.9.5 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code exec… |
CVE-2024-41854 | Medium | 5.5 | 2024-08-14 | InDesign Desktop versions ID19.4, ID18.5.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. A… |
CVE-2024-41853 | High | 7.8 | 2024-08-14 | InDesign Desktop versions ID19.4, ID18.5.2 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution… |
CVE-2024-41852 | High | 7.8 | 2024-08-14 | InDesign Desktop versions ID19.4, ID18.5.2 and earlier are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code executio… |
CVE-2024-41851 | High | 7.8 | 2024-08-14 | InDesign Desktop versions ID19.4, ID18.5.2 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code exec… |
CVE-2024-41850 | High | 7.8 | 2024-08-14 | InDesign Desktop versions ID19.4, ID18.5.2 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution… |
CVE-2024-41840 | High | 7.8 | 2024-08-14 | Bridge versions 13.0.8, 14.1.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of… |
CVE-2024-41835 | Medium | 5.5 | 2024-08-14 | Acrobat Reader versions 20.005.30636, 24.002.20965, 24.002.20964, 24.001.30123 and earlier are affected by an out-of-bounds read vulnerability that could lead… |
CVE-2024-41834 | Medium | 5.5 | 2024-08-14 | Acrobat Reader versions 20.005.30636, 24.002.20965, 24.002.20964, 24.001.30123 and earlier are affected by an out-of-bounds read vulnerability that could lead… |
CVE-2024-41833 | Medium | 5.5 | 2024-08-14 | Acrobat Reader versions 20.005.30636, 24.002.20965, 24.002.20964, 24.001.30123 and earlier are affected by an out-of-bounds read vulnerability that could lead… |
CVE-2024-41832 | Medium | 5.5 | 2024-08-14 | Acrobat Reader versions 20.005.30636, 24.002.20965, 24.002.20964, 24.001.30123 and earlier are affected by an out-of-bounds read vulnerability that could lead… |
CVE-2024-41831 | High | 7.8 | 2024-08-14 | Acrobat Reader versions 20.005.30636, 24.002.20965, 24.002.20964, 24.001.30123 and earlier are affected by a Use After Free vulnerability that could result in… |
CVE-2024-41830 | High | 7.8 | 2024-08-14 | Acrobat Reader versions 20.005.30636, 24.002.20965, 24.002.20964, 24.001.30123 and earlier are affected by a Use After Free vulnerability that could result in… |
CVE-2024-39426 | High | 7.8 | 2024-08-14 | Acrobat Reader versions 20.005.30636, 24.002.20965, 24.002.20964, 24.001.30123 and earlier are affected by an out-of-bounds read vulnerability when parsing a c… |
CVE-2024-39425 | High | 7.0 | 2024-08-14 | Acrobat Reader versions 20.005.30636, 24.002.20965, 24.002.20964, 24.001.30123 and earlier are affected by a Time-of-check Time-of-use (TOCTOU) Race Condition… |
CVE-2024-39424 | High | 7.8 | 2024-08-14 | Acrobat Reader versions 20.005.30636, 24.002.20965, 24.002.20964, 24.001.30123 and earlier are affected by a Use After Free vulnerability that could result in… |
CVE-2024-39423 | High | 7.8 | 2024-08-14 | Acrobat Reader versions 20.005.30636, 24.002.20965, 24.002.20964, 24.001.30123 and earlier are affected by an out-of-bounds write vulnerability that could resu… |
CVE-2024-39422 | High | 7.8 | 2024-08-14 | Acrobat Reader versions 20.005.30636, 24.002.20965, 24.002.20964, 24.001.30123 and earlier are affected by a Use After Free vulnerability that could result in… |
CVE-2024-39420 | High | 7.0 | 2024-08-14 | Acrobat Reader versions 20.005.30636, 24.002.21005, 24.001.30159, 20.005.30655, 24.002.20965, 24.002.20964, 24.001.30123, 24.003.20054 and earlier are affected… |
CVE-2024-39395 | Medium | 5.5 | 2024-08-14 | InDesign Desktop versions ID19.4, ID18.5.2 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to an application denial-of-ser… |
CVE-2024-39394 | High | 7.8 | 2024-08-14 | InDesign Desktop versions ID19.4, ID18.5.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in th… |
CVE-2024-39393 | High | 7.8 | 2024-08-14 | InDesign Desktop versions ID19.4, ID18.5.2 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a… |
CVE-2024-39391 | High | 7.8 | 2024-08-14 | InDesign Desktop versions ID19.4, ID18.5.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in th… |
CVE-2024-39390 | High | 7.8 | 2024-08-14 | InDesign Desktop versions ID19.4, ID18.5.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in th… |
CVE-2024-39389 | High | 7.8 | 2024-08-14 | InDesign Desktop versions ID19.4, ID18.5.2 and earlier are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code executio… |
CVE-2024-39388 | High | 7.8 | 2024-08-14 | Substance3D - Stager versions 3.0.2 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of… |
CVE-2024-39387 | Medium | 5.5 | 2024-08-14 | Bridge versions 13.0.8, 14.1.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker c… |
CVE-2024-39386 | High | 7.8 | 2024-08-14 | Bridge versions 13.0.8, 14.1.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of… |
CVE-2024-39383 | High | 7.8 | 2024-08-14 | Acrobat Reader versions 20.005.30636, 24.002.20965, 24.002.20964, 24.001.30123 and earlier are affected by a Use After Free vulnerability that could result in… |
CVE-2024-34138 | Medium | 5.5 | 2024-08-14 | Illustrator versions 28.5, 27.9.4 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to an application denial-of-service (DoS… |
CVE-2024-34137 | Medium | 5.5 | 2024-08-14 | Illustrator versions 28.5, 27.9.4 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to an application denial-of-service (DoS… |
CVE-2024-34136 | Medium | 5.5 | 2024-08-14 | Illustrator versions 28.5, 27.9.4 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to an application denial-of-service (DoS… |