Microsoft
Page 63 of 100 — Microsoft CVEs from a corpus of 26181, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-38166 | High | 8.2 | 2024-08-06 | An unauthenticated attacker can exploit improper neutralization of input during web page generation in Microsoft Dynamics 365 to spoof over a network by tricki… |
CVE-2024-5828 | High | 8.6 | 2024-08-06 | Expression Language Injection vulnerability in Hitachi Tuning Manager on Windows, Linux, Solaris allows Code Injection.This issue affects Hitachi Tuning Manage… |
CVE-2024-39396 | Medium | 5.5 | 2024-08-02 | InDesign Desktop versions ID18.5.2, ID19.3 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. A… |
CVE-2024-39392 | High | 7.8 | 2024-08-02 | InDesign Desktop versions ID18.5.2, ID19.3 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution… |
CVE-2024-38182 | Critical | 9.0 | 2024-07-31 | Weak authentication in Microsoft Dynamics 365 allows an unauthenticated attacker to elevate privileges over a network. |
CVE-2024-38103 | Medium | 5.9 | 2024-07-25 | Microsoft Edge (Chromium-based) Information Disclosure Vulnerability |
CVE-2024-6972 | Medium | 6.5 | 2024-07-25 | In affected versions of Octopus Server under certain circumstances it is possible for sensitive variables to be printed in the task log in clear-text. |
CVE-2024-4811 | Low | 2.2 | 2024-07-25 | In affected versions of Octopus Server under certain conditions, a user with specific role assignments can access restricted project artifacts. |
CVE-2024-38176 | High | 8.1 | 2024-07-23 | An improper restriction of excessive authentication attempts in GroupMe allows a unauthenticated attacker to elevate privileges over a network. |
CVE-2024-38164 | Critical | 9.6 | 2024-07-23 | An improper access control vulnerability in GroupMe allows an a unauthenticated attacker to elevate privileges over a network by convincing a user to click on… |
CVE-2024-41836 | Medium | 5.5 | 2024-07-23 | InDesign Desktop versions ID18.5.2, ID19.3 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to an application denial-of-ser… |
CVE-2024-6913 | High | 8.8 | 2024-07-22 | Execution with unnecessary privileges in PerkinElmer ProcessPlus allows an attacker to spawn a remote shell on the windows system.This issue affects ProcessPlu… |
CVE-2024-6912 | Critical | 9.8 | 2024-07-22 | Use of hard-coded MSSQL credentials in PerkinElmer ProcessPlus on Windows allows an attacker to login remove on all prone installations.This issue affects Proc… |
CVE-2024-32152 | Low | 3.1 | 2024-07-22 | A blocklist bypass vulnerability exists in the LaTeX functionality of Ankitects Anki 24.04. A specially crafted malicious flashcard can lead to an arbitrary fi… |
CVE-2024-37391 | High | 7.8 | 2024-07-22 | ProtonVPN before 3.2.10 on Windows mishandles the drive installer path, which should use this: '"' + ExpandConstant('{autopf}\Proton\Drive') + '"' in Setup/set… |
CVE-2024-38156 | Medium | 6.1 | 2024-07-19 | Microsoft Edge (Chromium-based) Spoofing Vulnerability |
CVE-2024-40898 | High | 7.5 | 2024-07-18 | SSRF in Apache HTTP Server on Windows with mod_rewrite in server/vhost context, allows to potentially leak NTML hashes to a malicious server via SSRF and malic… |
CVE-2022-45449 | Medium | 6.5 | 2024-07-16 | Sensitive information disclosure due to excessive privileges assigned to Acronis Agent. The following products are affected: Acronis Cyber Protect 15 (Windows… |
CVE-2024-6746 | Medium | 4.3 | 2024-07-15 | A vulnerability classified as problematic was found in NaiboWang EasySpider 0.6.2 on Windows. Affected by this vulnerability is an unknown functionality of the… |
CVE-2024-21417 | High | 8.8 | 2024-07-10 | Windows Text Services Framework Elevation of Privilege Vulnerability |
CVE-2024-20785 | High | 7.8 | 2024-07-09 | InDesign Desktop versions ID19.3, ID18.5.2 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution… |
CVE-2024-20783 | High | 7.8 | 2024-07-09 | InDesign Desktop versions ID19.3, ID18.5.2 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution… |
CVE-2024-20782 | High | 7.8 | 2024-07-09 | InDesign Desktop versions ID19.3, ID18.5.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in th… |
