Microsoft
Page 65 of 100 — Microsoft CVEs from a corpus of 26181, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-30103 | High | 8.8 | 2024-06-11 | Microsoft Outlook Remote Code Execution Vulnerability |
CVE-2024-30102 | High | 7.3 | 2024-06-11 | Microsoft Office Remote Code Execution Vulnerability |
CVE-2024-30101 | High | 7.5 | 2024-06-11 | Microsoft Office Remote Code Execution Vulnerability |
CVE-2024-30100 | High | 7.8 | 2024-06-11 | Microsoft SharePoint Server Remote Code Execution Vulnerability |
CVE-2024-30099 | High | 7.0 | 2024-06-11 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2024-30097 | High | 8.8 | 2024-06-11 | Microsoft Speech Application Programming Interface (SAPI) Remote Code Execution Vulnerability |
CVE-2024-30096 | Medium | 5.5 | 2024-06-11 | Windows Cryptographic Services Information Disclosure Vulnerability |
CVE-2024-30095 | High | 7.8 | 2024-06-11 | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
CVE-2024-30094 | High | 7.8 | 2024-06-11 | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
CVE-2024-30093 | High | 7.3 | 2024-06-11 | Windows Storage Elevation of Privilege Vulnerability |
CVE-2024-30091 | High | 7.8 | 2024-06-11 | Win32k Elevation of Privilege Vulnerability |
CVE-2024-30090 | High | 7.0 | 2024-06-11 | Microsoft Streaming Service Elevation of Privilege Vulnerability |
CVE-2024-30089 | High | 7.8 | 2024-06-11 | Microsoft Streaming Service Elevation of Privilege Vulnerability |
CVE-2024-30088 | High | 7.0 | 2024-06-11 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2024-30087 | High | 7.8 | 2024-06-11 | Win32k Elevation of Privilege Vulnerability |
CVE-2024-30086 | High | 7.8 | 2024-06-11 | Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability |
CVE-2024-30085 | High | 7.8 | 2024-06-11 | Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability |
CVE-2024-30084 | High | 7.0 | 2024-06-11 | Windows Kernel-Mode Driver Elevation of Privilege Vulnerability |
CVE-2024-30083 | High | 7.5 | 2024-06-11 | Windows Standards-Based Storage Management Service Denial of Service Vulnerability |
CVE-2024-30082 | High | 7.8 | 2024-06-11 | Win32k Elevation of Privilege Vulnerability |
CVE-2024-30080 | Critical | 9.8 | 2024-06-11 | Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability |
CVE-2024-30078 | High | 8.8 | 2024-06-11 | Windows Wi-Fi Driver Remote Code Execution Vulnerability |
CVE-2024-30077 | High | 8.0 | 2024-06-11 | Windows OLE Remote Code Execution Vulnerability |
CVE-2024-30076 | Medium | 6.8 | 2024-06-11 | Windows Container Manager Service Elevation of Privilege Vulnerability |
CVE-2024-30075 | High | 8.0 | 2024-06-11 | Windows Link Layer Topology Discovery Protocol Remote Code Execution Vulnerability |
CVE-2024-30074 | High | 8.0 | 2024-06-11 | Windows Link Layer Topology Discovery Protocol Remote Code Execution Vulnerability |
CVE-2024-30072 | High | 7.8 | 2024-06-11 | Microsoft Event Trace Log File Parsing Remote Code Execution Vulnerability |
CVE-2024-30070 | High | 7.5 | 2024-06-11 | DHCP Server Service Denial of Service Vulnerability |
CVE-2024-30069 | Medium | 4.7 | 2024-06-11 | Windows Remote Access Connection Manager Information Disclosure Vulnerability |
CVE-2024-30068 | High | 8.8 | 2024-06-11 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2024-30067 | Medium | 5.5 | 2024-06-11 | Winlogon Elevation of Privilege Vulnerability |
CVE-2024-30066 | Medium | 5.5 | 2024-06-11 | Winlogon Elevation of Privilege Vulnerability |
CVE-2024-30065 | Medium | 5.5 | 2024-06-11 | Windows Themes Denial of Service Vulnerability |
CVE-2024-30064 | High | 8.8 | 2024-06-11 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2024-30063 | Medium | 6.7 | 2024-06-11 | Windows Distributed File System (DFS) Remote Code Execution Vulnerability |
