Microsoft
Page 64 of 100 — Microsoft CVEs from a corpus of 26181, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-37986 | High | 8.0 | 2024-07-09 | Secure Boot Security Feature Bypass Vulnerability |
CVE-2024-37984 | High | 8.4 | 2024-07-09 | Secure Boot Security Feature Bypass Vulnerability |
CVE-2024-37981 | High | 8.0 | 2024-07-09 | Secure Boot Security Feature Bypass Vulnerability |
CVE-2024-37978 | High | 8.0 | 2024-07-09 | Secure Boot Security Feature Bypass Vulnerability |
CVE-2024-37977 | High | 8.0 | 2024-07-09 | Secure Boot Security Feature Bypass Vulnerability |
CVE-2024-37975 | High | 8.0 | 2024-07-09 | Secure Boot Security Feature Bypass Vulnerability |
CVE-2024-37974 | High | 8.0 | 2024-07-09 | Secure Boot Security Feature Bypass Vulnerability |
CVE-2024-37973 | High | 8.8 | 2024-07-09 | Secure Boot Security Feature Bypass Vulnerability |
CVE-2024-37972 | High | 8.0 | 2024-07-09 | Secure Boot Security Feature Bypass Vulnerability |
CVE-2024-37971 | High | 8.0 | 2024-07-09 | Secure Boot Security Feature Bypass Vulnerability |
CVE-2024-37970 | High | 8.0 | 2024-07-09 | Secure Boot Security Feature Bypass Vulnerability |
CVE-2024-37969 | High | 8.0 | 2024-07-09 | Secure Boot Security Feature Bypass Vulnerability |
CVE-2024-37336 | High | 8.8 | 2024-07-09 | SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability |
CVE-2024-37334 | High | 8.8 | 2024-07-09 | Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability |
CVE-2024-37333 | High | 8.8 | 2024-07-09 | SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability |
CVE-2024-37332 | High | 8.8 | 2024-07-09 | SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability |
CVE-2024-37331 | High | 8.8 | 2024-07-09 | SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability |
CVE-2024-37330 | High | 8.8 | 2024-07-09 | SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability |
CVE-2024-37329 | High | 8.8 | 2024-07-09 | SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability |
CVE-2024-37328 | High | 8.8 | 2024-07-09 | SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability |
CVE-2024-37327 | High | 8.8 | 2024-07-09 | SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability |
CVE-2024-37326 | High | 8.8 | 2024-07-09 | SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability |
CVE-2024-37324 | High | 8.8 | 2024-07-09 | SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability |
CVE-2024-37323 | High | 8.8 | 2024-07-09 | SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability |
CVE-2024-37322 | High | 8.8 | 2024-07-09 | SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability |
CVE-2024-37321 | High | 8.8 | 2024-07-09 | SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability |
CVE-2024-37320 | High | 8.8 | 2024-07-09 | SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability |
CVE-2024-37319 | High | 8.8 | 2024-07-09 | SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability |
CVE-2024-37318 | High | 8.8 | 2024-07-09 | SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability |
CVE-2024-35272 | High | 8.8 | 2024-07-09 | SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability |
CVE-2024-35271 | High | 8.8 | 2024-07-09 | SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability |
CVE-2024-35270 | Medium | 5.3 | 2024-07-09 | Windows iSCSI Service Denial of Service Vulnerability |
CVE-2024-35267 | High | 7.6 | 2024-07-09 | Azure DevOps Server Spoofing Vulnerability |
CVE-2024-35266 | High | 7.6 | 2024-07-09 | Azure DevOps Server Spoofing Vulnerability |
CVE-2024-35264 | High | 8.1 | 2024-07-09 | .NET and Visual Studio Remote Code Execution Vulnerability |
CVE-2024-35261 | High | 7.8 | 2024-07-09 | Azure Network Watcher VM Extension Elevation of Privilege Vulnerability |
CVE-2024-35256 | High | 8.8 | 2024-07-09 | SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability |
CVE-2024-32987 | High | 7.5 | 2024-07-09 | Microsoft SharePoint Server Information Disclosure Vulnerability |
CVE-2024-30105 | High | 7.5 | 2024-07-09 | .NET and Visual Studio Denial of Service Vulnerability |
CVE-2024-30098 | High | 7.5 | 2024-07-09 | Windows Cryptographic Services Security Feature Bypass Vulnerability |