CVE-2024-20781 | High | 7.8 | 2024-07-09 | InDesign Desktop versions ID19.3, ID18.5.2 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution… |
CVE-2024-34123 | High | 7.0 | 2024-07-09 | Premiere Pro versions 23.6.5, 24.4.1 and earlier are affected by an Untrusted Search Path vulnerability that could lead to arbitrary code execution. An attacke… |
CVE-2024-6222 | High | 7.0 | 2024-07-09 | In Docker Desktop before v4.29.0, an attacker who has gained access to the Docker Desktop VM through a container breakout can further escape to the host by pas… |
CVE-2024-38112 | High | 7.5 | 2024-07-09 | Windows MSHTML Platform Spoofing Vulnerability |
CVE-2024-38105 | Medium | 6.5 | 2024-07-09 | Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability |
CVE-2024-38104 | High | 8.8 | 2024-07-09 | Windows Fax Service Remote Code Execution Vulnerability |
CVE-2024-38102 | Medium | 6.5 | 2024-07-09 | Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability |
CVE-2024-38101 | Medium | 6.5 | 2024-07-09 | Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability |
CVE-2024-38100 | High | 7.8 | 2024-07-09 | Windows File Explorer Elevation of Privilege Vulnerability |
CVE-2024-38099 | Medium | 5.9 | 2024-07-09 | Windows Remote Desktop Licensing Service Denial of Service Vulnerability |
CVE-2024-38095 | High | 7.5 | 2024-07-09 | .NET and Visual Studio Denial of Service Vulnerability |
CVE-2024-38094 | High | 7.2 | 2024-07-09 | Microsoft SharePoint Remote Code Execution Vulnerability |
CVE-2024-38092 | High | 8.8 | 2024-07-09 | Azure CycleCloud Elevation of Privilege Vulnerability |
CVE-2024-38091 | High | 7.5 | 2024-07-09 | Microsoft WS-Discovery Denial of Service Vulnerability |
CVE-2024-38089 | Critical | 9.1 | 2024-07-09 | Microsoft Defender for IoT Elevation of Privilege Vulnerability |
CVE-2024-38088 | High | 8.8 | 2024-07-09 | SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability |
CVE-2024-38087 | High | 8.8 | 2024-07-09 | SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability |
CVE-2024-38086 | Medium | 6.4 | 2024-07-09 | Azure Kinect SDK Remote Code Execution Vulnerability |
CVE-2024-38085 | High | 7.8 | 2024-07-09 | Windows Graphics Component Elevation of Privilege Vulnerability |
CVE-2024-38081 | High | 7.3 | 2024-07-09 | .NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability |
CVE-2024-38080 | High | 7.8 | 2024-07-09 | Windows Hyper-V Elevation of Privilege Vulnerability |
CVE-2024-38079 | High | 7.8 | 2024-07-09 | Windows Graphics Component Elevation of Privilege Vulnerability |
CVE-2024-38078 | High | 7.5 | 2024-07-09 | Xbox Wireless Adapter Remote Code Execution Vulnerability |
CVE-2024-38077 | Critical | 9.8 | 2024-07-09 | Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability |
CVE-2024-38076 | Critical | 9.8 | 2024-07-09 | Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability |
CVE-2024-38074 | Critical | 9.8 | 2024-07-09 | Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability |
CVE-2024-38073 | High | 7.5 | 2024-07-09 | Windows Remote Desktop Licensing Service Denial of Service Vulnerability |
CVE-2024-38072 | High | 7.5 | 2024-07-09 | Windows Remote Desktop Licensing Service Denial of Service Vulnerability |
CVE-2024-38071 | High | 7.5 | 2024-07-09 | Windows Remote Desktop Licensing Service Denial of Service Vulnerability |
CVE-2024-38070 | High | 7.8 | 2024-07-09 | Windows LockDown Policy (WLDP) Security Feature Bypass Vulnerability |
CVE-2024-38069 | High | 7.0 | 2024-07-09 | Windows Enroll Engine Security Feature Bypass Vulnerability |
CVE-2024-38068 | High | 7.5 | 2024-07-09 | Windows Online Certificate Status Protocol (OCSP) Server Denial of Service Vulnerability |
CVE-2024-38067 | High | 7.5 | 2024-07-09 | Windows Online Certificate Status Protocol (OCSP) Server Denial of Service Vulnerability |
CVE-2024-38066 | High | 7.8 | 2024-07-09 | Windows Win32k Elevation of Privilege Vulnerability |
CVE-2024-38065 | Medium | 6.8 | 2024-07-09 | Secure Boot Security Feature Bypass Vulnerability |
CVE-2024-38064 | High | 7.5 | 2024-07-09 | Windows TCP/IP Information Disclosure Vulnerability |
CVE-2024-38062 | High | 7.8 | 2024-07-09 | Windows Kernel-Mode Driver Elevation of Privilege Vulnerability |
CVE-2024-38061 | High | 7.5 | 2024-07-09 | DCOM Remote Cross-Session Activation Elevation of Privilege Vulnerability |