CVE-2024-30062 | High | 7.8 | 2024-06-11 | Windows Standards-Based Storage Management Service Remote Code Execution Vulnerability |
CVE-2024-30052 | Medium | 4.7 | 2024-06-11 | Visual Studio Remote Code Execution Vulnerability |
CVE-2024-29060 | Medium | 6.7 | 2024-06-11 | Visual Studio Elevation of Privilege Vulnerability |
CVE-2024-5692 | Medium | 6.5 | 2024-06-11 | On Windows 10, when using the 'Save As' functionality, an attacker could have tricked the browser into saving the file with a disallowed extension such as `.ur… |
CVE-2024-36358 | High | 7.8 | 2024-06-10 | A link following vulnerability in Trend Micro Deep Security 20.x agents below build 20.0.1-3180 could allow a local attacker to escalate privileges on affected… |
CVE-2024-32849 | High | 7.8 | 2024-06-10 | Trend Micro Security 17.x (Consumer) is vulnerable to a Privilege Escalation vulnerability that could allow a local attacker to unintentionally delete privileg… |
CVE-2024-5102 | High | 7.0 | 2024-06-10 | A sym-linked file accessed via the repair function in Avast Antivirus <24.2 on Windows may allow user to elevate privilege to delete arbitrary files or run pro… |
CVE-2024-4577 | Critical | 9.8 | 2024-06-09 | In PHP versions 8.1.* before 8.1.29, 8.2.* before 8.2.20, 8.3.* before 8.3.8, when using Apache and PHP-CGI on Windows, if the system is set up to use certain… |
CVE-2023-45188 | Medium | 6.5 | 2024-06-09 | IBM Engineering Lifecycle Optimization Publishing 7.0.2 and 7.03 could allow a remote attacker to upload arbitrary files, caused by the improper validation of… |
CVE-2024-1694 | High | 7.8 | 2024-06-07 | Inappropriate implementation in Google Updator prior to 1.3.36.351 in Google Chrome allowed a local attacker to bypass discretionary access control via a malic… |
CVE-2024-37385 | Critical | 9.8 | 2024-06-07 | Roundcube Webmail before 1.5.7 and 1.6.x before 1.6.7 on Windows allows command injection via im_convert_path and im_identify_path. NOTE: this issue exists bec… |
CVE-2024-2362 | Critical | 9.1 | 2024-06-06 | A path traversal vulnerability exists in the parisneo/lollms-webui version 9.3 on the Windows platform. Due to improper validation of file paths between Window… |
CVE-2024-35178 | High | 7.5 | 2024-06-06 | The Jupyter Server provides the backend for Jupyter web applications. Jupyter Server on Windows has a vulnerability that lets unauthenticated attackers leak th… |
CVE-2023-38042 | High | 7.8 | 2024-05-31 | A local privilege escalation vulnerability in Ivanti Secure Access Client for Windows allows a low privileged user to execute code as SYSTEM. |
CVE-2024-5495 | High | 8.8 | 2024-05-30 | Use after free in Dawn in Google Chrome prior to 125.0.6422.141 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chro… |
CVE-2024-5494 | High | 8.8 | 2024-05-30 | Use after free in Dawn in Google Chrome prior to 125.0.6422.141 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chro… |
CVE-2024-29072 | High | 8.2 | 2024-05-28 | A privilege escalation vulnerability exists in the Foxit Reader 2024.2.0.25138. The vulnerability occurs due to improper certification validation of the update… |
CVE-2024-28793 | Medium | 4.9 | 2024-05-28 | IBM Engineering Workflow Management 7.0.2 and 7.0.3 is vulnerable to stored cross-site scripting. Under certain configurations, this vulnerability allows users… |
CVE-2024-30056 | High | 7.1 | 2024-05-25 | Microsoft Edge (Chromium-based) Information Disclosure Vulnerability |
CVE-2024-30280 | High | 7.8 | 2024-05-23 | Acrobat Reader versions 20.005.30574, 24.002.20736 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could res… |
CVE-2024-30279 | High | 7.8 | 2024-05-23 | Acrobat Reader versions 20.005.30574, 24.002.20736 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code executi… |
