Microsoft
Page 62 of 100 — Microsoft CVEs from a corpus of 26181, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-34135 | Medium | 5.5 | 2024-08-14 | Illustrator versions 28.5, 27.9.4 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacke… |
CVE-2024-34134 | Medium | 5.5 | 2024-08-14 | Illustrator versions 28.5, 27.9.4 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacke… |
CVE-2024-34133 | High | 7.8 | 2024-08-14 | Illustrator versions 28.5, 27.9.4 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context… |
CVE-2024-34127 | Medium | 5.5 | 2024-08-14 | InDesign Desktop versions ID19.4, ID18.5.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. A… |
CVE-2024-34118 | Medium | 5.5 | 2024-08-14 | Illustrator versions 28.5, 27.9.4 and earlier are affected by an Improper Input Validation vulnerability that could lead to an application denial-of-service co… |
CVE-2024-34117 | High | 7.8 | 2024-08-14 | Photoshop Desktop versions 24.7.3, 25.9.1 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the conte… |
CVE-2024-41858 | High | 7.8 | 2024-08-14 | InCopy versions 18.5.2, 19.4 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the c… |
CVE-2024-38163 | High | 7.8 | 2024-08-14 | Windows Update Stack Elevation of Privilege Vulnerability |
CVE-2024-38223 | Medium | 6.8 | 2024-08-13 | Windows Initial Machine Configuration Elevation of Privilege Vulnerability |
CVE-2024-38215 | High | 7.8 | 2024-08-13 | Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability |
CVE-2024-38214 | Medium | 6.5 | 2024-08-13 | Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability |
CVE-2024-38213 | Medium | 6.5 | 2024-08-13 | Windows Mark of the Web Security Feature Bypass Vulnerability |
CVE-2024-38211 | High | 8.2 | 2024-08-13 | Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability |
CVE-2024-38201 | High | 7.0 | 2024-08-13 | Azure Stack Hub Elevation of Privilege Vulnerability |
CVE-2024-38199 | Critical | 9.8 | 2024-08-13 | Windows Line Printer Daemon (LPD) Service Remote Code Execution Vulnerability |
CVE-2024-38198 | High | 7.5 | 2024-08-13 | Windows Print Spooler Elevation of Privilege Vulnerability |
CVE-2024-38197 | Medium | 6.5 | 2024-08-13 | Microsoft Teams for iOS Spoofing Vulnerability |
CVE-2024-38196 | High | 7.8 | 2024-08-13 | Windows Common Log File System Driver Elevation of Privilege Vulnerability |
CVE-2024-38195 | High | 7.8 | 2024-08-13 | Azure CycleCloud Remote Code Execution Vulnerability |
CVE-2024-38193 | High | 7.8 | 2024-08-13 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability |
CVE-2024-38191 | High | 7.8 | 2024-08-13 | Kernel Streaming Service Driver Elevation of Privilege Vulnerability |
CVE-2024-38189 | High | 8.8 | 2024-08-13 | Microsoft Project Remote Code Execution Vulnerability |
CVE-2024-38187 | High | 7.8 | 2024-08-13 | Windows Kernel-Mode Driver Elevation of Privilege Vulnerability |
CVE-2024-38186 | High | 7.8 | 2024-08-13 | Windows Kernel-Mode Driver Elevation of Privilege Vulnerability |
CVE-2024-38185 | High | 7.8 | 2024-08-13 | Windows Kernel-Mode Driver Elevation of Privilege Vulnerability |
CVE-2024-38184 | High | 7.8 | 2024-08-13 | Windows Kernel-Mode Driver Elevation of Privilege Vulnerability |
CVE-2024-38180 | High | 8.8 | 2024-08-13 | Windows SmartScreen Security Feature Bypass Vulnerability |
CVE-2024-38178 | High | 7.5 | 2024-08-13 | Scripting Engine Memory Corruption Vulnerability |
CVE-2024-38177 | High | 7.8 | 2024-08-13 | Windows App Installer Spoofing Vulnerability |
CVE-2024-38173 | Medium | 6.7 | 2024-08-13 | Microsoft Outlook Remote Code Execution Vulnerability |
CVE-2024-38172 | High | 7.8 | 2024-08-13 | Microsoft Excel Remote Code Execution Vulnerability |
CVE-2024-38171 | High | 7.8 | 2024-08-13 | Microsoft PowerPoint Remote Code Execution Vulnerability |
CVE-2024-38170 | High | 7.1 | 2024-08-13 | Microsoft Excel Remote Code Execution Vulnerability |
CVE-2024-38169 | High | 7.8 | 2024-08-13 | Microsoft Office Visio Remote Code Execution Vulnerability |
