Microsoft
Page 70 of 100 — Microsoft CVEs from a corpus of 26181, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-2169 | High | 7.5 | 2024-03-19 | Implementations of UDP application protocol are vulnerable to network loops. An unauthenticated attacker can use maliciously-crafted packets against a vulner… |
CVE-2024-20764 | Medium | 5.5 | 2024-03-18 | Animate versions 24.0, 23.0.3 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker co… |
CVE-2024-20763 | Medium | 5.5 | 2024-03-18 | Animate versions 24.0, 23.0.3 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker co… |
CVE-2024-20762 | Medium | 5.5 | 2024-03-18 | Animate versions 24.0, 23.0.3 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker co… |
CVE-2024-20761 | High | 7.8 | 2024-03-18 | Animate versions 24.0, 23.0.3 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of… |
CVE-2024-20757 | Medium | 5.5 | 2024-03-18 | Bridge versions 13.0.5, 14.0.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker c… |
CVE-2024-20756 | High | 7.8 | 2024-03-18 | Bridge versions 13.0.5, 14.0.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of… |
CVE-2024-20755 | High | 7.8 | 2024-03-18 | Bridge versions 13.0.5, 14.0.1 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the cont… |
CVE-2024-20752 | High | 7.8 | 2024-03-18 | Bridge versions 13.0.5, 14.0.1 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the c… |
CVE-2024-20746 | High | 7.8 | 2024-03-18 | Premiere Pro versions 24.1, 23.6.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the contex… |
CVE-2024-20745 | High | 7.8 | 2024-03-18 | Premiere Pro versions 24.1, 23.6.2 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the… |
CVE-2024-26246 | Low | 3.9 | 2024-03-14 | Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability |
CVE-2024-26163 | Medium | 4.7 | 2024-03-14 | Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability |
CVE-2024-27265 | Medium | 4.5 | 2024-03-14 | IBM Integration Bus for z/OS 10.1 through 10.1.0.3 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthori… |
CVE-2024-1884 | Medium | 6.5 | 2024-03-14 | This is a Server-Side Request Forgery (SSRF) vulnerability in the PaperCut NG/MF server-side module that allows an attacker to induce the server-side applicat… |
CVE-2024-1883 | Medium | 6.3 | 2024-03-14 | This is a reflected cross site scripting vulnerability in the PaperCut NG/MF application server. An attacker can exploit this weakness by crafting a malicious… |
CVE-2024-1882 | High | 7.2 | 2024-03-14 | This vulnerability allows an already authenticated admin user to create a malicious payload that could be leveraged for remote code execution on the server hos… |
CVE-2024-1654 | High | 7.2 | 2024-03-14 | This vulnerability potentially allows unauthorized write operations which may lead to remote code execution. An attacker must already have authenticated admin… |
CVE-2024-1223 | Medium | 4.8 | 2024-03-14 | This vulnerability potentially allows unauthorized enumeration of information from the embedded device APIs. An attacker must already have existing knowledge o… |
CVE-2024-1222 | High | 8.6 | 2024-03-14 | This allows attackers to use a maliciously formed API request to gain access to an API authorization level with elevated privileges. This applies to a small su… |
CVE-2020-11862 | High | 8.6 | 2024-03-13 | Allocation of Resources Without Limits or Throttling vulnerability in OpenText NetIQ Privileged Account Manager on Linux, Windows, 64 bit allows Flooding.This… |
CVE-2024-26204 | High | 7.5 | 2024-03-12 | Outlook for Android Information Disclosure Vulnerability |
CVE-2024-26203 | High | 7.3 | 2024-03-12 | Azure Data Studio Elevation of Privilege Vulnerability |
CVE-2024-26201 | Medium | 6.6 | 2024-03-12 | Microsoft Intune Linux Agent Elevation of Privilege Vulnerability |
CVE-2024-26199 | High | 7.8 | 2024-03-12 | Microsoft Office Elevation of Privilege Vulnerability |
CVE-2024-26198 | High | 8.8 | 2024-03-12 | Microsoft Exchange Server Remote Code Execution Vulnerability |
CVE-2024-26197 | Medium | 6.5 | 2024-03-12 | Windows Standards-Based Storage Management Service Denial of Service Vulnerability |
CVE-2024-26190 | High | 7.5 | 2024-03-12 | Microsoft QUIC Denial of Service Vulnerability |
CVE-2024-26185 | Medium | 6.5 | 2024-03-12 | Windows Compressed Folder Tampering Vulnerability |
CVE-2024-26182 | High | 7.8 | 2024-03-12 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2024-26181 | Medium | 5.5 | 2024-03-12 | Windows Kernel Denial of Service Vulnerability |