CVE-2024-4454 | High | 7.8 | 2024-05-22 | WithSecure Elements Endpoint Protection Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileg… |
CVE-2024-5160 | High | 8.8 | 2024-05-22 | Heap buffer overflow in Dawn in Google Chrome prior to 125.0.6422.76 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page… |
CVE-2024-36052 | High | 7.5 | 2024-05-21 | RARLAB WinRAR before 7.00, on Windows, allows attackers to spoof the screen output via ANSI escape sequences, a different issue than CVE-2024-33899. |
CVE-2024-23583 | Medium | 6.7 | 2024-05-17 | An attacker could potentially intercept credentials via the task manager and perform unauthorized access to the Client Deploy Tool on Windows systems. |
CVE-2024-30060 | High | 7.8 | 2024-05-16 | Azure Monitor Agent Elevation of Privilege Vulnerability |
CVE-2023-46691 | High | 7.9 | 2024-05-16 | Use after free in Intel(R) Power Gadget software for Windows all versions may allow an authenticated user to potentially enable escalation of privilege via loc… |
CVE-2023-45736 | Medium | 6.7 | 2024-05-16 | Insecure inherited permissions in Intel(R) Power Gadget software for Windows all versions may allow an authenticated user to potentially enable escalation of p… |
CVE-2023-45315 | Medium | 5.5 | 2024-05-16 | Improper initialization in some Intel(R) Power Gadget software for Windwos all versions may allow an authenticated user to potentially enable denial of service… |
CVE-2023-45217 | High | 8.8 | 2024-05-16 | Improper access control in Intel(R) Power Gadget software for Windows all versions may allow an authenticated user to potentially enable escalation of privileg… |
CVE-2023-42773 | High | 8.8 | 2024-05-16 | Improper neutralization in Intel(R) Power Gadget software for Windows all versions may allow an authenticated user to potentially enable escalation of privileg… |
CVE-2023-41234 | Medium | 5.0 | 2024-05-16 | NULL pointer dereference in Intel(R) Power Gadget software for Windows all versions may allow an authenticated user to potentially enable denial of service via… |
CVE-2023-38581 | High | 8.8 | 2024-05-16 | Buffer overflow in Intel(R) Power Gadget software for Windows all versions may allow an authenticated user to potentially enable escalation of privilege via lo… |
CVE-2024-30314 | High | 7.8 | 2024-05-16 | Dreamweaver Desktop versions 21.3 and earlier are affected by an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vul… |
CVE-2024-30292 | High | 7.8 | 2024-05-16 | Adobe Framemaker versions 2020.5, 2022.3 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the… |
CVE-2024-30291 | High | 7.8 | 2024-05-16 | Adobe Framemaker versions 2020.5, 2022.3 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the… |
CVE-2024-30290 | High | 7.8 | 2024-05-16 | Adobe Framemaker versions 2020.5, 2022.3 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the… |
CVE-2024-30289 | High | 7.8 | 2024-05-16 | Adobe Framemaker versions 2020.5, 2022.3 and earlier are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution… |
CVE-2024-30288 | High | 7.8 | 2024-05-16 | Adobe Framemaker versions 2020.5, 2022.3 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution i… |
CVE-2024-30287 | Medium | 5.5 | 2024-05-16 | Adobe Framemaker versions 2020.5, 2022.3 and earlier Answer: are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive mem… |
CVE-2024-30286 | Medium | 5.5 | 2024-05-16 | Adobe Framemaker versions 2020.5, 2022.3 and earlier Answer: are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive mem… |
CVE-2024-30283 | Medium | 5.5 | 2024-05-16 | Adobe Framemaker versions 2020.5, 2022.3 and earlier Answer: are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive mem… |