CVE-2024-30081 | High | 7.1 | 2024-07-09 | Windows NTLM Spoofing Vulnerability |
CVE-2024-30079 | High | 7.8 | 2024-07-09 | Windows Remote Access Connection Manager Elevation of Privilege Vulnerability |
CVE-2024-30071 | Medium | 4.7 | 2024-07-09 | Windows Remote Access Connection Manager Information Disclosure Vulnerability |
CVE-2024-30061 | High | 7.3 | 2024-07-09 | Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability |
CVE-2024-30013 | High | 8.8 | 2024-07-09 | Windows MultiPoint Services Remote Code Execution Vulnerability |
CVE-2024-28928 | High | 8.8 | 2024-07-09 | SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability |
CVE-2024-28899 | High | 8.8 | 2024-07-09 | Secure Boot Security Feature Bypass Vulnerability |
CVE-2024-26184 | Medium | 6.8 | 2024-07-09 | Secure Boot Security Feature Bypass Vulnerability |
CVE-2024-21449 | High | 8.8 | 2024-07-09 | SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability |
CVE-2024-21428 | High | 8.8 | 2024-07-09 | SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability |
CVE-2024-21425 | High | 8.8 | 2024-07-09 | SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability |
CVE-2024-21415 | High | 8.8 | 2024-07-09 | SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability |
CVE-2024-21414 | High | 8.8 | 2024-07-09 | SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability |
CVE-2024-21398 | High | 8.8 | 2024-07-09 | SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability |
CVE-2024-21373 | High | 8.8 | 2024-07-09 | SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability |
CVE-2024-21335 | High | 8.8 | 2024-07-09 | SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability |
CVE-2024-21333 | High | 8.8 | 2024-07-09 | SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability |
CVE-2024-21332 | High | 8.8 | 2024-07-09 | SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability |
CVE-2024-21331 | High | 8.8 | 2024-07-09 | SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability |
CVE-2024-21317 | High | 8.8 | 2024-07-09 | SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability |
CVE-2024-21308 | High | 8.8 | 2024-07-09 | SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability |
CVE-2024-21303 | High | 8.8 | 2024-07-09 | SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability |
CVE-2024-20701 | High | 8.8 | 2024-07-09 | SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability |
CVE-2024-4944 | High | 7.8 | 2024-07-09 | A local privilege escalation vlnerability in the WatchGuard Mobile VPN with SSL client on Windows enables a local user to execute arbitrary commands with eleva… |
CVE-2024-34122 | High | 7.8 | 2024-07-02 | Acrobat for Edge versions 126.0.2592.68 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a re… |
CVE-2024-36991 | High | 7.5 | 2024-07-01 | In Splunk Enterprise on Windows versions below 9.2.2, 9.1.5, and 9.0.10, an attacker could perform a path traversal on the /modules/messaging/ endpoint in Splu… |
CVE-2024-24749 | High | 7.5 | 2024-07-01 | GeoServer is an open source server that allows users to share and edit geospatial data. Prior to versions 2.23.5 and 2.24.3, if GeoServer is deployed in the Wi… |
CVE-2024-35260 | High | 8.0 | 2024-06-27 | An authenticated attacker can exploit an untrusted search path vulnerability in Microsoft Dataverse to execute code over a network. |
CVE-2024-6293 | High | 8.8 | 2024-06-24 | Use after free in Dawn in Google Chrome prior to 126.0.6478.126 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chro… |
CVE-2024-6292 | High | 8.8 | 2024-06-24 | Use after free in Dawn in Google Chrome prior to 126.0.6478.126 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chro… |
CVE-2024-33881 | Medium | 5.3 | 2024-06-24 | An issue was discovered in VirtoSoftware Virto Bulk File Download 5.5.44 for SharePoint 2019. The Virto.SharePoint.FileDownloader/Api/Download.ashx isCompleted… |
CVE-2024-33880 | Medium | 5.3 | 2024-06-24 | An issue was discovered in VirtoSoftware Virto Bulk File Download 5.5.44 for SharePoint 2019. It discloses full pathnames via Virto.SharePoint.FileDownloader/A… |