CVE-2024-26178 | High | 7.8 | 2024-03-12 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2024-26177 | Medium | 5.5 | 2024-03-12 | Windows Kernel Information Disclosure Vulnerability |
CVE-2024-26176 | High | 7.8 | 2024-03-12 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2024-26174 | Medium | 5.5 | 2024-03-12 | Windows Kernel Information Disclosure Vulnerability |
CVE-2024-26173 | High | 7.8 | 2024-03-12 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2024-26170 | High | 7.8 | 2024-03-12 | Windows Composite Image File System (CimFS) Elevation of Privilege Vulnerability |
CVE-2024-26169 | High | 7.8 | 2024-03-12 | Windows Error Reporting Service Elevation of Privilege Vulnerability |
CVE-2024-26166 | High | 8.8 | 2024-03-12 | Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability |
CVE-2024-26165 | High | 8.8 | 2024-03-12 | Visual Studio Code Elevation of Privilege Vulnerability |
CVE-2024-26164 | High | 8.8 | 2024-03-12 | Microsoft Django Backend for SQL Server Remote Code Execution Vulnerability |
CVE-2024-26162 | High | 8.8 | 2024-03-12 | Microsoft ODBC Driver Remote Code Execution Vulnerability |
CVE-2024-26161 | High | 8.8 | 2024-03-12 | Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability |
CVE-2024-26160 | Medium | 5.5 | 2024-03-12 | Windows Cloud Files Mini Filter Driver Information Disclosure Vulnerability |
CVE-2024-26159 | High | 8.8 | 2024-03-12 | Microsoft ODBC Driver Remote Code Execution Vulnerability |
CVE-2024-21451 | High | 8.8 | 2024-03-12 | Microsoft ODBC Driver Remote Code Execution Vulnerability |
CVE-2024-21450 | High | 8.8 | 2024-03-12 | Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability |
CVE-2024-21448 | Medium | 5.0 | 2024-03-12 | Microsoft Teams for Android Information Disclosure Vulnerability |
CVE-2024-21446 | High | 7.8 | 2024-03-12 | NTFS Elevation of Privilege Vulnerability |
CVE-2024-21445 | High | 7.0 | 2024-03-12 | Windows USB Print Driver Elevation of Privilege Vulnerability |
CVE-2024-21444 | High | 8.8 | 2024-03-12 | Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability |
CVE-2024-21443 | High | 7.3 | 2024-03-12 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2024-21442 | High | 7.8 | 2024-03-12 | Windows USB Print Driver Elevation of Privilege Vulnerability |
CVE-2024-21441 | High | 8.8 | 2024-03-12 | Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability |
CVE-2024-21440 | High | 8.8 | 2024-03-12 | Microsoft ODBC Driver Remote Code Execution Vulnerability |
CVE-2024-21439 | High | 7.0 | 2024-03-12 | Windows Telephony Server Elevation of Privilege Vulnerability |
CVE-2024-21438 | High | 7.5 | 2024-03-12 | Microsoft AllJoyn API Denial of Service Vulnerability |
CVE-2024-21437 | High | 7.8 | 2024-03-12 | Windows Graphics Component Elevation of Privilege Vulnerability |
CVE-2024-21436 | High | 7.8 | 2024-03-12 | Windows Installer Elevation of Privilege Vulnerability |
CVE-2024-21435 | High | 8.8 | 2024-03-12 | Windows OLE Remote Code Execution Vulnerability |
CVE-2024-21434 | High | 7.8 | 2024-03-12 | Microsoft Windows SCSI Class System File Elevation of Privilege Vulnerability |
CVE-2024-21433 | High | 7.0 | 2024-03-12 | Windows Print Spooler Elevation of Privilege Vulnerability |
CVE-2024-21432 | High | 7.0 | 2024-03-12 | Windows Update Stack Elevation of Privilege Vulnerability |
CVE-2024-21431 | High | 7.8 | 2024-03-12 | Hypervisor-Protected Code Integrity (HVCI) Security Feature Bypass Vulnerability |
CVE-2024-21430 | Medium | 5.7 | 2024-03-12 | Windows USB Attached SCSI (UAS) Protocol Remote Code Execution Vulnerability |
CVE-2024-21429 | Medium | 6.8 | 2024-03-12 | Windows USB Hub Driver Remote Code Execution Vulnerability |
CVE-2024-21427 | High | 7.5 | 2024-03-12 | Windows Kerberos Security Feature Bypass Vulnerability |
CVE-2024-21426 | High | 7.8 | 2024-03-12 | Microsoft SharePoint Server Remote Code Execution Vulnerability |
CVE-2024-21421 | High | 7.5 | 2024-03-12 | Azure SDK Spoofing Vulnerability |
CVE-2024-21419 | High | 7.6 | 2024-03-12 | Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability |
CVE-2024-21418 | High | 7.8 | 2024-03-12 | Software for Open Networking in the Cloud (SONiC) Elevation of Privilege Vulnerability |
CVE-2024-21411 | High | 8.8 | 2024-03-12 | Skype for Consumer Remote Code Execution Vulnerability |
CVE-2024-21408 | Medium | 5.5 | 2024-03-12 | Windows Hyper-V Denial of Service Vulnerability |