CVE-2024-30298 | Medium | 5.5 | 2024-05-16 | Animate versions 24.0.2, 23.0.5 and earlier Answer: are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An a… |
CVE-2024-30297 | High | 7.8 | 2024-05-16 | Animate versions 24.0.2, 23.0.5 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context o… |
CVE-2024-30296 | High | 7.8 | 2024-05-16 | Animate versions 24.0.2, 23.0.5 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context o… |
CVE-2024-30295 | High | 7.8 | 2024-05-16 | Animate versions 24.0.2, 23.0.5 and earlier are affected by a NULL Pointer Dereference vulnerability that could result in arbitrary code execution in the conte… |
CVE-2024-30294 | High | 7.8 | 2024-05-16 | Animate versions 24.0.2, 23.0.5 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the con… |
CVE-2024-30293 | High | 7.8 | 2024-05-16 | Animate versions 24.0.2, 23.0.5 and earlier are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the co… |
CVE-2024-30282 | High | 7.8 | 2024-05-16 | Animate versions 24.0.2, 23.0.5 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context o… |
CVE-2024-30275 | High | 7.8 | 2024-05-16 | Adobe Aero Desktop versions 23.4 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the… |
CVE-2024-20793 | Medium | 5.5 | 2024-05-16 | Illustrator versions 28.4, 27.9.3 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacke… |
CVE-2024-20792 | High | 7.8 | 2024-05-16 | Illustrator versions 28.4, 27.9.3 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of th… |
CVE-2024-20791 | High | 7.8 | 2024-05-16 | Illustrator versions 28.4, 27.9.3 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read pas… |
CVE-2024-20391 | Medium | 6.8 | 2024-05-15 | A vulnerability in the Network Access Manager (NAM) module of Cisco Secure Client could allow an unauthenticated attacker with physical access to an affected d… |
CVE-2024-34101 | Medium | 5.5 | 2024-05-15 | Acrobat Reader versions 20.005.30574, 24.002.20736 and earlier Answer: are affected by an out-of-bounds read vulnerability that could lead to disclosure of sen… |
CVE-2024-34100 | High | 7.8 | 2024-05-15 | Acrobat Reader versions 20.005.30574, 24.002.20736 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in… |
CVE-2024-34099 | High | 7.8 | 2024-05-15 | Acrobat Reader versions 20.005.30574, 24.002.20736 and earlier are affected by an Improper Access Control vulnerability that could result in arbitrary code exe… |
CVE-2024-34098 | High | 7.8 | 2024-05-15 | Acrobat Reader versions 20.005.30574, 24.002.20736 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code e… |
CVE-2024-34097 | High | 7.8 | 2024-05-15 | Acrobat Reader versions 20.005.30574, 24.002.20736 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in… |
CVE-2024-34096 | High | 7.8 | 2024-05-15 | Acrobat Reader versions 20.005.30574, 24.002.20736 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in… |
CVE-2024-34095 | High | 7.8 | 2024-05-15 | Acrobat Reader versions 20.005.30574, 24.002.20736 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in… |
CVE-2024-34094 | High | 7.8 | 2024-05-15 | Acrobat Reader versions 20.005.30574, 24.002.20736 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in… |
CVE-2024-30312 | Medium | 5.5 | 2024-05-15 | Acrobat Reader versions 20.005.30574, 24.002.20736 and earlier Answer: are affected by an out-of-bounds read vulnerability that could lead to disclosure of sen… |
CVE-2024-30311 | Medium | 5.5 | 2024-05-15 | Acrobat Reader versions 20.005.30574, 24.002.20736 and earlier Answer: are affected by an out-of-bounds read vulnerability that could lead to disclosure of sen… |
CVE-2024-30310 | High | 7.8 | 2024-05-15 | Acrobat Reader versions 20.005.30574, 24.002.20736 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code executi… |