CVE-2024-38168 | High | 7.5 | 2024-08-13 | .NET and Visual Studio Denial of Service Vulnerability |
CVE-2024-38167 | Medium | 6.5 | 2024-08-13 | .NET and Visual Studio Information Disclosure Vulnerability |
CVE-2024-38165 | Medium | 6.5 | 2024-08-13 | Windows Compressed Folder Tampering Vulnerability |
CVE-2024-38162 | High | 7.8 | 2024-08-13 | Azure Connected Machine Agent Elevation of Privilege Vulnerability |
CVE-2024-38161 | Medium | 6.8 | 2024-08-13 | Windows Mobile Broadband Driver Remote Code Execution Vulnerability |
CVE-2024-38160 | Critical | 9.1 | 2024-08-13 | Windows Network Virtualization Remote Code Execution Vulnerability |
CVE-2024-38159 | Critical | 9.1 | 2024-08-13 | Windows Network Virtualization Remote Code Execution Vulnerability |
CVE-2024-38158 | High | 7.0 | 2024-08-13 | Azure IoT SDK Remote Code Execution Vulnerability |
CVE-2024-38157 | High | 7.0 | 2024-08-13 | Azure IoT SDK Remote Code Execution Vulnerability |
CVE-2024-38155 | Medium | 5.5 | 2024-08-13 | Security Center Broker Information Disclosure Vulnerability |
CVE-2024-38154 | High | 8.8 | 2024-08-13 | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
CVE-2024-38153 | High | 7.8 | 2024-08-13 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2024-38152 | High | 7.8 | 2024-08-13 | Windows OLE Remote Code Execution Vulnerability |
CVE-2024-38151 | Medium | 5.5 | 2024-08-13 | Windows Kernel Information Disclosure Vulnerability |
CVE-2024-38150 | High | 7.8 | 2024-08-13 | Windows DWM Core Library Elevation of Privilege Vulnerability |
CVE-2024-38148 | High | 7.5 | 2024-08-13 | Windows Secure Channel Denial of Service Vulnerability |
CVE-2024-38147 | High | 7.8 | 2024-08-13 | Microsoft DWM Core Library Elevation of Privilege Vulnerability |
CVE-2024-38146 | High | 7.5 | 2024-08-13 | Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability |
CVE-2024-38145 | High | 7.5 | 2024-08-13 | Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability |
CVE-2024-38144 | High | 8.8 | 2024-08-13 | Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability |
CVE-2024-38143 | Medium | 4.2 | 2024-08-13 | Windows WLAN AutoConfig Service Elevation of Privilege Vulnerability |
CVE-2024-38142 | High | 7.8 | 2024-08-13 | Windows Secure Kernel Mode Elevation of Privilege Vulnerability |
CVE-2024-38141 | High | 7.8 | 2024-08-13 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability |
CVE-2024-38140 | Critical | 9.8 | 2024-08-13 | Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability |
CVE-2024-38138 | High | 7.5 | 2024-08-13 | Windows Deployment Services Remote Code Execution Vulnerability |
CVE-2024-38137 | High | 7.0 | 2024-08-13 | Windows Resource Manager PSM Service Extension Elevation of Privilege Vulnerability |
CVE-2024-38136 | High | 7.0 | 2024-08-13 | Windows Resource Manager PSM Service Extension Elevation of Privilege Vulnerability |
CVE-2024-38135 | High | 7.8 | 2024-08-13 | Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability |
CVE-2024-38134 | High | 7.8 | 2024-08-13 | Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability |
CVE-2024-38133 | High | 7.8 | 2024-08-13 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2024-38132 | High | 7.5 | 2024-08-13 | Windows Network Address Translation (NAT) Denial of Service Vulnerability |
CVE-2024-38131 | High | 8.8 | 2024-08-13 | Clipboard Virtual Channel Extension Remote Code Execution Vulnerability |
CVE-2024-38130 | High | 8.8 | 2024-08-13 | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
CVE-2024-38128 | High | 8.8 | 2024-08-13 | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
CVE-2024-38127 | High | 7.8 | 2024-08-13 | Windows Hyper-V Elevation of Privilege Vulnerability |
CVE-2024-38126 | High | 7.5 | 2024-08-13 | Windows Network Address Translation (NAT) Denial of Service Vulnerability |
CVE-2024-38125 | High | 7.8 | 2024-08-13 | Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability |
CVE-2024-38123 | Medium | 4.4 | 2024-08-13 | Windows Bluetooth Driver Information Disclosure Vulnerability |
CVE-2024-38122 | Medium | 5.5 | 2024-08-13 | Microsoft Local Security Authority (LSA) Server Information Disclosure Vulnerability |
CVE-2024-38121 | High | 8.8 | 2024-08-13 | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
CVE-2024-38120 | High | 8.8 | 2024-08-13 | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
CVE-2024-38118 | Medium | 5.5 | 2024-08-13 | Microsoft Local Security Authority (LSA) Server Information Disclosure Vulnerability |
CVE-2024-38117 | High | 7.8 | 2024-08-13 | NTFS Elevation of Privilege Vulnerability |
CVE-2024-38116 | High | 8.8 | 2024-08-13 | Windows IP Routing Management Snapin Remote Code Execution Vulnerability |
CVE-2024-38115 | High | 8.8 | 2024-08-13 | Windows IP Routing Management Snapin Remote Code Execution Vulnerability |
CVE-2024-38114 | High | 8.8 | 2024-08-13 | Windows IP Routing Management Snapin Remote Code Execution Vulnerability |
CVE-2024-38109 | Critical | 9.1 | 2024-08-13 | An authenticated attacker can exploit an Server-Side Request Forgery (SSRF) vulnerability in Microsoft Azure Health Bot to elevate privileges over a network. |
CVE-2024-38108 | Critical | 9.3 | 2024-08-13 | Azure Stack Hub Spoofing Vulnerability |
CVE-2024-38107 | High | 7.8 | 2024-08-13 | Windows Power Dependency Coordinator Elevation of Privilege Vulnerability |
CVE-2024-38106 | High | 7.0 | 2024-08-13 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2024-38098 | High | 7.8 | 2024-08-13 | Azure Connected Machine Agent Elevation of Privilege Vulnerability |
CVE-2024-38084 | High | 7.8 | 2024-08-13 | Microsoft OfficePlus Elevation of Privilege Vulnerability |
CVE-2024-38063 | Critical | 9.8 | 2024-08-13 | Windows TCP/IP Remote Code Execution Vulnerability |
CVE-2024-37968 | High | 7.5 | 2024-08-13 | Windows DNS Spoofing Vulnerability |
CVE-2024-29995 | High | 8.1 | 2024-08-13 | Windows Kerberos Elevation of Privilege Vulnerability |
CVE-2024-6768 | | 2024-08-12 | A Denial of Service in CLFS.sys in Microsoft Windows 10, Windows 11, Windows Server 2016, Windows Server 2019, and Windows Server 2022 allows a malicious authe… | |
CVE-2024-42474 | Medium | 6.5 | 2024-08-12 | Streamlit is a data oriented application development framework for python. Snowflake Streamlit open source addressed a security vulnerability via the static fi… |
CVE-2024-38219 | Medium | 6.5 | 2024-08-12 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability |
CVE-2024-38218 | High | 8.4 | 2024-08-12 | Microsoft Edge (HTML-based) Memory Corruption Vulnerability |
CVE-2024-38200 | Medium | 6.5 | 2024-08-12 | Microsoft Office Spoofing Vulnerability |
CVE-2024-0107 | High | 7.8 | 2024-08-08 | NVIDIA GPU Display Driver for Windows contains a vulnerability in the user mode layer, where an unprivileged regular user can cause an out-of-bounds read. A su… |
CVE-2024-0102 | Low | 3.3 | 2024-08-08 | NVIDIA CUDA Toolkit for all platforms contains a vulnerability in nvdisasm, where an attacker can cause an out-of-bounds read issue by deceiving a user into re… |
CVE-2024-38202 | High | 7.3 | 2024-08-08 | Summary Microsoft was notified that an elevation of privilege vulnerability exists in Windows Update, potentially enabling an attacker with basic user privileg… |
CVE-2024-21302 | Medium | 6.7 | 2024-08-08 | Summary: As of July 8, 2025 Microsoft has completed mitigations to address this vulnerability. See KB5042562: Guidance for blocking rollback of virtualization-… |
CVE-2024-7553 | High | 7.3 | 2024-08-07 | Incorrect validation of files loaded from a local untrusted directory may allow local privilege escalation if the underlying operating systems is Windows. This… |
CVE-2024-38206 | High | 8.5 | 2024-08-06 | An authenticated attacker can bypass Server-Side Request Forgery (SSRF) protection in Microsoft Copilot Studio to leak sensitive information over a network. |