CVE-2024-21407 | High | 8.1 | 2024-03-12 | Windows Hyper-V Remote Code Execution Vulnerability |
CVE-2024-21400 | Critical | 9.0 | 2024-03-12 | Microsoft Azure Kubernetes Service Confidential Container Elevation of Privilege Vulnerability |
CVE-2024-21392 | High | 7.5 | 2024-03-12 | .NET and Visual Studio Denial of Service Vulnerability |
CVE-2024-21390 | High | 7.1 | 2024-03-12 | Microsoft Authenticator Elevation of Privilege Vulnerability |
CVE-2024-21334 | Critical | 9.8 | 2024-03-12 | Open Management Infrastructure (OMI) Remote Code Execution Vulnerability |
CVE-2024-21330 | High | 7.8 | 2024-03-12 | Open Management Infrastructure (OMI) Elevation of Privilege Vulnerability |
CVE-2024-20671 | Medium | 5.5 | 2024-03-12 | Microsoft Defender Security Feature Bypass Vulnerability |
CVE-2024-0670 | High | 8.8 | 2024-03-11 | Privilege escalation in windows agent plugin in Checkmk before 2.2.0p23, 2.1.0p40 and 2.0.0 (EOL) allows local user to escalate privileges |
CVE-2024-26167 | Medium | 4.3 | 2024-03-07 | Microsoft Edge for Android Spoofing Vulnerability |
CVE-2024-1460 | Medium | 5.6 | 2024-03-07 | MSI Afterburner v4.6.5.16370 is vulnerable to a Kernel Memory Leak vulnerability by triggering the 0x80002040 IOCTL code of the RTCore64.sys driver. The handle… |
CVE-2024-1443 | Medium | 4.4 | 2024-03-07 | MSI Afterburner v4.6.5.16370 is vulnerable to a Denial of Service vulnerability by triggering the 0x80002000 IOCTL code of the RTCore64.sys driver. The handle… |
CVE-2024-27303 | High | 7.3 | 2024-03-06 | electron-builder is a solution to package and build a ready for distribution Electron, Proton Native app for macOS, Windows and Linux. A vulnerability that onl… |
CVE-2024-20337 | High | 8.2 | 2024-03-06 | A vulnerability in the SAML authentication process of Cisco Secure Client could allow an unauthenticated, remote attacker to conduct a carriage return line fee… |
CVE-2024-24278 | High | 7.5 | 2024-03-05 | An issue in Teamwire Windows desktop client v.2.0.1 through v.2.4.0 allows a remote attacker to obtain sensitive information via a crafted payload to the messa… |
CVE-2024-24275 | Critical | 9.6 | 2024-03-05 | Cross Site Scripting vulnerability in Teamwire Windows desktop client v.2.0.1 through v.2.4.0 allows a remote attacker to obtain sensitive information via a cr… |
CVE-2024-20765 | High | 7.8 | 2024-02-29 | Acrobat Reader versions 20.005.30539, 23.008.20470 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in… |
CVE-2024-0590 | Medium | 6.1 | 2024-02-29 | The Microsoft Clarity plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 0.9.3. This is due to missing nonc… |
CVE-2023-44347 | Medium | 5.5 | 2024-02-29 | Adobe InDesign versions ID18.5 (and earlier) and ID17.4.2 (and earlier) are affected by a NULL Pointer Dereference vulnerability. An unauthenticated attacker c… |
CVE-2023-44346 | Medium | 5.5 | 2024-02-29 | Adobe InDesign versions ID18.5 (and earlier) and ID17.4.2 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of se… |
CVE-2023-44345 | Medium | 5.5 | 2024-02-29 | Adobe InDesign versions ID18.5 (and earlier) and ID17.4.2 (and earlier) are affected by a Improper Input Validation vulnerability. An unauthenticated attacker… |
CVE-2023-44344 | Medium | 5.5 | 2024-02-29 | Adobe InDesign versions ID18.5 (and earlier) and ID17.4.2 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of se… |
CVE-2023-44343 | Medium | 5.5 | 2024-02-29 | Adobe InDesign versions ID18.5 (and earlier) and ID17.4.2 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of se… |
CVE-2023-44342 | Medium | 5.5 | 2024-02-29 | Adobe InDesign versions ID18.5 (and earlier) and ID17.4.2 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of se… |
CVE-2023-44341 | Medium | 5.5 | 2024-02-29 | Adobe InDesign versions ID18.5 (and earlier) and ID17.4.2 (and earlier) are affected by a NULL Pointer Dereference vulnerability. An unauthenticated attacker c… |
CVE-2023-25926 | Medium | 5.5 | 2024-02-29 | IBM Security Guardium Key Lifecycle Manager 3.0, 3.0.1, 4.0, 4.1, and 4.1.1 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML… |
CVE-2023-25921 | High | 8.5 | 2024-02-29 | IBM Security Guardium Key Lifecycle Manager 3.0, 3.0.1, 4.0, 4.1, and 4.1.1 allows the attacker to upload or transfer files of dangerous types that can be aut… |
CVE-2023-25925 | High | 8.5 | 2024-02-28 | IBM Security Guardium Key Lifecycle Manager 3.0, 3.0.1, 4.0, 4.1, and 4.1.1 could allow a remote authenticated attacker to execute arbitrary commands on the sy… |