CVE-2024-33879 | Critical | 9.8 | 2024-06-24 | An issue was discovered in VirtoSoftware Virto Bulk File Download 5.5.44 for SharePoint 2019. The Virto.SharePoint.FileDownloader/Api/Download.ashx isCompleted… |
CVE-2024-36071 | Medium | 6.3 | 2024-06-20 | Samsung Magician 8.0.0 on Windows allows an admin to escalate privileges by tampering with the directory and DLL files used during the installation process. Th… |
CVE-2024-38093 | Medium | 4.3 | 2024-06-20 | Microsoft Edge (Chromium-based) Spoofing Vulnerability |
CVE-2024-38082 | Medium | 4.7 | 2024-06-20 | Microsoft Edge (Chromium-based) Spoofing Vulnerability |
CVE-2024-0103 | Medium | 5.4 | 2024-06-13 | NVIDIA Triton Inference Server for Linux contains a vulnerability where a user may cause an incorrect Initialization of resource by network issue. A successful… |
CVE-2024-0095 | Critical | 9.0 | 2024-06-13 | NVIDIA Triton Inference Server for Linux and Windows contains a vulnerability where a user can inject forged logs and executable commands by injecting arbitrar… |
CVE-2024-0092 | Medium | 5.5 | 2024-06-13 | NVIDIA GPU Driver for Windows and Linux contains a vulnerability where an improper check or improper handling of exception conditions might lead to denial of s… |
CVE-2024-0091 | High | 7.8 | 2024-06-13 | NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability where a user can cause an untrusted pointer dereference by executing a driver API. A s… |
CVE-2024-0090 | High | 7.8 | 2024-06-13 | NVIDIA GPU driver for Windows and Linux contains a vulnerability where a user can cause an out-of-bounds write. A successful exploit of this vulnerability migh… |
CVE-2024-0089 | High | 7.8 | 2024-06-13 | NVIDIA GPU Display Driver for Windows contains a vulnerability where the information from a previous client or another process could be disclosed. A successful… |
CVE-2024-0085 | Medium | 6.3 | 2024-06-13 | NVIDIA vGPU software for Windows and Linux contains a vulnerability where unprivileged users could execute privileged operations on the host. A successful expl… |
CVE-2024-38083 | Medium | 4.3 | 2024-06-13 | Microsoft Edge (Chromium-based) Spoofing Vulnerability |
CVE-2024-30058 | Medium | 5.4 | 2024-06-13 | Microsoft Edge (Chromium-based) Spoofing Vulnerability |
CVE-2024-30057 | Medium | 5.4 | 2024-06-13 | Microsoft Edge for iOS Spoofing Vulnerability |
CVE-2024-30472 | High | 7.5 | 2024-06-13 | Telemetry Dashboard v1.0.0.8 for Dell ThinOS 2402 contains a sensitive information disclosure vulnerability. An unauthenticated user with local access to the d… |
CVE-2024-20753 | High | 7.8 | 2024-06-13 | Photoshop Desktop versions 24.7.3, 25.7 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a re… |
CVE-2024-37304 | Medium | 6.1 | 2024-06-12 | NuGet Gallery is a package repository that powers nuget.org. The NuGetGallery has a security vulnerability related to its handling of autolinks in Markdown con… |
CVE-2024-37325 | High | 8.1 | 2024-06-11 | Azure Science Virtual Machine (DSVM) Elevation of Privilege Vulnerability |
CVE-2024-35265 | High | 7.0 | 2024-06-11 | Windows Perception Service Elevation of Privilege Vulnerability |
CVE-2024-35263 | Medium | 5.7 | 2024-06-11 | Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability |
CVE-2024-35255 | Medium | 5.5 | 2024-06-11 | Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege Vulnerability |
CVE-2024-35254 | High | 7.1 | 2024-06-11 | Azure Monitor Agent Elevation of Privilege Vulnerability |
CVE-2024-35253 | Medium | 4.4 | 2024-06-11 | Microsoft Azure File Sync Elevation of Privilege Vulnerability |
CVE-2024-35252 | High | 7.5 | 2024-06-11 | Azure Storage Movement Client Library Denial of Service Vulnerability |
CVE-2024-35250 | High | 7.8 | 2024-06-11 | Windows Kernel-Mode Driver Elevation of Privilege Vulnerability |
CVE-2024-35249 | High | 8.8 | 2024-06-11 | Microsoft Dynamics 365 Business Central Remote Code Execution Vulnerability |
CVE-2024-35248 | High | 7.3 | 2024-06-11 | Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability |
CVE-2024-30104 | High | 7.8 | 2024-06-11 | Microsoft Office Remote Code Execution Vulnerability |