CVE-2024-38060 | High | 8.8 | 2024-07-09 | Windows Imaging Component Remote Code Execution Vulnerability |
CVE-2024-38059 | High | 7.8 | 2024-07-09 | Win32k Elevation of Privilege Vulnerability |
CVE-2024-38058 | Medium | 6.8 | 2024-07-09 | BitLocker Security Feature Bypass Vulnerability |
CVE-2024-38057 | High | 7.8 | 2024-07-09 | Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability |
CVE-2024-38056 | Medium | 5.5 | 2024-07-09 | Microsoft Windows Codecs Library Information Disclosure Vulnerability |
CVE-2024-38055 | Medium | 5.5 | 2024-07-09 | Microsoft Windows Codecs Library Information Disclosure Vulnerability |
CVE-2024-38054 | High | 7.8 | 2024-07-09 | Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability |
CVE-2024-38053 | High | 8.8 | 2024-07-09 | Windows Layer-2 Bridge Network Driver Remote Code Execution Vulnerability |
CVE-2024-38052 | High | 7.8 | 2024-07-09 | Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability |
CVE-2024-38051 | High | 7.8 | 2024-07-09 | Windows Graphics Component Remote Code Execution Vulnerability |
CVE-2024-38050 | High | 7.8 | 2024-07-09 | Windows Workstation Service Elevation of Privilege Vulnerability |
CVE-2024-38049 | Medium | 6.6 | 2024-07-09 | Windows Distributed Transaction Coordinator Remote Code Execution Vulnerability |
CVE-2024-38048 | Medium | 6.5 | 2024-07-09 | Windows Network Driver Interface Specification (NDIS) Denial of Service Vulnerability |
CVE-2024-38047 | High | 7.8 | 2024-07-09 | PowerShell Elevation of Privilege Vulnerability |
CVE-2024-38044 | High | 7.2 | 2024-07-09 | DHCP Server Service Remote Code Execution Vulnerability |
CVE-2024-38043 | High | 7.8 | 2024-07-09 | PowerShell Elevation of Privilege Vulnerability |
CVE-2024-38041 | Medium | 5.5 | 2024-07-09 | Windows Kernel Information Disclosure Vulnerability |
CVE-2024-38034 | High | 7.8 | 2024-07-09 | Windows Filtering Platform Elevation of Privilege Vulnerability |
CVE-2024-38033 | High | 7.3 | 2024-07-09 | PowerShell Elevation of Privilege Vulnerability |
CVE-2024-38032 | High | 7.1 | 2024-07-09 | Microsoft Xbox Remote Code Execution Vulnerability |
CVE-2024-38031 | High | 7.5 | 2024-07-09 | Windows Online Certificate Status Protocol (OCSP) Server Denial of Service Vulnerability |
CVE-2024-38030 | Medium | 6.5 | 2024-07-09 | Windows Themes Spoofing Vulnerability |
CVE-2024-38028 | High | 7.2 | 2024-07-09 | Microsoft Windows Performance Data Helper Library Remote Code Execution Vulnerability |
CVE-2024-38027 | Medium | 6.5 | 2024-07-09 | Windows Line Printer Daemon Service Denial of Service Vulnerability |
CVE-2024-38025 | High | 7.2 | 2024-07-09 | Microsoft Windows Performance Data Helper Library Remote Code Execution Vulnerability |
CVE-2024-38024 | High | 7.2 | 2024-07-09 | Microsoft SharePoint Server Remote Code Execution Vulnerability |
CVE-2024-38023 | High | 7.2 | 2024-07-09 | Microsoft SharePoint Server Remote Code Execution Vulnerability |
CVE-2024-38022 | High | 7.0 | 2024-07-09 | Windows Image Acquisition Elevation of Privilege Vulnerability |
CVE-2024-38021 | High | 8.8 | 2024-07-09 | Microsoft Outlook Remote Code Execution Vulnerability |
CVE-2024-38020 | Medium | 6.5 | 2024-07-09 | Microsoft Outlook Spoofing Vulnerability |
CVE-2024-38019 | High | 7.2 | 2024-07-09 | Microsoft Windows Performance Data Helper Library Remote Code Execution Vulnerability |
CVE-2024-38017 | Medium | 5.5 | 2024-07-09 | Microsoft Message Queuing Information Disclosure Vulnerability |
CVE-2024-38015 | High | 7.5 | 2024-07-09 | Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability |
CVE-2024-38013 | Medium | 6.7 | 2024-07-09 | Microsoft Windows Server Backup Elevation of Privilege Vulnerability |
CVE-2024-38011 | High | 8.0 | 2024-07-09 | Secure Boot Security Feature Bypass Vulnerability |
CVE-2024-38010 | High | 8.0 | 2024-07-09 | Secure Boot Security Feature Bypass Vulnerability |
CVE-2024-37989 | High | 8.0 | 2024-07-09 | Secure Boot Security Feature Bypass Vulnerability |
CVE-2024-37988 | High | 8.0 | 2024-07-09 | Secure Boot Security Feature Bypass Vulnerability |
CVE-2024-37987 | High | 8.0 | 2024-07-09 | Secure Boot Security Feature Bypass Vulnerability |